last executing test programs:

2m17.19518267s ago: executing program 3 (id=4):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff})
splice(r3, 0x0, r2, 0x0, 0x1, 0x0)
fcntl$setpipe(r2, 0x408, 0x7)
read$FUSE(0xffffffffffffffff, &(0x7f0000001180)={0x2020}, 0x2020)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
unshare(0x64000600)
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, &(0x7f0000000040))
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f0000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x400}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0x76}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2m0.713887793s ago: executing program 32 (id=4):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff})
splice(r3, 0x0, r2, 0x0, 0x1, 0x0)
fcntl$setpipe(r2, 0x408, 0x7)
read$FUSE(0xffffffffffffffff, &(0x7f0000001180)={0x2020}, 0x2020)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
unshare(0x64000600)
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, &(0x7f0000000040))
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f0000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x400}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0x76}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2m0.543097767s ago: executing program 2 (id=35):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r2, 0x400448e4, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xf, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000010000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00')
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x3, 0x1}]})
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000))
pipe2$9p(&(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r6}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5])
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m59.488632922s ago: executing program 2 (id=40):
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000c00)=ANY=[@ANYBLOB="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", @ANYBLOB="d23c17f6ec95b3b820b1161ffa233394c6007d8285b061be4d1d842e4a63ec77908347691f71d1e4132f09405a5b81867a01cf3df73c16fd31622d37a921bdbff76ef2fed6da828ab4e0f87928c18c0380050249fb6ab8e225d181ac41a6377703000000fcac059ad433974df43b0efc268cbd67279c5e0f19f5b89100cc35aafb9e96dae3d8afe28e887e01475bd40d1080f70254a3f65a1c6261571866a21a54d7624954802e9fe5003049941e5eb295f250d423cb68802074c8c103494acc2fb1fe19c38704ceb94c6da8fb326c1740c59e"], 0xf, 0x2a4, &(0x7f0000000480)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file2\x00', 0x143142, 0x40)
pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0)

1m56.894963589s ago: executing program 2 (id=44):
read$FUSE(0xffffffffffffffff, &(0x7f0000001180)={0x2020}, 0x2020)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x9, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000071122b00000000009500000700000000727d5c0f85e8a1be1eb8cddde52b6d574471d7070f9186aa18f14c8c3ddc47048aa45a4f22632903792f5f67c4b996a983742712443b09078e595b5d2cc39a8f0c18bd49e0fc0338f541d16d05c85f65c99736dab6535e50e824e2b86e06fcf00af0d8643b1dee41feaa45bde4323c4185ede932af1f614c4d8536f01c432dca3aebc3093a3024341d281ddb5419dfef625ac49f693198e2642ac8092c0668db51ad470954dac1f59b3e4e88eda1b994165b0d1c1debd1"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)
unshare(0x64000600)
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, &(0x7f0000000040))
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000045700000095"], 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r1, <r3=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000002c0)=r2}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r5, 0x0, 0x119)
ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0, r7}, 0x18)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]})
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x400}, 0x50)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0x76}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r8}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m53.3935441s ago: executing program 2 (id=51):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@delsa={0x28, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {@in=@remote, 0x4d4, 0x2, 0x6c}}, 0x28}, 0x1, 0x0, 0x0, 0x60004120}, 0x40)

1m53.292481908s ago: executing program 2 (id=52):
preadv(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x88a, &(0x7f0000000080)=ANY=[@ANYBLOB='dots,nodots,nocase,dots,nodots,debug\x00\b\x00\x00s,nodots,quiet,\x00'], 0x1, 0x162, &(0x7f0000000500)="$eJzs3DGr01AUB/DTvuh76tJZHAKCOBV1clSkglhQlA46KVSXVgp2iU79KH5BQTpIB+GKprS0tEihaerr77fkkD9Jzh2Syw0k7259GvRH44+jl9O4aDQiexR5zBrRimacRWkSa87XdwAA/5NZSvEjpZTOJ3HtW6SU6u4IAKia+R8ATs8/5/+HNTUGAFTG+h8ATs/rN2+fP+52O6/y/CLi+6ToFb1yW+ZPn3U79/K/WsujpkXRO1vk98s8X82vxPV5/mBjfjXu3i7zP9mTF1ms5jeiX/noAQAA4DS084WN6/t2e0venJfL9wNr6/ssbmaHGgUAsIvxl6+D98Phh8/7KZp7Os9Bi5+pdCz97FbcOY42FJesqPvJBFRtedPX3QkAAAAAAAAAAAAAALDNIT4n2nzlX/41DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQG1+BwAA///7v1kj")
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
move_mount(r4, &(0x7f0000000080)='./mnt\x00', r4, &(0x7f0000000000)='./mnt\x00', 0x75)
r5 = syz_io_uring_setup(0x2def, &(0x7f0000001600)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0}, 0x0, &(0x7f0000000000))
io_uring_enter(r5, 0x0, 0xfb68, 0x1, 0x0, 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
timer_create(0x0, 0x0, 0x0)
r6 = syz_open_dev$usbfs(&(0x7f0000000180), 0x2, 0x802)
dup(r6)
preadv(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x1c0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)

1m51.458618215s ago: executing program 2 (id=55):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f0000000640)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = epoll_create1(0x0)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/stat\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000040))
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pread64(r9, 0x0, 0x0, 0xb9b)
syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0)

1m36.132938524s ago: executing program 33 (id=55):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f0000000640)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = epoll_create1(0x0)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/stat\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000040))
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pread64(r9, 0x0, 0x0, 0xb9b)
syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0)

1m2.065523834s ago: executing program 0 (id=152):
socket$packet(0x11, 0x2, 0x300)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000440), 0x10)
listen(r1, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2)
writev(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)="cd", 0x1}], 0x1)
openat(0xffffffffffffffff, 0x0, 0x2340aaa6f2fbbd17, 0x102)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/11], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
ppoll(&(0x7f0000000500), 0x0, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

1m0.638558619s ago: executing program 0 (id=158):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000e12020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000006fd6850000002d000000850000002300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10)
setreuid(0x0, 0xee01)

1m0.49946056s ago: executing program 0 (id=159):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x10, 0x2, &(0x7f00000001c0)=ANY=[@ANYRESHEX], 0x0, 0x8000000, 0x0, 0x0, 0x41000, 0x54, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x13, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000001900ff0000000000185100002020702500000000002020207b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa30}, 0x94)
ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f00000002c0)='ip6_vti0\x00')
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000400c)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r2}, 0x8)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

53.688145066s ago: executing program 0 (id=177):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2000c8, &(0x7f00000005c0)=ANY=[@ANYBLOB='codepage=874,nodots,dots,tz=UTC,dots,nodots,codepage=862,dots,dots,check=strict,allow_utime=000000000000000000001,sys_immutable,nodots,nfs,quiet,dots,nodots,nodots,debug,usefree,tz=UTC,flush,nodots,\x00'], 0xfd, 0x1bf, &(0x7f0000000940)="$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")
chdir(&(0x7f00000001c0)='./file0\x00')

51.544458718s ago: executing program 0 (id=180):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fchdir(0xffffffffffffffff)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0)
getdents64(r4, &(0x7f0000000040)=""/53, 0x2457a0be381e3a04)

49.220138774s ago: executing program 0 (id=188):
r0 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$TIOCGPGRP(r0, 0x540f, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000001840)=ANY=[@ANYBLOB="696f636861727365743d42000000000000006d65636173653d312c6572726f72733d72656d6f756e742d726f2c6572726f72733d636f6e74696e75652c666d61736b3d30303030303030303030303030303030303030303030352c696f636861727365743d63703836302c6769643d2a575415629829e5c89da02870a932a755a7", @ANYRESHEX=0x0, @ANYBLOB=',umask=00000000000000000000003,errors=continue,gid=', @ANYRESHEX=0x0, @ANYBLOB=',allow_utime=00002000000000020000000,\x00'], 0x1, 0x152c, &(0x7f0000000300)="$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")
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000002480)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548)

33.977513116s ago: executing program 34 (id=188):
r0 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$TIOCGPGRP(r0, 0x540f, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000001840)=ANY=[@ANYBLOB="696f636861727365743d42000000000000006d65636173653d312c6572726f72733d72656d6f756e742d726f2c6572726f72733d636f6e74696e75652c666d61736b3d30303030303030303030303030303030303030303030352c696f636861727365743d63703836302c6769643d2a575415629829e5c89da02870a932a755a7", @ANYRESHEX=0x0, @ANYBLOB=',umask=00000000000000000000003,errors=continue,gid=', @ANYRESHEX=0x0, @ANYBLOB=',allow_utime=00002000000000020000000,\x00'], 0x1, 0x152c, &(0x7f0000000300)="$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")
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000002480)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548)

5.381445298s ago: executing program 4 (id=339):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000280)={&(0x7f0000000780)={{@my=0x0}, {@my=0x0, 0x800000}, 0x400, "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"}, 0x418})
ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, &(0x7f0000000040)={0x0, 0x0, 0x6})

5.217648941s ago: executing program 4 (id=341):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0)
r3 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a, 0x2})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0xc, 0x0, &(0x7f0000000280)=[@free_buffer={0x40086303, r3}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000140)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

