last executing test programs:

34.839542303s ago: executing program 3 (id=2119):
syz_mount_image$hfs(&(0x7f00000001c0), &(0x7f0000000140)='./bus\x00', 0x14000, &(0x7f0000000000)=ANY=[], 0x4, 0x293, &(0x7f0000000900)="$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")
syz_mount_image$tmpfs(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
chdir(&(0x7f0000000040)='./bus\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0)
pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="12", 0x1}], 0x1, 0x0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000280))
r4 = open(&(0x7f0000000040)='./bus\x00', 0x60142, 0x0)
fallocate(r4, 0x20, 0x0, 0x2000)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r5=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000001400010000000000fdfff7ff0a004300", @ANYRES32=r5, @ANYBLOB="14000100ff010000000a000000000000000000011400060002000000690000000000000000001000080008001904"], 0x48}}, 0x0)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r8, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2)
fcntl$setstatus(r8, 0x4, 0x800)
connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c)
close(r8)
r9 = socket$inet6_udplite(0xa, 0x2, 0x88)
r10 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(r10, 0x541b, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x1f, 0x6, 0x568, 0x218, 0x218, 0x330, 0xf8, 0xf8, 0xd0, 0x568, 0x568, 0x568, 0x568, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @empty, [], [], 'ip6_vti0\x00', 'ip6erspan0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@private1, @local, [], [], 'pim6reg1\x00', 'ip6_vti0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'ip6erspan0\x00', 'pimreg1\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @local}, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private2, @ipv6=@loopback}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [], [], 'wlan1\x00', 'macvtap0\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@remote, @ipv6=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c8)
truncate(&(0x7f0000000040)='./file1\x00', 0x1bfc)

34.5158915s ago: executing program 3 (id=2121):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1971, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8da9], [0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800]}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1)
ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xee)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80]}, 0x45c)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20000c2, &(0x7f0000000000)={[], [{@permit_directio}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@fsname}, {@obj_role={'obj_role', 0x3d, '$'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}]}, 0x6, 0x4ea, &(0x7f00000006c0)="$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")
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/fscreate\x00')
preadv(r2, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000000), &(0x7f0000000180)='%pi6   \x00'}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600016, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x64, 0x6, 0x5d8, 0x0, 0x300, 0x448, 0x0, 0x0, 0x5c0, 0x5c0, 0x5c0, 0x5c0, 0x5c0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@unspec=@connmark={{0x30}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@private}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x638)
write$eventfd(0xffffffffffffffff, &(0x7f0000000000)=0xfffffffffffffffb, 0x8)
dup(0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)

34.297144068s ago: executing program 3 (id=2122):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
dup3(0xffffffffffffffff, r0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x2)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000100), 0x4)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80)
ioctl$SNDRV_TIMER_IOCTL_INFO(r3, 0x80e85411, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, 0x0, 0x4000880)
sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001340), 0xc, &(0x7f00000013c0)={0x0}}, 0x20004000)
r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0)
writev(r5, &(0x7f0000001a00)=[{0x0}, {0x0}, {&(0x7f0000001980)}], 0x3)
r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0)
ioctl$RTC_EPOCH_SET(r6, 0x4008700e, 0x24a9)
bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001b40), 0x4)
sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000001c80)={&(0x7f0000001b80), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4c004)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000001cc0), 0x0, 0x0)

34.168724688s ago: executing program 3 (id=2124):
openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sysvipc/shm\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_init_net_socket$ax25(0x3, 0x2, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'team0\x00', &(0x7f00000001c0)=@ethtool_pauseparam={0x13, 0x4, 0x7, 0x80000000}})
socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x24, 0x0, &(0x7f00000002c0))
r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
renameat2(r7, &(0x7f0000000300)='./file1\x00', r5, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, 0x0, 0x0)

33.486829053s ago: executing program 3 (id=2125):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280), 0x27)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000540)=@mgmt_frame=@beacon={{{}, {}, @device_b}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x2, [{0xb}, {0x16, 0x1}]}, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0xffffffffffffffff}}, @void}, 0x41)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r6, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000500))
r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x640401, 0x0)
r8 = dup(r7)
ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000000)={0x0, r8})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000bc0)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0)
syz_80211_inject_frame(&(0x7f00000005c0)=@device_b, &(0x7f0000000c00)=@data_frame={@msdu=@type01={{0x0, 0x2, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {}, @device_b, @random="e3b017c45a9a", @broadcast, {0x1, 0x8}, "", @value={0x0, 0x0, 0x2, 0x0, 0x84}}, @a_msdu=[{@broadcast, @device_a, 0xb3, "a55f95cc9a6d5ae9081bc017a3fba6a4e994428088adb796a48cf730ea6fdd2392855b8c001632f5c66c4ad717f56ab3d6b98928c8894c658122f5a8e942758ab5aad8eb3ed01d468633a039e2ae413de7a193bef9c3b6e4e09aa4e8ebdd363cc719cf93f094a2bc9b8202278fb6d7dd56609db2cf7b0c323fcac2bb09b574f40e660f5671d973e68eb65a5b27830041cbd1cf9b3f22cc599ac43c2867a21d546e8e783d4d5f39605d5941dbf4331878a34b7b"}, {@device_b, @device_a, 0x1c, "7e14cbde8e69c700baff4c919e41030a5029c384de41abdcffc9a2a7"}, {@broadcast, @device_a, 0xa8, "39344b0496b3793a14a89aace4b7de2fed1fbff8315f1ec19f2e99e243cd892309bad109b12bac6f348960a73f9afdfe1ee9969dc95457c448ebfa3b4759e223f474c0603872db6674b097faa07570fc9a77e5d684215079955923db14fd6b6051048d38997160793d264f488d82d63acdad783983c401e6bba00c976663cd66a55ce1e74e10b0c0f295286c3daa62ed21b84df6daaf48e3c604e0402e3d77ba50575b44c7a89754"}, {@device_b, @broadcast, 0x1c, "f6027297e05fffd56ebc92f80d281b05395be37bb25932ace82a1e33"}, {@device_b, @device_b, 0xae, "2db3f0f0062d81c9c1ec1f77a34ac2032f336dea3c4069c58bc173fe26d4e2c63b0a45de1a980854c7024ab707c693829d9a44bfd3ff7222f1bc1385b74f5f34bf656b338078ffb411c5dd599f50a406040ef4300d21ecd966b7517728915cd264fd174df648bfddcaa9e6594026a8537b8f19cd02131c463048fae82fc1b0d3b2d999997033db237a40600e139fc9bc6b9f86ae19cdc674fb854fe4105e078b2bc1c6fbee6b3582a8d9cf6fa305"}, {@device_b, @device_b, 0x50, "6ca704c14dd582667385e3f5b599553415b019f541077a18e83865b8d2db682190e05660323d279b2e733a315c6e0d5718d22a685b84948d8849414af9723cd1f966ec227fe2161ceb3be0ee2512bfc6"}, {@device_b, @device_b, 0x70, "12938a95ef195efffdb43846373a56a5ebcef0ed64d01f9c6817d39bd9a45ed26e4910a1d6a1bdc9bc11b1c65e386df68429fb1a2e26f6223388e455538e810118ff3070a9dfa2d166346cd2dd9d0440646b4d72e9151ff1de5b9df204ce52efe312e22c84b186dd85a833ebdf68ab5e"}, {@device_b, @device_a, 0x51, "e154c7222f129c8f682f831e5b13cde575ca8e9cb55508a8bf83819b9b8da56e11fe2692bd257d7df2a1d4154fcb80cdf81d602f170d58d04b45e13987ba4ddc77f99a23a3c193408cb400e7e4424a42c6"}]}, 0x3ea)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r10], 0x40}}, 0x0)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r11, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r11, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000000000063aa87ff00000000b5090000000000007b8af0ff00000000bfa100000000000407010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0xff7, &(0x7f0000001e00)=""/4087}, 0x90)

31.767319612s ago: executing program 3 (id=2130):
getresgid(0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r7, 0x400455c8, 0x0)
bind$bt_hci(r6, &(0x7f0000000600)={0x1f, 0x0, 0x1}, 0x6)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x4008804)
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r8, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10)

12.998753559s ago: executing program 2 (id=2171):
r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000400)='.pending_reads\x00', 0x111280, 0x20)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r2=>0x0})
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x7, 0xfe, 0xffffffff, 0x0, r0, 0x0, '\x00', r2, 0xffffffffffffffff, 0x1, 0x1, 0x5, 0xa}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00'}, 0x10)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50483}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @private=0xa010102}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = dup(r7)
connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c)
setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x4, 0x0, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r10, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r10, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
syz_emit_ethernet(0x4a, &(0x7f0000000840)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0)

11.304682636s ago: executing program 4 (id=2175):
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d)
socket$unix(0x1, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r9 = dup(r8)
write$UHID_INPUT(r9, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006)

8.271870302s ago: executing program 4 (id=2177):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
write(r1, &(0x7f0000001240)="ac", 0x1)
r2 = openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000100)={0x9})
bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(cast6-generic)\x00'}, 0x58)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r3, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001100)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x0, 0x0, [0xfffffffffffffffd, 0x0, 0x7fffffffffffffff, 0x400], [0x100, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd74a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0xb062, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x1, 0x1, 0x5]})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001100)={0x0, 0x0, {0x0, @usage, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000640)={r6, 0x9, 0x0, [0xfffffffffffffffd, 0x0, 0x7fffffffffffffff, 0x403], [0x100, 0x7fd, 0x0, 0x0, 0x7, 0x1000000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x40000, 0x0, 0x0, 0x0, 0x0, 0xb062, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x5]})
ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f00000003c0)={0x0, 0x5, {0xff, @struct={0x1ff}, r5, 0x10000, 0x100000000, 0x0, 0x101, 0xde, 0x412, @struct={0x1ff}, 0xfd, 0x0, [0x5, 0x2, 0x0, 0x2, 0x7, 0x1]}, {0x3, @struct={0xfffff800, 0x6e8}, 0x0, 0x9, 0x9, 0x38d8, 0x81, 0xfffffffffffffff7, 0xc0, @struct={0x8001, 0x5}, 0xffff, 0x8, [0x9, 0x1f3c, 0x5, 0x2, 0x1, 0x2]}, {0x7fffffff, @struct={0x6, 0x80}, r6, 0xffff, 0x0, 0x79400000, 0x1, 0xfffffffffffff558, 0x8, @usage=0x10000000000, 0x9, 0x9, [0x7, 0xfff, 0x4, 0xffff, 0x9, 0x8]}, {0x4, 0x3}})
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000002a00)="0b1c6840a936a0e377c392a7a3b38e1d", 0x10)
r7 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r7, &(0x7f0000000380)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="e70f68372dd0a4", 0x7}, {&(0x7f0000000040)='A', 0x1}], 0x2}], 0x1, 0x0)
syz_usb_connect(0x0, 0x41, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000067c6fb106d04210847570102030109022f00010000007f21040000000e01a8"], 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc)

8.190454949s ago: executing program 2 (id=2179):
r0 = socket$igmp(0x2, 0x3, 0x2)
connect$nfc_raw(0xffffffffffffffff, &(0x7f0000000080)={0x1e}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg0\x00'})
setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@private, @multicast2, 0x0, "c62003becb61deea640c2d3a753ec77430fe01a7253698dbb3e5cb39046813c6"}, 0x3c)
r1 = socket(0x1e, 0x1, 0x0)
connect$nfc_raw(r1, &(0x7f0000000080)={0x1e}, 0x10)
setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, 0x0, 0x0)
getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000000)={@rand_addr, @loopback, <r2=>0x0}, &(0x7f0000000080)=0xc)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10)
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000000200)={&(0x7f0000000400)=""/110, 0x6e})
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x3c7, @vifc_lcl_ifindex=r2, @multicast2}, 0x10)
r4 = socket$igmp(0x2, 0x3, 0x2)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000140)=@assoc_value, 0x8)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000600)={0x0, 0x0, 0x20}, 0x0)
r5 = socket$igmp(0x2, 0x3, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x11, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000340)={'syztnl1\x00', <r6=>0x0, 0x2f, 0x6, 0x4d, 0x20, 0x0, @private0, @private1, 0x700, 0x8, 0x9, 0x1b}})
setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f00000003c0)={0x0, 0x1, 0xfa, 0xc639, @vifc_lcl_ifindex=r6, @loopback}, 0x10)
setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000000240), 0x4)
setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@private=0xa010100, @multicast1=0xe0000300}, 0x10)
setsockopt$MRT_DONE(r4, 0x0, 0xc9, 0x0, 0x0)

7.095273757s ago: executing program 0 (id=2182):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000fc01000000000000000000000000000000000000000000000000000000000001000200000000000002000020"], 0xfc}}, 0x0)
syz_emit_ethernet(0x3a, &(0x7f0000001700)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local}, {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}, 0x0)
ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000640)={{'\x00', 0x3}, {0xd}, 0x40, 0x0, 0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f0000000500)="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", 0x122, 0x0, &(0x7f0000000740)={0x2, 0xde, {0x1, 0xc, 0xa8, "6be3ac607e0289143b243cc8e917702d4b77d91750f9cda7d4f449764502b475f731e4c8f8f9d7a4e73d618bb98aa4bb04e27b449765ac56c899dc46977f516ec6f75a6f4999052e61863f197079904220501da648fcee0282a0ccef60881581392f394fc860c43954762a527f5c0598acd0a0f3cc77031331405afb76d4c88b97db0ec1037963da641ad028f77e97f115a65ca3af62849467a896cff3fbdae4554d0c9517e3adf5", 0x29, "313c7bad47e98b8619c23344c8980f04efe4f3b7a313bb1dfb68d740122c0c8fd2bc42d5c96e638e1b"}, 0x63, "115f9902ca1874cc30707b5329020a7abfb6ede55248b2c107dc9bcc7b6748f089a3525b3f399aba2d7fa537c2a737697eb1b449029f1b34fd6299415715e07cd99ef2fa14d6d20ea4a1faf35565fb977f9fc3a81a8c337800276f27c9fda0e7d938a2"}, 0x14d})
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=ANY=[@ANYBLOB="800000000802110000010802110000005050505050500000000000000000000064000100000602020202020201003c040000006f3c"], 0x3d)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmmsg$inet6(r2, &(0x7f0000000bc0), 0x0, 0x20004451)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$WPAN_WANTLQI(r5, 0x0, 0x3, 0x0, &(0x7f0000000700))
sendmsg$IPSET_CMD_LIST(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x7, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000000}, 0x20000001)
sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@updpolicy={0xfc, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1, 0x0, 0x2, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @private}, 0x0, 0x4, 0x0, 0x7}]}]}, 0xfc}}, 0x0)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), r2)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000900)={@loopback, @remote, <r7=>0x0}, &(0x7f0000000940)=0xc)
getpeername$packet(r2, &(0x7f0000000980)={0x11, 0x0, <r8=>0x0}, &(0x7f00000009c0)=0x14)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', <r11=>0x0})
sendmsg$nl_route(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_newaddrlabel={0x38, 0x48, 0x3, 0x0, 0x0, {0xa, 0x0, 0x80, 0x0, r11}, [@IFAL_ADDRESS={0x14, 0x1, @empty}, @IFAL_LABEL={0x8}]}, 0x38}}, 0x0)
getpeername$packet(r2, &(0x7f0000000a00)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000a40)=0x14)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000b80)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a80)={0xa4, r6, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x3}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x48000}, 0x20048044)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000006a000769000200000000000000000005"], 0x18}}, 0x0)
sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r3, 0x41e, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x6, @link='syz0\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000)

