last executing test programs:

1m55.057223062s ago: executing program 4 (id=406):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10)
write$FUSE_INIT(r2, &(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x4, 0x800000, 0x4, 0x400, 0x5, 0x1, 0x0, 0x0, 0x1, 0x74}}, 0x50)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})

1m54.821979986s ago: executing program 4 (id=408):
r0 = socket(0x2, 0x3, 0xff)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0xd971e000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x120, 0x1170, 0x1398, 0x120, 0x1170, 0x230, 0x1398, 0x1398, 0x230, 0x1398, 0x7fffffe, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @mcast1, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000001a00)=[@request_death={0x400c630e, 0x2}], 0x0, 0x0, 0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000500)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x10, @local}, 0x10)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)

1m52.309253364s ago: executing program 4 (id=419):
syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./bus\x00', 0x0, &(0x7f0000002480)=ANY=[], 0x1, 0x11f4, &(0x7f0000001280)="$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")
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/3465], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b40)='.\x00', 0x0, 0x20)
mkdirat(r4, &(0x7f0000000180)='./bus\x00', 0x0)
renameat2(r4, &(0x7f0000000380)='./file0\x00', r4, &(0x7f0000000200)='./bus/file0\x00', 0x0)
openat$cgroup(r4, 0x0, 0x200002, 0x0)
mkdir(0x0, 0xfffffffffffffffe)

1m50.749562958s ago: executing program 4 (id=430):
r0 = socket$pppoe(0x18, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$cgroup_pid(r3, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x401c5820, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0xa, 0x0, 0x14, 0x2, 0x0, 0x70bd25, 0x25dfdbfc}, 0x10}}, 0x30004000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014)
sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000600)={0x130, r6, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf28}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5e}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x772}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x718a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}]}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x4}, 0x8000)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@mpls_delroute={0x1c, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x10, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x800}}, 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x0)
connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @broadcast, 'veth0\x00'}}, 0x1e)
r7 = socket$pppoe(0x18, 0x1, 0x0)
r8 = openat$cgroup_ro(r3, &(0x7f0000000200)='freezer.parent_freezing\x00', 0x0, 0x0)
sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0x4c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_PEER_ADDR6={0x14, 0xb, @private0}, @GTPA_PEER_ADDR6={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3a}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x8800)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
connect$pppoe(r7, &(0x7f0000000080)={0x18, 0x0, {0xd, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'veth1\x00'}}, 0x1e)
r9 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x40a40, 0x0)
ioctl$PPPIOCATTCHAN(r9, 0x40047438, &(0x7f0000000040)=0x2)
ioctl$EXT4_IOC_MOVE_EXT(r9, 0xc028660f, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x6, 0x2, 0x7, 0x4})
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000000200001030000000000000000020000000000000002ff000005001600890000004849ac"], 0x24}, 0x1, 0x0, 0x0, 0x240088d4}, 0x0)
ioctl$PPPIOCATTCHAN(r9, 0x40047438, &(0x7f0000000380))

1m50.526446951s ago: executing program 4 (id=431):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0])
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0)

1m49.324435289s ago: executing program 4 (id=434):
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0)
socket(0x10, 0x80002, 0x0)
r0 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x29, 0x2, 0x6, 0x7f, 0x5, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @mcast1, 0x0, 0x700, 0x6, 0x41}})
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$alg(0x26, 0x5, 0x0)
socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xf, 0x5}, {0x4}, {0x8, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x2c}}, 0x4000)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45)
r4 = accept4(r2, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
readv(r4, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1)
recvmmsg(r4, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)

1m42.554084593s ago: executing program 0 (id=457):
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x80000000, 0x0, 0x34324142}})
r3 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x430, @local, 0x9}, 0x1c)
setsockopt$inet6_int(r3, 0x29, 0x3e, &(0x7f0000000140)=0x8, 0x4)
sendto$inet6(r3, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0)
r4 = syz_open_dev$sndpcmc(&(0x7f0000004c40), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_FORWARD(r4, 0x40084149, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0)

1m40.636570062s ago: executing program 0 (id=459):
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
r0 = socket$netlink(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)={@cgroup, 0xffffffffffffffff, 0x6, 0x0, 0xffffffffffffffff, @void, @value}, 0x20)
r3 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r3, 0x1, 0x7, &(0x7f0000000340), 0x4)
sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004001)
close(0x3)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x3, @loopback, 0x5}, 0x1c)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00\n'], 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1m40.525234964s ago: executing program 0 (id=462):
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10)
write$FUSE_INIT(r2, &(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x4, 0x800000, 0x4, 0x400, 0x5, 0x1, 0x0, 0x0, 0x1, 0x74}}, 0x50)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})

1m40.304223837s ago: executing program 0 (id=465):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'macvlan0\x00'})
r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@bsdgroups}]}, 0xfc, 0x574, &(0x7f0000001980)="$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")
socket(0x400000000010, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
getpid()
connect$unix(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file1\x00', 0x810010, &(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYRES16=0x0, @ANYRES32, @ANYRES16=r1, @ANYRES32, @ANYRES32], 0x1, 0x200, &(0x7f0000000bc0)="$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")
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[], 0x48)
r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
ioctl$RTC_UIE_ON(r5, 0x7003)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='vegas\x00', 0x6)
connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)

1m37.420039591s ago: executing program 0 (id=470):
syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x804008, &(0x7f0000000100)=ANY=[], 0x5a, 0x212, &(0x7f0000000440)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
fallocate(0xffffffffffffffff, 0x10, 0x0, 0xbc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0x8000c61)
symlink(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', &(0x7f00000002c0)='.\x02\x00')

1m33.55962501s ago: executing program 32 (id=434):
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0)
socket(0x10, 0x80002, 0x0)
r0 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x29, 0x2, 0x6, 0x7f, 0x5, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @mcast1, 0x0, 0x700, 0x6, 0x41}})
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$alg(0x26, 0x5, 0x0)
socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xf, 0x5}, {0x4}, {0x8, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x2c}}, 0x4000)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45)
r4 = accept4(r2, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
readv(r4, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1)
recvmmsg(r4, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)

1m25.153493769s ago: executing program 0 (id=497):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000080)=0x4, 0x4)
ioctl$sock_SIOCINQ(r0, 0x541b, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
socket(0x8, 0x3, 0x0)
pipe(0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$rxrpc(0x21, 0x2, 0xa)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2})
ioctl$TUNSETLINK(r1, 0x400454cd, 0x306)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800"/15], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = socket$caif_stream(0x25, 0x1, 0x1)
recvmmsg(r2, &(0x7f00000064c0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x40010140, 0x0)
close(0x4)

1m9.488384338s ago: executing program 33 (id=497):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000080)=0x4, 0x4)
ioctl$sock_SIOCINQ(r0, 0x541b, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
socket(0x8, 0x3, 0x0)
pipe(0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$rxrpc(0x21, 0x2, 0xa)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2})
ioctl$TUNSETLINK(r1, 0x400454cd, 0x306)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800"/15], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = socket$caif_stream(0x25, 0x1, 0x1)
recvmmsg(r2, &(0x7f00000064c0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x40010140, 0x0)
close(0x4)

43.403928336s ago: executing program 5 (id=588):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'macvlan0\x00'})
r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@bsdgroups}]}, 0xfc, 0x574, &(0x7f0000001980)="$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")
socket(0x400000000010, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
getpid()
connect$unix(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file1\x00', 0x810010, &(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYRES16=0x0, @ANYRES32, @ANYRES16=r1, @ANYRES32, @ANYRES32], 0x1, 0x200, &(0x7f0000000bc0)="$eJzskk1rE0EYx3+z2STb0mKQqChC8QWphzabVKP1oODFop5KD7VQMCRpDaa+NAFtKBhBKOJFsAot4kGUFOnBb2AOnnqzULyVQs859OBFWldmdhIn38DD/A7735nnbZ5n5l7lcSUOHOwt5iGBxCXJDyFwgQGhtihEQvW03tYa0/YbTqhNrb+1HlyqTU6BKJ3ezjrNY4VTIkFf8tfGDnkOTTPqsb45Hl3eOtz6/E3632z1hoEf3399fX2lX6UXd6bMPJHmyVVPJgLe7E9u77jHSU4z+uHW+uZ4aXnriPfn6MaLxpfsS9nBuxmEv+oBw9+HVq76/a8cnbOyULufK5eL85Vrzx1aqtTPvcW8/LkbhyAIAtU7MAaYPrL9Nf75nHBhAogQiJ6wAzW/Nqnq3KNUZaE2VJrLzRZniw8ymZGsf8H3L2ZSM6Xyp7fyW/SFUUJPEKnnAXlNPYY9Cuxrn16oG9UQxtG0XZixMePqBs/QhWPEtlXQ7MTGtZ8cwQTnkKN9UhfG7lmVxUW1NBYEwTNpKZWLadc4X1jLU17D+YflwhIC0Q5r4HZypHeJdhYZczFyudP2EsiJqOLoG5M0tO5qHfC6X6qrMjj6PQ/WIcbTXLU6n47BWp+O0nsZObjwL1E3ByarJiLdzV2JYLFYLBaLxWKxWCz/DX8DAAD//6shmwk=")
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x19, 0xf, &(0x7f0000000080)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0xf}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xba}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
ioctl$RTC_UIE_ON(r5, 0x7003)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='vegas\x00', 0x6)
connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)

42.079598927s ago: executing program 5 (id=591):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r0, 0x0}, 0x20)

38.58377396s ago: executing program 5 (id=612):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x100004, 0x5, 0x4, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000003c0), 0x20000402, r0}, 0x38)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x11, &(0x7f0000000840)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x75}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='tlb_flush\x00', r2}, 0x10)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r0, 0x0, &(0x7f0000000240)=""/99}, 0x20)

37.019971174s ago: executing program 5 (id=616):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b18, 0x0)

36.744964399s ago: executing program 5 (id=618):
setitimer(0x1, &(0x7f0000000000)={{0x9, 0x8}, {0xaf6, 0x7}}, 0x0)

36.540122471s ago: executing program 5 (id=620):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'macvlan0\x00'})
r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@bsdgroups}]}, 0xfc, 0x574, &(0x7f0000001980)="$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")
socket(0x400000000010, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
getpid()
connect$unix(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file1\x00', 0x810010, &(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYRES16=0x0, @ANYRES32, @ANYRES16=r1, @ANYRES32, @ANYRES32], 0x1, 0x200, &(0x7f0000000bc0)="$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")
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x19, 0xf, &(0x7f0000000080)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0xf}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xba}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
ioctl$RTC_UIE_ON(r5, 0x7003)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='vegas\x00', 0x6)
connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)

20.738112933s ago: executing program 34 (id=620):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'macvlan0\x00'})
r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@bsdgroups}]}, 0xfc, 0x574, &(0x7f0000001980)="$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")
socket(0x400000000010, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
getpid()
connect$unix(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file1\x00', 0x810010, &(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYRES16=0x0, @ANYRES32, @ANYRES16=r1, @ANYRES32, @ANYRES32], 0x1, 0x200, &(0x7f0000000bc0)="$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")
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x19, 0xf, &(0x7f0000000080)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0xf}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xba}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
ioctl$RTC_UIE_ON(r5, 0x7003)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='vegas\x00', 0x6)
connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)