5.021021267s ago: executing program 4 (id=346):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="8b4a00bdea1802a178e136960ad5ee84b4f742e1a3a9493daacf9a283493d8937f7803daa394250ed45dc7f5865d2e007c49fca4658dcfc8b57c39b2d3b16889cc73b763143434f99a505e803aac03ff4a6fc43d1f6f47430170f9af501990aad2f57d1d2c29f3e04eab0f564e1cd0d7471559c27d72e702eaf991fac58a16f188d968e8efc673dde6479b0ca4f9b9a89e0f3e833761", @ANYRESOCT], &(0x7f0000000140)='syzkaller\x00', 0x7ff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe01, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000000)="05000000010001", 0x7)
close(0x4)
pipe(0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="28000000021401"], 0x28}, 0x1, 0x0, 0x0, 0x20008044}, 0x20000000)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, 0x0, 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000100)=ANY=[])
pipe(0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x4)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000001c0)={0x0, 0x1, 0x6, @random="28b5522532a5"}, 0x63)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r5, 0x0, 0x18, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40010)
socket$nl_generic(0x10, 0x3, 0x10)

4.821812473s ago: executing program 4 (id=349):
mkdir(&(0x7f0000000380)='./file1\x00', 0xa)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
syz_open_dev$vcsu(&(0x7f0000000000), 0xd2b, 0x2800)
socket$inet6_tcp(0xa, 0x1, 0x0)
chdir(&(0x7f0000000080)='./file1\x00')
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0)
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r3=>r2}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0x7}}, './file1\x00'})

4.616294699s ago: executing program 4 (id=353):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, &(0x7f0000000180))
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000001080)=0x8)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x74, &(0x7f0000000200)={<r4=>r3, 0xfffe, 0x20, 0xd8ba, 0x9}, &(0x7f00000001c0)=0x18)
r5 = socket(0x200000100000011, 0x803, 0x0)
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000003c0)={{0x1, 0x1, 0x18, <r6=>r5, {0x2}}, './file1\x00'})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f00007fd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)
madvise(&(0x7f00003c1000/0x1000)=nil, 0xdfc3efff, 0x15)
chdir(&(0x7f0000000080)='./file1\x00')
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000440)={r4, 0xb4b8, 0xa9, "3ac71ef42eced1bce2af9c09ac9c3731812b925eae8ca428cd4cfa9ea4979dd1e5818c983236b9e8efc46e37a9aaab60fe44dbfce4c7fdff8c552a656a1d07a0cf69c65f792e7ccb871430352a717f3c9088517f2aa13596efbbfb46d8afb3dd4ea8d67f8336f855de0f3623f321abfba74c1ac8786a91997ad1d3b3dbd6b4a79fe77d765befcd828312f07b63ef30d8bcecec11818daf3a6dfeaad1f8577844739a354bf9dce6f742"}, 0xb1)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000180)='mqueue\x00', 0x0, 0x0)
mount$tmpfs(0x0, 0x0, 0x0, 0x2000030, 0x0)
r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
semget(0x0, 0x0, 0x200)
sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, 0x0, 0x40000)
r8 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r7, 0x40049366, &(0x7f0000000180))
ioctl$AUTOFS_IOC_READY(r8, 0x9360, 0x800000000000001)

3.97658267s ago: executing program 4 (id=359):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="8b4a00bdea1802a178e136960ad5ee84b4f742e1a3a9493daacf9a283493d8937f7803daa394250ed45dc7f5865d2e007c49fca4658dcfc8b57c39b2d3b16889cc73b763143434f99a505e803aac03ff4a6fc43d1f6f47430170f9af501990aad2f57d1d2c29f3e04eab0f564e1cd0d7471559c27d72e702eaf991fac58a16f188d968e8efc673dde6479b0ca4f9b9a89e0f3e833761", @ANYRESOCT], &(0x7f0000000140)='syzkaller\x00', 0x7ff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe01, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000000)="05000000010001", 0x7)
close(0x4)
pipe(0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="28000000021401"], 0x28}, 0x1, 0x0, 0x0, 0x20008044}, 0x20000000)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, 0x0, 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000100)=ANY=[])
pipe(0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x4)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000001c0)={0x0, 0x1, 0x6, @random="28b5522532a5"}, 0x63)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r5, 0x0, 0x18, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}, 0x40010)
socket$nl_generic(0x10, 0x3, 0x10)

3.932522354s ago: executing program 6 (id=360):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
socket$kcm(0x2, 0x200000000000001, 0x106)
socket$kcm(0x2, 0xa, 0x2)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

3.292612836s ago: executing program 5 (id=363):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f00000004c0)='<', 0xfdef, 0x805, 0x0, 0x0)

3.013832558s ago: executing program 6 (id=365):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000080)=0x10100b, 0x4)
r1 = dup(r0)
read$FUSE(r1, &(0x7f00000075c0)={0x2020}, 0x2020)

2.900294667s ago: executing program 6 (id=368):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x1}]}]}, 0x28}}, 0x0)

2.816473334s ago: executing program 6 (id=370):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
poll(0x0, 0x0, 0x4)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0xfd45}}, 0x8000014)
write$nci(r0, &(0x7f0000000040)=@NCI_OP_RF_DEACTIVATE_NTF={0x1, 0x0, 0x3, 0x6, 0x1, {0x1, 0x2}}, 0x5)

2.412543706s ago: executing program 5 (id=373):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10)
syz_emit_ethernet(0x3e, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbba8d542a0e043bbbbbb0800450068391d579d628274c8254dc56480e900303f00000000019078ac1e0101ac1414aa0b209078030000"], 0x0)
r5 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x17, &(0x7f0000000040)=0x70, 0x4)

2.11038728s ago: executing program 7 (id=374):
r0 = syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$eJzs28+PE1UcAPDvTLeLCLgr4g9+qKto3PhjlwVUDh7UaOIBExM96HGzuxCksIZdEyFEwRg8GWPi3Xj0X/CkF2M8mXjVuyEhhgvgqWbaGbYtbdktLUX6+SQD78282fe+nXnte/PaAEbWVPZPErE1Iv6MiIl6trnAVP2/q5fPLly7fHYhiWr13X+SWrkrl88uFEWL87bkmek0Iv0iid1t6l05feb4fKWydCrPz66e+Gh25fSZF46dmD+6dHTp5P5Dhw4emHv5pf0v9iXOrE1Xdn26vGfnWx988/bhr5rib4mjT6a6HXy6Wu1zdcO1rSGdjA2xIWxIKSKyy1Wu9f+JKMXaxZuINz8fauOAgapWq9UtnQ+fqwJ3sSSa87o8jIrigz6b/xZb6yDg1cENP4bu0mv1CVAW99V8qx8ZizQvU26Z3/bTVES8f+7f77ItBvMcAgCgyU/Z+Of5duO/NB5qKHdfvjY0GRH3R8T2iHggInZExIMRtbIPR8QjG6y/dZHkxvFPerGnwNYpG/+9kq9tNY//itFfTJby3LZa/OXkyLHK0r78NZmO8qYsP9eljp/f+OPrTscax3/ZltVfjAXzdlwc29R8zuL86vytxNzo0vmIXWPt4k+urwQkEbEzInb1WMexZ3/Y0+nYzePvog/rTNXvI56pX/9z0RJ/Iem+Pjl7T1SW9s0Wd8WNfvv9wjud6r+l+Psgu/73tr3/r8c/mTSu165svI4Lf33ZcU7T6/0/nrxXS4/n+z6ZX109NRcxnhyuN7px//61c4t8UT6Lf3pv+/6/PdZeid0Rkd3Ej0bEYxHxeN72JyLiyYjY2yX+X19/6sPe4x+sLP7FDV3/tcR4tO5pnygd/+XHpkonb4j/Wvfrf7CWms73rOf9bz3t6u1uBgAAgP+fNCK2RpLOXE+n6cxM/fvyOyLSyvLK6nNHlj8+uVj/jcBklNPiSddEw/PQuXxaX8+fj4j6VwuK4wfy58bfljbX8jMLy5XFYQcPI25Lh/6f+bs07NYBA+f3WjC69H8YXfo/jC79H0ZXm/6/eRjtAG6/dp//nw2hHcDt19L/LfvBCDH/h9Gl/8Po0v9hJK1sjpv/SL5rovhLPZ5+1yaifEc0Y2CJSO+IZkgMKDHc9yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB++S8AAP///fHg0g==")
socket$packet(0x11, 0x2, 0x300)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f0000000440), 0x10)
listen(r2, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2)
openat(r0, 0x0, 0x2340aaa6f2fbbd17, 0x102)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
ppoll(&(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0)

1.804617554s ago: executing program 6 (id=375):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
socket$kcm(0x2, 0x200000000000001, 0x106)
socket$kcm(0x2, 0xa, 0x2)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

1.710249613s ago: executing program 1 (id=376):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}}, 0x0)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
bind$ax25(r3, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]})
setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4})
ioctl$sock_netdev_private(r4, 0x89f1, &(0x7f0000000000))
ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000))
sendmsg$NFT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x68}}, 0x48c5)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCGDEBUG(r5, 0x80047441, &(0x7f0000000080))
sendmsg$nl_route(r3, 0x0, 0x0)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'ip6tnl0\x00', <r7=>0x0, 0x29, 0x8, 0xd8, 0x6, 0x27, @empty, @empty, 0x40, 0x700, 0x80000001, 0x1000}})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{0xffffffffffffffff, <r8=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8cc0, '\x00', r7, r6, 0x0, 0x1, 0x2}, 0x50)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@bloom_filter={0x1e, 0xfffffffc, 0x80000000, 0x1800000, 0x11cc, 0xffffffffffffffff, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x1}, 0x50)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000840)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x5, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x5}, [@map_val={0x18, 0x8, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000680)='syzkaller\x00', 0x1e86b4fb, 0x0, 0x0, 0x41000, 0x2, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000700)={0x0, 0xf, 0x94d, 0x1000}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000008c0)=[r9, r10], &(0x7f0000000900)=[{0x5, 0x3, 0xa, 0xd}], 0x10, 0x4}, 0x94)