6.325577949s ago: executing program 2 (id=2183):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fspick(0xffffffffffffffff, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCVHANGUP(r3, 0x5437, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x30, 0x0, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x30}}, 0x0)
ioctl$TIOCVHANGUP(r4, 0x5437, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='mm_page_alloc\x00'}, 0x10)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
close_range(r6, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d1, &(0x7f0000000680)={[{@jqfmt_vfsv0}, {@jqfmt_vfsv0}, {@data_writeback}, {@usrjquota}, {@test_dummy_encryption}, {@nomblk_io_submit}, {@data_err_abort}]}, 0xff, 0x4ab, &(0x7f0000000080)="$eJzs3DtsHEUfAPD/nu34+/KyCeGREMAQEBEPO3ECSYHEQ0KiAIQERSgPx4lCLjGKjYQjixgUhQYJIiFaBKJBUFNQUSGgQqKhgB5FipCbhFSH9m7vOJ99j1wuPj9+P2m9M3t7NzO7O7szO94NYMMaSf8kEVsj4o+IGIqIXP0KI+XZtYW5iX8W5iaSKBZf+ztJvxZXF+YmKqsm2XxLOdKfznIXknh2mXSnZ8+dyhcKk2ez+NjM6bfHpmfPPXHydP7E5InJM+NHjhw6eODwU+NPdqWct6V53f3e1J5dL75x6eWJo5fe/PnbpCbTteWo2wIdGoj5mm1S7+EupLCabKsJJ/1NV+3GxqVLBiNKFXWgVP+Hou/C9upnQ/HCBz3NHHBLFYvF4njjj+eLwDqWRK9zAPRG5UJ/deGzibQPvLgfvP5dea7cAUrLfS2byp2e/mpHdaCuf9tNcxFxdP765+kUS+5DAAB03w9p++fxcrtjcfsvF3fWrLc9GxsazsZSdkTE7RGxMyLuiCite1dE3H2D6Y/UxZe2f3KXOypYm9L239PZ2FZlytKtrDLcl8W2lco/kBw/WZjcn22TfTEwmMYPLPvrSZQGgeK3jxulP1LT/kunNP1KWzDLx+X+wcXfOZafyd90wTNX3o/Y3b9c+bMBvGwMa1dE7O4wjZOPfr1n8ZK+aqh1+ZtoPs7UluIXEY+U9/981JW/Imk+Pjn2vyhM7h+rHBVL/fLrxVcbpX9T5e+CdP9vXvb4r5Z/OKkdr51e8hObWqVx8c8PG/ZpRiKeiQ6O/03J64sSfzc/M3O9GLEpeWnJ8rM1N7gr8dL8QLn8+/YuX/93xH9b4p6ISA/ieyPivoi4P9t3D0TEgxGxt0n5f3r+obealL+n+z++KZ+h2tr/lf1QPhCqR0SrQN+pH79vlHx7579DpdC+bEk75792M9jhVgMAAIA1JRcRWyPJjVbDudzoaPl/+HfG5lxhanrmseNT75w5Vn5GYDgGcpU7XUNZPLL7n8PleKn3PV6aR5zP7pcezO4bf9r3/1J8dGKqcKzXhYcNbkuD+p/6q6/XuQNuuS6MowFrVLP6/+XhFcwIsOI6v/5rOcBa16IWe2EDrGOu4rBxLVf/z/cgH8DKa3z9n9Q0gHWuWsk/aWPlmse96h/eBNYeF3nYuFrX/1du1fuvgN5p/yn+1RJIkkVL4quI5t9Kep/nDgIfrY5sNA5ErtFHgzf6goieBPKrIxutApWKOnvuVH/bb7WYLZ7PFwq/f3czqff2vAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANAt/wYAAP//gN/guA==")
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)

5.372771196s ago: executing program 0 (id=2185):
r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x20, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, 0x39, 0x9, 0x0, 0x0, {0x4}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x05G'}]}]}, 0x24}}, 0x0)
r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0)
read$FUSE(r5, &(0x7f0000000040)={0x2020}, 0x2084)
syz_emit_ethernet(0x4e, &(0x7f0000000000)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @local, {[@noop, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@loopback=0x7f00002f}]}, @ssrr={0x89, 0x3}]}}}}}}}, 0x0)
socket$inet(0x2, 0x3, 0x2)
ftruncate(0xffffffffffffffff, 0x0)
writev(r5, &(0x7f0000002100)=[{&(0x7f0000002080)='T01\n', 0x4}, {&(0x7f0000002140)="4bcf5415c0805385038e12", 0xb}], 0x2)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[<r6=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, r6})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00'})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x810)
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="3a0b5c2c3a2c626673002c00000000faffffffd6cd74592900262c2d2c657569643c2c657569643c67068037cccd927e304bef261f574db453e8c4f4d6904a3051a08930fcd6fd1abffc0730f68bd0207bdbee514007c6e2f019828e29419d407054ca315ae4ad27a30fbc7df789a458319f6ce19b8a43b0cf78126d6e8e5fee", @ANYRESDEC, @ANYRESOCT], 0x1, 0xb9, &(0x7f0000001400)="$eJzs0b9JBEEcBeC3y+KfyAIM7MAe7MAWFsM1M1IMdDuxALENQbAAAzswML1kjmNvWY69i+6Sg++D4c0MzIPh9714v0yfpM9ZRnVKSVMeHp+69ucr6dr7zL3lZMstR6VOXlZ5m+SqT6okfzfnScpFNc73//nud702X3+Wwc7616F95vSAXwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvdW5/phOzbSthlgGAAD//0ohIO8=")

5.315752541s ago: executing program 2 (id=2186):
r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000b, 0x59033, 0xffffffffffffffff, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x90)
r2 = userfaultfd(0x801)
syz_emit_ethernet(0x86, &(0x7f0000000500)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "9d42a08597d3b2f44ac89b1b52cc6728d6697d4cebc8f2f062c6f91f224aaacc", "99bd3410936eefeb3ea898dafab974aa", {"96deedc95f5d10a12027128db2e9bdf6", "f838a300b01b0e19ecdf00b20600"}}}}}}}, 0x0)
syz_emit_ethernet(0x32, &(0x7f0000000300)={@random="e90c630faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x4d, 0x0, @opaque="cbe66f1099d3a415"}}}}}, 0x0)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000800)={{0x1, 0x1, 0x18, <r3=>r1}, './file0\x00'})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000a00), 0xffffffffffffffff)
sendmsg$FOU_CMD_GET(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)={0x14, r5, 0xb05}, 0x14}}, 0x0)
sendmsg$FOU_CMD_GET(r3, &(0x7f0000000e40)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x40805)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ed", 0x1)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000582000/0x2000)=nil, 0x800000})
syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x80c406, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYBLOB="5fc5e0cc89c3068519a1a4d35631da3ac1da1498ccbed34b45633d4cecc0ce311f7adfa5ee00b0ede9ce477b0717355c8145c254b208e7b26c8704f414550ccfcd9f78ef990092397d833e4961136c5ad068266b4af5edbd182a21f3", @ANYRES8=r2, @ANYRESHEX=r0, @ANYRES16=r2, @ANYBLOB="9aeb6f06371f5fb35b60a2223945e01f9ad55893e7cf6240ebd66f70cd61fa830ec2d5fc1f30acefa3dcdc80a84b6eb7dd2e8933a270789dadb47190453ba09c775af75d812f9a238468d81f77b757f7d0ea07a8cce80c01f0d42adc9c1fca9b9ed73c9fc572c87e2cd9aec9bc038f1e6d20b4604d82520e0134d5b160f9977262db65f7363867b8bf1405d93d223ad7780751946b844eaf4082dd9ab3e64ca699d9c1103963894bdd8c88abde6036985bd456"], 0xff, 0x2c9, &(0x7f0000000500)="$eJzs3EFrE1sUwPGTpM2kfTTt6sF7PHgH3ehmqHGpQqO0IAaUtBF1IUzp1IbEpMxETUQwa1f9FC6KS3eC+AW6cuMHcFcEKQhdOZLJJM7EtJYQE03/Pyhz555703tzGTg3cGf/zs7D0qZrblo1iadU4iJNORRZkKJ0xIJrUhIScSUjTTm/+PjgxerdezeyudxyXnUlu3Yxo6rp/98+efbqzLvaX7dfpw1D9hbu73/OfNz7e++f/a9rW0VXi65WqjW1dL1arVnrZVs3im7JVL1Vti3X1mLFtZ1IfLNc3d5uqFXZmJvddmzXVavS0Lg0tFbVVDCqipqmqXOzrXJKTpHk0aEv719u9aku7ObzVrZvj1P1zU02x8larSd35oc1LeyOZ0QAAGCcjs7/4902nfw/7pejWebx+f/zoFX6zdDz/4R08/+S7ef/Naeh1gOrGM7/cazCUjT/XzpRr/ivGxAGFWuGbq5GQo6TnenfifwfAAAAAAAAAAAAAAAAAAAAAIA/waHnzXueN9+6xkXEC+4NEf+0f+e+T1dOiE+A8Pp7oT8jWOBj1h8TIHRwLyXyqVkv1Asx/9qOr1zPLS+qL3Tw76BeLyS68QvtuEbj0zIbxDN940k5d7Ydb8Wu3cwF8Uf/iRzs1AszstEz1ujbR5rD/ioAAAAAAJhYpnYtdCtT0t3fm6Ya0hv39+9+YUpEOr8P9Ozvp+TfqRFOBAAAAAAAHMltPC1Z5bLtjKaQGOH/GrggMlj3S54xlGEkRCRUYwRLFW6TXxUZ3pST8tMp64k+0BC7M9rRLtyH7MDdUydu7Hm9NelgsiOc6eWhfaAXE2nXTAfT6HkKAAAAAEyW7/uBcY8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDTaxQvaRv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDfxbcAAAD//zYHtAs=")
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'})
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0)
r7 = dup(r6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r7, 0x0)
r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_DAEMON(r7, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r8, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4dc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000804}, 0x20000840)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={<r9=>0xffffffffffffffff})
recvmsg$can_raw(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=""/178, 0xb2}], 0x1, &(0x7f0000000900)=""/72, 0x48}, 0x2040)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)

5.175123942s ago: executing program 2 (id=2187):
setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000480), 0x4)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000003600)={&(0x7f0000000080)=@id, 0x10, 0x0}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000002700)=""/22, 0x16}}], 0x1, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {0x8}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x5, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x50, r1, 0x42c, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xbaf3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3ff}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x4084005)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f00000004c0)=""/78, &(0x7f0000000400)=0x4e)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r4, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000740)={0x0, @can={0x1d, r4}, @l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}, 0x3}, @ethernet={0x1}, 0x0, 0x0, 0x0, 0x0, 0x107, &(0x7f0000000700)='pim6reg1\x00', 0x3, 0x1, 0x9})
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0xffffffff, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7, 0x40000}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0)
sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xf8, r1, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA={0xb8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6806}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x8800}, 0x10)
r8 = socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400210100000000000000000200"], 0x28}}, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x20, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r10}, [@IFA_ADDRESS={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x20}}, 0x0)

5.123168936s ago: executing program 1 (id=2188):
syz_open_dev$MSR(0x0, 0x0, 0x0)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000514ff4), 0xc)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000680)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
write(r5, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24)
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
syz_mount_image$minix(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x1c009, &(0x7f00000000c0)=ANY=[], 0x5d, 0x219, &(0x7f0000000200)="$eJzs3D1v00Acx/Gf40BIQTyKBzFVQkIsJNBWqrLRhY03gMRQtaGqcKE0LI2QoG+CjYGViZfAO2FlaAc2Jg6dfaGO4+KLQ5IKfz9SG8e+n//ntmf7GiUCUFmP4u+Bzrjnxph3i5KePpFUm2vXAEyZcY+/DIDqCRn6QEUdrYXx9f9rIH378Xbj0H2d87x/OFpLJgl2/nCYyjdPCjzL5A+C+PF2fTi/IOn8SLg+ev/yKcnfzdS/kFP6Y17/Xf2FTL5RcNzH+eT4790Zzl+UdEnSZUlXJF2VdE2Kd3tdbkOq/mam/q1k84FnNwAAAAAA+Cs7+2wNnvhO+rP5lk/LB7lr7ez5+XbUzd/qoZbkH3o1Hj3As67+Usnyg/xypk+F3AuuDZdvbbyKNkv2ASirlh7/xUYGkP/4V+6/s8IJx389zn8omQaqrbfff7EeRd29mS1I46bspbJ80eZg4Xth4892QT+TV0am/9MYnEztmkWfVOAaz+z3peI27wvaNLXXMx77mfnC68fJ3dsUStiLUnpNf9IdBtlxWh8aRF9Sf0hRZMLe7j84LrtDE/45UYTzODsBmKb2m53ddm+/f397Z32ru9V9ubLa6ayuLC912vFteXuiyTmA0+z4oj/vngAAAAAAAAAAAAAAgLJuSLo5fuzEj/cAAAAAcHqN/8agxthvJ5r3MQIAAAAAAAAAAAAA8L/7HQAA//+bqT3d")
mount(0x0, &(0x7f00000001c0)='.\x00', 0x0, 0x10f4c2a, 0x0)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000008000000850000001a000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udplite(0x2, 0x2, 0x88)
pselect6(0x40, &(0x7f0000004580), &(0x7f0000004e00)={0x3ff}, 0x0, 0x0, 0x0)

5.085030049s ago: executing program 4 (id=2189):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100), 0x48)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r3 = accept$alg(r2, 0x0, 0x0)
write$binfmt_script(r3, &(0x7f00000001c0), 0xfec8)
recvmmsg(0xffffffffffffffff, &(0x7f0000008380)=[{{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f00000011c0)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000001e40)={'virt_wifi0\x00'})
recvmmsg(r3, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000001440)=""/198, 0xc6}], 0xc6}}], 0x2, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000480)="b9ff03076844268cb89e14f086dd", 0x0, 0x0, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50)
recvmsg$can_j1939(r0, &(0x7f0000000740)={&(0x7f00000002c0)=@caif, 0x80, &(0x7f0000000640)=[{&(0x7f00000003c0)=""/148, 0x94}, {&(0x7f0000000080)=""/21, 0x15}, {&(0x7f00000004c0)=""/67, 0x43}, {&(0x7f0000000540)=""/187, 0xbb}, {&(0x7f0000000600)=""/44, 0x2c}], 0x5, &(0x7f00000006c0)=""/86, 0x56}, 0x2000)
socket$inet6_sctp(0xa, 0x0, 0x84)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020700001f0000000000000000000000020018"], 0xf8}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0x4}, 0x48)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time\x00', 0x26e1, 0x0)
close(r5)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000030000000000000000000000850000008700000085000000050000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="b9ff03076804268c989e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c0000003e0007010000000000000000017c0000040000001400018008007c00", @ANYRES32=0x0, @ANYBLOB="08e1000000000700"], 0x2c}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x6, 0x4, 0x2003, 0x2}, 0x48)

4.244874957s ago: executing program 0 (id=2190):
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d)
socket$igmp(0x2, 0x3, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r7 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r7, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x2c}}}, 0x1e)
connect$pptp(r7, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast2}}, 0x1e)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246)
close(r0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
socketpair(0x2, 0xa, 0x0, &(0x7f0000000040)={0x0, <r8=>0x0})
setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)

3.609323898s ago: executing program 1 (id=2191):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000f40)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r2, @ANYBLOB="0a000600ffffffffffff00001c00330008010000022d88da291c080211000001f80a3568101e0000"], 0x44}}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000ebff850000008200000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x0, 0x1c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
getsockname$netlink(0xffffffffffffffff, &(0x7f0000000000), 0x0)
sendto(r5, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r6)
sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x40, r7, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x18, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2000000}]}]}]}, 0x40}}, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x1b, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000646c6c2500000000002020207b1af8ff00000000bfa10000000000000701000089ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x94)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x28014044)
r10 = syz_genetlink_get_family_id$fou(&(0x7f00000004c0), 0xffffffffffffffff)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$FOU_CMD_DEL(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r10, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0)
recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/123, 0x7b}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000740)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000100)=""/16, 0x10}], 0x8, &(0x7f0000000600)=""/182, 0xb6}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400})

3.568907682s ago: executing program 2 (id=2192):
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x280008a, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x97, 0x2ad, &(0x7f0000000d40)="$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")
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2810000, &(0x7f0000000380)={[{@user_xattr}, {@noquota}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@jqfmt_vfsv1}, {@block_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@noquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@delalloc}, {@user_xattr}, {@quota}]}, 0x1, 0x562, &(0x7f0000001080)="$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")
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
fallocate(r0, 0x0, 0x0, 0x1000f4)
open(0x0, 0x4100, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b70300000000002085000000730000"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000440)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000001e40)=@v1={0x0, @aes128, 0x0, @desc1})
ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628)
unshare(0x8040480)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2)
shutdown(r5, 0x1)
connect$bt_sco(0xffffffffffffffff, &(0x7f0000000ac0)={0x1f, @none}, 0x8)
ppoll(&(0x7f00000000c0)=[{r5}], 0x1, 0x0, 0x0, 0x0)

3.555080473s ago: executing program 4 (id=2193):
r0 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file0\x00', 0x1ad3001, &(0x7f0000000500)=ANY=[], 0x7e, 0x150c, &(0x7f0000000500)="$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")
r4 = socket$caif_stream(0x25, 0x1, 0x0)
recvfrom(r4, 0x0, 0x0, 0x40000001, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0)
gettid()
move_pages(0x0, 0x0, 0x0, &(0x7f0000000280)=[0x9, 0x0, 0x8, 0xfffffffa, 0x0, 0x0, 0x0], 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4)
socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={0x0}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000))
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'bond0\x00', 0x100})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=@newlink={0x20, 0x10, 0x20}, 0x20}}, 0x0)

3.044301614s ago: executing program 1 (id=2194):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x1, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10)
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104307, &(0x7f0000000000)={0x800402000000001, 0x0})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
getitimer(0x3, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)=""/12, &(0x7f00000001c0)=0xc)
ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000680)={0x0, @nl=@unspec, @qipcrtr={0x2a, 0x0, 0x3fff}, @l2={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x1}, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2e8})
socket$netlink(0x10, 0x3, 0xa)
r1 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x0)
ftruncate(r2, 0xffff)
fcntl$addseals(0xffffffffffffffff, 0x409, 0x7)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180))
getxattr(0x0, &(0x7f0000000540)=@known='trusted.syz\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0x0, &(0x7f00000000c0), 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080))
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)