20.633715445s ago: executing program 1 (id=671):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000840)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESDEC=0x0, @ANYBLOB=',discard,\x00', @ANYRESDEC, @ANYRESHEX, @ANYBLOB="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", @ANYRES8=0x0, @ANYRESHEX, @ANYRES16, @ANYRES64=0x0], 0x81, 0x151a, &(0x7f0000002a80)="$eJzs3AuYjtX6MPB1r7UexjTpbZLDsO51P7xpsEyS5JCQQ5IkSZJTQtIkSUJiyClpSEKOk+QwhOQwjUnjfD7knDTZ0iRJSEiyvku7/2fvr713//3V9/m+Pffvuhbrnue97/d+3nuueZ/nva6Zb3qOqteifu1mRCT+EPjrfylCiBghxDAhxDVCiEAIUSm+Uvyl4wUUpPyxJ2F/rgfTr3QH7Eri+edtPP+8jeeft/H88zaef97G88/beP55G8+fsbxs+5xi1/LKu+sKf/7v4Y89K/tD+P3/P0hu+clfbCx/fa9/I4Xnn7fx/PM2nn/exvPP23j+eRvP/z9frX9xjOeft/H8GcvLrvTnz/8frZhfX7Ir3cefuq7wtx9jjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMsTzinL9MCyH+a3+l+2KMMcYYY4wxxtifx+e/0h0wxhhjjDHGGGPs/zwQUiihRSDyifwiRhQQseIqESeuFgXFNSIirhXx4jpRSFwvCosioqgoJhJEcVFCGIHCChKhKClKiai4QZQWN4pEUUaUFeWEE+VFkrhJVBA3i4riFlFJ3Coqi9tEFVFVVBPVxe2ihrhD1BS1RG1xp6gj6op6or64SzQQd4uG4h7RSNwrGov7RBNxv2gqHhDNxIOiuXhItBAPi5biEdFKtBZtRFvR7n8r/wXRV7wo+on+IkUMEAPFS2KQGCyGiKFimHhZDBeviBHiVZEqRopR4jUxWrwuxog3xFgxTowXb4oJYqKYJCaLKWKqSBNviWnibTFdvCNmiJlilpgt0sUcMVe8K+aJ+WKBeE8sFO+LRWKxWCKWigzxgcgUy0SW+FAsFx+JbLFCrBSrxGqxRqwV68R6sUFsFJvEZrFFbBXbxHbxsdghdopdYrfYI/aKfeITsV98Kg6Iz0SO+PzfzD/7v+T3AgECJEjQoCEf5IMYiIFYiIU4iIOCUBAiEIF4iIdCUAgKQ2EoCkUhARKgBJQABAQCgpJQEqIQhdJQGhIhEcpCWXDgIAmSoALcDBWhIlSCSlAZKkMVqApVoTpUhxpQA2pCTagNtaEO1IF6UA/ugrvgbmgIDaERNILG0BiaQBNoCk2hGTSD5tAcWkALaAktoRW0gjbQBtpBO2gP7aEDdIBO0Ak6Q2foAl0gGZKhK3SFbtANukN36AE9oCf0hF7QG3rDC/ACvAgvQn+oIwfAQBgIg2AQDIGhMBRehuHwCrwCr0IqjIRR8Bq8Bq/DGDgDY2EcjIfxUENOhEkwGUhOhTRIg2kwDabDdJgBM2EmzIZ0mANzYS7Mg/kwH96DhfD+ufdhMSyGpZABGZAJyyALsmA5nIVsWAErYRWshjWwGtbBelgHG2ETbIQtsAW2wTb4GD6GnbATdsNu2At74RP4BD6FTyEVciAHDsJBOASH4DAchlzIhSNwBI7CUTgGx+A4HIcTcBJOwUk4DafhDJyFc3AOzsN5uADPJXzVfG+ZDalCXqKllvlkPhkjY2SsjJVxMk4WlAVlREZkvIyXhWQhWVgWlkVlUZkgE2QJWUKiREkylCVlSRmVUVlalpaJMlGWlWWlk04mySRZQVaQFWVFWUneKivL22QVWVV2dNVldVlDdnI1ZS1ZW9aWdWRdWU/Wl/VlA9lANpQNZSPZSDaWjWUTeb9sKgfAEHhQXppMCzkSWspR0Eq2lm1kW/k6PCrbyzHQQXaUneTjchyMhS6yvUuWT8muchJ0k8/IyfCs7CGnQk/5vOwle8s+8gXZV3Zw/WR/OQMGyIFyNgySg+UQOVTOg7ry0sTqyVdlqhwpR8nX5FJ4XY6Rb8ixcpwcL9+UE+REOUlOllPkVJkm35LT5NtyunxHzpAz5Sw5W6bLOXKufFfOk/PlAvmeXCjfl4vkYrlELpUZ8gOZKZfJLPmhXC4/ktlyhVwpV8nVco1cK9fJ9XKD3Cg3yc1yi9wqt8nt8mO5Q+6Uu+RuuUfulfvkJ3K//FQekJ/JHPm5PCj/Ig/JL+Rh+aXMlV/JI/JreVR+I4/Jb+Vx+Z08IU/KU/J7eVr+IM/Is/Kc/FGelz/JC/JneVF6KRQoqZTSKlD5VH4VowqoWHWVilNXq4LqGhVR16p4dZ0qpK5XhVURVVQVUwmquCqhjEJlFalQlVSlVFTdoEqrG1WiKqPKqnLKqfIqSd2kKqibVUV1i6qkblWV1W2qiqqqqqnq6nZVQ92haqpaqra6U9VRdVU9VV/dpRqou1VDdY9qpO5VjdV9qom6XzVVD6hm6kHVXD2kWqiHVUv1iGqlWqs2qq1qpx5V7dVjqoPqqDqpx1Vn9YTqop5Uyeop1VU9rbqpZ1R39azqoZ5TPdXzqpfqrfqon9VF5VU/1V+lqAFqoHpJDVKD1RA1VA1TL6vh6hU1Qr2qUtVINUq9pkar19UY9YYaq8ap8epNNUFNVJPUZDVFTVVp6i01Tb2tpqt31Aw1U81Ss1W6mqOG/FppwX8j/+1/kD/il2ffprarj9UOtVPtUrvVHrVX7VP71H61Xx1QB1SOylEH1UF1SB1Sh9Vhlaty1RF1RB1VR9UxdUwdV8fVCXVS/ai+V6fVD+qMOqvOqh/VeXVeXfj1NRAatNRKax3ofDq/jtEFdKy+Ssfpq3VBfY2O6Gt1vL5OF9LX68K6iC6qi+kEXVyX0Eajtpp0qEvqUjqqb9Cl9Y06UZfRZXU57XR5naRv+sP5v9dfO91Ot9ftdQfdQXfSnXRn3Vl30V10sk7WXXVX3U130911d91D99A9dU/dS/fSfXQf3Vf31f10P52iU/RA/ZIepAfrIXqoHqZf1sP1cD1Cj9CpOlWP0qP0aD1aj9Fj9Fg9Vo/X4/UEPUFP0pP0FD1Fp+k0PU1P09P1dD1Dz9Cz9CydrtP1XD1Xz9Pz9AK9QC/UC/UivUgv0Ut0hs7QmTpTZ+ksvVwv19l6hV6hV+lVeo1eo9fpdXqD3qA36U16i96is/V2vV3v0Dv0Lr1L79F79D69T+/X+/UBfUDn6Bx9UB/Uh/QhfVgf1rk6Vx/RR/RRfVQf08f0cX1cn9An9Cl9Sp/Wp/UZfUaf0+f0eX1eX9AX9EV98dJlXyADGehAB/mCfEFMEBPEBrFBXBAXFAwKBpEgEsQH8UGh4PqgcFAkKBoUCxKC4kGJwAQY2ICCMCgZlAqiwQ1B6eDGIDEoE5QNygUuKB8kBTcFFYKbg4rBLUGl4NagcnBbUCWoGlQLqge3BzWCO4KaQa2gdnBnUCeoG9QL6gdVJ/71mvSeoFFwb9A4uC9oEtwfNA0eCJoFDwbNg4eCFsHDQcvgkaBV0DpoE7QN2v1b9e8KGgR3Bw2Df1bf+zNFHnP9TH+TYgaYgeYlM8gMNkPMUDPMvGyGm1fMCPOqSTUjzSjzmhltXjdjzBtmrBlnxps3zQQz0Uwyk80UM9WkmbfMNPO2mW7eMTPMTDPLzDbpZo6Za94188x8s8C8Zxaa980is9gsMUtNhvnAZJplJst8aJabj0y2WWFWmlVmtVlj1pp1Zr3ZYDaaTWaz2WK2mm1mu/nY7DA7zS6z2+wxe80+84nZbz41B8xnJsd8bg6av5hD5gtz2Hxpcs1X5oj52hw135hj5ltz3HxnTpiT5pT53pw2P5gz5qw5Z340581P5oL52Vw0/tLF/aW3d9SoMR/mwxiMwViMxTiMw4JYECMYwXiMx0JYCAtjYSyKRTEBE7AElsBLCAlLYkmMYhRLY2lMxEQsi2XRocMkTMIKWAErYkWshJWwMlbGKlgFq2E1vB1vxzvwDqyFtfBOvBPrYl2sj/WxATbAhtgQG2EjbIyNsQk2wabYFJthM2yOzbEFtsCW2BJbYStsg22wHbbD9tgeO2AH7ISdsDN2xi7YBZMxGbtiV+yG3bA7dsce2AN7Yk/shb2wD/bBvtgX+2E/TMEUHIgDcRAOwiE4BIfhMByOw3EEjsBUTMVROApH42gcg2NwLI7D8fgmTsCJOAkn4xScimmYhtNwGk7H6TgDZ+AsnIXpmI5zcS7Ow3m4ABfgQlyIi3ARLsElmIEZmImZmIVZuByXYzZm40pciatxNa7Ftbge1+NG3IibcTNuxa24HbfjDtyBu3AX7sE9uA/34X7cjwfwAOZgDh7Eg3gID+FhPIy5mItH8AgexaN4DI/hcTyOJ/AEnsJTeBpP4xk8g+fwHJ7Hn/AC/owX0WOMlSLWXmXj7NW2oL3GxtgC9m/joraYTbDFbQlrbGFb5O9itNYm2jK2rC1nnS1vk+xNv4mr2Kq2mq1ub7c17B225m/iBvZu29DeYxvZe219e9ffxY3tfbaJfdg2tY/YZra1bW7b2hb2YdvSPmJb2da2jW1rO9snbBf7pE22T9mu9unfxJl2mV1vN9iNdpPdbz+15+yP9qj9xp63P9l+tr8dZl+2w+0rdoR91abakb+Jx9s37QQ70U6yk+0UO/U38Sw726bbOXaufdfOs/N/E2fYD+xCm2UX2cV2iV36S3yppyz7oV1uP7LZdoVdaVfZ1XaNXWvX/c9eV9ktdqvdZvfZT+wOu9PusrvtHrv3l/jSeRywn9kc+7k9Yr+2h+wX9rA9ZnPtV7/El87vmP3WHrff2RP2pD1lv7en7Q/2jD37y/lfOvfv7c/2ovVWEJAkRZoCykf5KYYKUCxdRXF0NRWkayhC11I8XUeF6HoqTEWoKBWjBCpOJcgQkiWikEpSKYrSDVSabqREKkNlqRw5Kk9JdBNVoJupIt1ClehWqky3URWqStWoOt1ONegOqkm1qDbdSXWoLtWj+nQXNaC7qSHdQ43oXmpM91ETup+a0gPUjB6k5vQQtaCHqSU9Qq2oNbWhttSOHqX29Bh1oI7UiR6nzvQEdaEnKZmeoq70NHWjZ6g7PUs96DnqSc9TL+pNfegF6ksvUj/qTyk0gAbSSzSIBtMQGkrD6GUaTq/QCHqVUmkkjaLXaDS9TmPoDRpL42g8vUkTaCJNosk0haZSGr1F0+htmk7v0AyaSbNoNqXTHJpL79I8mk8L6D1aSO/TIlpMS2gpZdAHlEnLKIs+pOX0EWXTClpJq2g1raG1tI7W0wbaSJtoM22hrbSNttPHtIN20i7aTXtoL+2jT2g/fUoH6DPKoc/pIP2FDtEXdJi+pFz6io7Q13SUvqFj9C0dp+/oBJ2kU/Q9naYf6AydpXP0I52nn+gC/UwXyZMIIZShCnUYhPnC/GFMWCCMDa8K48Krw4LhNWEkvDaMD68LC4XXh4XDImHRsFiYEBYPS4QmxNCGFIZhybBUGA1vCEuHN4aJYZmwbFgudGH5MCm8KawQ3hxWDG8JK4W3hpXD28IqYdXw4Xurh7eHNcI7wpphrbB2eGdYJ6wb1gvrh3eFDcK7w4bhPWGj8N6wYnhf2CS8P2waPhA2Cx8Mm4cPhS3Ch8OW4SNhq7B12CZsG7YLHw3bh4+FHcKOYafw8bBz+ETYJXwyTA6fCruGT//u8ZRwQDgwfCl8KfT+HrUkujSaEf0gmhldFs2KfhhdHv0omh1dEV0ZXRVdHV0TXRtdF10f3RDdGN0U3RzdEt0a3Rb1vn5+4cBJp5x2gcvn8rsYV8DFuqtcnLvaFXTXuIi71sW761whd70r7Iq4oq6YS3DFXQlnHDrryIWupCvlou4GV9rd6BJdGVfWlXPOlXdJrq1r59q59u4x18F1dJ3c4+5x94R7wj3pnnRPua7uadfNPeO6u2ddD/ece84973q53q6Pe8H1dS+6fq6/S3EpbqAb6Aa5QW6IG+KGuWFuuBvuRrgRLtWlulFulBvtRrsxbowb68a68W68m+AmuElukpviprg0l+amuWluupvuZrgZbpab5dJdupvr5rp5bp5b4Ba4hYkL3SK3yC1xS1yGy3CZLtNluSy33C132S7brXQr3Wq32q11a916t95tdBvdZrfZbXVb3Xa33e1wO9wut8vtcXvcPrfP7Xf73QF3wOW4HHfQHXSH3CF32H3pct1X7oj72h1137hj7lt33H3nTriT7pT73p12P7gz7qw75350591P7oL72V103qVF3opMi7wdmR55JzIjMjMyKzI7kh6ZE5kbeTcyLzI/siDyXmRh5P3IosjiyJLI0khG5INIZmRZJCvyYWR55KNIdmRFZGVkVWR1ZE3E++I7Ql/Sl/JRf4Mv7W/0ib6ML+vLeefL+yR/k6/gb/YV/S2+kr/VV/a3+Sq+qq/mH/GtfGvfxrf17fyjvr1/zHfwHX0n/7jv7J/wXfyTPtk/5bv6p303/4zv7p/1Pfxzvqd/3vfyvX0f/4Lv61/0/Xx/n+IH+IH+JT/ID/ZD/FA/zL/sh/tX/Aj/qk/1I/0o/5of7V/3Y/wbfqwf58f7N/0EP9FP8pP9FD/Vp/m3/DT/tp/u3/Ez/Ew/y8/26X6On+vf9fP8fL/Av+cX+vf9Ir/YL/FLfYb/wGf6ZT7Lf+iX+498tl/hV/pVfrVf49f6dX693+A3+k1+s9/it/ptfrv/2O/wO/0uv9vv8Xv9Pv+J3+8/9Qf8Zz7Hf+4P+r/4Q/4Lf9h/6XP9V/6I/9of9d/4Y/5bf9x/50/4k/6U/96f9j/4M/6sP+d/9Of9T/6C/9lf5N9ZY4wxxhj7b9la+F8fH/APviZ/XZcMFEJcvbNY7t8eV0KIzb/WHSwTOkeEEE/17/ngf606dVJSUn59bLYSQanFQojI5fx84nK84pd/k0VHUeEf9jdY9j5Pv1M/eqsQsX+TEyMuxytEJ/HEL/Vv/if1H318fGbl8Fz8v6i/WIjEUpdzCojL8eX6Ff9J/SLtf6f/Al+kCdHhb3LixOX4cv0k8Zh4WiT/3SMZY4wxxhhjjLG/Giyrdf+9++dL9+cJ+nJOfnE5vnz/+Y/vzxljjDHGGGOMMXblPdu7z5OPJid37M6bP7wB+H+iDd7w5k/YXOmfTIwxxhhjjLE/2+WL/ivdCWOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxlnf93/hzYlf6HBljjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjLEr7X8EAAD//7MxObU=")
openat(0xffffffffffffff9c, 0x0, 0x8042, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, 0x0, &(0x7f0000000040)}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18)
bind$pptp(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$ppp(0xffffffffffffff9c, 0x0, 0x2300, 0x0)
ioctl$PPPIOCATTCHAN(r4, 0x40047438, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)

15.644184481s ago: executing program 1 (id=681):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x28, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044010}, 0x0)

15.464078634s ago: executing program 2 (id=682):
sched_setscheduler(0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r0 = gettid()
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x0)
read(r1, &(0x7f0000000b80)=""/215, 0xd7)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x32f, @tick=0xfffffffc, 0x0, {0x6}, 0x1, 0x1})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f00000006c0)={0x400, 0x2, 0xe})
tkill(r0, 0x7)