1.696585143s ago: executing program 7 (id=386):
r0 = syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$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")
socket$packet(0x11, 0x2, 0x300)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f0000000440), 0x10)
listen(r2, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
openat(r0, 0x0, 0x2340aaa6f2fbbd17, 0x102)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
ppoll(&(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0)

1.49412368s ago: executing program 5 (id=377):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x10, 0x2, &(0x7f00000001c0)=ANY=[@ANYRESHEX], 0x0, 0x8000000, 0x0, 0x0, 0x41000, 0x54, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x13, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000001900ff0000000000185100002020702500000000002020207b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa30}, 0x94)
ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f00000002c0)='ip6_vti0\x00')
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000400c)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r2}, 0x8)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

1.49064428s ago: executing program 1 (id=378):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x37084000)
ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, 0x0)

1.414702626s ago: executing program 5 (id=379):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22202, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text16={0x10, &(0x7f0000000200)="660f38804e80f30fa6c8ba2100edd9fa640fc7bea786baa10066ed66b96c03000066b872151c1166bac4fa5f300f300f01efde5e0bbaf80c66b83e51f38966efbafc0ced", 0x44}], 0x1, 0x76, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.328722003s ago: executing program 7 (id=380):
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5412, &(0x7f00000001c0)=0x11)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0)
ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000240)=0x4)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x8, 0x9, 0x80, 0x0, 0x1, 0x8000000000000, 0x2, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x7, 0x6, 0x1, 0x5], 0x8000000, 0x8340})
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000000)=0x2, 0x4)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.232602051s ago: executing program 1 (id=381):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0)
r3 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a, 0x2})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0xc, 0x0, &(0x7f0000000280)=[@free_buffer={0x40086303, r3}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000140)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

1.133785088s ago: executing program 7 (id=382):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x10, 0x0, &(0x7f0000000340)=[@request_death], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000600)="6c646bff8a4d96d8dc20d6e01c15e62e5e3a912b2979cd2aecd2b92ed736b5b71ba35520a30e8915f9c736b79b86adadcc3750c5df948e530256cc822f282863fc898fd39da9498597dc4912db4c984b"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000140)=[@dead_binder_done], 0x0, 0x0, 0x0})

1.105598961s ago: executing program 5 (id=383):
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x84}, 0x38)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='devlink_hwmsg\x00', r3}, 0x18)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000)
r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000cb00", @ANYRES32, @ANYBLOB='\x00'/14], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r6, 0x1, 0xf, 0x0, 0x0)
write$FUSE_LK(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0xffffffffffffffda, 0x0, {{0x7ff, 0x3}}}, 0x28)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10)
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000410000000000000001000000", @ANYBLOB="000000000000000000ff000000000000000020", @ANYRES32, @ANYBLOB="024000000500"/28], 0x48)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r4, 0x0)
ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0})
syz_open_procfs(0x0, 0x0)

1.090797722s ago: executing program 1 (id=384):
connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2000c8, &(0x7f00000005c0)=ANY=[@ANYBLOB='codepage=874,nodots,dots,tz=UTC,dots,nodots,codepage=862,dots,dots,check=strict,allow_utime=000000000000000000001,sys_immutable,nodots,nfs,quiet,dots,nodots,nodots,debug,usefree,tz=UTC,flush,nodots,\x00'], 0xfd, 0x1bf, &(0x7f0000000940)="$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")
chdir(0x0)

983.401501ms ago: executing program 7 (id=385):
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa30}, 0x94)
ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f00000002c0)='ip6_vti0\x00')
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000400c)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r1}, 0x8)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

644.814167ms ago: executing program 6 (id=387):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r0, 0x0, 0x1)
fchdir(r4)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0)
getdents64(r5, &(0x7f0000000040)=""/53, 0x2457a0be381e3a04)

340.292532ms ago: executing program 1 (id=388):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10)
syz_emit_ethernet(0x3e, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbba8d542a0e043bbbbbb0800450068391d579d628274c8254dc56480e900303f00000000019078ac1e0101ac1414aa0b209078030000"], 0x0)
r3 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x17, &(0x7f0000000040)=0x70, 0x4)

232.466181ms ago: executing program 7 (id=389):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}}, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
bind$ax25(r2, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]})
setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10)

4.421589ms ago: executing program 1 (id=390):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x10, 0x2, &(0x7f00000001c0)=ANY=[@ANYRESHEX], 0x0, 0x8000000, 0x0, 0x0, 0x41000, 0x54, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x13, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000001900ff0000000000185100002020702500000000002020207b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa30}, 0x94)
ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f00000002c0)='ip6_vti0\x00')
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000400c)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r2}, 0x8)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

0s ago: executing program 5 (id=391):
r0 = syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$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")
socket$packet(0x11, 0x2, 0x300)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f0000000440), 0x10)
listen(r2, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
openat(r0, 0x0, 0x2340aaa6f2fbbd17, 0x102)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
ppoll(&(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