2.260963978s ago: executing program 0 (id=2195):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xc}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r0}, &(0x7f0000000440), &(0x7f0000000480)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000005c0)={0x40, 0x0, 0x3}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000c40)={0x40, 0x0, 0x3}, 0x10)
bind$tipc(r2, 0x0, 0x0)
sendmsg$tipc(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0)
close(r3)
setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x5f, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000014000780080008400000000008001240ffffffe80500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x5c}}, 0x0)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000080), 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0xf8, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x401}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1b}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xb5c7}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private0}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xc89}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffeffff}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x41}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x12, 0x2}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x6}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xa3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x57}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x2000c054}, 0x20000040)
sendmsg$can_bcm(r5, &(0x7f0000000600)={&(0x7f00000004c0), 0x4, &(0x7f00000005c0)={&(0x7f0000000540)={0x0, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "3d325dd0b648405f"}}, 0x48}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00'})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f3, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}}}})
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1040800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x2, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x24004011}, 0x40051)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000080)='ext4_request_inode\x00', r1}, 0x10)

2.112810969s ago: executing program 1 (id=2196):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fspick(0xffffffffffffffff, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCVHANGUP(r3, 0x5437, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x30, 0x0, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x30}}, 0x0)
ioctl$TIOCVHANGUP(r4, 0x5437, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='mm_page_alloc\x00'}, 0x10)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
close_range(r6, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d1, &(0x7f0000000680)={[{@jqfmt_vfsv0}, {@jqfmt_vfsv0}, {@data_writeback}, {@usrjquota}, {@test_dummy_encryption}, {@nomblk_io_submit}, {@data_err_abort}]}, 0xff, 0x4ab, &(0x7f0000000080)="$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")
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)

2.003416168s ago: executing program 0 (id=2197):
futex(&(0x7f0000000040), 0x8, 0x0, 0x0, 0x0, 0x35000000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
mmap(&(0x7f00000cb000/0x1000)=nil, 0x1000, 0x6, 0x100010, r0, 0x841ea000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, 0x0, 0x8, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
mmap(&(0x7f00006f2000/0x11000)=nil, 0x11000, 0x0, 0x10, r1, 0xffffe000)
socket(0x10, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f00000000c0), 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000700)={0x2})
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x46, &(0x7f00000001c0), 0xfffffffffffffc91)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r2 = open_tree(0xffffffffffffff9c, 0x0, 0x89900)
r3 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
sendmmsg$inet(r2, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000f00)=[{0x0}], 0x1, &(0x7f0000000380)=[@ip_retopts={{0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @multicast1}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @empty}}}], 0x50}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000600)}, {&(0x7f0000000680)}, {&(0x7f0000000780)="2b34664e167d05df0e85e5f872283d5cf6014ff2dff113cb52a11c3aa7c106203bdda1ba6fc6ef1787a85cdf15bfc134b2cf8fd41428f296d59fe86df2689ca2a9a153024275db8dd7d9277343c5f796547d63a6ff1164bd64d9a66f0b8b9447a17babacd680054392f19215446df2f43144fdc784cdf95836c3cbc54ae3cc5aaa7f4f3180ffdc6e586f86a5291fc9ef3e77e445", 0x94}, {0x0}, {&(0x7f0000000280)="742697b03d73b4", 0x7}], 0x5, &(0x7f0000000a40)=[@ip_ttl={{0x14, 0x0, 0x2, 0x20}}], 0x18}}], 0x2, 0x880)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)='!', 0xffdf}], 0x1)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}}, 0x0)

1.832750012s ago: executing program 4 (id=2198):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
getrandom(0x0, 0x0, 0x2)
syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x126}, &(0x7f0000000000)=<r0=>0x0, &(0x7f0000000100)=<r1=>0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
syz_io_uring_submit(r0, r1, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003880), 0x63}, 0x0, 0xe3d08660d3cd4684})
ftruncate(0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
pipe2$9p(0x0, 0x0)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000002300)={0x8000001c})
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x50)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080), 0x4)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r6, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c)
listen(r6, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x4)
writev(r7, &(0x7f0000000080)=[{0x0}], 0x1)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xcc}}, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f0000000000)=""/10, 0x21}, 0x20)
setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000540)=0x102, 0x4)
r8 = socket$packet(0x11, 0x2, 0x300)
r9 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000080)={0x1}, 0x4)
setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2000}, 0x4)

1.107160351s ago: executing program 1 (id=2199):
r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x20, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, 0x39, 0x9, 0x0, 0x0, {0x4}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x05G'}]}]}, 0x24}}, 0x0)
r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0)
read$FUSE(r5, &(0x7f0000000040)={0x2020}, 0x2084)
syz_emit_ethernet(0x4e, &(0x7f0000000000)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @local, {[@noop, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@loopback=0x7f00002f}]}, @ssrr={0x89, 0x3}]}}}}}}}, 0x0)
socket$inet(0x2, 0x3, 0x2)
ftruncate(0xffffffffffffffff, 0x0)
writev(r5, &(0x7f0000002100)=[{&(0x7f0000002080)='T01\n', 0x4}, {&(0x7f0000002140)="4bcf5415c0805385038e12", 0xb}], 0x2)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[<r6=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, r6})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00'})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x810)
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="3a0b5c2c3a2c626673002c00000000faffffffd6cd74592900262c2d2c657569643c2c657569643c67068037cccd927e304bef261f574db453e8c4f4d6904a3051a08930fcd6fd1abffc0730f68bd0207bdbee514007c6e2f019828e29419d407054ca315ae4ad27a30fbc7df789a458319f6ce19b8a43b0cf78126d6e8e5fee", @ANYRESDEC, @ANYRESOCT], 0x1, 0xb9, &(0x7f0000001400)="$eJzs0b9JBEEcBeC3y+KfyAIM7MAe7MAWFsM1M1IMdDuxALENQbAAAzswML1kjmNvWY69i+6Sg++D4c0MzIPh9714v0yfpM9ZRnVKSVMeHp+69ucr6dr7zL3lZMstR6VOXlZ5m+SqT6okfzfnScpFNc73//nud702X3+Wwc7616F95vSAXwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvdW5/phOzbSthlgGAAD//0ohIO8=")

203.165694ms ago: executing program 1 (id=2200):
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x84004, 0x0, 0x0, 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x4a0801, 0x20)
r1 = fanotify_init(0x200, 0x0)
fanotify_mark(r1, 0x400, 0x0, r0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="31030000efffffffffff04"], 0x1c}}, 0x0)
recvmmsg(r3, &(0x7f0000001640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(0x0, r3)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xc8, r5, 0x8, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x1, 0x39}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6de3c8511183b08a5284c76907c9215055ea09b3f48c7e8e"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f71143ef8b7d40e9566bfe41b91cd3b8893b7b1b47502488"}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_4ADDR={0x5}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4004041}, 0x4850)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
set_mempolicy(0x3, &(0x7f0000001a80)=0x3, 0x100)
write$binfmt_script(r8, &(0x7f0000000340), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00008e1000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000240)="f3460f0966ba4000edc443fd08cf00450f0f3491b4410f7e0c35000000000f001c6766440f5fd366ba4200ec66ba4100ed66460fc7b01e000000", 0x3a}], 0x1, 0x0, 0x0, 0x0)

39.510727ms ago: executing program 4 (id=2201):
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x408, 0xcd, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0xfffffffd, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000000), &(0x7f0000000200)=r3}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xb7, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x90}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x47}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x5, 0x2, 0x4}, 0x48)
close(0x3)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x8, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x2, 0x3}]}]}, {0x0, [0x61, 0x2e, 0x30, 0x4f, 0x30, 0x30]}}, &(0x7f00000003c0)=""/3, 0x34, 0x3, 0x0, 0x13904072}, 0x20)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socketpair(0xa, 0x3, 0x0, &(0x7f0000000400))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r4}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)

0s ago: executing program 0 (id=2202):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
write$tcp_mem(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x20, 0x1eed, 0x20, 0x4}, 0x48)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0x20000000000000e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', 0x0)
umount2(&(0x7f0000000380)='./file0\x00', 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xd}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa}, 0x80)
setrlimit(0x3, &(0x7f0000000100)={0x1, 0xd05})
ioctl$sock_bt_hci(r1, 0x400448ca, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