15.134015229s ago: executing program 3 (id=683):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0xffffffb3, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = memfd_create(&(0x7f0000000000)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10', 0x7)
fallocate(r3, 0x0, 0x0, 0x8)
fcntl$addseals(r3, 0x409, 0xe)
syz_open_dev$vim2m(0x0, 0x7fffffff, 0x2)
r4 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, 0x0)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000004c0)={'vcan0\x00', <r6=>0x0})
bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6, 0x0, {}, 0x1}, 0x18)
ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0)
sendfile(r5, 0xffffffffffffffff, 0x0, 0x1000000000000a)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x24, 0x10, 0x1, 0x3, 0x0, {0x0, 0x0, 0x0, r6, {0xffe0}, {0xffff}, {0xe, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00)

15.03816337s ago: executing program 2 (id=684):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fchdir(0xffffffffffffffff)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000)

13.943966767s ago: executing program 2 (id=685):
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
socket(0x1, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r4 = userfaultfd(0x80001)
r5 = userfaultfd(0x801)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000600)={0xaa, 0xfc})
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x47d})
ioctl$UFFDIO_REGISTER(r4, 0x8010aa01, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}})

11.957618427s ago: executing program 3 (id=686):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x10000008, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
getgroups(0x0, 0x0)
connect$pptp(0xffffffffffffffff, 0x0, 0x0)
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
mq_timedreceive(r3, 0x0, 0x0, 0xffff, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)=[<r5=>0x0, 0x0], 0x0, 0x0, 0x0, 0x2})
flistxattr(0xffffffffffffffff, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5})
r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r6, 0x890b, &(0x7f0000000280)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0xffff, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x42778aad, 0x0, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]})

11.425066785s ago: executing program 3 (id=687):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x20000800)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket(0x15, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x9, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
userfaultfd(0x80001)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)

11.374813666s ago: executing program 2 (id=688):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0)

10.033780337s ago: executing program 6 (id=689):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$kcm(0xa, 0x922000000003, 0x11)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3fe, 0x5, 0x3, 0x9, 0x8, 0x45ff, 0x7ffffffc}, 0x0, 0x0)
close(r0)

10.033426447s ago: executing program 2 (id=690):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000840)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESDEC=0x0, @ANYBLOB=',discard,\x00', @ANYRESDEC, @ANYRESHEX, @ANYBLOB="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", @ANYRES8=0x0, @ANYRESHEX, @ANYRES16, @ANYRES64=0x0], 0x81, 0x151a, &(0x7f0000002a80)="$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")
openat(0xffffffffffffff9c, 0x0, 0x8042, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, 0x0, &(0x7f0000000040)}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18)
bind$pptp(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$ppp(0xffffffffffffff9c, 0x0, 0x2300, 0x0)
ioctl$PPPIOCATTCHAN(r4, 0x40047438, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)

7.120176991s ago: executing program 3 (id=691):
syz_open_dev$swradio(0x0, 0x1, 0x2)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
dup(0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0xfffffeb7)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='quota'])
openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
r6 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)=@delqdisc={0x24, 0x25, 0x300, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x6, 0xfff2}, {0x480bd72125a0c189, 0x5}, {0xffe0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4808}, 0x880)

7.033803412s ago: executing program 6 (id=692):
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="6400000010008105000000000000000000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00D'], 0x64}}, 0x0)
syz_emit_ethernet(0x46, 0x0, 0x0)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

6.227251585s ago: executing program 1 (id=693):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$unix(0x1, 0x2, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x40, r1, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x43}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008095}, 0x24044080)
pipe(&(0x7f0000000380))
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x200)
ioctl$SNDRV_PCM_IOCTL_HW_FREE(0xffffffffffffffff, 0x4112, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1)
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
mq_unlink(&(0x7f0000000000)='eth0\x00')
syslog(0x4, &(0x7f00000000c0)=""/27, 0x1b)
sendmsg$NFQNL_MSG_VERDICT(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20001}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1, 0x3, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x40c2}, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r3, 0xc10c5541, &(0x7f0000000100)={0x6, 0x7, 0x1})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000008c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SCSI_IOCTL_PROBE_HOST(r6, 0x5385, &(0x7f0000000040)={0x1d, ""/29})
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4)
setsockopt$inet_tcp_int(r2, 0x6, 0x14, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f00000006c0)=@allocspi={0x104, 0x16, 0x401, 0x0, 0x0, {{{@in=@dev={0xac, 0x14, 0x14, 0x21}, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@mcast2, 0x0, 0x33}, @in=@private=0xa010100, {}, {}, {0x0, 0x0, 0xa}}, 0x8, 0xffffffff}, [@migrate={0x4, 0x1b}, @policy_type={0xa, 0x10, {0x1}}]}, 0x104}}, 0x0)

5.967493849s ago: executing program 1 (id=694):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0)
sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="019c2ed5ece36ffff00000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x18010}, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x202, 0x11)
sendfile(r2, r2, 0x0, 0x6)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
sync_file_range(0xffffffffffffffff, 0xfffffffffffffffd, 0x4, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40000000000000071119400000000008510000002000000850000008c00000095000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0xc0)
r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
renameat2(r4, &(0x7f00000001c0)='./file0\x00', r4, &(0x7f0000000340)='./file1\x00', 0x0)

5.823705171s ago: executing program 6 (id=695):
mkdir(0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}, {@nfs_export_on}, {@nfs_export_on}]})
mount$overlay(0xf6ffffff, 0x0, 0x0, 0xd4, 0x0)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0xc102, 0x0)
sendfile(r1, r1, 0x0, 0x40008)
remap_file_pages(&(0x7f00003ec000/0x4000)=nil, 0x4000, 0x3, 0x3, 0x2)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)

5.790447601s ago: executing program 3 (id=696):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)

4.832251106s ago: executing program 3 (id=697):
memfd_secret(0x80000)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r0=>0x0, 0x0})
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
add_key(0x0, &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc)
syz_open_dev$dri(0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44804)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000ac0)={0x3, &(0x7f0000000a80)=[{0x40}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x16}]}, 0x10)
sendmmsg(r3, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000c00)="26f2d136", 0x4}], 0x1}}], 0x1, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x10, 0x3, 0x0)
write(r6, &(0x7f00000000c0)="240000001e005f0214f6fffffffffff8070000000000000000000000080009000d000000", 0x24)
ioctl$TUNSETOFFLOAD(r5, 0x400454c9, 0xba98575a95aeb70d)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000400)={0x1, 0x0, 0x16, 0x0, 0xe54}, 0xc)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40004)
sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r7, 0x101, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x14}}, 0x8000)

4.311754814s ago: executing program 1 (id=698):
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
alarm(0x9)

2.796415117s ago: executing program 2 (id=699):
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000600), 0x280700, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0)
r3 = syz_io_uring_setup(0x10d2, &(0x7f0000000300)={0x0, 0x7736, 0x80, 0xfffffffc, 0x34f}, &(0x7f0000000600)=<r4=>0x0, &(0x7f00000005c0)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x1cd83f7c25e05491, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x1, {0x3}})
io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0)

2.418455583s ago: executing program 6 (id=700):
r0 = socket$key(0xf, 0x3, 0x2)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r3 = dup(r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r5 = dup(r4)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
write$binfmt_aout(r5, 0x0, 0xffffffdb)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, &(0x7f0000000080))
sendmsg$key(r0, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100000e9000000e9000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0x50}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x40000000000007b, 0x4004)

1.004546095s ago: executing program 6 (id=701):
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
r0 = socket$netlink(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x3, @loopback, 0x5}, 0x1c)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00\n'], 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

928.709426ms ago: executing program 6 (id=702):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000840), 0x0)
ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0)
writev(r4, &(0x7f0000000440)=[{&(0x7f0000000140)="13146000000370", 0x7}], 0x1)

0s ago: executing program 1 (id=703):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0)
syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f0000001300)={0x10, &(0x7f0000001380)={0x0, 0x0, 0x4, "717e7ea0"}, 0x0, 0x0})
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x4}}}]}, @NFTA_RULE_USERDATA={0x8, 0x7, 0x1, 0x0, "07bcb709"}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x90}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010067656e6576650000040002800800f500", @ANYRES32=r5, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x5)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000)
r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x80841)
ioctl$DRM_IOCTL_GET_CAP(r8, 0xc010640c, &(0x7f00000036c0)={0x7})
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c00000010000304000000000000020000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0)

kernel console output (not intermixed with test programs):