e
[   52.328117][ T4187] device bridge_slave_0 entered promiscuous mode
[   52.353327][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.360936][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.370265][ T4186] device bridge_slave_1 entered promiscuous mode
[   52.377704][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.385177][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.393140][ T4187] device bridge_slave_1 entered promiscuous mode
[   52.402417][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.415355][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   52.425090][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.433607][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.441867][ T4184] device bridge_slave_0 entered promiscuous mode
[   52.475725][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.483148][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.491849][ T4184] device bridge_slave_1 entered promiscuous mode
[   52.532046][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.540259][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.548193][ T4183] device bridge_slave_0 entered promiscuous mode
[   52.557322][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.569308][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.581001][ T4185] team0: Port device team_slave_0 added
[   52.595437][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.603197][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.611344][ T4183] device bridge_slave_1 entered promiscuous mode
[   52.621012][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   52.632368][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   52.642818][ T4185] team0: Port device team_slave_1 added
[   52.658393][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.695364][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   52.724750][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0
[   52.732065][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.758977][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   52.780042][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.791666][ T4186] team0: Port device team_slave_0 added
[   52.800449][ T4186] team0: Port device team_slave_1 added
[   52.808870][ T4187] team0: Port device team_slave_0 added
[   52.815698][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1
[   52.823512][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.851159][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   52.872945][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   52.890692][ T4187] team0: Port device team_slave_1 added
[   52.907786][ T4184] team0: Port device team_slave_0 added
[   52.927237][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0
[   52.935341][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.962606][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   52.975283][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1
[   52.982363][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.009001][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.031939][ T4184] team0: Port device team_slave_1 added
[   53.082734][ T4183] team0: Port device team_slave_0 added
[   53.089295][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.096434][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.123246][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.135443][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.142893][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.171201][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.187268][ T4185] device hsr_slave_0 entered promiscuous mode
[   53.194882][ T4185] device hsr_slave_1 entered promiscuous mode
[   53.202419][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.209545][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.236630][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.249087][ T4183] team0: Port device team_slave_1 added
[   53.255218][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.262418][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.288470][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.362422][ T4186] device hsr_slave_0 entered promiscuous mode
[   53.369460][ T4186] device hsr_slave_1 entered promiscuous mode
[   53.376162][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   53.385299][ T4186] Cannot create hsr debugfs directory
[   53.410210][ T4187] device hsr_slave_0 entered promiscuous mode
[   53.417123][ T4187] device hsr_slave_1 entered promiscuous mode
[   53.424245][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   53.432646][ T4187] Cannot create hsr debugfs directory
[   53.439564][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.447015][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.474013][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.488977][ T4184] device hsr_slave_0 entered promiscuous mode
[   53.496422][ T4184] device hsr_slave_1 entered promiscuous mode
[   53.503618][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   53.511761][ T4184] Cannot create hsr debugfs directory
[   53.541135][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.548138][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.574640][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.638768][ T2239] Bluetooth: hci3: command 0x0409 tx timeout
[   53.647856][   T23] Bluetooth: hci4: command 0x0409 tx timeout
[   53.648075][ T2239] Bluetooth: hci2: command 0x0409 tx timeout
[   53.661415][ T2239] Bluetooth: hci0: command 0x0409 tx timeout
[   53.667964][ T2239] Bluetooth: hci1: command 0x0409 tx timeout
[   53.731918][ T4183] device hsr_slave_0 entered promiscuous mode
[   53.739143][ T4183] device hsr_slave_1 entered promiscuous mode
[   53.745864][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   53.754169][ T4183] Cannot create hsr debugfs directory
[   53.923608][ T4185] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   53.940320][ T4185] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   53.949669][ T4185] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   53.958778][ T4185] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   53.986810][ T4184] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   53.999457][ T4184] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   54.024881][ T4184] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   54.033847][ T4184] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   54.086652][ T4187] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   54.116213][ T4187] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   54.133207][ T4187] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   54.156287][ T4187] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   54.196068][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.226930][ T4186] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   54.236355][ T4186] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   54.249095][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.256758][ T4186] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   54.266417][ T3158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   54.276096][ T3158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   54.294954][ T4186] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   54.308431][ T4185] 8021q: adding VLAN 0 to HW filter on device team0
[   54.331792][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   54.344133][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   54.354297][  T155] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.361744][  T155] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.370614][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   54.380151][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   54.394100][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   54.402587][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   54.411855][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   54.421362][  T155] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.429643][  T155] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.441600][ T4184] 8021q: adding VLAN 0 to HW filter on device team0
[   54.476337][ T3158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   54.485340][ T3158] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   54.494792][ T3158] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.502292][ T3158] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.512235][ T3158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   54.522184][ T3158] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   54.540516][ T4183] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   54.550651][ T4183] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   54.562365][ T3158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   54.571555][ T3158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   54.582945][ T3158] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   54.592603][ T3158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   54.602394][ T3158] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   54.611318][ T3158] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.618953][ T3158] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.626650][ T3158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   54.636586][ T3158] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   54.646926][ T3158] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   54.656514][ T3158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   54.679461][ T4183] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   54.690811][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   54.700871][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   54.712785][ T3158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   54.728974][ T4183] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   54.740634][ T3158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   54.750415][ T3158] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   54.778235][ T4184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   54.789286][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   54.808041][ T3158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   54.818406][ T3158] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   54.827138][ T3158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   54.836219][ T3158] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   54.846254][ T3158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   54.855884][ T3158] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   54.865433][ T3158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   54.874944][ T3158] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   54.890112][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   54.906537][ T3158] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   54.920660][ T3158] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   54.938895][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.002504][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.054228][ T4186] 8021q: adding VLAN 0 to HW filter on device team0
[   55.067274][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   55.076189][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   55.085646][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   55.094479][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   55.110041][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   55.123267][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   55.133694][  T155] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.141807][  T155] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.161678][ T4187] 8021q: adding VLAN 0 to HW filter on device team0
[   55.184054][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   55.193948][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   55.202193][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   55.210710][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   55.220213][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   55.230870][  T155] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.238424][  T155] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.253391][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   55.262162][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   55.271098][  T155] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.278318][  T155] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.286491][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   55.311301][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.325833][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.336253][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   55.346138][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   55.356211][  T151] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.364525][  T151] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.372860][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   55.381860][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   55.390518][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   55.399768][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   55.408919][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   55.420375][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   55.430127][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   55.439705][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   55.455623][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   55.464352][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   55.491844][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   55.500527][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   55.534622][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   55.543807][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   55.553648][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   55.564286][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   55.573586][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   55.582791][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   55.592426][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   55.601414][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   55.610710][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   55.619652][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   55.628759][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   55.641049][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   55.652808][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   55.672890][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.681473][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   55.691716][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   55.714658][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   55.722699][ T4258] Bluetooth: hci0: command 0x041b tx timeout
[   55.724247][ T4242] Bluetooth: hci1: command 0x041b tx timeout
[   55.729189][ T4258] Bluetooth: hci2: command 0x041b tx timeout
[   55.735468][ T4242] Bluetooth: hci3: command 0x041b tx timeout
[   55.742471][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   55.755454][ T4258] Bluetooth: hci4: command 0x041b tx timeout
[   55.760228][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   55.776337][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   55.803591][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   55.819176][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   55.828431][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   55.837392][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   55.852898][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   55.861515][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   55.875069][ T4185] device veth0_vlan entered promiscuous mode
[   55.890792][ T4183] 8021q: adding VLAN 0 to HW filter on device team0
[   55.904359][ T4184] device veth0_vlan entered promiscuous mode
[   55.912221][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   55.928325][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   55.950913][ T4184] device veth1_vlan entered promiscuous mode