 63 endpoint 0x81 has an invalid bInterval 125, changing to 10
[  749.616323][T11582] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  749.644103][T11582] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  749.669411][ T5617] usb 4-1: config 1 interface 0 altsetting 63 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  749.696669][T11582] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  749.731493][ T5617] usb 4-1: config 1 interface 0 has no altsetting 0
[  749.889599][ T5617] usb 4-1: New USB device found, idVendor=046d, idProduct=c101, bcdDevice= 0.40
[  749.899732][ T5617] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  749.907967][ T5617] usb 4-1: Product: syz
[  749.912877][ T5617] usb 4-1: Manufacturer: syz
[  749.917834][ T5617] usb 4-1: SerialNumber: syz
[  750.939936][ T3717] device hsr_slave_0 left promiscuous mode
[  750.954598][ T3717] device hsr_slave_1 left promiscuous mode
[  750.971028][ T3717] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  750.979609][ T3717] batman_adv: batadv0: Removing interface: batadv_slave_0
[  750.998035][ T3717] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  751.010125][ T3717] batman_adv: batadv0: Removing interface: batadv_slave_1
[  751.026747][ T3717] device bridge_slave_1 left promiscuous mode
[  751.037786][ T3717] bridge0: port 2(bridge_slave_1) entered disabled state
[  751.052799][ T3717] device bridge_slave_0 left promiscuous mode
[  751.064175][ T3717] bridge0: port 1(bridge_slave_0) entered disabled state
[  751.093169][ T3717] device veth1_macvtap left promiscuous mode
[  751.112848][ T3717] device veth0_macvtap left promiscuous mode
[  751.118935][ T3717] device veth1_vlan left promiscuous mode
[  751.125228][ T3717] device veth0_vlan left promiscuous mode
[  751.360015][ T3717] team0 (unregistering): Port device team_slave_1 removed
[  751.376278][ T3717] team0 (unregistering): Port device team_slave_0 removed
[  751.392931][ T3717] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  751.409986][ T3717] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  751.441203][ T5617] usbhid 4-1:1.0: can't add hid device: -71
[  751.447353][ T5617] usbhid: probe of 4-1:1.0 failed with error -71
[  751.464647][ T5617] usb 4-1: USB disconnect, device number 34
[  751.479332][ T3311] Bluetooth: hci5: command 0x040f tx timeout
[  751.494795][ T3717] bond0 (unregistering): Released all slaves
[  751.575747][T11517] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  751.595191][T11517] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  751.605389][T11517] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  751.616350][T11517] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  751.794138][T11517] 8021q: adding VLAN 0 to HW filter on device bond0
[  751.811027][ T5617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  751.820160][ T5617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  751.831441][T11517] 8021q: adding VLAN 0 to HW filter on device team0
[  751.843962][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  751.857313][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  751.873537][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state
[  751.880674][ T5612] bridge0: port 1(bridge_slave_0) entered forwarding state
[  751.897196][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  751.905403][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  751.915928][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  751.924840][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state
[  751.931972][ T5612] bridge0: port 2(bridge_slave_1) entered forwarding state
[  751.958929][ T3311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  751.968752][ T3311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  751.977615][ T3311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  751.989430][ T3311] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  751.998553][ T3311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  752.007319][ T3311] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  752.022137][T11517] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  752.054899][T11517] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  752.068719][ T8563] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  752.076663][ T8563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  752.085173][ T8563] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  752.094173][ T8563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  752.103300][ T8563] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  752.112348][ T8563] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  752.207962][T11517] 8021q: adding VLAN 0 to HW filter on device batadv0
[  752.215947][ T3311] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  752.224550][ T3311] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  752.372023][ T3311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  752.381386][ T3311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  752.396632][T11517] device veth0_vlan entered promiscuous mode
[  752.404372][ T8563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  752.420799][ T8563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  752.434782][T11517] device veth1_vlan entered promiscuous mode
[  752.443614][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  752.452117][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  752.460255][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  752.485872][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  752.494129][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  752.503165][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  752.512758][T11517] device veth0_macvtap entered promiscuous mode
[  752.531070][T11517] device veth1_macvtap entered promiscuous mode
[  752.552239][T11517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  752.570749][T11517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  752.582579][T11517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  752.598501][T11517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  752.611296][T11517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  752.626677][T11517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  752.642169][T11517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  752.655388][T11517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  752.670945][T11517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  752.683211][T11517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  752.700143][T11517] batman_adv: batadv0: Interface activated: batadv_slave_0
[  752.710312][ T3311] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  752.719311][ T3311] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  752.728100][ T3311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  752.736996][ T3311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  752.747776][T11517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  752.761333][T11517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  752.773943][T11517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  752.791883][T11517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  752.802198][T11517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  752.820302][T11517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  752.830890][T11517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  752.847984][T11517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  752.860145][T11517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  752.876168][T11517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  752.892283][T11517] batman_adv: batadv0: Interface activated: batadv_slave_1
[  752.905843][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  752.922018][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  752.933697][T11517] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  752.942406][T11517] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  752.959232][T11517] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  752.969583][T11517] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  753.041576][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  753.067808][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  753.075621][ T3727] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  753.090365][ T3727] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  753.103779][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  753.125429][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  753.608009][ T3616] Bluetooth: hci5: command 0x0419 tx timeout
[  754.256732][ T3311] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  754.515522][ T3311] usb 3-1: Using ep0 maxpacket: 16
[  755.308084][T11655] overlayfs: unrecognized mount option "fowner<00000000000000000000" or missing value
[  756.861442][ T3311] usb 3-1: unable to get BOS descriptor or descriptor too short
[  756.934531][ T3311] usb 3-1: unable to read config index 0 descriptor/start: -71
[  756.964983][ T3311] usb 3-1: can't read configurations, error -71
[  757.056189][T11673] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  757.097530][T11674] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_vlan, syncid = 0, id = 0
[  758.101954][T11687] netlink: 'syz.4.1689': attribute type 13 has an invalid length.
[  758.273639][T11687] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1689'.
[  758.576724][T11698] tipc: Started in network mode
[  758.603893][T11698] tipc: Node identity aaaaaaaaaa3, cluster identity 4711
[  758.624751][T11698] tipc: Enabled bearer <eth:ipvlan0>, priority 0
[  758.654081][T11700] tipc: Enabled bearer <ib:gre0>, priority 0
[  758.997988][T11703] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1693'.
[  759.023422][T11703] tipc: Failed to obtain node identity
[  759.033356][T11703] tipc: Enabling of bearer <ib:ip6gre0> rejected, failed to enable media
[  759.421350][T11708] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1694'.
[  759.738905][ T5617] tipc: Node number set to 10136234
[  760.710191][T11722] hub 6-0:1.0: USB hub found
[  760.718587][T11722] hub 6-0:1.0: 1 port detected
[  761.434471][   T26] kauditd_printk_skb: 36 callbacks suppressed
[  761.484909][   T26] audit: type=1326 audit(1723711032.556:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11715 comm="syz.1.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ccf2769b9 code=0x7ffc0000
[  761.667983][   T26] audit: type=1326 audit(1723711032.556:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11715 comm="syz.1.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ccf2769b9 code=0x7ffc0000
[  761.724738][   T26] audit: type=1326 audit(1723711032.606:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11715 comm="syz.1.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f4ccf2769b9 code=0x7ffc0000
[  761.926554][   T26] audit: type=1326 audit(1723711032.606:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11715 comm="syz.1.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ccf2769b9 code=0x7ffc0000
[  761.949016][   T26] audit: type=1326 audit(1723711032.606:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11715 comm="syz.1.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ccf2769b9 code=0x7ffc0000
[  761.997771][   T26] audit: type=1326 audit(1723711032.606:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11715 comm="syz.1.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f4ccf2769b9 code=0x7ffc0000
[  762.082407][   T26] audit: type=1326 audit(1723711032.606:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11715 comm="syz.1.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ccf2769b9 code=0x7ffc0000
[  762.179584][   T26] audit: type=1326 audit(1723711032.606:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11715 comm="syz.1.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ccf2769b9 code=0x7ffc0000
[  762.241434][   T26] audit: type=1326 audit(1723711032.606:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11715 comm="syz.1.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ccf2769b9 code=0x7ffc0000
[  762.265389][   T26] audit: type=1326 audit(1723711032.606:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11715 comm="syz.1.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ccf2769b9 code=0x7ffc0000
[  763.551521][T11759] xt_nfacct: accounting object `syz1' does not exists
[  763.573245][T11760] hsr0: VLAN not yet supported
[  763.622167][T11761] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1709'.
[  763.649442][T11761] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1709'.
[  763.954763][T11766] loop4: detected capacity change from 0 to 8
[  764.007526][T11766] squashfs image failed sanity check
[  764.498525][T11777] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1711'.
[  765.160332][ T3311] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  765.467250][ T5610] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  765.790243][ T5610] usb 4-1: Using ep0 maxpacket: 32
[  765.910313][ T5610] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  765.939385][ T5610] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  765.967644][ T5610] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  766.050508][ T5610] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  766.069065][ T3616] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  766.100004][ T5610] hub 4-1:4.0: USB hub found
[  766.268385][ T3311] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  766.277458][ T3311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  766.298267][ T3311] usb 3-1: Product: syz
[  766.302459][ T3311] usb 3-1: Manufacturer: syz
[  766.307071][ T3311] usb 3-1: SerialNumber: syz
[  766.330497][ T3311] usb 3-1: config 0 descriptor??
[  766.338386][ T5610] hub 4-1:4.0: config failed, hub has too many ports! (err -19)
[  766.369294][ T3311] ch341 3-1:0.0: ch341-uart converter detected
[  766.457803][ T3616] usb 2-1: config 0 has an invalid interface number: 31 but max is 0
[  766.465908][ T3616] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  766.476031][ T3616] usb 2-1: config 0 has no interface number 0
[  766.482412][ T3616] usb 2-1: config 0 interface 31 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  766.492909][ T3616] usb 2-1: config 0 interface 31 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  766.505878][ T3616] usb 2-1: New USB device found, idVendor=04f2, idProduct=b071, bcdDevice=40.e6
[  766.515159][ T3616] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  766.525750][ T3616] usb 2-1: config 0 descriptor??
[  766.569052][ T3616] usb 2-1: Found UVC 0.00 device <unnamed> (04f2:b071)
[  766.576907][ T3616] usb 2-1: No valid video chain found.
[  766.688235][ T5610] usb 4-1: USB disconnect, device number 35
[  766.791675][ T8563] usb 2-1: USB disconnect, device number 19
[  766.954702][T11792] fuse: Unknown parameter ''
[  767.903096][ T3311] usb 3-1: failed to receive control message: -110
[  770.002113][ T3311] ch341-uart: probe of ttyUSB0 failed with error -110
[  770.073444][ T3311] usb 3-1: USB disconnect, device number 25
[  770.109842][ T3311] ch341 3-1:0.0: device disconnected
[  771.059619][T11812] loop4: detected capacity change from 0 to 256
[  771.481357][T11812] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  774.107706][ T9274] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  774.195240][ T5617] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  774.281633][ T9274] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  774.371119][ T9274] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  774.444670][ T5617] usb 2-1: Using ep0 maxpacket: 16
[  774.469581][ T9274] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  774.964496][T11875] cgroup: No subsys list or none specified
[  776.559283][ T5612] Bluetooth: hci0: command 0x0405 tx timeout
[  776.639167][ T5611] Bluetooth: hci1: command 0x0409 tx timeout
[  776.666970][T11869] chnl_net:caif_netlink_parms(): no params data found
[  776.908590][ T5617] usb 2-1: unable to get BOS descriptor or descriptor too short
[  776.980262][ T5617] usb 2-1: unable to read config index 0 descriptor/start: -71
[  776.992876][ T5617] usb 2-1: can't read configurations, error -71
[  777.052672][T11915] bond0: option miimon: invalid value (18446744071578845184)
[  777.080448][T11915] bond0: option miimon: allowed values 0 - 2147483647
[  777.123790][T11915] device bond0 entered promiscuous mode
[  777.132581][T11915] device bond_slave_0 entered promiscuous mode
[  777.148038][T11915] device bond_slave_1 entered promiscuous mode
[  777.233748][T11918] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  777.359069][T11869] bridge0: port 1(bridge_slave_0) entered blocking state
[  777.371709][T11869] bridge0: port 1(bridge_slave_0) entered disabled state
[  777.381036][T11869] device bridge_slave_0 entered promiscuous mode
[  777.602319][T11869] bridge0: port 2(bridge_slave_1) entered blocking state
[  777.610772][T11869] bridge0: port 2(bridge_slave_1) entered disabled state
[  777.622850][T11869] device bridge_slave_1 entered promiscuous mode
[  777.987644][T11907] device bond0 left promiscuous mode
[  777.993159][T11907] device bond_slave_0 left promiscuous mode
[  778.035856][ T8565] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  778.062283][T11907] device bond_slave_1 left promiscuous mode
[  778.150693][T11869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  778.163191][T11937] No such timeout policy "syz0"
[  778.173306][T11869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  778.425189][ T8565] usb 4-1: config 164 has an invalid descriptor of length 0, skipping remainder of the config
[  778.594743][ T3940] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  779.156354][ T5617] Bluetooth: hci1: command 0x041b tx timeout
[  779.225214][T11869] team0: Port device team_slave_0 added
[  779.286317][ T9274] device hsr_slave_0 left promiscuous mode
[  779.295769][ T9274] device hsr_slave_1 left promiscuous mode
[  779.314078][ T9274] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  779.332019][ T9274] batman_adv: batadv0: Removing interface: batadv_slave_0
[  779.361691][ T9274] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  779.370996][ T9274] batman_adv: batadv0: Removing interface: batadv_slave_1
[  779.383122][ T8565] usb 4-1: New USB device found, idVendor=048d, idProduct=9005, bcdDevice=40.3d
[  779.387100][ T9274] device bridge_slave_1 left promiscuous mode
[  779.392175][ T8565] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  779.392199][ T8565] usb 4-1: Product: syz
[  779.392212][ T8565] usb 4-1: Manufacturer: syz
[  779.392225][ T8565] usb 4-1: SerialNumber: syz
[  779.509114][T11962] hub 6-0:1.0: USB hub found
[  779.514682][T11962] hub 6-0:1.0: 1 port detected
[  780.133166][ T9274] bridge0: port 2(bridge_slave_1) entered disabled state
[  780.169861][ T9274] device bridge_slave_0 left promiscuous mode
[  780.176336][ T8565] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  780.196546][ T9274] bridge0: port 1(bridge_slave_0) entered disabled state
[  780.206198][ T8565] dvb_usb_af9035: probe of 4-1:164.0 failed with error -22
[  780.229226][ T8565] usb 4-1: USB disconnect, device number 36
[  780.231449][ T3940] usb 1-1: config 0 descriptor has 1 excess byte, ignoring
[  780.243192][ T3940] usb 1-1: config 0 has no interfaces?
[  780.266582][ T9274] device veth1_macvtap left promiscuous mode
[  780.272854][ T9274] device veth0_macvtap left promiscuous mode
[  780.279939][ T9274] device veth1_vlan left promiscuous mode
[  780.287883][ T9274] device veth0_vlan left promiscuous mode
[  780.400885][ T3940] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  780.410438][ T3940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  780.418857][ T3940] usb 1-1: Product: syz
[  780.423156][ T3940] usb 1-1: Manufacturer: syz
[  780.427775][ T3940] usb 1-1: SerialNumber: syz
[  780.434848][ T3940] usb 1-1: config 0 descriptor??
[  780.515523][ T9274] team0 (unregistering): Port device team_slave_1 removed
[  780.530591][ T5612] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  780.539885][ T9274] team0 (unregistering): Port device team_slave_0 removed
[  780.553957][ T9274] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  780.566824][ T9274] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  780.634534][ T9274] bond0 (unregistering): Released all slaves
[  780.697088][T11869] team0: Port device team_slave_1 added
[  780.769909][ T5612] usb 3-1: Using ep0 maxpacket: 32
[  780.813852][T11869] batman_adv: batadv0: Adding interface: batadv_slave_0
[  780.861888][T11869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  780.889709][ T5612] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  780.920574][ T5612] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  780.941043][ T5612] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  780.984711][ T5612] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  781.066834][T11869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  781.072650][ T5612] hub 3-1:4.0: USB hub found
[  781.119752][T11869] batman_adv: batadv0: Adding interface: batadv_slave_1
[  781.189196][ T3940] Bluetooth: hci1: command 0x040f tx timeout
[  781.223284][T11869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  781.278978][ T5612] hub 3-1:4.0: config failed, hub has too many ports! (err -19)
[  781.334751][T11869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  781.385871][T11979] tipc: Started in network mode
[  781.409865][T11979] tipc: Node identity aaaaaaaaaa3, cluster identity 4711
[  781.449983][T11979] tipc: Enabled bearer <eth:ipvlan0>, priority 0
[  781.540087][T11981] tipc: Enabled bearer <ib:gre0>, priority 0
[  781.609126][T11869] device hsr_slave_0 entered promiscuous mode
[  781.648307][ T3311] usb 3-1: USB disconnect, device number 26
[  781.689167][T11869] device hsr_slave_1 entered promiscuous mode
[  781.715304][T11995] overlayfs: missing 'lowerdir'
[  782.566360][ T5612] tipc: Node number set to 10136234
[  783.264970][ T5617] Bluetooth: hci1: command 0x0419 tx timeout
[  783.472071][T11869] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  783.551822][T11869] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  783.582759][T11869] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  783.625472][T11869] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  783.913782][T11869] 8021q: adding VLAN 0 to HW filter on device bond0
[  783.980087][T11869] 8021q: adding VLAN 0 to HW filter on device team0
[  784.028386][ T3311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  784.121438][ T5611] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  784.149324][ T3311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  784.809038][ T3940] Bluetooth: hci3: command 0x0406 tx timeout
[  784.915264][ T8565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  784.945553][ T8565] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  784.985608][ T8565] bridge0: port 1(bridge_slave_0) entered blocking state
[  784.992767][ T8565] bridge0: port 1(bridge_slave_0) entered forwarding state
[  785.121864][ T5611] usb 2-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=74.01
[  785.163984][ T5611] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  785.210770][ T5611] usb 2-1: config 0 descriptor??
[  785.238166][ T3940] kernel write not supported for file /364/projid_map (pid: 3940 comm: kworker/1:8)
[  785.276044][ T5611] ttusbir 2-1:0.0: cannot find expected altsetting
[  785.540456][ T8565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  785.587931][ T3576] Bluetooth: Wrong link type (-22)
[  785.743544][ T8565] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  785.776998][ T8565] bridge0: port 2(bridge_slave_1) entered blocking state
[  785.784140][ T8565] bridge0: port 2(bridge_slave_1) entered forwarding state
[  786.050109][T12070] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1775'.
[  786.071476][T12064] netlink: 'syz.2.1773': attribute type 4 has an invalid length.
[  786.079392][T12064] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1773'.
[  786.290759][ T5612] usb 2-1: USB disconnect, device number 22
[  786.838667][T11295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  786.857013][T11295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  786.896819][T11295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  786.910796][T11295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  786.945878][T11295] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  786.956767][T12076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1776'.