0_vlan entered promiscuous mode
[   66.759238][ T4169] device veth0_macvtap entered promiscuous mode
[   66.768503][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   66.778968][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   66.788155][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   66.796182][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   66.803730][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   66.822691][ T4171] device veth1_vlan entered promiscuous mode
[   66.832527][ T4169] device veth1_macvtap entered promiscuous mode
[   66.860972][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.875972][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.887852][ T4170] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.896701][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   66.906765][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   66.918871][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   66.928677][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   66.938642][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   66.948480][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   66.958464][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   66.982211][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   66.991813][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   67.000976][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   67.009729][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   67.026593][ T4169] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.036784][ T4169] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.046204][ T4169] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.055624][ T4169] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.068560][ T4171] device veth0_macvtap entered promiscuous mode
[   67.080939][ T4171] device veth1_macvtap entered promiscuous mode
[   67.102289][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   67.111300][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   67.120087][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   67.129489][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   67.149966][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.182873][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   67.192293][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   67.210173][ T4172] device veth0_vlan entered promiscuous mode
[   67.236504][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   67.247904][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   67.260627][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   67.270782][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   67.291224][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.303181][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.315639][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.337694][ T4172] device veth1_vlan entered promiscuous mode
[   67.348272][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   67.359482][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   67.382362][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.393480][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.405975][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.419729][ T4170] device veth0_vlan entered promiscuous mode
[   67.444757][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   67.454922][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   67.464194][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   67.473174][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   67.482233][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   67.492361][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   67.504857][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   67.513593][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   67.526430][ T4171] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.535788][ T4171] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.544644][ T4171] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.553877][ T4171] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.572486][ T4170] device veth1_vlan entered promiscuous mode
[   67.593578][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.603643][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.621847][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   67.633366][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   67.652395][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   67.661980][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   67.692287][ T4172] device veth0_macvtap entered promiscuous mode
[   67.702502][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   67.711349][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   67.721142][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   67.733115][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   67.742821][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   67.751015][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   67.761229][ T4182] device veth0_vlan entered promiscuous mode
[   67.778525][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.787427][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.788417][ T4172] device veth1_macvtap entered promiscuous mode
[   67.824614][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   67.838633][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   67.850673][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   67.860088][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   67.882116][ T4182] device veth1_vlan entered promiscuous mode
[   67.890982][ T4214] Bluetooth: hci2: command 0x040f tx timeout
[   67.898141][ T4170] device veth0_macvtap entered promiscuous mode
[   67.905266][ T4247] Bluetooth: hci4: command 0x040f tx timeout
[   67.912555][ T4247] Bluetooth: hci0: command 0x040f tx timeout
[   67.920481][ T4247] Bluetooth: hci3: command 0x040f tx timeout
[   67.928007][ T4247] Bluetooth: hci1: command 0x040f tx timeout
[   67.958183][ T4170] device veth1_macvtap entered promiscuous mode
[   67.979577][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.994706][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.005166][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.016073][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.028897][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.050902][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.064695][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.076353][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.087779][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.099141][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.107912][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   68.117035][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   68.126286][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   68.134469][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   68.142844][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   68.152262][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   68.161321][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   68.173014][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   68.197411][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.203725][ T4182] device veth0_macvtap entered promiscuous mode
[   68.214727][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.234154][ T4172] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.244375][ T4172] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.253916][ T4172] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.264051][ T4172] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.301646][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.320463][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.330902][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.342861][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.357161][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.369873][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.381781][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.390927][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   68.399372][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   68.408291][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   68.417618][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   68.426597][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   68.439999][ T4182] device veth1_macvtap entered promiscuous mode
[   68.459738][ T4250] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3'.
[   68.469533][ T4250] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3'.
[   68.480091][ T4250] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3'.
[   68.491459][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.502714][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.512950][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.526515][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.537110][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.554309][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.571915][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.581302][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   68.590155][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   68.599531][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   68.624346][ T4170] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.639760][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.639897][ T4170] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.653255][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.659058][ T4170] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.674842][ T4170] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.687249][ T4253] netlink: 'syz.2.6': attribute type 4 has an invalid length.
[   68.702241][ T4252] netlink: 'syz.2.6': attribute type 4 has an invalid length.
[   68.742053][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.758346][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.768714][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.779837][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.789883][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.801442][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.811650][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.822376][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.833778][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.842337][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   68.852414][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   68.861465][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   68.901569][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.914615][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.926222][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.937129][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.973871][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.985440][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.995470][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.006478][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.008371][ T4256] loop2: detected capacity change from 0 to 2048
[   69.018147][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.090374][ T4161]  loop2: p1 < > p4
[   69.094732][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   69.116234][ T4161] loop2: p4 size 8388608 extends beyond EOD, truncated
[   69.119321][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   69.151073][ T4182] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.164348][ T4182] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.184182][ T4182] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.218640][ T4182] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.228845][ T4256]  loop2: p1 < > p4
[   69.234425][ T4256] loop2: p4 size 8388608 extends beyond EOD, truncated
[   69.363105][ T4264] loop1: detected capacity change from 0 to 256
[   69.969990][ T4247] Bluetooth: hci1: command 0x0419 tx timeout
[   70.559134][ T3078] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.595042][ T4247] Bluetooth: hci3: command 0x0419 tx timeout
[   70.601475][ T3078] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.663045][ T4247] Bluetooth: hci0: command 0x0419 tx timeout
[   70.724328][ T4247] Bluetooth: hci4: command 0x0419 tx timeout
[   70.741767][ T3078] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.775042][ T4247] Bluetooth: hci2: command 0x0419 tx timeout
[   70.805510][ T3078] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.174955][    C1] sched: RT throttling activated
[   71.194113][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   71.205952][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   71.223227][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.263088][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.329614][ T4188] udevd[4188]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[   71.410355][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[   71.417327][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[   71.445059][ T4161] udevd[4161]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[   71.484310][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.514517][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.546136][ T4188] udevd[4188]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[   71.562383][ T4272] loop2: detected capacity change from 0 to 512
[   71.621676][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   71.637095][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   71.651529][ T4161] udevd[4161]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[   71.660295][ T4272] =======================================================
[   71.660295][ T4272] WARNING: The mand mount option has been deprecated and
[   71.660295][ T4272]          and is ignored by this kernel. Remove the mand
[   71.660295][ T4272]          option from the mount to silence this warning.
[   71.660295][ T4272] =======================================================
[   71.758594][ T3078] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.775351][ T3078] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.817834][ T3078] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.835347][ T3078] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.899015][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   71.913942][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   72.171928][ T4272] EXT4-fs (loop2): orphan cleanup on readonly fs
[   72.606639][ T4272] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.9: bg 0: block 248: padding at end of block bitmap is not set
[   72.904128][ T4272] Quota error (device loop2): write_blk: dquota write failed
[   74.200945][ T4272] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[   74.213099][ T4272] EXT4-fs error (device loop2): ext4_acquire_dquot:6204: comm syz.2.9: Failed to acquire dquot type 1
[   74.286933][ T4272] EXT4-fs (loop2): 1 truncate cleaned up
[   74.331248][ T4161] udevd[4161]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[   74.343609][ T4188] udevd[4188]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[   74.384829][ T4272] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   74.572548][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!!
[   74.582266][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!!
[   74.594117][ T4298] Scaler: =================  START STATUS  =================
[   74.601565][ T4298] Scaler: ==================  END STATUS  ==================
[   74.620850][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!!
[   74.629951][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!!
[   74.639111][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!!
[   74.648117][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!!
[   74.657268][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!!
[   74.666258][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!!
[   74.680758][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[   74.690186][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[   76.787619][ T4302] loop4: detected capacity change from 0 to 4096
[   77.261626][ T4302] ntfs3: Unknown parameter 'iochaŒset'
[   79.782080][ T4303] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[   80.046804][ T4308] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14'.
[   80.087650][ T4303] Bluetooth: hci4: Injecting HCI hardware error event
[   80.582123][ T4317] loop2: detected capacity change from 0 to 1024
[   81.146364][ T4187] Bluetooth: hci4: hardware error 0x00
[   81.346704][ T4324] loop1: detected capacity change from 0 to 16
[   81.371437][ T4317] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only.
[   81.859468][ T4324] erofs: (device loop1): mounted with root inode @ nid 36.
[   82.033852][ T4324] attempt to access beyond end of device
[   82.033852][ T4324] loop1: rw=0, want=24, limit=16
[   83.797171][ T4339] loop4: detected capacity change from 0 to 1024
[   84.348415][ T4339] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   84.367212][ T4344] sctp: failed to load transform for md5: -2
[   84.475567][ T4339] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   84.575144][   T26] audit: type=1800 audit(1750321693.443:2): pid=4339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.22" name="file1" dev="loop4" ino=15 res=0 errno=0
[   85.367208][ T4368] loop2: detected capacity change from 0 to 1024
[   85.387695][ T4372] loop4: detected capacity change from 0 to 1024
[   86.280914][ T4378] loop3: detected capacity change from 0 to 256
[   86.289354][ T4368] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   86.357890][   T26] audit: type=1800 audit(1750321695.233:3): pid=4368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.26" name="file1" dev="loop2" ino=15 res=0 errno=0
[   86.378391][ T4378] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[   86.386385][ T4382] loop1: detected capacity change from 0 to 512
[   86.448025][ T4385] loop4: detected capacity change from 0 to 64
[   86.455264][ T4382] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   86.469431][ T4382] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   86.491051][ T4382] EXT4-fs (loop1): 1 truncate cleaned up
[   86.497071][ T4382] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000040,stripe=0x0000000000004000,errors=remount-ro,minixdf,. Quota mode: none.
[   86.850596][ T1111] cfg80211: failed to load regulatory.db
[   87.422356][   T26] audit: type=1800 audit(1750321696.293:4): pid=4383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.26" name="file1" dev="loop2" ino=15 res=0 errno=0
[   89.579271][ T4395] minix_free_block (loop4:1): bit already cleared
[   89.586170][ T4395] minix_free_block (loop4:4): bit already cleared
[   89.592764][ T4395] minix_free_block (loop4:3): bit already cleared
[   89.599295][ T4395] minix_free_block (loop4:2): bit already cleared
[   89.605790][ T4395] minix_free_block (loop4:1): bit already cleared
[   89.804897][ T4394] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   92.433322][ T4408] syz.2.34 uses obsolete (PF_INET,SOCK_PACKET)
[   94.888500][ T4412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.993328][ T4427] loop2: detected capacity change from 0 to 256
[   96.200872][ T4412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.780116][ T4412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   96.792914][ T4412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.803979][ T4412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   96.815087][ T4412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.825481][ T4412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   96.836585][ T4412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.846914][ T4412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   96.857886][ T4412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.894619][ T4412] device batadv_slave_0 entered promiscuous mode
[   96.906799][ T4427] exfat: Unknown parameter 'keep_last_dots'
[   97.000050][ T4412] device batadv_slave_0 left promiscuous mode
[   97.087078][ T4432] Scaler: =================  START STATUS  =================
[   97.094900][ T4432] Scaler: ==================  END STATUS  ==================
[  100.101301][ T4447] loop3: detected capacity change from 0 to 16
[  100.376689][ T4447] erofs: (device loop3): mounted with root inode @ nid 36.
[  100.469983][ T4447] attempt to access beyond end of device
[  100.469983][ T4447] loop3: rw=0, want=24, limit=16
[  101.510100][   T13] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  101.795215][   T13] Bluetooth: hci1: Injecting HCI hardware error event
[  101.802476][ T4187] Bluetooth: hci1: hardware error 0x00
[  102.414248][ T4468] loop3: detected capacity change from 0 to 128
[  102.714154][ T4472] attempt to access beyond end of device
[  102.714154][ T4472] loop3: rw=2049, want=545, limit=128
[  103.975850][  T144] attempt to access beyond end of device
[  103.975850][  T144] loop3: rw=1, want=153, limit=128
[  104.103677][ T4482] loop0: detected capacity change from 0 to 8192
[  104.228292][ T4493] loop4: detected capacity change from 0 to 64
[  105.173616][ T4482] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  105.205868][ T4493] hfs: unable to parse mount options
[  105.837079][ T4502] loop2: detected capacity change from 0 to 1024
[  106.231184][ T4502] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,,errors=continue. Quota mode: none.
[  106.698014][ T4513] loop1: detected capacity change from 0 to 2048
[  107.463594][ T4513] Alternate GPT is invalid, using primary GPT.
[  107.470317][ T4513]  loop1: p1 p2 p3
[  108.921950][ T4508] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  109.020525][ T3548] Alternate GPT is invalid, using primary GPT.
[  109.056948][ T3548]  loop1: p1 p2 p3
[  109.280644][ T4536] loop2: detected capacity change from 0 to 2048