[   55.969317][ T4185] device veth1_vlan entered promiscuous mode
[   55.986340][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   55.997228][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   56.008691][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   56.017392][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   56.026608][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   56.037231][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   56.049728][  T151] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.057357][  T151] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.066582][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   56.082050][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   56.091132][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   56.100796][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.108159][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.148376][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   56.158334][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   56.166763][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   56.176794][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   56.186065][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   56.198915][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   56.210185][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   56.223026][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   56.240850][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.258415][ T4184] device veth0_macvtap entered promiscuous mode
[   56.269433][ T4185] device veth0_macvtap entered promiscuous mode
[   56.285634][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   56.296631][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   56.307327][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   56.318279][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   56.327529][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   56.336839][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   56.345540][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   56.373841][ T4185] device veth1_macvtap entered promiscuous mode
[   56.382702][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   56.394491][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   56.404339][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   56.415336][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   56.427295][ T4184] device veth1_macvtap entered promiscuous mode
[   56.443485][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.463538][ T4183] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   56.474742][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.487542][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   56.496590][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   56.504599][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   56.513912][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   56.525142][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   56.535200][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   56.559708][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.571976][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.588588][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   56.597424][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   56.610964][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   56.621613][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   56.631209][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   56.652889][ T4184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.663876][ T4184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.675829][ T4184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.687823][ T4184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.738653][ T4187] device veth0_vlan entered promiscuous mode
[   56.748613][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   56.769457][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   56.788385][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   56.802487][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.820071][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.830760][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   56.842345][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.856565][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.867148][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   56.876079][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   56.886367][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   56.897316][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   56.906616][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   56.915750][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   56.927458][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   56.936289][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   56.951690][ T4187] device veth1_vlan entered promiscuous mode
[   56.971855][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.983261][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.993325][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.006722][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.048736][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   57.059961][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   57.069277][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   57.077992][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   57.089902][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.111767][ T4186] device veth0_vlan entered promiscuous mode
[   57.151439][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   57.165410][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   57.175653][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   57.184528][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   57.224412][ T4187] device veth0_macvtap entered promiscuous mode
[   57.233771][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   57.244852][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   57.258680][ T4186] device veth1_vlan entered promiscuous mode
[   57.265794][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   57.275052][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   57.291310][  T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.292396][ T4187] device veth1_macvtap entered promiscuous mode
[   57.309139][  T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.346858][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   57.399116][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   57.414608][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   57.438300][  T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.448706][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   57.459773][  T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.466243][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   57.478756][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   57.490000][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   57.501743][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.514221][  T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.524389][  T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.534624][  T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.539589][ T4186] device veth0_macvtap entered promiscuous mode
[   57.549937][  T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.555021][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   57.566362][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   57.575213][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   57.584498][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   57.593592][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   57.602155][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   57.611889][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   57.621325][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   57.631244][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   57.644720][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   57.656254][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   57.670916][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   57.684711][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.705210][ T4186] device veth1_macvtap entered promiscuous mode
[   57.719874][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   57.735202][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   57.744893][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   57.765121][ T4187] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.774283][ T4187] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.783627][ T4187] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.795544][ T4187] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.798416][ T4249] Bluetooth: hci4: command 0x040f tx timeout
[   57.822215][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   57.832710][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   57.843094][ T4249] Bluetooth: hci2: command 0x040f tx timeout
[   57.850058][ T4249] Bluetooth: hci3: command 0x040f tx timeout
[   57.856478][ T4249] Bluetooth: hci1: command 0x040f tx timeout
[   57.864807][ T4249] Bluetooth: hci0: command 0x040f tx timeout
[   57.875633][ T4183] device veth0_vlan entered promiscuous mode
[   57.918384][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   57.926462][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   57.945505][ T4183] device veth1_vlan entered promiscuous mode
[   57.985216][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   58.004136][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.023499][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   58.035578][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.049099][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   58.059868][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.071346][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.082063][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   58.092661][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.103728][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   58.115023][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.125796][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   58.137759][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.156692][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.291242][ T4297] loop0: detected capacity change from 0 to 256
[   58.405674][ T4297] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x368b264c, utbl_chksum : 0xe619d30d)
[   59.617914][   T21] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   59.769361][ T4297] exFAT-fs (loop0): IO charset B not found
[   59.867580][    C0] sched: RT throttling activated
[   59.883735][ T4233] Bluetooth: hci0: command 0x0419 tx timeout
[   59.890059][ T4233] Bluetooth: hci1: command 0x0419 tx timeout
[   59.896371][ T4233] Bluetooth: hci3: command 0x0419 tx timeout
[   59.987877][   T21] usb 2-1: Using ep0 maxpacket: 16
[   60.507863][   T21] usb 2-1: config 1 interface 0 altsetting 93 endpoint 0x81 has an invalid bInterval 60, changing to 9
[   60.526065][   T21] usb 2-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 96
[   60.536907][   T21] usb 2-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 1023
[   60.556528][   T21] usb 2-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[   60.576182][ T4233] Bluetooth: hci2: command 0x0419 tx timeout
[   60.582469][ T4233] Bluetooth: hci4: command 0x0419 tx timeout
[   60.604005][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   60.613094][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   60.622310][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   60.623687][   T21] usb 2-1: config 1 interface 0 has no altsetting 0
[   60.635647][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   60.650058][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   60.665090][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   60.683320][ T4186] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.695666][ T4186] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.713916][ T4186] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.725650][ T4186] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.828582][   T21] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   60.836495][ T4183] device veth0_macvtap entered promiscuous mode
[   60.845837][   T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   61.011577][   T21] usb 2-1: SerialNumber: syz
[   61.443403][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   61.480550][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   61.512657][   T21] usb 2-1: can't set config #1, error -71
[   61.525667][   T21] usb 2-1: USB disconnect, device number 2
[   61.541866][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   61.613712][  T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.631289][  T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.666354][ T4183] device veth1_macvtap entered promiscuous mode
[   61.714425][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   61.859126][  T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.884588][  T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.981073][ T4321] loop0: detected capacity change from 0 to 512
[   62.091962][ T4321] =======================================================
[   62.091962][ T4321] WARNING: The mand mount option has been deprecated and
[   62.091962][ T4321]          and is ignored by this kernel. Remove the mand
[   62.091962][ T4321]          option from the mount to silence this warning.
[   62.091962][ T4321] =======================================================
[   63.548417][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.574142][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.584418][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.596297][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.607924][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.620453][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.632147][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.643465][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.660239][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.672407][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.683249][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.703062][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.715206][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.726430][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.739041][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.750002][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.761758][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.775257][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.786211][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   63.795022][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   63.805777][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   63.815386][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   63.843983][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   64.456105][ T4183] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.486853][ T4183] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.502376][ T4183] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.529795][ T4183] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.563437][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.598666][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.611081][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.653999][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.665642][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   64.684423][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   64.968035][ T4345] loop0: detected capacity change from 0 to 512
[   65.027877][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!!
[   65.037341][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!!
[   66.870349][ T4332] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[   66.932912][ T4344] loop2: detected capacity change from 0 to 2048