[  786.966690][T11295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  786.989698][T11295] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  787.009511][T11295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  787.018775][T11295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  787.043647][ T8565] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  787.096764][ T3311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  787.137151][ T3311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  787.172848][T11869] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  787.402724][T12088] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma?
[  788.965091][T12088] DRBG: could not allocate CTR cipher TFM handle: ctr(aes)
[  789.105921][T12101] xt_ecn: cannot match TCP bits for non-tcp packets
[  789.323874][T12103] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  789.645149][T12103] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  789.675146][T12103] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  789.760581][T12103] device bridge_slave_0 left promiscuous mode
[  789.789629][T12103] bridge0: port 1(bridge_slave_0) entered disabled state
[  789.810487][T12103] device bridge_slave_1 left promiscuous mode
[  789.830760][T12103] bridge0: port 2(bridge_slave_1) entered disabled state
[  789.950792][T12122] block nbd2: shutting down sockets
[  790.081614][ T8565] usb 1-1: USB disconnect, device number 29
[  790.140035][T12103] bond0: (slave bond_slave_0): Releasing backup interface
[  790.188971][T12103] bond0: (slave bond_slave_1): Releasing backup interface
[  790.292395][T12103] team0: Port device team_slave_0 removed
[  790.341656][T12103] team0: Port device team_slave_1 removed
[  790.349355][T12103] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  790.364065][T12103] batman_adv: batadv0: Removing interface: batadv_slave_0
[  790.380161][T12103] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  790.398056][T12103] batman_adv: batadv0: Removing interface: batadv_slave_1
[  790.425364][T12101] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1780'.
[  790.508301][T11869] 8021q: adding VLAN 0 to HW filter on device batadv0
[  790.564080][ T5611] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  790.580523][ T5611] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  791.560317][T12144] MTD: Couldn't look up 'memory.events': -15
[  793.376443][ T5617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  793.387605][ T5617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  793.477193][T11869] device veth0_vlan entered promiscuous mode
[  793.529635][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  793.546626][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  793.629075][T11869] device veth1_vlan entered promiscuous mode
[  793.640488][ T5617] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  793.679350][ T5617] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  793.713842][ T5617] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  794.452344][ T3940] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  794.559531][T11296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  794.591494][T11296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  794.629633][T11869] device veth0_macvtap entered promiscuous mode
[  794.672428][T11869] device veth1_macvtap entered promiscuous mode
[  794.758313][T11869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  794.826370][T11869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  794.851946][T11869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  795.794983][T11869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  795.817162][T11869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  795.842306][T11869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  795.857590][T11869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  795.868230][T11869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  795.896529][T11869] batman_adv: batadv0: Interface activated: batadv_slave_0
[  795.923737][T11869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  796.072282][T11869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  796.085567][T12222] cgroup: subsys name conflicts with all
[  796.091332][T11869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  796.112783][T11869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  796.123286][T11869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  796.150858][T11869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  796.180621][T12224] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1800'.
[  796.215350][T11869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  796.278971][T12227] netlink: 'syz.3.1799': attribute type 1 has an invalid length.
[  796.572505][T11869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  796.919638][T11869] batman_adv: batadv0: Interface activated: batadv_slave_1
[  796.934184][ T8563] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  796.953152][ T8563] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  796.961869][ T8563] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  796.983270][ T8563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  796.997821][ T8563] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  797.009145][ T8563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  797.028900][T12224] wlan0 speed is unknown, defaulting to 1000
[  797.032029][T11869] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  797.049877][T11869] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  797.059555][T11869] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  797.079136][T11869] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  797.128621][T12224] wlan0 speed is unknown, defaulting to 1000
[  797.198434][T12224] wlan0 speed is unknown, defaulting to 1000
[  797.602891][T12224] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  798.945571][T12224] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  799.073798][ T9277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  799.085585][ T9277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  799.239216][ T8565] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  799.783863][T12224] wlan0 speed is unknown, defaulting to 1000
[  799.828796][ T3657] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  799.840159][ T3657] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  799.853471][T12224] wlan0 speed is unknown, defaulting to 1000
[  799.855673][ T5611] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  799.891535][T12224] wlan0 speed is unknown, defaulting to 1000
[  799.898937][T12224] wlan0 speed is unknown, defaulting to 1000
[  799.955163][T12224] wlan0 speed is unknown, defaulting to 1000
[  799.974791][T12224] wlan0 speed is unknown, defaulting to 1000
[  800.297002][ T9274] device hsr_slave_0 left promiscuous mode
[  800.328007][T12258] loop4: detected capacity change from 0 to 1024
[  800.334955][ T9274] device hsr_slave_1 left promiscuous mode
[  800.355962][ T9274] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  800.416540][ T9274] batman_adv: batadv0: Removing interface: batadv_slave_0
[  800.457005][ T9274] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  800.509058][ T9274] batman_adv: batadv0: Removing interface: batadv_slave_1
[  800.546648][ T9274] device bridge_slave_0 left promiscuous mode
[  800.580921][ T9274] bridge0: port 1(bridge_slave_0) entered disabled state
[  800.634371][ T9274] device veth1_macvtap left promiscuous mode
[  800.677220][ T9274] device veth0_macvtap left promiscuous mode
[  800.706910][ T9274] device veth1_vlan left promiscuous mode
[  800.725913][ T9274] device veth0_vlan left promiscuous mode
[  801.420454][T12281] hub 6-0:1.0: USB hub found
[  801.428371][T12281] hub 6-0:1.0: 1 port detected
[  802.254495][T12280] cgroup2: Unexpected value for 'nsdelegate'
[  802.642494][ T9274] team0 (unregistering): Port device team_slave_1 removed
[  802.700187][ T9274] team0 (unregistering): Port device team_slave_0 removed
[  802.751610][ T9274] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  802.812925][ T9274] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  803.068072][ T9274] bond0 (unregistering): Released all slaves
[  803.228756][ T3657] hfsplus: b-tree write err: -5, ino 4
[  805.179601][T12331] loop4: detected capacity change from 0 to 64
[  805.985269][T12331] hfs: invalid gid -1
[  805.989279][T12331] hfs: unable to parse mount options
[  806.108269][T12337] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1825'.
[  806.969058][T12351] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1827'.
[  806.981922][T12350] loop4: detected capacity change from 0 to 8192
[  807.110921][T12350] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  807.131141][T12350] REISERFS (device loop4): using ordered data mode
[  807.140648][ T8563] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  807.177544][T12350] reiserfs: using flush barriers
[  807.275353][T12350] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  807.351282][T12350] REISERFS (device loop4): checking transaction log (loop4)
[  807.424001][ T8563] usb 1-1: Using ep0 maxpacket: 32
[  807.436020][T12350] REISERFS (device loop4): Using r5 hash to sort names
[  807.468618][T12350] REISERFS (device loop4): using 3.5.x disk format
[  807.557042][T12350] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  807.566772][ T8563] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  807.628661][ T8563] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  807.648999][ T8563] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  807.669210][ T8563] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  807.743607][ T8563] usb 1-1: config 0 descriptor??
[  807.804501][ T8563] hub 1-1:0.0: USB hub found
[  808.142854][ T1387] ieee802154 phy0 wpan0: encryption failed: -22
[  808.287286][ T8563] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19)
[  809.320978][ T8563] usbhid 1-1:0.0: can't add hid device: -71
[  809.327151][ T8563] usbhid: probe of 1-1:0.0 failed with error -71
[  809.452869][ T8563] usb 1-1: USB disconnect, device number 30
[  810.614037][T12377] syz.2.1834 uses old SIOCAX25GETINFO
[  810.646176][T12377] netlink: 328 bytes leftover after parsing attributes in process `syz.2.1834'.
[  810.715604][T12379] bridge0: port 1(bridge_slave_0) entered disabled state
[  810.731807][T12379] bridge0: port 2(bridge_slave_1) entered disabled state
[  810.782329][T12388] program syz.1.1837 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  810.801238][T12377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1834'.
[  810.819668][T12377] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1834'.
[  810.851342][T12388] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  811.895454][T12408] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1843'.
[  811.978944][T12404] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1843'.
[  812.024344][   T26] kauditd_printk_skb: 26 callbacks suppressed
[  812.024358][   T26] audit: type=1326 audit(1723711083.243:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12398 comm="syz.1.1842" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4ccf2769b9 code=0x0
[  812.440296][ T3657] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  812.472573][T12419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  812.486768][ T3657] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  812.593345][T12422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  812.745045][T12428] xt_hashlimit: overflow, try lower: 1125899906842624/8
[  813.637591][T12444] input: syz1 as /devices/virtual/input/input36
[  813.816315][T12444] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1852'.
[  814.206991][ T3658] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  814.368208][T12462] loop4: detected capacity change from 0 to 128
[  814.456966][ T3658] usb 3-1: Using ep0 maxpacket: 16
[  814.483568][T12462] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  814.498203][T12462] ext4 filesystem being mounted at /9/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[  814.856622][ T3658] usb 3-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=a3.85
[  815.920797][ T3658] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  815.964150][ T3658] usb 3-1: config 0 descriptor??
[  816.021559][ T3658] usb 3-1: interface 1 not found
[  816.112252][T12480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1863'.
[  816.170377][T12480] batman_adv: batadv1: Adding interface: netdevsim0
[  816.182077][T12480] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  816.217514][T12483] syz.4.1862 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  816.247362][ T3658] usb 3-1: USB disconnect, device number 27
[  816.293036][T12480] batman_adv: batadv1: Interface activated: netdevsim0
[  816.883399][T12492] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1865'.
[  817.411905][T12514] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1873'.
[  817.428588][T12514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  817.676978][T12519] loop4: detected capacity change from 0 to 512
[  817.809031][T12519] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,grpid,auto_da_alloc,,errors=continue. Quota mode: writeback.
[  817.824066][T12519] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038 (0x7fffffff)
[  817.974462][ T5610] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  818.085315][ T5609] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  818.929612][ T5610] usb 2-1: Using ep0 maxpacket: 32
[  818.934818][ T5609] usb 3-1: Using ep0 maxpacket: 32
[  819.054059][ T5609] usb 3-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91
[  819.063383][ T5610] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32
[  819.086739][ T5609] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  819.106661][ T5609] usb 3-1: config 0 descriptor??
[  819.155848][ T5609] gspca_main: sunplus-2.14.0 probing 0458:7006
[  819.208753][T12542] loop4: detected capacity change from 0 to 8192
[  819.253719][ T5610] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5
[  819.270516][ T5610] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  819.286337][T12542] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  819.295720][ T5610] usb 2-1: Product: syz
[  819.300029][T12542] REISERFS warning (device loop4):  reiserfs_fill_super: Filesystem cannot be mounted because it is bigger than the device
[  819.313714][ T5610] usb 2-1: Manufacturer: syz
[  819.318321][ T5610] usb 2-1: SerialNumber: syz
[  819.319542][T12542] REISERFS warning (device loop4):  reiserfs_fill_super: You may need to run fsck or increase size of your LVM partition
[  819.344579][ T5610] usb 2-1: config 0 descriptor??
[  819.350973][T12542] REISERFS warning (device loop4):  reiserfs_fill_super: Or may be you forgot to reboot after fdisk when it told you to
[  819.369028][T12523] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  819.601140][T12523] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1877'.
[  819.680065][ T3311] usb 2-1: USB disconnect, device number 23
[  819.693585][ T5609] gspca_sunplus: reg_w_riv err -110
[  819.699038][ T5609] sunplus: probe of 3-1:0.0 failed with error -110
[  819.883611][ T5609] usb 3-1: USB disconnect, device number 28
[  820.088004][ T3576] Bluetooth: hci3: SCO packet for unknown connection handle 346
[  820.260583][T12563] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1886'.
[  821.200314][    C1] vxcan0: j1939_xtp_rx_dpo: no connection found
[  821.206624][    C1] vxcan0: j1939_xtp_rx_dpo: no connection found
[  821.212933][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  821.219407][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  821.225942][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  821.232438][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  821.238978][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  821.245474][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  821.252011][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  821.258513][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  821.265056][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  821.271535][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  821.278073][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  821.284573][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  821.291089][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  821.297592][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  821.304192][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  821.310677][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  821.317222][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  821.323716][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  821.330231][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  821.336727][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  821.343280][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  821.349756][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  821.356356][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  821.362891][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  821.369451][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  821.375960][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  821.382506][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  821.388982][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  821.395516][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  821.401992][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  821.408524][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  821.415016][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  821.421529][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  821.428026][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  821.434571][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  821.441046][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  821.447578][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  821.454072][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  821.460588][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  821.467091][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  821.473624][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  821.480098][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  821.486634][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  821.493138][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  821.499654][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  821.506159][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  821.512701][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  821.519181][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  821.525728][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  821.532257][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  821.538804][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  821.545332][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  821.551919][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  821.558426][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  821.564996][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  821.571478][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  821.578062][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  821.584572][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  821.591097][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  821.597601][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  821.604234][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  821.610803][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  821.623230][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  821.629750][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  821.636325][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  821.642832][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  821.649381][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  821.655886][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  821.662548][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  821.669036][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  821.675605][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  821.682116][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  821.688765][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  821.695264][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  821.701796][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  821.708296][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  821.714862][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  821.721337][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  821.727901][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  821.734395][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  821.740931][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  821.747427][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  821.753973][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  821.760449][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  821.767006][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  821.773502][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  821.780042][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  821.786673][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  821.793292][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  821.799773][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  821.806322][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  821.812821][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  821.819377][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  821.825881][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  821.832440][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  821.838918][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  821.845514][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  821.852056][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  821.858656][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  821.866598][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  821.874585][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  821.882478][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  821.890428][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  821.898321][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  821.906294][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  821.914209][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  821.922171][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  821.930060][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  821.938040][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  821.945931][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  821.953879][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  821.961747][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  821.969688][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  821.977571][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  821.985515][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  821.993432][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  822.001361][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  822.009265][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  822.017229][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  822.025129][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  822.033110][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  822.040990][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  822.048982][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  822.056872][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  822.064822][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  822.072712][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  822.082391][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  822.090305][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  822.098273][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  822.106163][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  