[  110.205941][ T4536] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  110.829545][ T4564] loop0: detected capacity change from 0 to 64
[  111.396019][ T4575] fuse: Bad value for 'fd'
[  113.803926][ T4599] netlink: 80 bytes leftover after parsing attributes in process `syz.1.94'.
[  113.900317][ T4599] netlink: 80 bytes leftover after parsing attributes in process `syz.1.94'.
[  113.950325][ T4363] udevd[4363]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  113.969690][ T4188] udevd[4188]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  113.986397][ T4599] netlink: 80 bytes leftover after parsing attributes in process `syz.1.94'.
[  113.986689][ T4268] udevd[4268]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  114.078606][ T4597] loop3: detected capacity change from 0 to 8192
[  114.440166][ T4601] udevd[4601]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  114.458916][ T4318] udevd[4318]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  114.472099][ T4188] udevd[4188]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  115.104022][ T4616] netlink: 'syz.2.100': attribute type 4 has an invalid length.
[  115.112296][ T4616] netlink: 17 bytes leftover after parsing attributes in process `syz.2.100'.
[  116.591172][ T4632] netlink: 28 bytes leftover after parsing attributes in process `syz.2.107'.
[  116.656627][ T4632] netlink: 28 bytes leftover after parsing attributes in process `syz.2.107'.
[  116.797223][  T150] block nbd3: Attempted send on invalid socket
[  116.804628][  T150] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0
[  117.104481][ T4647] loop4: detected capacity change from 0 to 256
[  117.198399][ T4647] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  118.483603][ T4663] netlink: 'syz.2.114': attribute type 4 has an invalid length.
[  118.491618][ T4663] netlink: 17 bytes leftover after parsing attributes in process `syz.2.114'.
[  120.653982][ T4689] netlink: 60 bytes leftover after parsing attributes in process `syz.4.121'.
[  120.673771][ T4689] netlink: 60 bytes leftover after parsing attributes in process `syz.4.121'.
[  120.734742][ T4687] netlink: 60 bytes leftover after parsing attributes in process `syz.4.121'.
[  120.874645][ T4656] loop1: detected capacity change from 0 to 512
[  121.017097][ T4693] device syz_tun entered promiscuous mode
[  121.023522][ T4693] device vlan2 entered promiscuous mode
[  121.052516][ T4656] EXT4-fs (loop1): mounted filesystem without journal. Opts: noquota,acl,,errors=continue. Quota mode: writeback.
[  121.078843][ T4656] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  121.284028][ T4704] loop4: detected capacity change from 0 to 256
[  121.297357][ T4705] netlink: 48 bytes leftover after parsing attributes in process `syz.3.126'.
[  121.308924][ T4705] Zero length message leads to an empty skb
[  121.365925][ T4704] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  123.117355][ T4711] netlink: 'syz.3.130': attribute type 11 has an invalid length.
[  123.117841][ T4711] netlink: 'syz.3.130': attribute type 15 has an invalid length.
[  123.118240][ T4711] netlink: 'syz.3.130': attribute type 16 has an invalid length.
[  123.118679][ T4711] netlink: 'syz.3.130': attribute type 21 has an invalid length.
[  123.119010][ T4711] netlink: 'syz.3.130': attribute type 25 has an invalid length.
[  123.119189][ T4711] netlink: 'syz.3.130': attribute type 27 has an invalid length.
[  123.119371][ T4711] netlink: 'syz.3.130': attribute type 28 has an invalid length.
[  123.120872][ T4711] netlink: 'syz.3.130': attribute type 29 has an invalid length.
[  123.121288][ T4711] netlink: 'syz.3.130': attribute type 30 has an invalid length.
[  123.439644][ T4720] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  124.282964][ T4734] netlink: 'syz.0.137': attribute type 4 has an invalid length.
[  124.290771][ T4734] netlink: 17 bytes leftover after parsing attributes in process `syz.0.137'.
[  125.071683][ T4740] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  125.313895][ T4751] netlink: 32 bytes leftover after parsing attributes in process `syz.2.144'.
[  125.975255][ T4758] loop3: detected capacity change from 0 to 256
[  126.108869][ T4758] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  126.245531][ T4756] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  126.764076][ T4775] netlink: 17 bytes leftover after parsing attributes in process `syz.2.150'.
[  127.978763][ T4783] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  128.980362][ T4800] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.402047][ T4812] loop0: detected capacity change from 0 to 256
[  129.616103][ T4812] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  129.863559][ T4800] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.884540][ T4787] ODEBUG: Out of memory. ODEBUG disabled
[  131.490764][ T4800] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.850284][ T4823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.165'.
[  132.094525][ T4800] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.195781][ T4828] netlink: 24 bytes leftover after parsing attributes in process `syz.0.168'.
[  132.545921][ T4800] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  132.592677][ T4800] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  132.646727][ T4800] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  132.696131][ T4800] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  132.746756][ T4838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.172'.
[  132.849697][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  132.858342][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  133.077791][ T4846] 8021q: adding VLAN 0 to HW filter on device bond1
[  133.452742][ T4842] sctp: failed to load transform for md5: -2
[  134.325389][ T4879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.181'.
[  138.559270][ T4948] netlink: 20 bytes leftover after parsing attributes in process `syz.0.202'.
[  138.668615][ T4948] tipc: Started in network mode
[  138.763045][ T4948] tipc: Node identity ac14140f, cluster identity 4711
[  138.802733][ T4948] tipc: New replicast peer: 255.255.255.255
[  138.821926][ T4948] tipc: Enabled bearer <udp:syz2>, priority 10
[  138.998370][ T4955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.205'.
[  139.043361][ T4955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.205'.
[  139.236481][   T26] audit: type=1326 audit(1750321748.103:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4957 comm="syz.4.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24ff877929 code=0x7ffc0000
[  139.265131][   T26] audit: type=1326 audit(1750321748.103:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4957 comm="syz.4.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24ff877929 code=0x7ffc0000
[  139.330695][   T26] audit: type=1326 audit(1750321748.103:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4957 comm="syz.4.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f24ff877929 code=0x7ffc0000
[  139.335252][ T4300] Bluetooth: hci5: Frame reassembly failed (-84)
[  139.368614][ T4348] Bluetooth: hci5: Frame reassembly failed (-84)
[  139.443032][   T26] audit: type=1326 audit(1750321748.103:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4957 comm="syz.4.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24ff877929 code=0x7ffc0000
[  139.476289][   T26] audit: type=1326 audit(1750321748.103:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4957 comm="syz.4.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24ff877929 code=0x7ffc0000
[  139.560192][   T26] audit: type=1326 audit(1750321748.103:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4957 comm="syz.4.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f24ff877929 code=0x7ffc0000
[  139.645136][   T26] audit: type=1326 audit(1750321748.103:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4957 comm="syz.4.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24ff877929 code=0x7ffc0000
[  139.688575][ T4787] Set syz1 is full, maxelem 65536 reached
[  139.849718][   T26] audit: type=1326 audit(1750321748.103:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4957 comm="syz.4.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24ff877929 code=0x7ffc0000
[  139.872090][   T26] audit: type=1326 audit(1750321748.103:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4957 comm="syz.4.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f24ff877929 code=0x7ffc0000
[  140.394971][   T26] audit: type=1326 audit(1750321748.103:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4957 comm="syz.4.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24ff877929 code=0x7ffc0000
[  140.710568][ T4215] tipc: Node number set to 2886997007
[  141.034668][ T4988] device pim6reg1 entered promiscuous mode
[  141.091299][ T4988] netlink: 32 bytes leftover after parsing attributes in process `syz.0.217'.
[  141.118425][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready
[  141.405066][ T4215] Bluetooth: hci5: command 0x1003 tx timeout
[  141.415381][ T4179] Bluetooth: hci5: sending frame failed (-49)
[  142.452675][ T5020] loop1: detected capacity change from 0 to 256
[  142.514363][ T5021] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  142.637408][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  142.673113][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  142.697671][ T5020] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  142.814417][ T5026] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  143.625241][ T1108] Bluetooth: hci5: command 0x1001 tx timeout
[  143.631373][ T4179] Bluetooth: hci5: sending frame failed (-49)
[  143.839645][ T5045] Set syz0 is full, maxelem 0 reached
[  144.260433][ T5053] validate_nla: 1 callbacks suppressed
[  144.260473][ T5053] netlink: 'syz.3.240': attribute type 4 has an invalid length.
[  144.273788][ T5053] netlink: 17 bytes leftover after parsing attributes in process `syz.3.240'.
[  144.414389][ T5050] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5
[  145.645202][   T13] Bluetooth: hci5: command 0x1009 tx timeout
[  146.764141][ T5131] loop2: detected capacity change from 0 to 1024
[  146.870330][ T5131] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,,errors=continue. Quota mode: none.
[  147.062282][ T5136] netlink: 48 bytes leftover after parsing attributes in process `syz.1.252'.
[  148.837531][ T5146] netlink: 'syz.3.254': attribute type 4 has an invalid length.
[  148.846430][ T5146] netlink: 17 bytes leftover after parsing attributes in process `syz.3.254'.
[  149.801064][ T5172] netlink: 16 bytes leftover after parsing attributes in process `syz.4.263'.
[  150.262244][ T5176] loop1: detected capacity change from 0 to 8192
[  152.164783][   T26] kauditd_printk_skb: 20 callbacks suppressed
[  152.164798][   T26] audit: type=1326 audit(1750321761.033:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5195 comm="syz.4.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24ff877929 code=0x7ffc0000
[  152.262658][ T4300] Bluetooth: hci5: Frame reassembly failed (-84)
[  152.306568][   T26] audit: type=1326 audit(1750321761.033:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5195 comm="syz.4.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24ff877929 code=0x7ffc0000
[  152.424609][   T26] audit: type=1326 audit(1750321761.073:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5195 comm="syz.4.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f24ff877929 code=0x7ffc0000
[  152.513389][   T26] audit: type=1326 audit(1750321761.073:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5195 comm="syz.4.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24ff877929 code=0x7ffc0000
[  152.555517][ T5206] xt_TCPMSS: Only works on TCP SYN packets
[  152.592184][   T26] audit: type=1326 audit(1750321761.073:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5195 comm="syz.4.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24ff877929 code=0x7ffc0000
[  152.648809][   T26] audit: type=1326 audit(1750321761.073:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5195 comm="syz.4.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f24ff877929 code=0x7ffc0000
[  152.672090][ T5208] device syzkaller1 entered promiscuous mode
[  152.718045][   T26] audit: type=1326 audit(1750321761.073:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5195 comm="syz.4.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24ff877929 code=0x7ffc0000
[  152.804068][   T26] audit: type=1326 audit(1750321761.073:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5195 comm="syz.4.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24ff877929 code=0x7ffc0000
[  152.848467][   T26] audit: type=1326 audit(1750321761.073:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5195 comm="syz.4.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f24ff877929 code=0x7ffc0000
[  152.903265][   T26] audit: type=1326 audit(1750321761.073:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5195 comm="syz.4.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24ff877929 code=0x7ffc0000
[  154.006024][ T5218] loop3: detected capacity change from 0 to 8192
[  154.994994][ T1108] Bluetooth: hci5: command 0x1003 tx timeout
[  155.001218][ T4179] Bluetooth: hci5: sending frame failed (-49)
[  157.612486][ T4217] Bluetooth: hci5: command 0x1001 tx timeout
[  157.620351][ T4179] Bluetooth: hci5: sending frame failed (-49)
[  158.468461][ T5281] 9pnet: Insufficient options for proto=fd
[  158.607965][ T5280] loop0: detected capacity change from 0 to 8192
[  159.046036][ T5292] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  159.713647][ T4217] Bluetooth: hci5: command 0x1009 tx timeout
[  159.758691][ T5299] bridge0: port 3(veth0_to_bridge) entered blocking state
[  159.766096][ T5299] bridge0: port 3(veth0_to_bridge) entered disabled state
[  159.776131][ T5299] device veth0_to_bridge entered promiscuous mode
[  159.782835][ T5299] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  159.806624][ T5297] netlink: 48 bytes leftover after parsing attributes in process `syz.0.311'.
[  159.846971][ T5299] bridge0: port 3(veth0_to_bridge) entered blocking state
[  159.854845][ T5299] bridge0: port 3(veth0_to_bridge) entered forwarding state
[  161.163756][ T5323] loop2: detected capacity change from 0 to 8192
[  162.218890][ T5347] netlink: 48 bytes leftover after parsing attributes in process `syz.2.328'.
[  163.802490][ T5367] tipc: Started in network mode
[  163.808828][ T5367] tipc: Node identity aa40b92c4108, cluster identity 4711
[  163.818482][ T5367] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  163.826316][ T5367] device syzkaller0 entered promiscuous mode
[  163.836712][ T5366] tipc: Resetting bearer <eth:syzkaller0>
[  163.866878][ T5366] tipc: Disabling bearer <eth:syzkaller0>
[  164.086297][ T5374] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  164.098513][ T5370] loop4: detected capacity change from 0 to 8192
[  164.333771][ T5379] loop3: detected capacity change from 0 to 64
[  164.400204][ T5382] netlink: 48 bytes leftover after parsing attributes in process `syz.2.342'.
[  164.470886][   T26] kauditd_printk_skb: 18 callbacks suppressed
[  164.470901][   T26] audit: type=1326 audit(1750321773.343:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5383 comm="syz.0.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb2548b929 code=0x7ffc0000
[  164.503800][ T5379] minix_free_block (loop3:1): bit already cleared
[  164.510539][ T5379] minix_free_block (loop3:4): bit already cleared
[  164.516998][ T5379] minix_free_block (loop3:3): bit already cleared
[  164.523420][ T5379] minix_free_block (loop3:2): bit already cleared
[  164.530037][ T5379] minix_free_block (loop3:1): bit already cleared
[  164.602981][  T155] Bluetooth: hci5: Frame reassembly failed (-84)
[  164.634043][   T26] audit: type=1326 audit(1750321773.343:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5383 comm="syz.0.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb2548b929 code=0x7ffc0000
[  164.702133][   T26] audit: type=1326 audit(1750321773.413:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5383 comm="syz.0.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb2548b929 code=0x7ffc0000
[  164.826299][   T26] audit: type=1326 audit(1750321773.413:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5383 comm="syz.0.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb2548b929 code=0x7ffc0000
[  164.856899][   T26] audit: type=1326 audit(1750321773.413:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5383 comm="syz.0.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb2548b929 code=0x7ffc0000
[  165.856478][   T26] audit: type=1326 audit(1750321773.413:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5383 comm="syz.0.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb2548b929 code=0x7ffc0000
[  165.920501][   T26] audit: type=1326 audit(1750321773.413:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5383 comm="syz.0.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb2548b929 code=0x7ffc0000
[  165.982151][   T26] audit: type=1326 audit(1750321773.413:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5383 comm="syz.0.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb2548b929 code=0x7ffc0000
[  166.005276][   T26] audit: type=1326 audit(1750321773.413:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5383 comm="syz.0.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7ffb2548b929 code=0x7ffc0000
[  166.033309][   T26] audit: type=1326 audit(1750321773.413:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5383 comm="syz.0.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb2548b929 code=0x7ffc0000
[  166.486096][ T5402] netlink: 12 bytes leftover after parsing attributes in process `syz.4.349'.
[  166.887252][ T1108] Bluetooth: hci5: command 0x1003 tx timeout
[  166.893385][ T4179] Bluetooth: hci5: sending frame failed (-49)
[  166.899272][ T5402] qfq: no options
[  167.167302][ T5420] loop2: detected capacity change from 0 to 64
[  167.239212][ T5417] loop4: detected capacity change from 0 to 8192
[  167.612680][ T5420] minix_free_block (loop2:1): bit already cleared
[  167.619233][ T5420] minix_free_block (loop2:4): bit already cleared
[  167.625731][ T5420] minix_free_block (loop2:3): bit already cleared
[  167.632159][ T5420] minix_free_block (loop2:2): bit already cleared
[  167.638631][ T5420] minix_free_block (loop2:1): bit already cleared
[  167.965409][ T5435] loop3: detected capacity change from 0 to 256
[  168.938597][   T13] Bluetooth: hci5: command 0x1001 tx timeout
[  168.944878][ T4179] Bluetooth: hci5: sending frame failed (-49)
[  170.918891][ T5464] loop2: detected capacity change from 0 to 64
[  171.143493][    T7] Bluetooth: hci5: command 0x1009 tx timeout
[  171.193372][ T5464] minix_free_block (loop2:1): bit already cleared
[  171.200014][ T5464] minix_free_block (loop2:4): bit already cleared
[  171.206581][ T5464] minix_free_block (loop2:3): bit already cleared
[  171.213003][ T5464] minix_free_block (loop2:2): bit already cleared
[  171.219684][ T5464] minix_free_block (loop2:1): bit already cleared
[  171.328931][ T5466] loop4: detected capacity change from 0 to 8192
[  172.497822][ T5479] loop3: detected capacity change from 0 to 256
[  172.845557][ T5479] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  173.775401][ T5495] loop2: detected capacity change from 0 to 256
[  178.864248][ T5519] lo speed is unknown, defaulting to 1000
[  178.881791][ T5519] lo speed is unknown, defaulting to 1000
[  178.985768][ T5521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.387'.
[  179.105376][ T5514] loop3: detected capacity change from 0 to 64
[  179.111987][ T5510] loop0: detected capacity change from 0 to 8192
[  180.070491][ T5519] lo speed is unknown, defaulting to 1000
[  180.078404][ T5514] minix_free_block (loop3:1): bit already cleared
[  180.085644][ T5514] minix_free_block (loop3:4): bit already cleared
[  180.092089][ T5514] minix_free_block (loop3:3): bit already cleared
[  180.098727][ T5514] minix_free_block (loop3:2): bit already cleared
[  180.105231][ T5514] minix_free_block (loop3:1): bit already cleared
[  180.133799][ T5519] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  180.211618][ T5519] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  180.322418][ T5519] lo speed is unknown, defaulting to 1000
[  180.327305][ T5536] loop3: detected capacity change from 0 to 256
[  180.357130][   T26] kauditd_printk_skb: 19 callbacks suppressed
[  180.357146][   T26] audit: type=1326 audit(1750321789.223:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5533 comm="syz.0.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb2548b929 code=0x7ffc0000
[  180.360450][ T5519] lo speed is unknown, defaulting to 1000
[  180.363821][   T26] audit: type=1326 audit(1750321789.223:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5533 comm="syz.0.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb2548b929 code=0x7ffc0000
[  180.449864][ T5519] lo speed is unknown, defaulting to 1000
[  180.457242][ T5536] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  180.469071][ T5519] lo speed is unknown, defaulting to 1000
[  180.474997][   T26] audit: type=1326 audit(1750321789.223:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5533 comm="syz.0.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb2548b929 code=0x7ffc0000
[  180.502714][ T5519] lo speed is unknown, defaulting to 1000
[  180.514711][ T5110] Bluetooth: hci5: Frame reassembly failed (-84)
[  180.571529][   T26] audit: type=1326 audit(1750321789.223:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5533 comm="syz.0.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb2548b929 code=0x7ffc0000
[  180.594519][   T26] audit: type=1326 audit(1750321789.233:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5533 comm="syz.0.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb2548b929 code=0x7ffc0000