[   67.571987][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.582087][ T4345] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   67.587895][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #3c2!!!
[   67.594251][ T4345] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   67.604342][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #240!!!
[   67.692415][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.765166][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   67.820595][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.823007][ T4350] loop1: detected capacity change from 0 to 128
[   67.829339][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.861978][ T4332] usb 2-1: device descriptor read/all, error -71
[   67.915209][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   67.981657][ T4354] loop2: detected capacity change from 0 to 512
[   68.010459][ T4354] EXT4-fs (loop2): Test dummy encryption mode enabled
[   68.033259][ T4353] process '+}[@' launched '/dev/fd/9' with NULL argv: empty string added
[   68.080253][ T4354] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   68.146431][ T4354] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   68.210866][ T4354] EXT4-fs (loop2): 1 truncate cleaned up
[   68.216566][ T4354] EXT4-fs (loop2): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000000,test_dummy_encryption=v1,init_itable=0x000000000000005c,noblock_validity,debug_want_extra_isize=0x0000000000000006,,errors=continue. Quota mode: none.
[   68.308093][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[   68.484837][ T4360] loop4: detected capacity change from 0 to 512
[   68.537610][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!!
[   68.548123][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!!
[   68.566829][ T4362] syz.2.14[4362] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   68.567450][ T4362] syz.2.14[4362] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   68.695256][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[   68.719245][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[   68.730221][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[   70.023451][ T4360] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   70.090605][ T4360] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   70.122977][ T4360] EXT4-fs (loop4): 1 truncate cleaned up
[   70.128996][ T4360] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nodiscard,quota,. Quota mode: writeback.
[   70.513142][ T4376] loop2: detected capacity change from 0 to 256
[   70.953635][ T4380] loop1: detected capacity change from 0 to 1024
[   71.858929][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[   71.865823][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[   72.913907][ T4380] EXT4-fs (loop1): Ignoring removed bh option
[   72.921525][ T4380] EXT4-fs (loop1): inline encryption not supported
[   73.904393][ T4380] EXT4-fs: failed to create workqueue
[   73.910356][ T4380] EXT4-fs (loop1): mount failed
[   74.035999][ T4383] loop4: detected capacity change from 0 to 1024
[   74.080574][ T4383] EXT4-fs (loop4): Ignoring removed bh option
[   74.107478][ T4383] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[   74.167469][ T4383] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,bh,nomblk_io_submit,,errors=continue. Quota mode: writeback.
[   76.609425][ T4409] loop0: detected capacity change from 0 to 256
[   76.804115][ T1324] cfg80211: failed to load regulatory.db
[   78.862817][ T4406] loop1: detected capacity change from 0 to 1024
[   79.044346][ T4409] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x368b264c, utbl_chksum : 0xe619d30d)
[   79.069089][ T4409] exFAT-fs (loop0): IO charset B not found
[   79.298505][ T4414] netlink: 96 bytes leftover after parsing attributes in process `syz.2.29'.
[   79.455479][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): rose0: link becomes ready
[   81.381129][ T4439] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   81.475196][   T26] audit: type=1326 audit(1755650324.203:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4437 comm="syz.2.35" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa6860b2be9 code=0x0
[   81.576537][ T4439] 9pnet: Insufficient options for proto=fd
[   82.070198][ T4454] loop4: detected capacity change from 0 to 8192
[   83.817979][ T4450] chnl_net:caif_netlink_parms(): no params data found
[   83.877928][ T2239] Bluetooth: hci5: command 0x0409 tx timeout
[   83.941633][ T4460] loop2: detected capacity change from 0 to 256
[   84.134608][ T4466] loop1: detected capacity change from 0 to 256
[   85.273554][ T4473] loop0: detected capacity change from 0 to 512
[   86.871336][ T4256] Bluetooth: hci5: command 0x041b tx timeout
[   87.456497][ T4450] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.565936][ T4450] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.574883][ T4450] device bridge_slave_0 entered promiscuous mode
[   88.264588][ T4450] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.364823][ T4497] loop1: detected capacity change from 0 to 1024
[   88.374112][ T4450] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.417511][ T4450] device bridge_slave_1 entered promiscuous mode
[   88.497115][ T4503] loop2: detected capacity change from 0 to 128
[   88.560672][ T4450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.575552][ T4497] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   88.642862][ T4509] loop4: detected capacity change from 0 to 128
[   88.697646][ T2239] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[   88.754192][ T4450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.820619][ T4509] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[   89.235209][ T4509] FAT-fs (loop4): FAT read failed (blocknr 255)
[   89.310570][ T4256] Bluetooth: hci5: command 0x040f tx timeout
[   89.318040][   T26] audit: type=1800 audit(1755650332.957:3): pid=4511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.50" name="file1" dev="loop1" ino=15 res=0 errno=0
[   89.777915][ T2239] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   90.358171][ T2239] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64
[   90.456433][ T2239] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   90.619407][ T2239] usb 1-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.00
[   90.948079][ T4524] x_tables: duplicate underflow at hook 2
[   91.587308][ T4526] loop1: detected capacity change from 0 to 512
[   91.714277][ T2239] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.499470][ T4534] loop4: detected capacity change from 0 to 256
[   93.075387][ T2239] usb 1-1: config 0 descriptor??
[   93.103588][ T4526] EXT4-fs (loop1): orphan cleanup on readonly fs
[   93.111069][ T4526] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.56: bad orphan inode 13
[   93.123513][ T4526] ext4_test_bit(bit=12, block=18) = 1
[   93.129054][ T4526] is_bad_inode(inode)=0
[   93.133455][ T4526] NEXT_ORPHAN(inode)=2130706432
[   93.138658][ T4526] max_ino=32
[   93.142134][ T4526] i_nlink=1
[   93.145700][ T4526] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   93.497942][ T2239] usb 1-1: can't set config #0, error -71
[   93.513436][ T2239] usb 1-1: USB disconnect, device number 2
[   93.525727][    T7] Bluetooth: hci5: command 0x0419 tx timeout
[   93.601663][ T4534] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[   93.646395][ T4538] netlink: 96 bytes leftover after parsing attributes in process `syz.0.58'.
[   94.091927][ T4450] team0: Port device team_slave_0 added
[   94.218107][ T4450] team0: Port device team_slave_1 added
[   94.510865][ T4450] batman_adv: batadv0: Adding interface: batadv_slave_0
[   94.596838][ T4450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.745743][ T4450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   94.760170][ T4450] batman_adv: batadv0: Adding interface: batadv_slave_1
[   94.767679][ T4450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.795030][ T4450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   95.028434][ T4450] device hsr_slave_0 entered promiscuous mode
[   95.138279][ T4450] device hsr_slave_1 entered promiscuous mode
[   95.172300][ T4450] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   95.202861][ T4450] Cannot create hsr debugfs directory
[   96.420886][ T4561] loop4: detected capacity change from 0 to 256
[   96.900592][ T4561] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d)
[   97.094477][ T4564] netlink: 4 bytes leftover after parsing attributes in process `syz.1.63'.
[   97.204141][ T4570] loop4: detected capacity change from 0 to 256
[   97.217348][ T4569] futex_wake_op: syz.0.65 tries to shift op by -1; fix this program
[   97.390538][ T4570] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x368b264c, utbl_chksum : 0xe619d30d)
[   97.437677][ T2239] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   97.454933][ T4573] loop0: detected capacity change from 0 to 128
[   97.667755][ T2239] usb 2-1: device descriptor read/64, error -71
[   98.967350][ T4570] exFAT-fs (loop4): IO charset B not found
[  100.697726][ T2239] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  101.051035][ T4450] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  101.075033][ T4450] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  101.135604][ T4450] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  101.168714][ T4587] binder_alloc: 4586: binder_alloc_buf, no vma
[  101.191002][ T4450] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  101.271796][ T4593] netlink: 96 bytes leftover after parsing attributes in process `syz.4.70'.
[  101.548509][ T4450] 8021q: adding VLAN 0 to HW filter on device bond0
[  101.576597][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  101.597533][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  101.624804][ T4450] 8021q: adding VLAN 0 to HW filter on device team0
[  101.655928][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  101.674225][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  101.686606][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.693867][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[  101.712053][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  101.745023][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  101.770208][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  101.801147][  T155] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.808755][  T155] bridge0: port 2(bridge_slave_1) entered forwarding state
[  101.823351][ T4313] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  101.845521][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  101.899286][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  101.920874][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  101.944853][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  101.984510][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  102.024265][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  102.038863][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  102.200117][ T4313] usb 5-1: Using ep0 maxpacket: 16
[  102.262745][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  102.283059][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  102.318557][ T4313] usb 5-1: config 1 has an invalid descriptor of length 60, skipping remainder of the config
[  102.543310][ T4313] usb 5-1: config 1 interface 0 altsetting 93 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[  102.669900][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  102.811915][ T4313] usb 5-1: config 1 interface 0 has no altsetting 0
[  102.864244][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  103.097891][ T4313] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  103.107098][ T4313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  103.128037][ T4313] usb 5-1: SerialNumber: syz
[  103.181058][ T4313] cdc_ether 5-1:1.0: skipping garbage
[  103.186872][ T4313] usb 5-1: bad CDC descriptors
[  103.594777][ T4617] loop1: detected capacity change from 0 to 512
[  103.831653][ T4617] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  103.848010][ T4617] EXT4-fs (loop1): orphan cleanup on readonly fs
[  103.869640][ T4617] EXT4-fs warning (device loop1): ext4_enable_quotas:6459: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  103.884560][ T4617] EXT4-fs (loop1): Cannot turn on quotas: error -22
[  103.901801][ T4617] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2941: inode #16: comm syz.1.74: corrupted xattr block 31
[  103.923738][ T4617] EXT4-fs warning (device loop1): ext4_evict_inode:302: xattr delete (err -117)
[  103.933499][ T4617] EXT4-fs (loop1): 1 orphan inode deleted
[  103.939508][ T4617] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  104.266064][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  104.288872][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  104.354134][ T4450] 8021q: adding VLAN 0 to HW filter on device batadv0
[  104.823853][ T4626] loop0: detected capacity change from 0 to 256
[  105.680211][ T4313] usb 5-1: USB disconnect, device number 2
[  105.814686][ T4626] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  105.815421][ T4632] loop4: detected capacity change from 0 to 1024
[  105.892662][ T4634] loop1: detected capacity change from 0 to 512
[  106.015104][ T4634] EXT4-fs (loop1): inline encryption not supported
[  106.138261][ T4634] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  106.189425][ T4632] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  106.228264][ T4634] EXT4-fs (loop1): 1 truncate cleaned up
[  106.248761][ T4634] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000002000000,block_validity,inlinecrypt,noblock_validity,usrjquota=,,errors=continue. Quota mode: none.
[  106.385344][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  106.385734][ T4645] loop0: detected capacity change from 0 to 4096
[  106.420454][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  106.430416][ T4649] netlink: 96 bytes leftover after parsing attributes in process `syz.4.80'.
[  106.516028][ T4648] tipc: Started in network mode
[  106.530858][ T4648] tipc: Node identity 7294bdb194e3, cluster identity 4711
[  106.580991][ T4648] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  106.617279][ T4645] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  106.635232][ T4651] device syzkaller0 entered promiscuous mode
[  106.673263][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  106.688788][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  106.740261][ T4450] device veth0_vlan entered promiscuous mode
[  106.779279][ T4651] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) !
[  106.808796][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  106.828274][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  106.973505][ T4646] tipc: Resetting bearer <eth:syzkaller0>
[  107.085736][ T4646] tipc: Disabling bearer <eth:syzkaller0>
[  107.134844][ T4450] device veth1_vlan entered promiscuous mode
[  107.297184][ T4450] device veth0_macvtap entered promiscuous mode
[  107.348339][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  107.378950][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  107.417361][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  107.457213][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  107.484190][ T4450] device veth1_macvtap entered promiscuous mode
[  107.526842][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  107.547313][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  107.562200][ T4233] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[  107.585163][ T4450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  107.596761][ T4450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.613466][ T4450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  107.624527][ T4450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.642417][ T4450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  107.655914][ T4450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.673882][ T4450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  107.685329][ T4450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.701771][ T4450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  107.713605][ T4450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.740109][ T4450] batman_adv: batadv0: Interface activated: batadv_slave_0