822.114141][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  822.122031][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  822.129971][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  822.137863][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  822.145802][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  822.153714][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  822.161651][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  822.169544][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  822.177486][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  822.185373][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  822.193317][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  822.201183][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  822.209135][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  822.217026][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  822.224963][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  822.232847][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  822.240776][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  822.248669][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  822.256612][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  822.264497][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  822.272437][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  822.280302][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  822.288249][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  822.296137][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  822.304093][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  822.311978][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  822.319899][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  822.327795][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  822.335743][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  822.343628][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  822.351591][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  822.359487][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  822.367441][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  822.375326][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  822.383270][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  822.391136][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  822.399082][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  822.406968][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  822.414923][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  822.422840][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  822.430800][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  822.438696][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  822.446660][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  822.454550][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  822.462500][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  822.470372][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  822.478317][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  822.486209][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  822.494157][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  822.502048][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  822.509973][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  822.517859][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  822.525813][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  822.533707][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  822.541704][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  822.549571][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  822.557511][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  822.565398][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  822.573350][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  822.581226][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  822.592705][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  822.600611][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  822.608600][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  822.616501][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  822.624457][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  822.632393][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  822.640506][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  822.648529][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  822.656505][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  822.664400][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  822.672354][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  822.680225][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  822.688170][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  822.696056][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  822.704003][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  822.711886][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  822.719804][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  822.727692][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  822.735635][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  822.743522][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  822.751468][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  822.759372][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  822.767333][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  822.775219][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  822.783159][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  822.791024][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  822.798966][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  822.806854][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  822.814833][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  822.822730][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  822.830652][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  822.838544][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  822.846492][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  822.854391][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  822.862340][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  822.870207][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  822.878148][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  822.886038][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  822.893983][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  822.901870][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  822.909787][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  822.917671][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  822.925710][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  822.933600][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  822.941574][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  822.949438][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  822.957378][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  822.965266][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  822.973201][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  822.981065][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  822.989006][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  822.996890][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  823.004829][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  823.012710][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  823.020636][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  823.028519][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  823.036453][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  823.044338][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  823.052278][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  823.060138][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  823.068070][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  823.075950][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  823.083888][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  823.091768][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  823.332842][T12589] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1890'.
[  823.382998][T12592] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1891'.
[  823.956342][T12612] hub 6-0:1.0: USB hub found
[  823.962066][T12612] hub 6-0:1.0: 1 port detected
[  825.860236][T12623] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1898'.
[  825.925755][T12625] netlink: 'syz.4.1898': attribute type 6 has an invalid length.
[  828.335141][T12651] loop4: detected capacity change from 0 to 512
[  829.412486][T12668] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1911'.
[  829.505713][T12651] EXT4-fs (loop4): 1 orphan inode deleted
[  829.512954][T12651] EXT4-fs (loop4): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,grpquota,noblock_validity,init_itable,stripe=0x000000000000002e,resgid=0x0000000000000000,sysvgroups,norecovery,usrquota,,errors=continue. Quota mode: writeback.
[  829.536763][    C0] vkms_vblank_simulate: vblank timer overrun
[  829.550892][T12651] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038 (0x7fffffff)
[  829.826758][T12673] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1911'.
[  830.083001][T12676] binder_alloc: 12649: binder_alloc_buf, no vma
[  830.478362][ T3940] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  830.737890][ T3940] usb 4-1: Using ep0 maxpacket: 16
[  830.858571][ T3940] usb 4-1: config 0 interface 0 altsetting 44 endpoint 0x83 has invalid wMaxPacketSize 0
[  830.997411][ T3940] usb 4-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  831.126467][ T3940] usb 4-1: config 0 interface 0 has no altsetting 0
[  831.186878][T12681] wlan0 speed is unknown, defaulting to 1000
[  831.209725][T12686] binder: BINDER_SET_CONTEXT_MGR already set
[  831.215746][T12686] binder: 12685:12686 ioctl 4018620d 20000100 returned -16
[  831.304981][ T3940] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  831.335789][ T3940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  831.407061][T12692] loop4: detected capacity change from 0 to 256
[  831.486467][ T3940] usb 4-1: Product: syz
[  831.491174][ T3940] usb 4-1: Manufacturer: syz
[  831.495860][ T3940] usb 4-1: SerialNumber: syz
[  831.497995][T12692] exfat: Deprecated parameter 'utf8'
[  831.506958][T12692] exfat: Deprecated parameter 'namecase'
[  831.519340][T12692] exfat: Deprecated parameter 'utf8'
[  831.536506][ T3940] usb 4-1: config 0 descriptor??
[  832.100926][T12681] chnl_net:caif_netlink_parms(): no params data found
[  832.284728][T12692] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d)
[  832.299997][ T3940] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input39
[  832.322560][T12681] bridge0: port 1(bridge_slave_0) entered blocking state
[  832.337448][T12681] bridge0: port 1(bridge_slave_0) entered disabled state
[  832.346373][T12681] device bridge_slave_0 entered promiscuous mode
[  832.377099][T12681] bridge0: port 2(bridge_slave_1) entered blocking state
[  832.384246][T12681] bridge0: port 2(bridge_slave_1) entered disabled state
[  832.400614][T12681] device bridge_slave_1 entered promiscuous mode
[  832.492444][T12681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  832.504508][T12681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  833.059812][T12681] team0: Port device team_slave_0 added
[  833.122462][T12681] team0: Port device team_slave_1 added
[  833.139824][ T3940] Bluetooth: hci5: command 0x0409 tx timeout
[  833.149237][   T26] audit: type=1326 audit(1723711104.385:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12674 comm="syz.3.1912" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3cacb549b9 code=0x0
[  833.171081][    C0] vkms_vblank_simulate: vblank timer overrun
[  833.192562][T12681] batman_adv: batadv0: Adding interface: batadv_slave_0
[  833.199804][T12681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  833.225930][T12681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  833.226714][ T5610] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  833.264976][T12681] batman_adv: batadv0: Adding interface: batadv_slave_1
[  833.301121][T12681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  833.333658][T12681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  833.388686][T12718] loop4: detected capacity change from 0 to 256
[  833.410824][T12681] device hsr_slave_0 entered promiscuous mode
[  833.418035][T12681] device hsr_slave_1 entered promiscuous mode
[  833.426457][T12681] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  833.435305][T12681] Cannot create hsr debugfs directory
[  833.476113][T12718] cgroup: none used incorrectly
[  833.481266][ T5610] usb 3-1: Using ep0 maxpacket: 32
[  833.606684][ T5610] usb 3-1: New USB device found, idVendor=10cf, idProduct=8068, bcdDevice=2e.fd
[  833.618645][T12681] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  833.629227][ T5610] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  833.638062][   T26] audit: type=1326 audit(1723711104.875:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12719 comm="syz.1.1924" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4ccf2769b9 code=0x0
[  833.665642][ T5610] usb 3-1: config 0 descriptor??
[  833.711533][ T5610] vmk80xx 3-1:0.0: driver 'vmk80xx' failed to auto-configure device.
[  833.750140][T12681] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  833.828065][T12681] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  833.896519][T12681] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  834.031386][T12681] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  834.042845][T12681] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  834.054055][T12681] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  834.066912][T12681] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  834.172158][T12681] 8021q: adding VLAN 0 to HW filter on device bond0
[  834.188864][ T5611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  834.198452][ T5610] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  834.227107][ T5611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  834.275976][T12681] 8021q: adding VLAN 0 to HW filter on device team0
[  834.278277][T12730] loop4: detected capacity change from 0 to 1024
[  834.307868][T11295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  834.328150][T11295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  834.350033][T11295] bridge0: port 1(bridge_slave_0) entered blocking state
[  834.357147][T11295] bridge0: port 1(bridge_slave_0) entered forwarding state
[  834.364665][T12730] EXT4-fs (loop4): Ignoring removed orlov option
[  834.382538][ T3311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  834.416727][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  834.426446][T12730] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,nombcache,journal_dev=0x0000000000000001,usrjquota=,orlov,lazytime,init_itable=0x0000000000000045,jqfmt=vfsold,grpjquota=,,errors=continue. Quota mode: none.
[  834.427618][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  834.533487][ T3658] bridge0: port 2(bridge_slave_1) entered blocking state
[  834.540617][ T3658] bridge0: port 2(bridge_slave_1) entered forwarding state
[  834.557075][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  834.569910][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  834.576520][ T5610] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  834.593107][ T5610] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  834.601536][ T8565] usb 4-1: USB disconnect, device number 37
[  834.612640][T12730] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1927'.
[  834.655359][ T5610] usb 2-1: config 0 descriptor??
[  834.677544][ T8563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  834.697451][ T8563] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  834.706942][ T8563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  834.709893][ T5610] cp210x 2-1:0.0: cp210x converter detected
[  834.722971][ T8563] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  834.736763][ T8563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  834.749145][ T8563] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  834.762295][ T8563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  834.775076][ T8563] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  834.791135][ T8563] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  834.811179][T12681] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  835.516224][ T5610] cp210x 2-1:0.0: failed to get vendor val 0x370c size 13: 0
[  835.655423][ T5610] cp210x 2-1:0.0: GPIO initialisation failed: -5
[  835.679850][ T5617] Bluetooth: hci5: command 0x041b tx timeout
[  835.690841][ T5610] usb 2-1: cp210x converter now attached to ttyUSB0
[  835.726543][ T8565] usb 3-1: USB disconnect, device number 29
[  835.776117][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  835.784121][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  835.796100][T12681] 8021q: adding VLAN 0 to HW filter on device batadv0
[  835.933586][T11295] usb 2-1: USB disconnect, device number 24
[  835.973832][ T8563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  835.988157][T11295] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  836.001599][ T8563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  836.009096][T12756] loop4: detected capacity change from 0 to 1024
[  836.012504][T11295] cp210x 2-1:0.0: device disconnected
[  836.712804][ T3311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  836.729848][ T3311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  836.744880][T12681] device veth0_vlan entered promiscuous mode
[  836.787664][ T8563] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  836.803974][ T8563] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  836.836148][T12681] device veth1_vlan entered promiscuous mode
[  836.925713][ T3311] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  836.945820][ T3311] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  836.973934][ T3311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  837.146104][ T3311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  837.162147][T12681] device veth0_macvtap entered promiscuous mode
[  837.177825][T11295] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  837.954632][T12756] hfsplus: unable to parse mount options
[  837.963516][ T5611] Bluetooth: hci5: command 0x040f tx timeout
[  838.966300][T12681] device veth1_macvtap entered promiscuous mode
[  839.473813][T12681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  839.487358][T12681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  839.497783][T12681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  839.513000][T12681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  839.825054][T12778] hub 6-0:1.0: USB hub found
[  839.831296][T12778] hub 6-0:1.0: 1 port detected
[  841.279150][ T8563] Bluetooth: hci0: command 0x0406 tx timeout
[  841.285292][T12681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  841.405990][T12681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  841.463428][ T5610] Bluetooth: hci5: command 0x0419 tx timeout
[  841.491578][T12681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  841.521849][T12681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  841.551024][T12681] batman_adv: batadv0: Interface activated: batadv_slave_0
[  841.614130][T12681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  841.628786][T12681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  842.304015][T12681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  842.529391][T12681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  842.707928][T12681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  842.730475][T12681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  842.746904][T12797] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1944'.
[  842.756061][T12681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  842.776182][T12681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  843.135650][T12681] batman_adv: batadv0: Interface activated: batadv_slave_1
[  845.010737][ T5610] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  845.028835][ T5610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  845.042303][ T5610] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  845.063746][ T5610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  846.756588][T12681] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  847.184668][T12681] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  847.526510][T12833] trusted_key: encrypted_key: insufficient parameters specified
[  847.546908][T12681] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  847.546940][T12681] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  847.624316][T12836] hub 6-0:1.0: USB hub found
[  847.624522][T12836] hub 6-0:1.0: 1 port detected
[  848.189694][ T9274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  848.189774][ T9274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  848.627730][ T5611] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  848.680747][ T3907] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  848.706748][ T3907] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  848.769646][ T5611] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  848.784393][T12851] loop4: detected capacity change from 0 to 16
[  849.964972][T12851] erofs: (device loop4): mounted with root inode @ nid 36.
[  850.371525][T12853] netlink: 'syz.1.1956': attribute type 1 has an invalid length.
[  851.060775][T12862] loop4: detected capacity change from 0 to 128
[  851.304010][T12862] VFS: Found a Xenix FS (block size = 512) on device loop4
[  851.696232][T11869] sysv_free_block: trying to free block not in datazone
[  851.751203][T11295] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  851.845065][T11869] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  851.997133][T11295] usb 2-1: Using ep0 maxpacket: 8
[  852.141356][T11295] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  852.165238][T11295] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  852.289202][T11295] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  852.300288][T11295] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  852.316058][T11295] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  852.977025][T11295] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  853.173228][T11295] usb 2-1: can't set config #16, error -71
[  853.213234][T11295] usb 2-1: USB disconnect, device number 25
[  853.301031][T12874] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  853.301031][T12874] The task syz.3.1961 (12874) triggered the difference, watch for misbehavior.
[  853.452632][T12901] xt_NFQUEUE: number of total queues is 0
[  855.568372][T12922] x_tables: ip_tables: icmp match: only valid for protocol 1
[  856.019196][T12941] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1979'.
[  856.683638][ T5617] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  857.916165][ T3940] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  857.929816][ T3940] Bluetooth: hci2: Injecting HCI hardware error event
[  857.943432][ T3576] Bluetooth: hci2: hardware error 0x00
[  857.986329][T12951] tmpfs: Unknown parameter 'grpquota'
[  858.195281][T12965] usb usb8: usbfs: process 12965 (syz.2.1985) did not claim interface 0 before use
[  858.251140][ T5617] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  858.910785][ T5617] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  858.924845][ T5617] usb 1-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00
[  858.934257][ T5617] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  858.943868][ T5617] usb 1-1: config 0 descriptor??
[  858.968085][ T5617] usb 1-1: can't set config #0, error -71
[  858.972401][ T5617] usb 1-1: USB disconnect, device number 31
[  859.005649][T12964] tmpfs: Bad value for 'nr_inodes'
[  859.085116][T12977] overlayfs: missing 'lowerdir'
[  859.188111][T12980] loop4: detected capacity change from 0 to 1024
[  859.305712][T12980] EXT4-fs (loop4): Ignoring removed nobh option
[  859.337680][T12980] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  859.402286][T12989] fuse: Bad value for 'group_id'