[  180.647717][   T26] audit: type=1326 audit(1750321789.233:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5533 comm="syz.0.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb2548b929 code=0x7ffc0000
[  180.706062][   T26] audit: type=1326 audit(1750321789.233:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5533 comm="syz.0.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb2548b929 code=0x7ffc0000
[  180.729273][   T26] audit: type=1326 audit(1750321789.233:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5533 comm="syz.0.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb2548b929 code=0x7ffc0000
[  180.973819][ T5545] loop1: detected capacity change from 0 to 256
[  181.816033][   T26] audit: type=1326 audit(1750321789.233:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5533 comm="syz.0.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7ffb2548b929 code=0x7ffc0000
[  182.299780][   T26] audit: type=1326 audit(1750321789.233:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5533 comm="syz.0.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb2548b929 code=0x7ffc0000
[  182.525055][    T7] Bluetooth: hci5: command 0x1003 tx timeout
[  182.535243][ T4179] Bluetooth: hci5: sending frame failed (-49)
[  183.781925][ T5557] kvm [5556]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x0
[  183.798157][ T5557] kvm [5556]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x4000
[  183.842976][ T5557] kvm [5556]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x80
[  183.904123][ T5557] kvm [5556]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x186 data 0x4080
[  184.087915][ T5575] loop2: detected capacity change from 0 to 64
[  184.223515][ T5575] minix_free_block (loop2:1): bit already cleared
[  184.230092][ T5575] minix_free_block (loop2:4): bit already cleared
[  184.236634][ T5575] minix_free_block (loop2:3): bit already cleared
[  184.243436][ T5575] minix_free_block (loop2:2): bit already cleared
[  184.249903][ T5575] minix_free_block (loop2:1): bit already cleared
[  184.310859][ T5573] loop3: detected capacity change from 0 to 8192
[  184.367794][ T5577] lo speed is unknown, defaulting to 1000
[  184.651081][ T4303] Bluetooth: hci5: command 0x1001 tx timeout
[  184.730861][ T4179] Bluetooth: hci5: sending frame failed (-49)
[  185.380060][ T5587] overlayfs: failed to resolve './file0': -2
[  185.469817][ T5590] lo speed is unknown, defaulting to 1000
[  186.148410][ T1108] Bluetooth: hci0: command 0x0406 tx timeout
[  186.154769][ T1108] Bluetooth: hci2: command 0x0406 tx timeout
[  186.781803][ T4215] Bluetooth: hci5: command 0x1009 tx timeout
[  187.677670][ T5613] kvm [5612]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x0
[  187.727735][ T5613] kvm [5612]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x4000
[  187.760579][ T5613] kvm [5612]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x80
[  187.795318][ T5613] kvm [5612]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x186 data 0x4080
[  188.806147][ T5629] loop4: detected capacity change from 0 to 8192
[  191.928612][ T5696] device team_slave_0 entered promiscuous mode
[  191.935385][ T5696] device team_slave_1 entered promiscuous mode
[  191.968611][ T5692] loop0: detected capacity change from 0 to 8192
[  191.988113][ T5696] device macsec1 entered promiscuous mode
[  192.021100][ T5696] device team0 entered promiscuous mode
[  192.150228][ T5696] device team0 left promiscuous mode
[  192.170703][ T5696] device team_slave_0 left promiscuous mode
[  192.176804][ T5696] device team_slave_1 left promiscuous mode
[  194.292819][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  194.305232][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  194.319129][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  194.331527][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  194.344642][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  194.357052][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  194.370092][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  194.371035][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  194.382540][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  194.401177][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  194.409318][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  194.421753][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  194.447344][   T26] kauditd_printk_skb: 20 callbacks suppressed
[  194.447362][   T26] audit: type=1326 audit(1750321803.253:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5706 comm="syz.2.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff511c3b929 code=0x7ffc0000
[  194.479562][   T26] audit: type=1326 audit(1750321803.253:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5706 comm="syz.2.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff511c3b929 code=0x7ffc0000
[  194.502056][   T26] audit: type=1326 audit(1750321803.253:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5706 comm="syz.2.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff511c3b929 code=0x7ffc0000
[  194.524698][   T26] audit: type=1326 audit(1750321803.253:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5706 comm="syz.2.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff511c3b929 code=0x7ffc0000
[  194.547935][   T26] audit: type=1326 audit(1750321803.253:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5706 comm="syz.2.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff511c3b929 code=0x7ffc0000
[  194.570549][   T26] audit: type=1326 audit(1750321803.263:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5706 comm="syz.2.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff511c3b929 code=0x7ffc0000
[  194.593202][   T26] audit: type=1326 audit(1750321803.263:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5706 comm="syz.2.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff511c3b929 code=0x7ffc0000
[  194.622122][ T4280] Bluetooth: hci5: Frame reassembly failed (-84)
[  194.662228][   T26] audit: type=1326 audit(1750321803.263:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5706 comm="syz.2.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff511c3b929 code=0x7ffc0000
[  194.781014][   T26] audit: type=1326 audit(1750321803.263:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5706 comm="syz.2.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7ff511c3b929 code=0x7ffc0000
[  194.853284][   T26] audit: type=1326 audit(1750321803.263:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5706 comm="syz.2.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff511c3b929 code=0x7ffc0000
[  195.347337][ T5716] overlayfs: failed to resolve './file0': -2
[  195.678838][ T5718] kvm [5717]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x0
[  195.699310][ T5718] kvm [5717]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x4000
[  195.781626][ T5718] kvm [5717]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x80
[  195.799284][ T5718] kvm [5717]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x186 data 0x4080
[  195.838675][ T5728] netlink: 12 bytes leftover after parsing attributes in process `syz.0.453'.
[  195.917918][ T5728] device wireguard0 entered promiscuous mode
[  196.607946][ T5733] loop3: detected capacity change from 0 to 64
[  196.704670][ T4303] Bluetooth: hci5: command 0x1003 tx timeout
[  196.720847][ T4179] Bluetooth: hci5: sending frame failed (-49)
[  199.295174][    C0] net_ratelimit: 1868 callbacks suppressed
[  199.295196][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  199.314339][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  199.327464][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  199.339966][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  199.353053][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  199.365584][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  199.378637][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  199.391031][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  199.404153][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  199.416806][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  199.561630][ T4217] Bluetooth: hci5: command 0x1001 tx timeout
[  199.571049][ T4179] Bluetooth: hci5: sending frame failed (-49)
[  199.955656][ T5756] overlayfs: failed to resolve './file0': -2
[  200.584758][ T5762] loop0: detected capacity change from 0 to 1024
[  201.326622][ T5762] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,,errors=continue. Quota mode: none.
[  202.439231][ T4303] Bluetooth: hci5: command 0x1009 tx timeout
[  204.305144][    C0] net_ratelimit: 1044 callbacks suppressed
[  204.305164][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  204.323454][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  204.336565][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  204.439069][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  204.452180][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  204.464839][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  204.477959][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  204.490434][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  204.503445][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  204.515940][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  207.070762][ T5810] loop2: detected capacity change from 0 to 1024
[  208.513228][ T5810] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,,errors=continue. Quota mode: none.
[  208.541053][ T5818] lo speed is unknown, defaulting to 1000
[  209.315103][    C1] net_ratelimit: 4288 callbacks suppressed
[  209.315122][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  209.333440][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  209.345833][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  209.358487][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  209.370920][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  209.383310][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  209.395719][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  209.408067][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  209.420433][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  209.432801][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  209.768990][ T5818] chnl_net:caif_netlink_parms(): no params data found
[  210.223700][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state
[  210.240811][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state
[  210.266304][ T5818] device bridge_slave_0 entered promiscuous mode
[  210.311325][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state
[  210.365015][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state
[  210.373432][ T5818] device bridge_slave_1 entered promiscuous mode
[  210.428544][ T2302] Bluetooth: hci5: command 0x0409 tx timeout
[  210.456944][ T5846] sctp: [Deprecated]: syz.2.487 (pid 5846) Use of struct sctp_assoc_value in delayed_ack socket option.
[  210.456944][ T5846] Use struct sctp_sack_info instead
[  210.546149][ T5848] loop1: detected capacity change from 0 to 256
[  212.105929][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  212.327822][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  212.926149][ T5818] team0: Port device team_slave_0 added
[  212.939055][ T5852] loop0: detected capacity change from 0 to 64
[  212.994794][ T5818] team0: Port device team_slave_1 added
[  213.333211][   T21] Bluetooth: hci5: command 0x041b tx timeout
[  213.396304][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0
[  213.591408][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  213.725785][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  213.768530][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1
[  213.969210][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  214.097855][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  214.645392][    C0] net_ratelimit: 4096 callbacks suppressed
[  214.645410][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  214.664452][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  214.676964][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  214.690145][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  214.702547][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  214.715751][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  214.728380][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  214.741426][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  214.755002][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  214.767984][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  214.887441][ T5818] device hsr_slave_0 entered promiscuous mode
[  214.928554][ T5818] device hsr_slave_1 entered promiscuous mode
[  214.958229][ T5818] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  214.965904][ T5818] Cannot create hsr debugfs directory
[  214.974703][ T5864] netlink: 40 bytes leftover after parsing attributes in process `syz.2.495'.
[  215.025933][ T5852] minix_free_block (loop0:1): bit already cleared
[  215.032494][ T5852] minix_free_block (loop0:4): bit already cleared
[  215.056049][ T5866] netlink: 4 bytes leftover after parsing attributes in process `syz.3.496'.
[  215.062987][ T5852] minix_free_block (loop0:3): bit already cleared
[  215.113364][ T5852] minix_free_block (loop0:2): bit already cleared
[  215.122380][ T5852] minix_free_block (loop0:1): bit already cleared
[  215.146103][ T5863] device geneve2 entered promiscuous mode
[  215.444940][   T21] Bluetooth: hci5: command 0x040f tx timeout
[  215.825644][ T5872] lo speed is unknown, defaulting to 1000
[  216.030943][ T5818] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  216.064515][ T5818] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  216.083923][ T5818] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  216.094490][ T5818] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  217.027172][ T5888] netlink: 'syz.2.502': attribute type 4 has an invalid length.
[  217.047042][ T5888] netlink: 17 bytes leftover after parsing attributes in process `syz.2.502'.
[  217.344352][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0
[  217.547773][ T4214] Bluetooth: hci5: command 0x0419 tx timeout
[  218.012293][ T5818] 8021q: adding VLAN 0 to HW filter on device team0
[  218.055438][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  218.066093][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  218.135998][ T5897] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input6
[  218.165011][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  218.238604][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  218.250153][ T3078] bridge0: port 1(bridge_slave_0) entered blocking state
[  218.257342][ T3078] bridge0: port 1(bridge_slave_0) entered forwarding state
[  218.496196][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  218.516158][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  218.551068][ T3078] bridge0: port 2(bridge_slave_1) entered blocking state
[  218.558293][ T3078] bridge0: port 2(bridge_slave_1) entered forwarding state
[  218.604180][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  218.863841][ T5818] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  218.902615][ T5818] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  219.107207][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  219.115781][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  219.163621][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  219.221256][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  219.251757][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  219.336398][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  219.395858][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  219.413667][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  219.440774][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  219.461900][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  219.509123][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  219.526701][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  219.558859][ T5908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.507'.
[  219.579078][ T5908] device hsr0 entered promiscuous mode
[  219.608225][ T5908] device macvlan2 entered promiscuous mode
[  219.664034][    C1] net_ratelimit: 7555 callbacks suppressed
[  219.664050][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  219.682621][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  219.685152][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  219.695146][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  219.707078][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  219.719102][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  219.731334][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  219.743152][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  219.755940][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  219.767152][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  219.894076][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  219.915232][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  219.928830][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0
[  220.987301][ T5932] netlink: 'syz.2.512': attribute type 4 has an invalid length.
[  220.995141][ T5932] netlink: 17 bytes leftover after parsing attributes in process `syz.2.512'.
[  221.035956][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  221.064072][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  221.862649][ T5936] bridge0: port 3(syz_tun) entered blocking state
[  221.881822][ T5936] bridge0: port 3(syz_tun) entered disabled state
[  221.920642][ T5936] device syz_tun entered promiscuous mode
[  221.958049][ T5936] bridge0: port 3(syz_tun) entered blocking state
[  221.965086][ T5936] bridge0: port 3(syz_tun) entered forwarding state
[  222.020752][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  222.035869][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  222.078193][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  222.105369][ T5941] fuse: Unknown parameter 'grou00000000000000000000'
[  222.142834][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  222.236785][ T5818] device veth0_vlan entered promiscuous mode
[  222.385094][ T5818] device veth1_vlan entered promiscuous mode
[  222.795422][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  222.815528][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  222.878006][ T5818] device veth0_macvtap entered promiscuous mode
[  222.910809][ T5818] device veth1_macvtap entered promiscuous mode
[  223.043300][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  223.122294][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.154485][ T5956] loop1: detected capacity change from 0 to 256
[  223.160880][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  223.208893][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.236410][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  223.267004][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.310160][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  223.335632][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.362988][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  223.399294][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.424556][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0
[  223.446919][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  223.478336][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.522264][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  223.553245][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.566753][ T5956] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  223.595146][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  223.628075][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.654892][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  223.678682][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.738540][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  223.749218][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.771874][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1
[  223.856340][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  223.868306][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  224.169161][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  224.224437][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  224.244098][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  224.279340][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  224.361091][ T5818] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  224.380105][ T5818] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  224.419877][ T5818] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  224.438236][ T5818] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  224.645227][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  224.653482][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  224.668617][    C0] net_ratelimit: 6485 callbacks suppressed
[  224.668633][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  224.686920][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  224.699975][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  224.712402][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  224.724781][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  224.737820][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  224.750134][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  224.762533][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  224.775620][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  224.787926][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  224.855792][ T5969] loop2: detected capacity change from 0 to 256
[  225.016859][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  225.499157][ T5108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  225.523023][ T5108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  225.595365][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  229.430680][ T5995] fuse: Unknown parameter 'grou00000000000000000000'