[  107.756854][ T4637] chnl_net:caif_netlink_parms(): no params data found
[  107.776007][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  107.788068][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  107.798784][ T4450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  107.810926][ T4450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.821426][ T4450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  107.833503][ T4450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.843789][ T4450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  107.854627][ T4450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.864835][ T4450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  107.876206][ T4655] loop4: detected capacity change from 0 to 40427
[  107.876235][ T4450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.876269][ T4450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  107.905999][ T4450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.920923][ T4450] batman_adv: batadv0: Interface activated: batadv_slave_1
[  107.935055][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  107.970425][ T4233] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  107.983728][ T4655] F2FS-fs (loop4): invalid crc value
[  107.985080][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  108.002011][ T4233] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  108.022824][ T4450] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  108.033294][ T4655] F2FS-fs (loop4): Found nat_bits in checkpoint
[  108.038026][ T4450] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  108.050793][ T4233] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  108.061870][ T4450] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  108.061913][ T4450] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  108.104465][ T4332] Bluetooth: hci4: command 0x0409 tx timeout
[  108.165286][ T4655] F2FS-fs (loop4): Inconsistent segment (8) type [1, 0] in SSA and SIT
[  108.243902][ T4668] syz.0.84 uses obsolete (PF_INET,SOCK_PACKET)
[  108.262446][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready
[  108.284125][ T4637] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.297376][ T4668] ksmbd: Unknown IPC event: 6, ignore.
[  108.303060][ T4637] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.310533][ T4233] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  108.321318][ T4233] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.329852][ T4233] usb 2-1: Product: syz
[  108.334419][ T4233] usb 2-1: Manufacturer: syz
[  108.334972][ T4637] device bridge_slave_0 entered promiscuous mode
[  108.347652][ T4233] usb 2-1: SerialNumber: syz
[  108.388949][ T4660] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  108.408969][ T4233] usb 2-1: selecting invalid altsetting 1
[  108.613667][ T4637] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.624764][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.633564][ T4637] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.641935][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.643681][ T4233] cdc_ncm 2-1:1.0: bind() failure
[  108.660740][ T4637] device bridge_slave_1 entered promiscuous mode
[  108.875917][ T4233] usb 2-1: USB disconnect, device number 7
[  108.908329][   T13] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[  108.924400][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  108.949517][ T4637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  108.967609][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.976953][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.994886][ T4637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  109.007004][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  109.053647][ T4303] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.086068][ T4637] team0: Port device team_slave_0 added
[  109.113257][ T4637] team0: Port device team_slave_1 added
[  109.146115][ T4637] batman_adv: batadv0: Adding interface: batadv_slave_0
[  109.153862][ T4637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  109.203283][ T4637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  109.298563][ T4303] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.435202][ T4637] batman_adv: batadv0: Adding interface: batadv_slave_1
[  109.521387][ T4637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  109.927290][ T4637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  109.995954][ T4679] loop0: detected capacity change from 0 to 128
[  110.007713][   T13] usb 5-1: unable to get BOS descriptor or descriptor too short
[  110.039325][ T4303] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.121834][ T4256] Bluetooth: hci4: command 0x041b tx timeout
[  110.257803][   T13] usb 5-1: unable to read config index 0 descriptor/start: -71
[  110.265726][   T13] usb 5-1: can't read configurations, error -71
[  110.313784][ T4685] futex_wake_op: syz.4.88 tries to shift op by -1; fix this program
[  111.431606][ T4303] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.475279][ T4637] device hsr_slave_0 entered promiscuous mode
[  111.489171][ T4637] device hsr_slave_1 entered promiscuous mode
[  111.507718][ T4637] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  111.515669][ T4637] Cannot create hsr debugfs directory
[  111.537775][ T4691] netlink: 8 bytes leftover after parsing attributes in process `syz.5.89'.
[  111.552748][ T4691] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  111.937207][ T4700] loop4: detected capacity change from 0 to 128
[  112.172129][ T4303] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.207697][   T13] Bluetooth: hci4: command 0x040f tx timeout
[  112.275848][ T4303] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.406826][ T4303] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.559753][ T4303] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.582297][ T4707] loop1: detected capacity change from 0 to 4096
[  112.671172][ T4707] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  112.905562][   T26] audit: type=1800 audit(1755650356.637:4): pid=4719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.92" name="bus" dev="loop1" ino=18 res=0 errno=0
[  112.969189][ T4699] loop5: detected capacity change from 0 to 40427
[  113.003390][ T4637] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  113.031743][ T4699] F2FS-fs (loop5): invalid crc value
[  113.049201][ T4637] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  113.108322][ T4699] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  113.135901][ T4637] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  113.306902][ T4699] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  113.348281][ T4723] attempt to access beyond end of device
[  113.348281][ T4723] loop5: rw=2049, want=45104, limit=40427
[  113.385464][ T4637] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  113.834055][ T4637] 8021q: adding VLAN 0 to HW filter on device bond0
[  113.945465][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  113.969965][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  114.029278][ T4637] 8021q: adding VLAN 0 to HW filter on device team0
[  114.075692][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  114.094966][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  114.148075][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.155352][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[  114.193018][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  114.264160][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  114.277913][   T13] Bluetooth: hci4: command 0x0419 tx timeout
[  114.289188][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  114.322378][ T4749] loop1: detected capacity change from 0 to 512
[  114.338835][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.346151][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[  114.394891][ T4749] EXT4-fs (loop1): Ignoring removed orlov option
[  114.480361][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  114.501870][ T4753] loop5: detected capacity change from 0 to 256
[  114.523311][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  114.566809][ T4753] exfat: Deprecated parameter 'utf8'
[  114.599335][ T4749] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,orlov,auto_da_alloc,,errors=continue. Quota mode: writeback.
[  114.617708][ T4753] exfat: Deprecated parameter 'utf8'
[  114.623285][ T4753] exfat: Deprecated parameter 'utf8'
[  114.661546][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  114.689221][ T4749] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  114.724509][ T4753] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d)
[  114.737036][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  114.775063][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  114.929301][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  115.020183][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  115.245244][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  115.305500][ T4762] loop5: detected capacity change from 0 to 256
[  115.314480][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  115.390652][ T4637] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  115.471431][ T4637] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  115.591435][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  115.614475][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  115.720604][ T4768] loop5: detected capacity change from 0 to 256
[  117.115932][ T4779] loop1: detected capacity change from 0 to 256
[  117.285729][ T4779] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  118.797300][ T4637] 8021q: adding VLAN 0 to HW filter on device batadv0
[  118.898875][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  118.907066][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  118.910119][ T4791] loop5: detected capacity change from 0 to 40427
[  119.014677][ T4791] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x1ffff
[  119.026750][ T4791] F2FS-fs (loop5): invalid crc value
[  119.074597][ T4791] F2FS-fs (loop5): Found nat_bits in checkpoint
[  119.128018][ T4791] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  120.218493][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  120.239721][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  120.368476][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  120.388357][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  120.498884][ T4637] device veth0_vlan entered promiscuous mode
[  120.533663][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  120.557519][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  120.583562][ T4637] device veth1_vlan entered promiscuous mode
[  120.683147][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  120.734933][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  120.778480][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  120.808563][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  121.049479][ T4637] device veth0_macvtap entered promiscuous mode
[  121.591286][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  121.617883][ T4637] device veth1_macvtap entered promiscuous mode
[  121.833448][ T4303] device hsr_slave_0 left promiscuous mode
[  121.862070][ T4303] device hsr_slave_1 left promiscuous mode
[  121.902544][ T4303] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  121.945795][ T4303] batman_adv: batadv0: Removing interface: batadv_slave_0
[  121.993540][ T4303] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  122.014443][ T4303] batman_adv: batadv0: Removing interface: batadv_slave_1
[  122.205404][ T4303] device bridge_slave_1 left promiscuous mode
[  122.411457][ T4303] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.555289][ T4303] device bridge_slave_0 left promiscuous mode
[  122.581429][ T4303] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.806430][ T4303] device hsr_slave_0 left promiscuous mode
[  122.819538][ T4303] device hsr_slave_1 left promiscuous mode
[  122.836784][ T4303] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  122.874535][ T4303] batman_adv: batadv0: Removing interface: batadv_slave_0
[  124.733142][ T4860] loop4: detected capacity change from 0 to 128
[  124.919227][ T4863] loop0: detected capacity change from 0 to 256
[  124.967451][ T4303] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  124.998077][ T4303] batman_adv: batadv0: Removing interface: batadv_slave_1
[  125.055081][ T4303] device bridge_slave_1 left promiscuous mode
[  125.087184][ T4303] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.197177][ T4871] overlayfs: missing 'lowerdir'
[  125.350962][ T4303] device bridge_slave_0 left promiscuous mode
[  125.357220][ T4303] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.474229][ T4303] device veth1_macvtap left promiscuous mode
[  125.513957][ T4303] device veth0_macvtap left promiscuous mode
[  125.598054][ T4303] device veth1_vlan left promiscuous mode
[  125.604952][ T4874] netlink: 24 bytes leftover after parsing attributes in process `syz.0.116'.
[  125.640695][ T4303] device veth0_vlan left promiscuous mode
[  125.693075][ T4303] device veth1_macvtap left promiscuous mode
[  125.711974][ T4303] device veth0_macvtap left promiscuous mode
[  125.765799][ T4303] device veth1_vlan left promiscuous mode
[  125.792202][ T4303] device veth0_vlan left promiscuous mode
[  128.183985][ T4303] team0 (unregistering): Port device team_slave_1 removed
[  128.196771][ T4303] team0 (unregistering): Port device team_slave_0 removed
[  128.217435][ T4303] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  128.634041][ T4303] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  128.785408][ T4303] bond0 (unregistering): Released all slaves
[  129.067505][ T4303] team0 (unregistering): Port device team_slave_1 removed
[  129.114139][ T4303] team0 (unregistering): Port device team_slave_0 removed
[  129.125991][ T4303] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  129.142555][ T4303] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  129.580891][ T4303] bond0 (unregistering): Released all slaves
[  129.700750][ T4637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  129.711913][ T4637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.721826][ T4637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  129.738538][ T4637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.750238][ T4637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  129.763577][ T4637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.780016][ T4637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  129.791026][ T4637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.819065][ T4637] batman_adv: batadv0: Interface activated: batadv_slave_0
[  129.839087][ T4637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  129.860283][ T4637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.877165][ T4637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  129.896454][ T4637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.907584][ T4637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  129.925481][ T4637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.938420][ T4637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  129.949008][ T4637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.960172][ T4637] batman_adv: batadv0: Interface activated: batadv_slave_1
[  129.971045][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  129.979965][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  129.989109][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  129.998140][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  130.067616][ T4911] loop1: detected capacity change from 0 to 16
[  130.791629][ T4911] erofs: (device loop1): mounted with root inode @ nid 36.
[  130.824473][ T4911] attempt to access beyond end of device
[  130.824473][ T4911] loop1: rw=0, want=34359738368, limit=16