[  859.404881][T12991] tap0: tun_chr_ioctl cmd 1074025677
[  859.418764][T12991] tap0: linktype set to 6
[  859.455986][T12980] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,resuid=0x0000000000000000,dioread_nolock,usrjquota=,discard,jqfmt=vfsv1,,errors=continue. Quota mode: none.
[  859.477248][    C1] vkms_vblank_simulate: vblank timer overrun
[  860.329361][   T26] audit: type=1326 audit(1723711131.562:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13007 comm="syz.4.1995" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f56deeb19b9 code=0x0
[  861.392051][T13018] fuse: Unknown parameter 'fd0x0000000000000004'
[  861.444504][T13016] loop4: detected capacity change from 0 to 256
[  861.461456][T13009] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  863.648664][T13036] loop4: detected capacity change from 0 to 256
[  864.550853][T13036] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a37, chksum : 0xd675b107, utbl_chksum : 0xe619d30d)
[  864.725117][T13048] netlink: 'syz.0.2007': attribute type 5 has an invalid length.
[  864.755218][    C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 2. Sending cookies.  Check SNMP counters.
[  864.772546][T13042] overlayfs: missing 'lowerdir'
[  864.834282][T13036] overlayfs: failed to resolve './file1': -2
[  864.873546][   T26] audit: type=1800 audit(1723711136.113:603): pid=13051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2003" name="file2" dev="loop4" ino=1048761 res=0 errno=0
[  864.949035][T13054] kAFS: No cell specified
[  865.792197][T13065] device bond1 entered promiscuous mode
[  865.798008][T13065] 8021q: adding VLAN 0 to HW filter on device bond1
[  865.924661][T13068] device syzkaller0 entered promiscuous mode
[  865.947525][T13065] device macvlan2 entered promiscuous mode
[  867.810877][T13113] overlayfs: missing 'lowerdir'
[  868.475315][ T5611] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  868.508716][T13113] loop4: detected capacity change from 0 to 1024
[  868.633741][T13117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  868.664136][T13113] hfsplus: failed to load catalog file
[  868.684828][T13118] wlan0 speed is unknown, defaulting to 1000
[  868.705067][T13119] xt_TPROXY: Can be used only with -p tcp or -p udp
[  868.818407][ T5611] usb 2-1: Using ep0 maxpacket: 8
[  868.948593][ T5611] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  868.973357][ T5611] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  869.007174][ T5611] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  869.169602][T13125] loop4: detected capacity change from 0 to 256
[  869.178387][ T5611] usb 2-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.40
[  869.227721][ T5611] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  869.250471][T13125] FAT-fs (loop4): Unrecognized mount option "allow_utime=0>000000000000000000001" or missing value
[  869.256304][ T5611] usb 2-1: Product: syz
[  869.274254][ T5611] usb 2-1: Manufacturer: syz
[  869.279485][ T5611] usb 2-1: SerialNumber: syz
[  869.360968][ T5611] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input41
[  869.598841][ T1387] ieee802154 phy0 wpan0: encryption failed: -22
[  870.768345][ T3011] bcm5974 2-1:1.0: could not read from device
[  870.819387][ T5611] usb 2-1: USB disconnect, device number 26
[  871.294988][T13025] udevd[13025]: Error opening device "/dev/input/event4": No such file or directory
[  871.357692][T13025] udevd[13025]: Unable to EVIOCGABS device "/dev/input/event4"
[  871.397245][T13025] udevd[13025]: Unable to EVIOCGABS device "/dev/input/event4"
[  871.425806][T13025] udevd[13025]: Unable to EVIOCGABS device "/dev/input/event4"
[  871.493504][T13025] udevd[13025]: Unable to EVIOCGABS device "/dev/input/event4"
[  874.338404][T13158] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  874.794411][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  876.285753][T13171] netlink: 'syz.2.2036': attribute type 1 has an invalid length.
[  877.162214][T13210] overlayfs: overlapping lowerdir path
[  877.249222][T13211] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2046'.
[  877.274365][T13211] netlink: 'syz.3.2046': attribute type 6 has an invalid length.
[  879.299258][T13232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2051'.
[  881.593870][T13246] loop4: detected capacity change from 0 to 262144
[  882.716430][T13246] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop4 scanned by syz.4.2059 (13246)
[  882.758374][   T26] audit: type=1326 audit(1723711154.005:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13255 comm="syz.2.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f753bdab9b9 code=0x7ffc0000
[  882.802462][T13246] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm
[  882.811811][T13246] BTRFS info (device loop4): enabling ssd optimizations
[  882.818802][T13246] BTRFS info (device loop4): using spread ssd allocation scheme
[  882.826555][T13246] BTRFS info (device loop4): using free space tree
[  882.833053][T13246] BTRFS info (device loop4): has skinny extents
[  882.839296][T13246] BTRFS info (device loop4): flagging fs with big metadata feature
[  882.887676][T13258] tipc: Can't bind to reserved service type 0
[  883.020892][   T26] audit: type=1326 audit(1723711154.135:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13255 comm="syz.2.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f753bdab9b9 code=0x7ffc0000
[  883.133564][   T26] audit: type=1326 audit(1723711154.135:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13255 comm="syz.2.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f753bdab9b9 code=0x7ffc0000
[  883.191014][   T26] audit: type=1326 audit(1723711154.135:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13255 comm="syz.2.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f753bdab9b9 code=0x7ffc0000
[  883.244337][   T26] audit: type=1326 audit(1723711154.135:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13255 comm="syz.2.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f753bdab9b9 code=0x7ffc0000
[  883.346817][   T26] audit: type=1326 audit(1723711154.135:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13255 comm="syz.2.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f753bdab9b9 code=0x7ffc0000
[  883.383782][   T26] audit: type=1326 audit(1723711154.135:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13255 comm="syz.2.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f753bdab9b9 code=0x7ffc0000
[  883.425655][   T26] audit: type=1326 audit(1723711154.135:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13255 comm="syz.2.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f753bdab9b9 code=0x7ffc0000
[  883.534367][   T26] audit: type=1326 audit(1723711154.135:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13255 comm="syz.2.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f753bdab9b9 code=0x7ffc0000
[  883.656770][T13288] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  883.673262][T13246] BTRFS error (device loop4): open_ctree failed
[  883.673705][T13025] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop4 scanned by udevd (13025)
[  883.703621][   T26] audit: type=1326 audit(1723711154.135:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13255 comm="syz.2.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f753bdab9b9 code=0x7ffc0000
[  883.924849][T13290] netlink: 'syz.4.2066': attribute type 11 has an invalid length.
[  883.943860][T13290] netlink: 'syz.4.2066': attribute type 5 has an invalid length.
[  884.096776][ T1075] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  884.243831][T13299] loop4: detected capacity change from 0 to 2048
[  884.250647][T13300] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2078'.
[  884.406964][ T1075] usb 1-1: Using ep0 maxpacket: 16
[  885.086802][ T1075] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  885.149884][ T1075] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  885.166958][ T1075] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  885.188483][ T1075] usb 1-1: config 0 descriptor??
[  885.194220][T13299] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  885.248818][ T1075] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  885.285308][T13307] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2070'.
[  885.353508][T13314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2071'.
[  885.525581][T13323] udc-core: couldn't find an available UDC or it's busy
[  885.535982][T13323] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  885.696833][ T5612] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  887.180287][ T1075] usb 1-1: USB disconnect, device number 32
[  887.345296][T13316] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.2068: bg 0: block 234: padding at end of block bitmap is not set
[  888.136607][T13316] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1052 with error 117
[  888.149838][T13316] EXT4-fs (loop4): This should not happen!! Data will be lost
[  888.149838][T13316] 
[  888.450842][ T3576] block nbd1: Receive control failed (result -32)
[  888.463385][ T3576] block nbd1: Receive control failed (result -32)
[  888.530989][T13337] block nbd1: shutting down sockets
[  888.736496][ T5611] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  889.106634][ T5611] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  889.137946][ T5611] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  889.246637][ T5611] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  889.266122][ T5611] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  889.416377][ T5611] usb 1-1: SerialNumber: syz
[  890.213087][T13365] loop4: detected capacity change from 0 to 256
[  890.304542][T13365] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x4310b8cd, utbl_chksum : 0xe619d30d)
[  890.353869][T13370] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 0, id = 0
[  890.354980][T13343] IPVS: stopping backup sync thread 13370 ...
[  890.383397][   T26] kauditd_printk_skb: 31 callbacks suppressed
[  890.383412][   T26] audit: type=1326 audit(1723711161.625:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13364 comm="syz.1.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ccf2769b9 code=0x7ffc0000
[  890.412157][    C0] vkms_vblank_simulate: vblank timer overrun
[  890.446729][T13369] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2083'.
[  890.468697][   T26] audit: type=1326 audit(1723711161.625:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13364 comm="syz.1.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ccf2769b9 code=0x7ffc0000
[  890.647753][   T26] audit: type=1326 audit(1723711161.625:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13364 comm="syz.1.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f4ccf2769b9 code=0x7ffc0000
[  890.693356][ T5611] usb 1-1: 0:2 : does not exist
[  891.117331][ T5611] usb 1-1: USB disconnect, device number 33
[  891.189059][   T26] audit: type=1326 audit(1723711161.625:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13364 comm="syz.1.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ccf2769b9 code=0x7ffc0000
[  891.244475][   T26] audit: type=1326 audit(1723711161.625:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13364 comm="syz.1.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ccf2769b9 code=0x7ffc0000
[  891.290950][   T26] audit: type=1326 audit(1723711161.625:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13364 comm="syz.1.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4ccf2769b9 code=0x7ffc0000
[  891.293529][T13375] can: request_module (can-proto-0) failed.
[  891.313126][    C0] vkms_vblank_simulate: vblank timer overrun
[  891.337455][   T26] audit: type=1326 audit(1723711161.625:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13364 comm="syz.1.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ccf2769b9 code=0x7ffc0000
[  891.337489][   T26] audit: type=1326 audit(1723711161.625:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13364 comm="syz.1.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ccf2769b9 code=0x7ffc0000
[  891.337513][   T26] audit: type=1326 audit(1723711161.625:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13364 comm="syz.1.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f4ccf2769b9 code=0x7ffc0000
[  891.337535][   T26] audit: type=1326 audit(1723711161.625:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13364 comm="syz.1.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ccf2769b9 code=0x7ffc0000
[  891.478574][    C0] vkms_vblank_simulate: vblank timer overrun
[  891.577906][T12822] udevd[12822]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  894.289485][T13413] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2106'.
[  894.361219][T13413] netlink: 'syz.2.2106': attribute type 1 has an invalid length.
[  894.471138][T13413] netlink: 'syz.2.2106': attribute type 2 has an invalid length.
[  895.223875][T13413] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2106'.
[  895.966194][ T5611] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  896.643017][ T3717] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  896.700805][T13439] tipc: Started in network mode
[  896.708059][T13439] tipc: Node identity 00000000000000000000ffffe0000001, cluster identity 4711
[  896.722393][T13439] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  896.769863][ T3717] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  896.780388][T13446] loop4: detected capacity change from 0 to 512
[  896.807002][T13445] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2107'.
[  896.868712][ T5611] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  896.890152][ T3717] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  896.900991][ T5611] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 12079, setting to 1024
[  896.923479][ T5611] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024
[  896.947864][ T5611] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  896.961532][T13446] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  896.972986][T13446] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038 (0x7fffffff)
[  896.983224][ T5611] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  897.006357][T13439] __quota_error: 28 callbacks suppressed
[  897.006376][T13439] Quota error (device loop4): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8
[  897.026991][T13427] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  897.027060][T13439] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  897.052719][ T3717] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  897.084792][T13447] hpfs: bad mount options.
[  897.164525][T13439] EXT4-fs error (device loop4): ext4_acquire_dquot:6196: comm syz.4.2104: Failed to acquire dquot type 0
[  897.205998][ T5611] Bluetooth: hci1: command 0x0406 tx timeout
[  897.379546][   T26] audit: type=1800 audit(1723711168.486:683): pid=13455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2104" name="file1" dev="loop4" ino=18 res=0 errno=0
[  897.620269][T11295] usb 4-1: USB disconnect, device number 38
[  897.792596][T13452] wlan0 speed is unknown, defaulting to 1000
[  897.835614][T13457] udevd[13457]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory
[  898.608944][T13469] device syzkaller1 entered promiscuous mode
[  898.651121][T13469] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2110'.
[  899.288047][T13466] dccp_close: ABORT with 65475 bytes unread
[  899.385470][ T8563] Bluetooth: hci5: command 0x0409 tx timeout
[  899.455011][T13452] chnl_net:caif_netlink_parms(): no params data found
[  899.671700][T13489] input: syz0 as /devices/virtual/input/input42
[  900.032527][   T26] audit: type=1326 audit(1723711171.276:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13498 comm="syz.2.2117" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f753bdab9b9 code=0x0
[  900.151214][T13452] bridge0: port 1(bridge_slave_0) entered blocking state
[  900.165920][T13452] bridge0: port 1(bridge_slave_0) entered disabled state
[  900.184122][T13452] device bridge_slave_0 entered promiscuous mode
[  900.205131][T13452] bridge0: port 2(bridge_slave_1) entered blocking state
[  900.235041][T13452] bridge0: port 2(bridge_slave_1) entered disabled state
[  900.283155][T13452] device bridge_slave_1 entered promiscuous mode
[  900.306583][T13494] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2116'.
[  900.438295][T13452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  900.484239][T13452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  901.446026][ T3311] Bluetooth: hci5: command 0x041b tx timeout
[  901.497693][T13452] team0: Port device team_slave_0 added
[  901.599704][T13452] team0: Port device team_slave_1 added
[  901.738134][T13452] batman_adv: batadv0: Adding interface: batadv_slave_0
[  901.745098][T13452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  901.787949][T13523] input: syz1 as /devices/virtual/input/input43
[  901.873806][T13452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  901.928505][T13452] batman_adv: batadv0: Adding interface: batadv_slave_1
[  901.956349][T13452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  902.059715][T13452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  902.109276][T13534] loop4: detected capacity change from 0 to 8
[  902.263313][ T8563] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  902.373990][T13534] SQUASHFS error: lzo decompression failed, data probably corrupt
[  902.393241][T13534] SQUASHFS error: Failed to read block 0x91: -5
[  902.418504][T13534] SQUASHFS error: Unable to read metadata cache entry [8f]
[  902.456057][T13534] SQUASHFS error: Unable to read inode 0x11f
[  902.738450][T13452] device hsr_slave_0 entered promiscuous mode
[  902.753104][T13452] device hsr_slave_1 entered promiscuous mode
[  902.761372][T13553] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  902.778520][T13452] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  902.842274][T13452] Cannot create hsr debugfs directory
[  902.915802][ T8563] usb 3-1: Using ep0 maxpacket: 16
[  902.987344][T13556] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  903.012636][T13556] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2125'.
[  903.056023][ T8563] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  903.169712][ T3717] device hsr_slave_0 left promiscuous mode
[  903.177269][ T8563] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  903.187383][ T3717] device hsr_slave_1 left promiscuous mode
[  903.187920][ T8563] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  903.212978][ T8563] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00
[  903.223224][ T3717] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  903.231644][ T8563] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  903.235705][ T3717] batman_adv: batadv0: Removing interface: batadv_slave_0
[  903.242041][ T8563] usb 3-1: config 0 descriptor??
[  903.266662][ T3717] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  903.277126][ T3717] batman_adv: batadv0: Removing interface: batadv_slave_1
[  903.286654][ T3717] device bridge_slave_1 left promiscuous mode
[  903.303447][ T3717] bridge0: port 2(bridge_slave_1) entered disabled state
[  903.316407][ T3717] device bridge_slave_0 left promiscuous mode
[  903.322879][ T3717] bridge0: port 1(bridge_slave_0) entered disabled state
[  903.367503][ T3717] device veth1_macvtap left promiscuous mode
[  903.383907][ T3717] device veth0_macvtap left promiscuous mode
[  903.420127][ T3717] device veth1_vlan left promiscuous mode
[  903.441969][ T3717] device veth0_vlan left promiscuous mode
[  903.536007][T11295] Bluetooth: hci5: command 0x040f tx timeout
[  903.727852][ T8563] koneplus 0003:1E7D:2E22.001C: unknown main item tag 0x0
[  903.747440][ T8563] koneplus 0003:1E7D:2E22.001C: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.2-1/input0
[  903.782835][ T3717] bond1 (unregistering): Released all slaves
[  904.071164][ T3717] team0 (unregistering): Port device team_slave_1 removed
[  904.100498][ T3717] team0 (unregistering): Port device team_slave_0 removed
[  904.121532][ T3717] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  904.154105][ T3717] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  904.324742][ T3717] bond0 (unregistering): Released all slaves
[  904.379367][T13567] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2128'.
[  904.469852][ T8563] koneplus 0003:1E7D:2E22.001C: couldn't init struct koneplus_device
[  904.485178][ T8563] koneplus 0003:1E7D:2E22.001C: couldn't install mouse
[  905.229014][ T8565] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  905.249698][ T8563] koneplus: probe of 0003:1E7D:2E22.001C failed with error -71
[  905.805065][ T8563] usb 3-1: USB disconnect, device number 31
[  905.840367][ T3658] Bluetooth: hci5: command 0x0419 tx timeout
[  905.887921][ T8565] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  905.918480][ T8565] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  905.981929][ T8565] usb 2-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00
[  905.991568][ T8565] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  906.008463][ T8565] usb 2-1: config 0 descriptor??
[  906.797141][ T8565] dragonrise 0003:0079:0011.001D: item fetching failed at offset 3/5
[  906.807096][ T8565] dragonrise 0003:0079:0011.001D: parse failed
[  906.813287][ T8565] dragonrise: probe of 0003:0079:0011.001D failed with error -22
[  906.842298][T13608] loop4: detected capacity change from 0 to 2048
[  906.932817][T13608] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=18576, location=18576
[  906.981179][T13608] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  906.998889][ T5609] usb 2-1: USB disconnect, device number 27
[  907.871806][T11295] Bluetooth: hci6: command 0x1003 tx timeout
[  907.879922][ T3583] Bluetooth: hci6: sending frame failed (-49)
[  907.988995][T13452] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  908.007606][T13452] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  908.050740][T13620] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  908.078211][T13452] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  908.102781][T13452] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  908.153675][   T26] audit: type=1326 audit(1723711179.396:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13619 comm="syz.1.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ccf2769b9 code=0x7ffc0000
[  908.241671][   T26] audit: type=1326 audit(1723711179.426:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13619 comm="syz.1.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f4ccf2769b9 code=0x7ffc0000
[  908.295089][   T26] audit: type=1326 audit(1723711179.426:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13619 comm="syz.1.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ccf2769b9 code=0x7ffc0000
[  908.322393][T13452] 8021q: adding VLAN 0 to HW filter on device bond0
[  908.462905][ T5610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  908.477258][ T5610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  908.499134][   T26] audit: type=1326 audit(1723711179.426:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13619 comm="syz.1.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4ccf2769b9 code=0x7ffc0000
[  908.554523][T13631] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2137'.
[  909.278548][   T26] audit: type=1326 audit(1723711179.436:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13619 comm="syz.1.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ccf2769b9 code=0x7ffc0000
[  909.385476][   T26] audit: type=1326 audit(1723711179.436:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13619 comm="syz.1.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ccf2769b9 code=0x7ffc0000
[  909.405176][T13452] 8021q: adding VLAN 0 to HW filter on device team0
[  909.407821][    C0] vkms_vblank_simulate: vblank timer overrun
[  909.445403][ T5610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  909.453965][T13637] xt_hashlimit: overflow, try lower: 1125899906842624/8
[  909.462006][ T5610] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  909.485939][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state
[  909.493072][ T5610] bridge0: port 1(bridge_slave_0) entered forwarding state