[  229.694786][    C1] net_ratelimit: 7143 callbacks suppressed
[  229.694807][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  229.713175][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  229.725568][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  229.737975][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  229.750426][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  229.762801][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  229.775344][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  229.787704][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  229.800059][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  229.812424][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  230.529974][ T6003] loop3: detected capacity change from 0 to 256
[  231.777148][ T6009] lo speed is unknown, defaulting to 1000
[  232.809603][ T6003] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  233.928474][ T6009] chnl_net:caif_netlink_parms(): no params data found
[  234.710530][    C0] net_ratelimit: 3802 callbacks suppressed
[  234.710546][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  234.728852][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  234.741898][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  234.754476][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  234.766846][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  234.779874][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  234.792211][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  234.804559][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  234.817620][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  234.829925][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  234.944554][ T2302] Bluetooth: hci3: command 0x0409 tx timeout
[  235.447268][ T6009] bridge0: port 1(bridge_slave_0) entered blocking state
[  235.456442][ T6009] bridge0: port 1(bridge_slave_0) entered disabled state
[  235.496560][ T6009] device bridge_slave_0 entered promiscuous mode
[  235.519084][ T6009] bridge0: port 2(bridge_slave_1) entered blocking state
[  235.536038][ T6009] bridge0: port 2(bridge_slave_1) entered disabled state
[  235.575970][ T6009] device bridge_slave_1 entered promiscuous mode
[  235.756755][ T6009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  235.837855][ T6009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  236.091548][ T6009] team0: Port device team_slave_0 added
[  236.120762][ T6009] team0: Port device team_slave_1 added
[  236.259278][ T6058] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.688380][ T6009] batman_adv: batadv0: Adding interface: batadv_slave_0
[  236.719304][ T6009] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  236.793293][ T6009] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  236.834543][ T6009] batman_adv: batadv0: Adding interface: batadv_slave_1
[  236.858734][ T6009] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  236.973708][ T6009] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  237.169228][ T6009] device hsr_slave_0 entered promiscuous mode
[  237.195111][ T4173] Bluetooth: hci3: command 0x041b tx timeout
[  237.239395][ T6009] device hsr_slave_1 entered promiscuous mode
[  237.246417][ T6009] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  237.254157][ T6009] Cannot create hsr debugfs directory
[  238.197290][ T6072] netlink: 'syz.2.546': attribute type 4 has an invalid length.
[  238.205078][ T6072] netlink: 17 bytes leftover after parsing attributes in process `syz.2.546'.
[  238.963016][ T6083] loop1: detected capacity change from 0 to 1024
[  239.552527][ T4248] Bluetooth: hci3: command 0x040f tx timeout
[  239.795642][    C1] net_ratelimit: 7330 callbacks suppressed
[  239.795663][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  239.814153][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  239.826589][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  239.839067][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  239.839145][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  239.851567][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  239.863631][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  239.875553][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  239.888311][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  239.899629][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  241.738229][ T4214] Bluetooth: hci3: command 0x0419 tx timeout
[  241.865118][ T6058] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.671734][ T6103] netlink: 'syz.3.557': attribute type 4 has an invalid length.
[  242.679612][ T6103] netlink: 17 bytes leftover after parsing attributes in process `syz.3.557'.
[  242.879144][ T6107] loop3: detected capacity change from 0 to 256
[  243.545987][ T6058] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.833703][ T6058] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.998382][ T6107] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  244.150484][ T6058] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  244.166456][ T6058] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  244.421183][ T6058] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  244.529547][ T6058] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  244.807712][    C0] net_ratelimit: 8413 callbacks suppressed
[  244.807733][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  244.826706][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  244.839044][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  244.851412][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  244.864433][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  244.876997][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  244.889428][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  244.902421][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  244.914749][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  244.927271][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  245.066970][ T6009] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  245.115589][ T6009] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  245.307462][ T6009] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  245.339355][ T6009] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  247.745006][ T6137] ksmbd: Unknown IPC event: 6, ignore.
[  248.195471][ T6009] 8021q: adding VLAN 0 to HW filter on device bond0
[  248.256506][ T6009] 8021q: adding VLAN 0 to HW filter on device team0
[  248.323209][ T5103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  248.405477][ T5103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  248.559680][ T5103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  248.575792][ T5103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  248.664012][ T5103] bridge0: port 1(bridge_slave_0) entered blocking state
[  248.671265][ T5103] bridge0: port 1(bridge_slave_0) entered forwarding state
[  248.762794][ T5103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  249.270614][ T6143] netlink: 'syz.1.569': attribute type 4 has an invalid length.
[  249.278809][ T6143] netlink: 17 bytes leftover after parsing attributes in process `syz.1.569'.
[  249.390189][ T5103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  249.455719][ T5103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  249.477159][ T6155] loop1: detected capacity change from 0 to 256
[  249.495465][ T5103] bridge0: port 2(bridge_slave_1) entered blocking state
[  249.502590][ T5103] bridge0: port 2(bridge_slave_1) entered forwarding state
[  249.572924][ T5103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  249.705678][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  249.720260][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  249.788373][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  249.815191][    C1] net_ratelimit: 4238 callbacks suppressed
[  249.815213][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  249.822087][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  249.833567][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  249.846543][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  249.857949][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  249.869770][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  249.881856][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  249.893767][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  249.905758][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  249.918571][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  249.939817][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  249.981869][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  249.991437][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  250.041013][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  250.049966][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  250.165608][ T5103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  250.174480][ T5103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  250.218099][ T6009] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  250.430674][   T26] kauditd_printk_skb: 20 callbacks suppressed
[  250.430690][   T26] audit: type=1326 audit(1750321859.303:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6161 comm="syz.3.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d70464929 code=0x7ffc0000
[  250.494922][   T26] audit: type=1326 audit(1750321859.303:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6161 comm="syz.3.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d70464929 code=0x7ffc0000
[  250.550361][   T26] audit: type=1326 audit(1750321859.303:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6161 comm="syz.3.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d70464929 code=0x7ffc0000
[  250.581804][ T5114] Bluetooth: hci6: Frame reassembly failed (-84)
[  250.624967][   T26] audit: type=1326 audit(1750321859.303:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6161 comm="syz.3.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d70464929 code=0x7ffc0000
[  250.701206][   T26] audit: type=1326 audit(1750321859.303:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6161 comm="syz.3.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d70464929 code=0x7ffc0000
[  250.794151][   T26] audit: type=1326 audit(1750321859.303:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6161 comm="syz.3.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d70464929 code=0x7ffc0000
[  250.834101][ T6155] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  250.885162][   T26] audit: type=1326 audit(1750321859.303:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6161 comm="syz.3.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d70464929 code=0x7ffc0000
[  250.959089][ T5110] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  251.041932][ T5110] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  251.067985][ T6009] 8021q: adding VLAN 0 to HW filter on device batadv0
[  251.189287][   T26] audit: type=1326 audit(1750321859.303:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6161 comm="syz.3.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d70464929 code=0x7ffc0000
[  251.694187][   T26] audit: type=1326 audit(1750321859.303:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6161 comm="syz.3.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f6d70464929 code=0x7ffc0000
[  251.789552][   T26] audit: type=1326 audit(1750321859.303:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6161 comm="syz.3.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d70464929 code=0x7ffc0000
[  252.408331][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  252.417982][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  252.487721][ T5110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  252.509816][ T5110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  252.594537][ T6009] device veth0_vlan entered promiscuous mode
[  252.677069][ T4214] Bluetooth: hci6: command 0x1003 tx timeout
[  252.686311][ T4179] Bluetooth: hci6: sending frame failed (-49)
[  252.721878][ T6009] device veth1_vlan entered promiscuous mode
[  252.965013][ T6009] device veth0_macvtap entered promiscuous mode
[  253.032749][ T6009] device veth1_macvtap entered promiscuous mode
[  253.118116][ T6009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  253.164899][ T6009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.239424][ T6009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  253.263220][ T6009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.304507][ T6009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  253.324537][ T6009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.354338][ T6009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  253.498010][ T6186] loop5: detected capacity change from 0 to 256
[  253.945973][ T6009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.020710][ T6009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  254.080807][ T6009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.150763][ T6009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  254.223531][ T6009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.415768][ T6009] batman_adv: batadv0: Interface activated: batadv_slave_0
[  254.427293][ T5110] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  254.439129][ T5110] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  254.469856][ T5110] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  254.548392][ T5110] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  254.599328][ T5110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  254.669885][ T5110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  254.723468][ T5110] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  254.794570][ T5110] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  254.825296][    C0] net_ratelimit: 6796 callbacks suppressed
[  254.825317][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  254.843521][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  254.855918][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  254.868958][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  254.881393][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  254.893780][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  254.906880][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  254.920814][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  254.933369][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  254.946510][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  254.990852][ T5110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  255.071873][ T6009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  255.088514][ T6009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  255.098737][ T6009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  255.109532][ T6009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  255.119453][ T6009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  255.130320][ T6009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  255.140293][ T6009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  255.150980][ T6009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  255.160841][ T6009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  255.308280][ T6009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  255.442733][ T6009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  255.616171][ T6009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  255.792841][ T6009] batman_adv: batadv0: Interface activated: batadv_slave_1
[  255.836552][ T5110] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  255.849258][ T5110] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  255.857675][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  255.863994][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  255.896570][ T4214] Bluetooth: hci6: command 0x1001 tx timeout
[  255.902706][ T4179] Bluetooth: hci6: sending frame failed (-49)
[  255.910451][ T5110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  255.928320][ T6194] xt_TCPMSS: Only works on TCP SYN packets
[  255.979024][ T6009] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  256.005102][ T6009] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  256.019512][ T6009] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  256.048569][ T6009] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  256.390594][ T3078] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  256.398880][ T3078] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  256.587463][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  256.618501][ T4391] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  256.685605][ T4391] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  256.718333][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  257.152991][ T6208] device bridge1 entered promiscuous mode
[  258.326575][   T21] Bluetooth: hci6: command 0x1009 tx timeout
[  259.834986][    C1] net_ratelimit: 4587 callbacks suppressed
[  259.835006][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  259.835173][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  259.841233][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  259.854348][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  259.865484][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  259.878119][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  259.889752][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  259.902446][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  259.913971][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  259.927059][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  260.277734][ T6250] loop6: detected capacity change from 0 to 1024
[  260.671925][ T6250] EXT4-fs (loop6): mounted filesystem without journal. Opts: bsdgroups,,errors=continue. Quota mode: none.
[  261.271296][ T6268] lo speed is unknown, defaulting to 1000
[  263.323509][ T6288] loop1: detected capacity change from 0 to 64
[  263.699325][   T26] kauditd_printk_skb: 20 callbacks suppressed
[  263.699339][   T26] audit: type=1326 audit(1750321872.573:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6297 comm="syz.2.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff511c3b929 code=0x7ffc0000
[  263.824303][ T6300] loop5: detected capacity change from 0 to 1024
[  263.830792][   T26] audit: type=1326 audit(1750321872.573:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6297 comm="syz.2.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff511c3b929 code=0x7ffc0000
[  263.877666][ T5108] Bluetooth: hci1: Frame reassembly failed (-84)
[  263.926093][   T26] audit: type=1326 audit(1750321872.603:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6297 comm="syz.2.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff511c3b929 code=0x7ffc0000
[  264.012822][   T26] audit: type=1326 audit(1750321872.603:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6297 comm="syz.2.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff511c3b929 code=0x7ffc0000
[  264.108235][   T26] audit: type=1326 audit(1750321872.603:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6297 comm="syz.2.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff511c3b929 code=0x7ffc0000
[  264.198958][   T26] audit: type=1326 audit(1750321872.603:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6297 comm="syz.2.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff511c3b929 code=0x7ffc0000
[  264.275743][   T26] audit: type=1326 audit(1750321872.603:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6297 comm="syz.2.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff511c3b929 code=0x7ffc0000
[  264.370860][   T26] audit: type=1326 audit(1750321872.603:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6297 comm="syz.2.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff511c3b929 code=0x7ffc0000
[  264.484775][   T26] audit: type=1326 audit(1750321872.603:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6297 comm="syz.2.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7ff511c3b929 code=0x7ffc0000
[  264.740531][   T26] audit: type=1326 audit(1750321872.603:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6297 comm="syz.2.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff511c3b929 code=0x7ffc0000
[  264.845125][    C1] net_ratelimit: 9318 callbacks suppressed
[  264.845147][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  264.863605][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  264.876062][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  264.888654][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  264.901043][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  264.913438][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  264.925917][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  264.938485][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  264.951223][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  264.963622][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  265.994120][ T2302] Bluetooth: hci1: command 0x1003 tx timeout
[  266.004330][ T4179] Bluetooth: hci1: sending frame failed (-49)
[  266.813911][ T6300] EXT4-fs: failed to create workqueue
[  266.886786][ T6300] EXT4-fs (loop5): mount failed
[  267.228970][ T6337] device geneve2 entered promiscuous mode
[  267.455047][ T6337] netlink: 4 bytes leftover after parsing attributes in process `syz.6.632'.
[  267.494437][ T6344] syz.1.635 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  268.132742][ T4248] Bluetooth: hci1: command 0x1001 tx timeout
[  268.142740][ T4179] Bluetooth: hci1: sending frame failed (-49)
[  270.132408][    C0] net_ratelimit: 5375 callbacks suppressed
[  270.132432][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  270.151630][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  270.163973][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  270.176604][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  270.189610][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  270.202030][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  270.214435][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  270.227423][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  270.239728][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  270.252848][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  270.642077][ T4173] Bluetooth: hci1: command 0x1009 tx timeout
[  271.633298][ T6383] loop3: detected capacity change from 0 to 256
[  273.150354][  T155] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.162611][    C1] net_ratelimit: 3576 callbacks suppressed
[  275.162631][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  275.181093][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  275.182469][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  275.193739][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  275.205694][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  275.217705][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  275.229672][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  275.241620][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  275.254460][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  275.265675][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  279.759577][ T6455] loop1: detected capacity change from 0 to 256
[  281.027172][    C0] net_ratelimit: 4168 callbacks suppressed
[  281.027192][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  281.046109][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  281.056031][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  281.058545][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  281.070855][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  281.083023][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  281.094868][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  281.107494][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  281.118789][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  281.130762][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  281.592899][ T6461] lo speed is unknown, defaulting to 1000
[  282.715773][ T6461] chnl_net:caif_netlink_parms(): no params data found
[  283.599269][  T155] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  283.653009][ T6486] netlink: 'syz.2.678': attribute type 2 has an invalid length.
[  283.660825][ T6486] netlink: 'syz.2.678': attribute type 2 has an invalid length.
[  283.675102][ T6488] tipc: Can't bind to reserved service type 0
[  283.715898][ T4217] Bluetooth: hci1: command 0x0409 tx timeout
[  283.766084][ T6461] bridge0: port 1(bridge_slave_0) entered blocking state
[  283.864936][ T6461] bridge0: port 1(bridge_slave_0) entered disabled state
[  283.915038][ T6461] device bridge_slave_0 entered promiscuous mode
[  283.934324][ T6461] bridge0: port 2(bridge_slave_1) entered blocking state
[  283.994979][ T6461] bridge0: port 2(bridge_slave_1) entered disabled state
[  284.668868][ T6461] device bridge_slave_1 entered promiscuous mode
[  284.990967][ T6461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  285.029716][ T6461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  285.188099][ T6461] team0: Port device team_slave_0 added
[  285.220833][ T6461] team0: Port device team_slave_1 added
[  286.347513][    C0] net_ratelimit: 6440 callbacks suppressed
[  286.347534][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  286.366421][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  286.378820][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  286.391404][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  286.404577][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  286.416929][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  286.418446][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  286.429373][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  286.441592][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  286.454005][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  286.489962][ T4218] Bluetooth: hci1: command 0x041b tx timeout
[  287.341910][ T6461] batman_adv: batadv0: Adding interface: batadv_slave_0
[  287.357009][ T6461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  287.535248][ T6514] binder: 6512:6514 ioctl 4018620d 0 returned -22
[  287.644772][ T6461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  287.738440][ T6511] netlink: 4 bytes leftover after parsing attributes in process `syz.3.683'.
[  287.747903][ T6511] device vcan0 entered promiscuous mode
[  287.842684][ T6461] batman_adv: batadv0: Adding interface: batadv_slave_1
[  287.925140][ T6461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  288.178947][ T6461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  288.547335][ T6427] Bluetooth: hci1: command 0x040f tx timeout
[  288.901057][ T6461] device hsr_slave_0 entered promiscuous mode
[  289.009716][ T6461] device hsr_slave_1 entered promiscuous mode
[  289.097084][ T6461] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  289.145947][ T6461] Cannot create hsr debugfs directory
[  292.941340][    C1] net_ratelimit: 2364 callbacks suppressed
[  292.941402][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  292.960313][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  292.973016][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  292.985696][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  292.998551][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  293.011138][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  293.023732][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  293.036339][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  293.049180][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  293.061882][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  293.107942][ T6427] Bluetooth: hci1: command 0x0419 tx timeout
[  293.128439][  T155] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  293.131648][ T6532] loop2: detected capacity change from 0 to 256
[  293.779245][ T6538] kvm [6537]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x0
[  293.846789][ T6538] kvm [6537]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x4000
[  293.912008][ T6538] kvm [6537]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x80
[  294.142761][ T6538] kvm [6537]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4080
[  294.202000][ T6538] kvm [6537]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x0
[  295.968428][ T6563] mmap: syz.6.695 (6563) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  297.465594][ T6532] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  297.575826][   T26] kauditd_printk_skb: 20 callbacks suppressed
[  297.575842][   T26] audit: type=1326 audit(1750321906.433:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6566 comm="syz.1.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f428ed95b19 code=0x7ffc0000
[  297.652344][   T26] audit: type=1326 audit(1750321906.433:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6566 comm="syz.1.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f428ed95b19 code=0x7ffc0000
[  297.763896][   T26] audit: type=1326 audit(1750321906.433:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6566 comm="syz.1.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f428ed95b19 code=0x7ffc0000
[  297.882937][   T26] audit: type=1326 audit(1750321906.433:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6566 comm="syz.1.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f428ed95b19 code=0x7ffc0000
[  297.944960][    C1] net_ratelimit: 4997 callbacks suppressed
[  297.944983][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  297.963349][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  297.975836][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  297.985840][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  297.988283][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  298.000959][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  298.012233][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  298.024160][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  298.036259][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  298.048288][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  298.155399][   T26] audit: type=1326 audit(1750321906.433:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6566 comm="syz.1.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f428ed95b19 code=0x7ffc0000
[  298.222718][   T26] audit: type=1326 audit(1750321906.433:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6566 comm="syz.1.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f428ed95b19 code=0x7ffc0000
[  298.291901][   T26] audit: type=1326 audit(1750321906.433:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6566 comm="syz.1.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f428ed95b19 code=0x7ffc0000
[  298.372936][   T26] audit: type=1326 audit(1750321906.433:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6566 comm="syz.1.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f428ed95b19 code=0x7ffc0000
[  298.429543][   T26] audit: type=1326 audit(1750321906.433:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6566 comm="syz.1.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f428ed95b19 code=0x7ffc0000
[  298.554902][   T26] audit: type=1326 audit(1750321906.433:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6566 comm="syz.1.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f428ed95b19 code=0x7ffc0000
[  298.976739][  T155] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.448597][ T6582] 
[  300.450960][ T6582] ======================================================
[  300.457963][ T6582] WARNING: possible circular locking dependency detected
[  300.464978][ T6582] 5.15.185-syzkaller #0 Not tainted
[  300.470162][ T6582] ------------------------------------------------------
[  300.477165][ T6582] syz.6.702/6582 is trying to acquire lock:
[  300.483041][ T6582] ffff88807ba94c28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xc1/0x1b0
[  300.494103][ T6582] 
[  300.494103][ T6582] but task is already holding lock:
[  300.501476][ T6582] ffffffff8d4b2748 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x19e/0x560
[  300.511143][ T6582] 
[  300.511143][ T6582] which lock already depends on the new lock.
[  300.511143][ T6582] 
[  300.521545][ T6582] 
[  300.521545][ T6582] the existing dependency chain (in reverse order) is:
[  300.530725][ T6582] 
[  300.530725][ T6582] -> #4 (rfkill_global_mutex){+.+.}-{3:3}:
[  300.538711][ T6582]        __mutex_lock_common+0x1eb/0x2390
[  300.544429][ T6582]        mutex_lock_nested+0x17/0x20
[  300.549712][ T6582]        rfkill_register+0x33/0x8a0
[  300.554916][ T6582]        hci_register_dev+0x452/0x970
[  300.560281][ T6582]        vhci_create_device+0x32c/0x5c0
[  300.565816][ T6582]        vhci_write+0x391/0x450
[  300.570658][ T6582]        vfs_write+0x712/0xd00
[  300.575413][ T6582]        ksys_write+0x14d/0x250
[  300.580253][ T6582]        do_syscall_64+0x4c/0xa0
[  300.585181][ T6582]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  300.591608][ T6582] 
[  300.591608][ T6582] -> #3 (&data->open_mutex){+.+.}-{3:3}:
[  300.599609][ T6582]        __mutex_lock_common+0x1eb/0x2390
[  300.605335][ T6582]        mutex_lock_nested+0x17/0x20
[  300.610625][ T6582]        vhci_send_frame+0x88/0x100
[  300.615831][ T6582]        hci_send_frame+0x1a9/0x2e0
[  300.621038][ T6582]        hci_tx_work+0x9f9/0x1710
[  300.626079][ T6582]        process_one_work+0x863/0x1000
[  300.631550][ T6582]        worker_thread+0xaa8/0x12a0
[  300.636741][ T6582]        kthread+0x436/0x520
[  300.641321][ T6582]        ret_from_fork+0x1f/0x30
[  300.646260][ T6582] 
[  300.646260][ T6582] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}:
[  300.655470][ T6582]        __flush_work+0xdd/0x1b0
[  300.660439][ T6582]        hci_dev_do_close+0x1e7/0x1030
[  300.665907][ T6582]        hci_error_reset+0x101/0x2c0
[  300.671279][ T6582]        process_one_work+0x863/0x1000
[  300.676752][ T6582]        worker_thread+0xaa8/0x12a0
[  300.681953][ T6582]        kthread+0x436/0x520
[  300.686548][ T6582]        ret_from_fork+0x1f/0x30
[  300.691569][ T6582] 
[  300.691569][ T6582] -> #1 (&hdev->req_lock){+.+.}-{3:3}:
[  300.699243][ T6582]        __mutex_lock_common+0x1eb/0x2390
[  300.705055][ T6582]        mutex_lock_nested+0x17/0x20
[  300.710338][ T6582]        bg_scan_update+0x44/0x3b0
[  300.715456][ T6582]        process_one_work+0x863/0x1000
[  300.720911][ T6582]        worker_thread+0xaa8/0x12a0
[  300.726099][ T6582]        kthread+0x436/0x520
[  300.730680][ T6582]        ret_from_fork+0x1f/0x30
[  300.735614][ T6582] 
[  300.735614][ T6582] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}:
[  300.745428][ T6582]        __lock_acquire+0x2c33/0x7c60
[  300.750797][ T6582]        lock_acquire+0x197/0x3f0
[  300.755823][ T6582]        __flush_work+0xdd/0x1b0
[  300.760752][ T6582]        __cancel_work_timer+0x3ac/0x520
[  300.766377][ T6582]        hci_request_cancel_all+0xcc/0x300
[  300.772182][ T6582]        hci_dev_do_close+0x4e/0x1030
[  300.777547][ T6582]        hci_rfkill_set_block+0x10a/0x190
[  300.783258][ T6582]        rfkill_set_block+0x1c6/0x420
[  300.788622][ T6582]        rfkill_fop_write+0x458/0x560
[  300.793986][ T6582]        do_iter_write+0x3e4/0x7b0
[  300.799089][ T6582]        do_writev+0x254/0x410
[  300.803848][ T6582]        do_syscall_64+0x4c/0xa0
[  300.808776][ T6582]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  300.815186][ T6582] 
[  300.815186][ T6582] other info that might help us debug this:
[  300.815186][ T6582] 
[  300.825403][ T6582] Chain exists of:
[  300.825403][ T6582]   (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex
[  300.825403][ T6582] 
[  300.841211][ T6582]  Possible unsafe locking scenario:
[  300.841211][ T6582] 
[  300.848652][ T6582]        CPU0                    CPU1
[  300.854007][ T6582]        ----                    ----
[  300.859363][ T6582]   lock(rfkill_global_mutex);
[  300.864122][ T6582]                                lock(&data->open_mutex);
[  300.871220][ T6582]                                lock(rfkill_global_mutex);
[  300.878493][ T6582]   lock((work_completion)(&hdev->bg_scan_update));
[  300.885070][ T6582] 
[  300.885070][ T6582]  *** DEADLOCK ***
[  300.885070][ T6582] 
[  300.893287][ T6582] 1 lock held by syz.6.702/6582:
[  300.898212][ T6582]  #0: ffffffff8d4b2748 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x19e/0x560
[  300.908294][ T6582] 
[  300.908294][ T6582] stack backtrace:
[  300.914182][ T6582] CPU: 0 PID: 6582 Comm: syz.6.702 Not tainted 5.15.185-syzkaller #0
[  300.922236][ T6582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  300.932296][ T6582] Call Trace:
[  300.935587][ T6582]  <TASK>
[  300.938523][ T6582]  dump_stack_lvl+0x168/0x230
[  300.943240][ T6582]  ? load_image+0x3b0/0x3b0
[  300.947757][ T6582]  ? show_regs_print_info+0x20/0x20
[  300.952971][ T6582]  ? print_circular_bug+0x12b/0x1a0
[  300.958278][ T6582]  check_noncircular+0x274/0x310
[  300.963229][ T6582]  ? add_chain_block+0x940/0x940
[  300.968173][ T6582]  ? lockdep_lock+0xdc/0x1e0
[  300.972766][ T6582]  ? __lock_acquire+0x12d9/0x7c60
[  300.977790][ T6582]  ? lockdep_lock+0x1e0/0x1e0
[  300.982461][ T6582]  ? mark_lock+0x94/0x320
[  300.986783][ T6582]  __lock_acquire+0x2c33/0x7c60
[  300.991642][ T6582]  ? rcu_lock_release+0x5/0x20
[  300.996406][ T6582]  ? verify_lock_unused+0x140/0x140
[  301.001607][ T6582]  lock_acquire+0x197/0x3f0
[  301.006106][ T6582]  ? __flush_work+0xc1/0x1b0
[  301.010689][ T6582]  ? __lock_acquire+0x7c60/0x7c60
[  301.015712][ T6582]  ? read_lock_is_recursive+0x10/0x10
[  301.021079][ T6582]  ? start_flush_work+0x776/0x820
[  301.026099][ T6582]  __flush_work+0xdd/0x1b0
[  301.030523][ T6582]  ? __flush_work+0xc1/0x1b0
[  301.035104][ T6582]  ? flush_work+0x20/0x20
[  301.039431][ T6582]  ? try_to_grab_pending+0xf3/0x7e0
[  301.044633][ T6582]  ? lockdep_hardirqs_off+0x70/0x100
[  301.049913][ T6582]  ? mark_lock+0x94/0x320
[  301.054235][ T6582]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  301.060211][ T6582]  ? lock_chain_count+0x20/0x20
[  301.065057][ T6582]  ? mark_lock+0x94/0x320
[  301.069383][ T6582]  ? __cancel_work_timer+0x331/0x520
[  301.074861][ T6582]  __cancel_work_timer+0x3ac/0x520
[  301.080051][ T6582]  ? cancel_work_sync+0x20/0x20
[  301.085017][ T6582]  ? __cancel_work+0x1f4/0x2d0
[  301.089789][ T6582]  ? lockdep_hardirqs_on+0x94/0x140
[  301.094998][ T6582]  ? __cancel_work+0x26f/0x2d0
[  301.099763][ T6582]  ? cancel_work+0x20/0x20
[  301.104179][ T6582]  ? lock_chain_count+0x20/0x20
[  301.109130][ T6582]  hci_request_cancel_all+0xcc/0x300
[  301.114432][ T6582]  hci_dev_do_close+0x4e/0x1030
[  301.119288][ T6582]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  301.125229][ T6582]  ? _raw_spin_unlock+0x40/0x40
[  301.130090][ T6582]  hci_rfkill_set_block+0x10a/0x190
[  301.135285][ T6582]  ? rcu_lock_release+0x20/0x20
[  301.140129][ T6582]  rfkill_set_block+0x1c6/0x420
[  301.145071][ T6582]  rfkill_fop_write+0x458/0x560
[  301.149913][ T6582]  ? _copy_from_user+0x111/0x170
[  301.154846][ T6582]  ? rfkill_fop_read+0x4b0/0x4b0
[  301.159984][ T6582]  ? common_file_perm+0x171/0x1c0
[  301.165002][ T6582]  ? fsnotify_perm+0x5d/0x560
[  301.169674][ T6582]  ? security_file_permission+0x75/0xa0
[  301.175215][ T6582]  do_iter_write+0x3e4/0x7b0
[  301.179805][ T6582]  do_writev+0x254/0x410
[  301.184046][ T6582]  ? do_readv+0x3e0/0x3e0
[  301.188381][ T6582]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  301.194360][ T6582]  ? lock_chain_count+0x20/0x20
[  301.199211][ T6582]  ? vtime_user_exit+0x2dc/0x400
[  301.204144][ T6582]  ? lockdep_hardirqs_on+0x94/0x140
[  301.209337][ T6582]  do_syscall_64+0x4c/0xa0
[  301.213753][ T6582]  ? clear_bhb_loop+0x30/0x80
[  301.218420][ T6582]  ? clear_bhb_loop+0x30/0x80
[  301.223089][ T6582]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  301.228985][ T6582] RIP: 0033:0x7fdeebbf2929
[  301.233397][ T6582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  301.253090][ T6582] RSP: 002b:00007fdee9a18038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  301.261497][ T6582] RAX: ffffffffffffffda RBX: 00007fdeebe1a160 RCX: 00007fdeebbf2929
[  301.269552][ T6582] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000005
[  301.277516][ T6582] RBP: 00007fdeebc74b39 R08: 0000000000000000 R09: 0000000000000000
[  301.285480][ T6582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  301.293530][ T6582] R13: 0000000000000000 R14: 00007fdeebe1a160 R15: 00007ffc5017fa58
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  301.301504][ T6582]  </TASK>
[  301.711156][ T4214] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  302.389984][ T4169] bridge0: port 3(syz_tun) entered disabled state
[  302.485320][ T4169] device syz_tun left promiscuous mode
[  302.490875][ T4169] bridge0: port 3(syz_tun) entered disabled state
[  302.955191][    C1] net_ratelimit: 10026 callbacks suppressed
[  302.955208][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  302.955626][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  302.961378][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  302.997160][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  302.997362][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  303.009439][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  303.021367][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  303.034435][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  303.045480][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  303.057434][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  307.132837][  T155] device hsr_slave_0 left promiscuous mode
[  307.150332][  T155] device hsr_slave_1 left promiscuous mode
[  307.191660][  T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  307.208182][  T155] batman_adv: batadv0: Removing interface: batadv_slave_0
[  307.239693][  T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  307.247210][  T155] batman_adv: batadv0: Removing interface: batadv_slave_1
[  307.281635][  T155] device bridge_slave_1 left promiscuous mode
[  307.301489][  T155] bridge0: port 2(bridge_slave_1) entered disabled state
[  307.337281][  T155] device bridge_slave_0 left promiscuous mode
[  307.343514][  T155] bridge0: port 1(bridge_slave_0) entered disabled state
[  307.386272][  T155] device veth1_macvtap left promiscuous mode
[  307.392345][  T155] device veth0_macvtap left promiscuous mode
[  307.428011][  T155] device veth1_vlan left promiscuous mode
[  307.433856][  T155] device veth0_vlan left promiscuous mode
[  307.964890][    C1] net_ratelimit: 22442 callbacks suppressed
[  307.964910][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  307.965031][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  307.971143][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  307.983293][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  307.997671][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  308.010716][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  308.021741][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  308.037117][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  308.045593][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:78:b3:5f:3d:aa, vlan:0)
[  308.057618][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  308.346030][  T155] team0 (unregistering): Port device team_slave_1 removed
[  308.378219][  T155] team0 (unregistering): Port device team_slave_0 removed
[  308.412839][  T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  308.453857][  T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  308.600925][  T155] bond0 (unregistering): Released all slaves