[  909.543039][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  909.563086][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  909.631675][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  909.652945][   T26] audit: type=1326 audit(1723711179.436:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13619 comm="syz.1.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ccf2769b9 code=0x7ffc0000
[  909.660843][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state
[  909.675294][    C0] vkms_vblank_simulate: vblank timer overrun
[  909.688428][ T5612] bridge0: port 2(bridge_slave_1) entered forwarding state
[  910.245873][ T8565] Bluetooth: hci6: command 0x1001 tx timeout
[  910.251998][ T3583] Bluetooth: hci6: sending frame failed (-49)
[  910.252762][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  910.387336][ T5617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  910.398906][ T5617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  910.434414][ T5617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  910.443555][ T5617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  910.452923][ T5617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  910.471497][T13646] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  910.505088][ T5611] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  910.516431][ T5611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  910.524450][   T26] audit: type=1326 audit(1723711179.436:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13619 comm="syz.1.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f4ccf2769b9 code=0x7ffc0000
[  910.556473][ T5611] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  910.575248][ T5611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  910.584200][ T5611] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  910.595399][   T26] audit: type=1326 audit(1723711179.436:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13619 comm="syz.1.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ccf2769b9 code=0x7ffc0000
[  910.705432][   T26] audit: type=1326 audit(1723711179.436:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13619 comm="syz.1.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ccf2769b9 code=0x7ffc0000
[  910.942208][T13660] ubi: mtd0 is already attached to ubi0
[  911.621701][ T5610] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  911.629990][ T5610] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  911.643506][T13452] 8021q: adding VLAN 0 to HW filter on device batadv0
[  911.755908][ T5610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  911.778587][ T5610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  911.819622][ T5611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  911.834042][ T5611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  911.864076][T13452] device veth0_vlan entered promiscuous mode
[  911.876969][ T5610] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  911.891174][ T5610] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  911.921147][T13452] device veth1_vlan entered promiscuous mode
[  912.023156][ T5610] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  912.039697][ T5610] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  912.067297][ T5610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  912.107516][ T5610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  912.148672][T13452] device veth0_macvtap entered promiscuous mode
[  912.189000][T13452] device veth1_macvtap entered promiscuous mode
[  912.204396][T13680] loop4: detected capacity change from 0 to 2048
[  912.291788][T13452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  912.333345][T13680] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  912.344037][ T8565] Bluetooth: hci6: command 0x1009 tx timeout
[  912.360117][T13452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  912.465870][T13452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  912.567085][T13452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  912.628872][T13452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  912.680781][T13452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  912.717109][T13452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  912.746960][T13452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  912.831392][T13452] batman_adv: batadv0: Interface activated: batadv_slave_0
[  912.876038][ T5611] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  912.896214][ T5611] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  912.931893][ T5611] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  913.051754][ T5611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  913.897239][T13452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  913.913682][T13452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  913.947247][T13452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  913.975316][T13452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  914.035299][T13452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  914.040602][T13689] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.2146: bg 0: block 234: padding at end of block bitmap is not set
[  914.085402][T13452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  914.114559][T13689] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 410 with error 28
[  914.145297][T13689] EXT4-fs (loop4): This should not happen!! Data will be lost
[  914.145297][T13689] 
[  914.147955][T13452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  914.175277][T13689] EXT4-fs (loop4): Total free blocks count 0
[  914.221989][T13689] EXT4-fs (loop4): Free/Dirty block details
[  914.239375][T13689] EXT4-fs (loop4): free_blocks=0
[  914.254392][T13689] EXT4-fs (loop4): dirty_blocks=416
[  914.291043][T13689] EXT4-fs (loop4): Block reservation details
[  914.299549][T13452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  914.313650][T13689] EXT4-fs (loop4): i_reserved_data_blocks=26
[  914.393936][T13452] batman_adv: batadv0: Interface activated: batadv_slave_1
[  914.456684][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  914.507091][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  914.541843][T13452] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  914.561864][T13452] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  914.652592][T13452] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  914.715251][T13452] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  914.966606][ T9274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  914.987303][ T9274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  915.078600][ T5617] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  915.941527][ T9267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  916.208536][ T9267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  916.224911][T11295] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  916.337232][T13729] wlan0 speed is unknown, defaulting to 1000
[  916.401186][T13734] overlayfs: failed to resolve './bus/file0': -2
[  919.822634][ T5617] Bluetooth: hci6: command 0x0409 tx timeout
[  920.914100][T13729] chnl_net:caif_netlink_parms(): no params data found
[  921.840786][T13807] input: syz1 as /devices/virtual/input/input45
[  921.848547][T13729] bridge0: port 1(bridge_slave_0) entered blocking state
[  921.856684][ T8563] Bluetooth: hci6: command 0x041b tx timeout
[  921.877809][T13729] bridge0: port 1(bridge_slave_0) entered disabled state
[  921.936785][T13729] device bridge_slave_0 entered promiscuous mode
[  921.956500][T13729] bridge0: port 2(bridge_slave_1) entered blocking state
[  921.967408][T13729] bridge0: port 2(bridge_slave_1) entered disabled state
[  921.984719][T13729] device bridge_slave_1 entered promiscuous mode
[  922.047351][T13729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  922.110333][T13729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  922.125095][ T3658] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  922.293753][T13819] loop4: detected capacity change from 0 to 512
[  923.073768][T13819] EXT4-fs (loop4): Test dummy encryption mode enabled
[  923.080707][T13819] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[  923.106354][T13819] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal
[  923.214459][T13729] team0: Port device team_slave_0 added
[  923.263780][T13729] team0: Port device team_slave_1 added
[  923.338482][T13729] batman_adv: batadv0: Adding interface: batadv_slave_0
[  923.355111][T13729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  923.409889][T13729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  923.430436][T13729] batman_adv: batadv0: Adding interface: batadv_slave_1
[  923.444978][ T3658] usb 2-1: Using ep0 maxpacket: 8
[  923.453981][T13729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  923.488522][T13729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  923.679537][T13729] device hsr_slave_0 entered promiscuous mode
[  923.686726][T13729] device hsr_slave_1 entered promiscuous mode
[  923.693515][T13729] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  923.702076][T13729] Cannot create hsr debugfs directory
[  923.707814][ T3658] usb 2-1: config 32 has an invalid interface number: 1 but max is 0
[  923.754847][ T3658] usb 2-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config
[  924.187042][ T3658] usb 2-1: config 32 has no interface number 0
[  926.784743][T11296] Bluetooth: hci6: command 0x040f tx timeout
[  926.825183][ T3658] usb 2-1: string descriptor 0 read error: -71
[  926.831444][ T3658] usb 2-1: New USB device found, idVendor=20a6, idProduct=1105, bcdDevice=c2.eb
[  927.882256][T13862] syz.1.2176 (13862): drop_caches: 2
[  928.064356][ T3658] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  928.095010][ T3658] usb 2-1: can't set config #32, error -71
[  928.116542][ T3658] usb 2-1: USB disconnect, device number 28
[  928.931395][ T8563] Bluetooth: hci6: command 0x0419 tx timeout
[  929.056219][T13729] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  929.158775][T13892] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2182'.
[  929.213251][T13892] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  929.457992][T13729] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  930.055546][T13729] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  930.967130][ T1387] ieee802154 phy0 wpan0: encryption failed: -22
[  931.061047][T13729] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  931.145328][T13916] netlink: 'syz.0.2185': attribute type 1 has an invalid length.
[  931.693675][T13918] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2187'.
[  932.491298][T13917] team0: Port device veth3 added
[  933.262449][T13944] loop4: detected capacity change from 0 to 256
[  934.118123][T13729] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  934.319168][T13729] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  934.339733][T13729] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  935.115790][T13729] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  935.367366][T13964] netlink: 'syz.1.2199': attribute type 1 has an invalid length.
[  936.134717][T13729] 8021q: adding VLAN 0 to HW filter on device bond0
[  936.171168][T11296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  936.183830][T11296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  936.226078][T13729] 8021q: adding VLAN 0 to HW filter on device team0
[  936.239629][T11296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  936.266776][T11296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  936.303835][T11296] bridge0: port 1(bridge_slave_0) entered blocking state
[  936.310994][T11296] bridge0: port 1(bridge_slave_0) entered forwarding state
[  936.385023][T11295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  936.403866][T11295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  936.452339][T11295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1043.624320][    C0] ------------[ cut here ]------------
[ 1043.632681][    C0] WARNING: CPU: 0 PID: 13971 at kernel/rcu/tree_stall.h:937 rcu_check_gp_start_stall+0x2c8/0x450
[ 1043.643213][    C0] Modules linked in:
[ 1043.647109][    C0] CPU: 0 PID: 13971 Comm: syz.0.2202 Not tainted 5.15.164-syzkaller #0
[ 1043.655346][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 1043.665412][    C0] RIP: 0010:rcu_check_gp_start_stall+0x2c8/0x450
[ 1043.671752][    C0] Code: c7 c7 60 cc 4a 91 be 04 00 00 00 e8 62 99 5e 00 b8 01 00 00 00 87 05 d7 2e df 0f 85 c0 0f 85 1c ff ff ff 48 c7 c0 c0 3a 92 8c <0f> 0b 49 39 c7 74 47 48 c7 c0 c4 7f e9 8d 48 c1 e8 03 42 0f b6 04
[ 1043.691360][    C0] RSP: 0018:ffffc90000007bd8 EFLAGS: 00010046
[ 1043.697435][    C0] RAX: ffffffff8c923ac0 RBX: 0000000100012167 RCX: ffffffff816b9d7e
[ 1043.705406][    C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff914acc60
[ 1043.713377][    C0] RBP: ffffc90000007e10 R08: dffffc0000000000 R09: 0000000000000003
[ 1043.721353][    C0] R10: ffffffffffffffff R11: dffffc0000000001 R12: dffffc0000000000
[ 1043.729323][    C0] R13: dffffc0000000000 R14: 0000000000000246 R15: ffffffff8c923ac0
[ 1043.737298][    C0] FS:  00005555573d4500(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
[ 1043.746226][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1043.752809][    C0] CR2: 00007fe1823f9000 CR3: 000000001f48c000 CR4: 00000000003526f0
[ 1043.760786][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1043.768757][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1043.776725][    C0] Call Trace:
[ 1043.779998][    C0]  <IRQ>
[ 1043.782839][    C0]  ? __warn+0x15b/0x300
[ 1043.787000][    C0]  ? rcu_check_gp_start_stall+0x2c8/0x450
[ 1043.792721][    C0]  ? report_bug+0x1b7/0x2e0
[ 1043.797231][    C0]  ? handle_bug+0x3d/0x70
[ 1043.801559][    C0]  ? exc_invalid_op+0x16/0x40
[ 1043.806242][    C0]  ? asm_exc_invalid_op+0x16/0x20
[ 1043.811276][    C0]  ? rcu_check_gp_start_stall+0x2ae/0x450
[ 1043.816995][    C0]  ? rcu_check_gp_start_stall+0x2c8/0x450
[ 1043.822716][    C0]  ? rcu_check_gp_start_stall+0x2ae/0x450
[ 1043.828437][    C0]  rcu_core+0x657/0x1650
[ 1043.832773][    C0]  ? read_lock_is_recursive+0x10/0x10
[ 1043.838159][    C0]  ? local_bh_disable+0x20/0x20
[ 1043.843007][    C0]  ? __irq_exit_rcu+0x157/0x240
[ 1043.847856][    C0]  ? lockdep_softirqs_on+0x590/0x590
[ 1043.853150][    C0]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[ 1043.859132][    C0]  ? print_irqtrace_events+0x210/0x210
[ 1043.864587][    C0]  ? kvm_sched_clock_read+0x14/0x40
[ 1043.869783][    C0]  ? ktime_get_real_ts64+0x460/0x460
[ 1043.875078][    C0]  handle_softirqs+0x3a7/0x930
[ 1043.879848][    C0]  ? __irq_exit_rcu+0x157/0x240
[ 1043.884703][    C0]  ? do_softirq+0x240/0x240
[ 1043.889204][    C0]  ? hrtimer_interrupt+0x76b/0x980
[ 1043.894314][    C0]  ? irqtime_account_irq+0xd0/0x1e0
[ 1043.899520][    C0]  __irq_exit_rcu+0x157/0x240
[ 1043.904197][    C0]  ? irq_exit_rcu+0x20/0x20
[ 1043.908706][    C0]  irq_exit_rcu+0x5/0x20
[ 1043.912941][    C0]  sysvec_apic_timer_interrupt+0x91/0xb0
[ 1043.918581][    C0]  </IRQ>
[ 1043.921509][    C0]  <TASK>
[ 1043.924434][    C0]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1043.930417][    C0] RIP: 0010:__might_fault+0x7/0x110
[ 1043.935614][    C0] Code: 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 d2 96 c6 ff 4c 89 f7 31 f6 e8 68 12 fe ff e9 dd fe ff ff 0f 1f 00 55 41 57 41 56 41 54 <53> 41 89 f6 49 89 ff 49 bc 00 00 00 00 00 fc ff df e8 a3 96 c6 ff
[ 1043.955219][    C0] RSP: 0018:ffffc90002e079b8 EFLAGS: 00000293
[ 1043.961292][    C0] RAX: ffffffff812f3097 RBX: 00007ffd39d01580 RCX: ffff888023181dc0
[ 1043.969264][    C0] RDX: 0000000000000000 RSI: 000000000000008f RDI: ffffffff8a85e180
[ 1043.977233][    C0] RBP: ffffc90002e07b70 R08: ffffffff812f2cc4 R09: ffffed10046303b9
[ 1043.985206][    C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff110046306a9
[ 1043.993173][    C0] R13: 0000000000000007 R14: ffff888023181dc0 R15: dffffc0000000000
[ 1044.001150][    C0]  ? copy_fpstate_to_sigframe+0x474/0xb40
[ 1044.006873][    C0]  ? copy_fpstate_to_sigframe+0x847/0xb40
[ 1044.012602][    C0]  copy_fpstate_to_sigframe+0x858/0xb40
[ 1044.018148][    C0]  ? __lock_acquire+0x1ff0/0x1ff0
[ 1044.023182][    C0]  ? fpregs_set+0x700/0x700
[ 1044.027685][    C0]  ? rcu_is_watching+0x11/0xa0
[ 1044.032452][    C0]  ? asm_sysvec_irq_work+0x16/0x20
[ 1044.037565][    C0]  ? lockdep_hardirqs_on+0x94/0x130
[ 1044.042768][    C0]  ? asm_sysvec_irq_work+0x16/0x20
[ 1044.047903][    C0]  ? fpu__alloc_mathframe+0x80/0x140
[ 1044.053192][    C0]  get_sigframe+0x378/0x4b0
[ 1044.057705][    C0]  ? restore_sigcontext+0x710/0x710
[ 1044.062913][    C0]  arch_do_signal_or_restart+0x4ac/0x1890
[ 1044.068631][    C0]  ? __do_compat_sys_x32_rt_sigreturn+0x250/0x250
[ 1044.075052][    C0]  ? __might_fault+0xb4/0x110
[ 1044.079734][    C0]  ? _copy_from_user+0x10f/0x170
[ 1044.084676][    C0]  ? get_sigframe_size+0x10/0x10
[ 1044.089702][    C0]  ? __ia32_sys_sigaltstack+0x60/0x60
[ 1044.095086][    C0]  ? __do_sys_rt_sigreturn+0x19d/0x250
[ 1044.100543][    C0]  ? exit_to_user_mode_loop+0x39/0x130
[ 1044.106007][    C0]  exit_to_user_mode_loop+0x97/0x130
[ 1044.111289][    C0]  exit_to_user_mode_prepare+0xb1/0x140
[ 1044.116829][    C0]  syscall_exit_to_user_mode+0x5d/0x240
[ 1044.122377][    C0]  do_syscall_64+0x47/0xb0
[ 1044.126787][    C0]  ? clear_bhb_loop+0x15/0x70
[ 1044.131466][    C0]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1044.137357][    C0] RIP: 0033:0x7fe1840a23d0
[ 1044.141775][    C0] Code: 10 83 e0 01 83 e2 01 88 15 1a 93 e0 00 88 05 17 93 e0 00 c3 50 48 8d 35 10 b5 1a 00 48 8d 3d 16 b5 1a 00 31 c0 e8 d0 f8 ff ff <53> 89 fb 48 83 ec 10 64 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31
[ 1044.161379][    C0] RSP: 002b:00007ffd39d01978 EFLAGS: 00000202
[ 1044.167449][    C0] RAX: 0000000000000000 RBX: 00007fe18437c208 RCX: 0000001b2bd20000
[ 1044.175418][    C0] RDX: 00007ffd39d01980 RSI: 00007ffd39d01ab0 RDI: 0000000000000007
[ 1044.183390][    C0] RBP: 00007fe18437da80 R08: 00000000003ffb04 R09: 0000000000000006
[ 1044.191358][    C0] R10: 0000001b2bd20210 R11: 000000000000000a R12: 00000000000e4e56
[ 1044.199327][    C0] R13: 00007ffd39d02030 R14: 00007ffd39d02050 R15: ffffffffffffffff
[ 1044.207314][    C0]  </TASK>
[ 1044.210344][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1044.217616][    C0] CPU: 0 PID: 13971 Comm: syz.0.2202 Not tainted 5.15.164-syzkaller #0
[ 1044.225849][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 1044.235897][    C0] Call Trace:
[ 1044.239172][    C0]  <IRQ>
[ 1044.242011][    C0]  dump_stack_lvl+0x1e3/0x2d0
[ 1044.246695][    C0]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[ 1044.252324][    C0]  ? panic+0x860/0x860
[ 1044.256398][    C0]  ? rcu_check_gp_start_stall+0x230/0x450
[ 1044.262118][    C0]  ? rcu_check_gp_start_stall+0x230/0x450
[ 1044.267837][    C0]  panic+0x318/0x860
[ 1044.271737][    C0]  ? __warn+0x16a/0x300
[ 1044.275892][    C0]  ? fb_is_primary_device+0xd0/0xd0
[ 1044.281101][    C0]  ? rcu_check_gp_start_stall+0x2c8/0x450
[ 1044.286820][    C0]  __warn+0x2b2/0x300
[ 1044.290801][    C0]  ? rcu_check_gp_start_stall+0x2c8/0x450
[ 1044.296516][    C0]  report_bug+0x1b7/0x2e0
[ 1044.300873][    C0]  handle_bug+0x3d/0x70
[ 1044.305028][    C0]  exc_invalid_op+0x16/0x40
[ 1044.309532][    C0]  asm_exc_invalid_op+0x16/0x20
[ 1044.314379][    C0] RIP: 0010:rcu_check_gp_start_stall+0x2c8/0x450
[ 1044.320707][    C0] Code: c7 c7 60 cc 4a 91 be 04 00 00 00 e8 62 99 5e 00 b8 01 00 00 00 87 05 d7 2e df 0f 85 c0 0f 85 1c ff ff ff 48 c7 c0 c0 3a 92 8c <0f> 0b 49 39 c7 74 47 48 c7 c0 c4 7f e9 8d 48 c1 e8 03 42 0f b6 04
[ 1044.340309][    C0] RSP: 0018:ffffc90000007bd8 EFLAGS: 00010046
[ 1044.346381][    C0] RAX: ffffffff8c923ac0 RBX: 0000000100012167 RCX: ffffffff816b9d7e
[ 1044.354352][    C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff914acc60
[ 1044.362322][    C0] RBP: ffffc90000007e10 R08: dffffc0000000000 R09: 0000000000000003
[ 1044.370286][    C0] R10: ffffffffffffffff R11: dffffc0000000001 R12: dffffc0000000000
[ 1044.378255][    C0] R13: dffffc0000000000 R14: 0000000000000246 R15: ffffffff8c923ac0
[ 1044.386234][    C0]  ? rcu_check_gp_start_stall+0x2ae/0x450
[ 1044.391965][    C0]  ? rcu_check_gp_start_stall+0x2ae/0x450
[ 1044.397684][    C0]  rcu_core+0x657/0x1650
[ 1044.401933][    C0]  ? read_lock_is_recursive+0x10/0x10
[ 1044.407303][    C0]  ? local_bh_disable+0x20/0x20
[ 1044.412153][    C0]  ? __irq_exit_rcu+0x157/0x240
[ 1044.417000][    C0]  ? lockdep_softirqs_on+0x590/0x590
[ 1044.422294][    C0]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[ 1044.428276][    C0]  ? print_irqtrace_events+0x210/0x210
[ 1044.433729][    C0]  ? kvm_sched_clock_read+0x14/0x40
[ 1044.438924][    C0]  ? ktime_get_real_ts64+0x460/0x460
[ 1044.444214][    C0]  handle_softirqs+0x3a7/0x930
[ 1044.448977][    C0]  ? __irq_exit_rcu+0x157/0x240
[ 1044.453829][    C0]  ? do_softirq+0x240/0x240
[ 1044.458327][    C0]  ? hrtimer_interrupt+0x76b/0x980
[ 1044.463439][    C0]  ? irqtime_account_irq+0xd0/0x1e0
[ 1044.468640][    C0]  __irq_exit_rcu+0x157/0x240
[ 1044.473311][    C0]  ? irq_exit_rcu+0x20/0x20
[ 1044.477822][    C0]  irq_exit_rcu+0x5/0x20
[ 1044.482067][    C0]  sysvec_apic_timer_interrupt+0x91/0xb0
[ 1044.487729][    C0]  </IRQ>
[ 1044.490666][    C0]  <TASK>
[ 1044.493596][    C0]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1044.499582][    C0] RIP: 0010:__might_fault+0x7/0x110
[ 1044.504785][    C0] Code: 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 d2 96 c6 ff 4c 89 f7 31 f6 e8 68 12 fe ff e9 dd fe ff ff 0f 1f 00 55 41 57 41 56 41 54 <53> 41 89 f6 49 89 ff 49 bc 00 00 00 00 00 fc ff df e8 a3 96 c6 ff
[ 1044.524393][    C0] RSP: 0018:ffffc90002e079b8 EFLAGS: 00000293
[ 1044.530472][    C0] RAX: ffffffff812f3097 RBX: 00007ffd39d01580 RCX: ffff888023181dc0
[ 1044.538443][    C0] RDX: 0000000000000000 RSI: 000000000000008f RDI: ffffffff8a85e180
[ 1044.546419][    C0] RBP: ffffc90002e07b70 R08: ffffffff812f2cc4 R09: ffffed10046303b9
[ 1044.554393][    C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff110046306a9
[ 1044.562361][    C0] R13: 0000000000000007 R14: ffff888023181dc0 R15: dffffc0000000000
[ 1044.570336][    C0]  ? copy_fpstate_to_sigframe+0x474/0xb40
[ 1044.576061][    C0]  ? copy_fpstate_to_sigframe+0x847/0xb40
[ 1044.581791][    C0]  copy_fpstate_to_sigframe+0x858/0xb40
[ 1044.587338][    C0]  ? __lock_acquire+0x1ff0/0x1ff0
[ 1044.592389][    C0]  ? fpregs_set+0x700/0x700
[ 1044.596899][    C0]  ? rcu_is_watching+0x11/0xa0
[ 1044.601666][    C0]  ? asm_sysvec_irq_work+0x16/0x20
[ 1044.606789][    C0]  ? lockdep_hardirqs_on+0x94/0x130
[ 1044.611989][    C0]  ? asm_sysvec_irq_work+0x16/0x20
[ 1044.617101][    C0]  ? fpu__alloc_mathframe+0x80/0x140
[ 1044.622389][    C0]  get_sigframe+0x378/0x4b0
[ 1044.626905][    C0]  ? restore_sigcontext+0x710/0x710
[ 1044.632115][    C0]  arch_do_signal_or_restart+0x4ac/0x1890
[ 1044.637834][    C0]  ? __do_compat_sys_x32_rt_sigreturn+0x250/0x250
[ 1044.644256][    C0]  ? __might_fault+0xb4/0x110
[ 1044.648938][    C0]  ? _copy_from_user+0x10f/0x170
[ 1044.653889][    C0]  ? get_sigframe_size+0x10/0x10
[ 1044.658826][    C0]  ? __ia32_sys_sigaltstack+0x60/0x60
[ 1044.664210][    C0]  ? __do_sys_rt_sigreturn+0x19d/0x250
[ 1044.669669][    C0]  ? exit_to_user_mode_loop+0x39/0x130
[ 1044.675138][    C0]  exit_to_user_mode_loop+0x97/0x130
[ 1044.680437][    C0]  exit_to_user_mode_prepare+0xb1/0x140
[ 1044.685993][    C0]  syscall_exit_to_user_mode+0x5d/0x240
[ 1044.691558][    C0]  do_syscall_64+0x47/0xb0
[ 1044.695974][    C0]  ? clear_bhb_loop+0x15/0x70
[ 1044.700656][    C0]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1044.706550][    C0] RIP: 0033:0x7fe1840a23d0
[ 1044.710968][    C0] Code: 10 83 e0 01 83 e2 01 88 15 1a 93 e0 00 88 05 17 93 e0 00 c3 50 48 8d 35 10 b5 1a 00 48 8d 3d 16 b5 1a 00 31 c0 e8 d0 f8 ff ff <53> 89 fb 48 83 ec 10 64 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31
[ 1044.730576][    C0] RSP: 002b:00007ffd39d01978 EFLAGS: 00000202
[ 1044.736648][    C0] RAX: 0000000000000000 RBX: 00007fe18437c208 RCX: 0000001b2bd20000
[ 1044.744707][    C0] RDX: 00007ffd39d01980 RSI: 00007ffd39d01ab0 RDI: 0000000000000007
[ 1044.752679][    C0] RBP: 00007fe18437da80 R08: 00000000003ffb04 R09: 0000000000000006
[ 1044.760735][    C0] R10: 0000001b2bd20210 R11: 000000000000000a R12: 00000000000e4e56
[ 1044.768703][    C0] R13: 00007ffd39d02030 R14: 00007ffd39d02050 R15: ffffffffffffffff
[ 1044.776690][    C0]  </TASK>
[ 1044.779918][    C0] Kernel Offset: disabled
[ 1044.786207][    C0] Rebooting in 86400 seconds..