[  131.734264][ T4637] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  131.975579][ T4637] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  132.076785][ T4637] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  132.123792][ T4637] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  132.391608][ T4935] binder: BINDER_SET_CONTEXT_MGR already set
[  132.755317][ T4935] binder: 4934:4935 ioctl 4018620d 2000000002c0 returned -16
[  132.768017][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  132.777112][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  133.180075][ T4769] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  133.212320][ T4769] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  133.540948][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  133.667119][  T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  133.702235][  T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  133.798159][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  133.909148][ T4955] netlink: 24 bytes leftover after parsing attributes in process `syz.1.137'.
[  134.083374][ T4961] loop0: detected capacity change from 0 to 512
[  135.592018][ T4961] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities
[  136.917093][ T4987] binder: 4985:4987 ioctl c0306201 200000000240 returned -11
[  138.002925][ T5005] loop4: detected capacity change from 0 to 256
[  138.047022][ T5005] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb5f96684, utbl_chksum : 0xe619d30d)
[  138.535353][ T5004] x_tables: duplicate underflow at hook 3
[  138.604881][ T5010] loop6: detected capacity change from 0 to 128
[  138.903534][ T5010] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  139.009394][ T5010] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  140.685866][ T5035] loop5: detected capacity change from 0 to 256
[  140.719460][ T5037] binder: BINDER_SET_CONTEXT_MGR already set
[  140.742138][ T5037] binder: 5033:5037 ioctl 4018620d 2000000002c0 returned -16
[  141.207401][ T5016] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.216333][ T5016] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.175164][ T5066] loop4: detected capacity change from 0 to 512
[  143.737901][ T5066] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  144.035046][ T5066] EXT4-fs (loop4): 1 truncate cleaned up
[  144.041462][ T5066] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nodiscard,quota,. Quota mode: writeback.
[  144.732734][ T5072] loop4: detected capacity change from 0 to 256
[  145.109466][ T5016] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  145.175276][ T5016] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  145.533105][ T5081] loop5: detected capacity change from 0 to 4096
[  145.576767][ T5081] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  145.937585][ T5085] binder: 5084:5085 ioctl c0306201 200000000240 returned -11
[  146.093974][ T5093] loop6: detected capacity change from 0 to 1024
[  146.819148][ T5097] loop5: detected capacity change from 0 to 128
[  146.891089][ T5097] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  146.943051][ T5097] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  147.542681][ T5016] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  147.564718][ T5016] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  147.623993][ T5016] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  147.638305][ T5112] loop4: detected capacity change from 0 to 512
[  147.644828][ T5016] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  147.691770][ T5112] EXT4-fs (loop4): Ignoring removed orlov option
[  147.744479][ T5112] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,orlov,auto_da_alloc,,errors=continue. Quota mode: writeback.
[  147.782479][ T5112] ext4 filesystem being mounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  148.450029][ T5118] loop5: detected capacity change from 0 to 128
[  148.666997][ T5123] loop1: detected capacity change from 0 to 4096
[  148.770268][ T5126] loop0: detected capacity change from 0 to 256
[  150.051509][ T5123] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  151.507359][ T5165] loop4: detected capacity change from 0 to 128
[  151.560524][ T5171] netlink: 8 bytes leftover after parsing attributes in process `syz.5.183'.
[  151.819716][ T5165] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  152.077838][ T5165] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  152.594822][ T5183] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  153.517819][ T2239] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  153.746265][ T5211] loop0: detected capacity change from 0 to 256
[  153.762323][ T5213] loop5: detected capacity change from 0 to 256
[  153.777867][ T5211] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x368b264c, utbl_chksum : 0xe619d30d)
[  153.791395][ T2239] usb 7-1: Using ep0 maxpacket: 32
[  153.890678][ T5213] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  153.927957][ T2239] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  153.956175][ T5211] exFAT-fs (loop0): IO charset B not found
[  153.970670][ T2239] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  153.981062][ T5211] xt_hashlimit: max too large, truncated to 1048576
[  154.035318][ T2239] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  154.087726][ T2239] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.612719][ T5222] input: syz0 as /devices/virtual/input/input7
[  154.677153][ T2239] usb 7-1: config 0 descriptor??
[  154.744345][ T2239] hub 7-1:0.0: USB hub found
[  154.947952][ T2239] hub 7-1:0.0: 1 port detected
[  155.950810][ T5242] loop4: detected capacity change from 0 to 256
[  156.005984][ T5242] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x468b264c, utbl_chksum : 0xe619d30d)
[  156.102942][ T2239] usb 7-1: USB disconnect, device number 2
[  156.186036][ T5242] exFAT-fs (loop4): IO charset B not found
[  156.387509][ T5250] loop4: detected capacity change from 0 to 128
[  157.535210][ T5271] loop6: detected capacity change from 0 to 128
[  157.746385][ T5271] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  157.793335][ T5271] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  158.891789][ T5288] blk_update_request: I/O error, dev loop13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  158.913552][ T5288] F2FS-fs (loop13): Unable to read 1th superblock
[  158.920815][ T5288] blk_update_request: I/O error, dev loop13, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  158.946080][ T5288] F2FS-fs (loop13): Unable to read 2th superblock
[  159.716986][ T5270] IPVS: length: 233 != 8
[  159.725008][ T5297] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) !
[  160.875738][ T5315] loop1: detected capacity change from 0 to 512
[  161.251069][ T5315] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  161.263623][ T5315] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  161.346830][ T5327] input: syz1 as /devices/virtual/input/input8
[  161.536733][   T26] audit: type=1326 audit(1755650406.033:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5307 comm="syz.1.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51cc3fabe9 code=0x7ffc0000
[  161.730876][   T26] audit: type=1326 audit(1755650406.033:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5307 comm="syz.1.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51cc3fabe9 code=0x7ffc0000
[  161.898172][   T26] audit: type=1326 audit(1755650406.033:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5307 comm="syz.1.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f51cc3fabe9 code=0x7ffc0000
[  161.928162][   T26] audit: type=1326 audit(1755650406.043:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5307 comm="syz.1.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51cc3fabe9 code=0x7ffc0000
[  162.308189][ T5338] binder_alloc: 5336: binder_alloc_buf, no vma
[  162.356635][ T5338] binder: 5336:5338 ioctl c0306201 200000000240 returned -11
[  162.366342][   T26] audit: type=1326 audit(1755650406.043:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5307 comm="syz.1.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51cc3fabe9 code=0x7ffc0000
[  162.531282][ T5345] loop4: detected capacity change from 0 to 2048
[  162.538597][ T5347] loop1: detected capacity change from 0 to 128
[  162.539489][ T5344] input: syz1 as /devices/virtual/input/input9
[  162.575272][ T4202] Alternate GPT is invalid, using primary GPT.
[  162.589013][   T26] audit: type=1326 audit(1755650406.103:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5307 comm="syz.1.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f51cc3fabe9 code=0x7ffc0000
[  162.625742][ T4202]  loop4: p2 p3 p7
[  162.640799][ T5347] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  162.672979][   T26] audit: type=1326 audit(1755650406.103:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5307 comm="syz.1.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51cc3fabe9 code=0x7ffc0000
[  162.698636][ T5347] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  162.812410][ T5345] Alternate GPT is invalid, using primary GPT.
[  162.812565][ T5345]  loop4: p2 p3 p7
[  162.992137][   T26] audit: type=1326 audit(1755650406.103:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5307 comm="syz.1.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51cc3fabe9 code=0x7ffc0000
[  162.992172][   T26] audit: type=1326 audit(1755650406.113:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5307 comm="syz.1.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f51cc3fabe9 code=0x7ffc0000
[  162.992196][   T26] audit: type=1326 audit(1755650406.113:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5307 comm="syz.1.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51cc3fabe9 code=0x7ffc0000
[  163.254434][ T1324] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  163.777985][ T1324] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  163.805142][ T1324] usb 7-1: config 1 has an invalid descriptor of length 98, skipping remainder of the config
[  163.857290][ T1324] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[  163.894680][ T1324] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 23624, setting to 64
[  164.727930][ T1324] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  164.779071][ T1324] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  164.824538][ T1324] usb 7-1: Product: syz
[  164.853066][ T1324] usb 7-1: Manufacturer: syz
[  164.961321][ T1324] cdc_wdm 7-1:1.0: skipping garbage
[  164.971886][ T1324] cdc_wdm 7-1:1.0: skipping garbage
[  165.012873][ T1324] cdc_wdm: probe of 7-1:1.0 failed with error -22
[  165.163976][ T5353] udc-core: couldn't find an available UDC or it's busy
[  165.202316][ T5353] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  165.237711][ T4320] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  165.402274][ T5355] Zero length message leads to an empty skb
[  165.471899][ T1107] usb 7-1: USB disconnect, device number 3
[  165.597891][ T4320] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  165.639079][ T4320] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  165.874157][ T4320] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  165.904794][ T4320] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.922230][ T4320] usb 6-1: Product: syz
[  165.926862][ T4320] usb 6-1: Manufacturer: syz
[  165.937047][ T4320] usb 6-1: SerialNumber: syz
[  165.998045][ T5374] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  166.368262][ T5396] loop6: detected capacity change from 0 to 1024
[  166.418001][ T5384] IPVS: length: 233 != 8
[  166.857399][ T5396] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  167.427696][ T4320] cdc_ncm 6-1:1.0: failed to get mac address
[  167.448407][ T4320] cdc_ncm 6-1:1.0: bind() failure
[  167.517950][ T4320] cdc_ncm: probe of 6-1:1.1 failed with error -71
[  167.537689][ T4320] cdc_mbim: probe of 6-1:1.1 failed with error -71
[  167.767698][ T4320] usbtest: probe of 6-1:1.1 failed with error -71
[  167.950926][ T4320] usb 6-1: USB disconnect, device number 2
[  168.621267][ T5424] loop4: detected capacity change from 0 to 128
[  168.681916][ T5426] loop5: detected capacity change from 0 to 128
[  168.758186][ T5424] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  168.964036][ T5424] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  169.045483][ T5426] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  169.350577][ T5426] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  169.635372][ T5441] loop1: detected capacity change from 0 to 1024
[  169.810236][ T5441] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  169.948228][ T5441] EXT4-fs (loop1): shut down requested (0)
[  170.429568][ T5434] chnl_net:caif_netlink_parms(): no params data found
[  171.686426][ T5434] bridge0: port 1(bridge_slave_0) entered blocking state
[  171.736333][ T5434] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.744595][ T4233] Bluetooth: hci3: command 0x0409 tx timeout
[  171.790285][ T5434] device bridge_slave_0 entered promiscuous mode
[  171.866283][ T5434] bridge0: port 2(bridge_slave_1) entered blocking state
[  171.901828][ T5474] futex_wake_op: syz.5.240 tries to shift op by -1; fix this program
[  171.975860][ T5434] bridge0: port 2(bridge_slave_1) entered disabled state
[  172.008824][ T5434] device bridge_slave_1 entered promiscuous mode
[  172.725754][ T5434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  172.809533][ T5434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  173.079209][ T5434] team0: Port device team_slave_0 added
[  173.096817][ T5483] IPVS: length: 233 != 8
[  173.135563][ T5434] team0: Port device team_slave_1 added
[  173.283246][ T5434] batman_adv: batadv0: Adding interface: batadv_slave_0
[  173.320925][ T5434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  173.467589][ T5434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  173.522111][ T5434] batman_adv: batadv0: Adding interface: batadv_slave_1
[  173.575831][ T5434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  173.797785][ T4233] Bluetooth: hci3: command 0x041b tx timeout
[  173.809286][ T5434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  174.006001][ T5434] device hsr_slave_0 entered promiscuous mode
[  174.053857][ T5494] loop6: detected capacity change from 0 to 40427
[  174.067340][ T5434] device hsr_slave_1 entered promiscuous mode
[  174.074182][ T5434] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  174.081823][ T5434] Cannot create hsr debugfs directory
[  174.124155][ T5494] F2FS-fs (loop6): build fault injection attr: rate: 771, type: 0x1ffff
[  174.136149][ T5494] F2FS-fs (loop6): invalid crc value
[  174.178037][ T5494] F2FS-fs (loop6): Found nat_bits in checkpoint
[  174.218675][   T13] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  174.243567][ T5494] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  175.619908][   T13] usb 6-1: Using ep0 maxpacket: 16
[  175.662973][ T5434] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  175.749311][   T13] usb 6-1: config 0 has no interfaces?
[  175.797890][ T4332] Bluetooth: hci0: command 0x0406 tx timeout
[  175.805700][ T4332] Bluetooth: hci2: command 0x0406 tx timeout
[  175.877647][ T4233] Bluetooth: hci3: command 0x040f tx timeout
[  175.937950][   T13] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  175.951456][   T13] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.962147][   T13] usb 6-1: Product: syz
[  175.966407][   T13] usb 6-1: Manufacturer: syz
[  175.975354][   T13] usb 6-1: SerialNumber: syz
[  175.993801][   T13] usb 6-1: config 0 descriptor??
[  176.183807][ T5434] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  176.194333][ T4637] attempt to access beyond end of device
[  176.194333][ T4637] loop6: rw=2049, want=45104, limit=40427
[  176.313544][ T5434] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  176.476086][ T5434] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  177.750689][ T5434] 8021q: adding VLAN 0 to HW filter on device bond0
[  177.819290][ T5541] loop1: detected capacity change from 0 to 16
[  177.861368][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  177.932046][ T5541] erofs: (device loop1): mounted with root inode @ nid 36.
[  177.969015][ T5541] erofs: (device loop1): z_erofs_fill_inode_lazy: unknown compression format 1 for nid 36, please upgrade kernel
[  177.981647][ T5541] erofs: (device loop1): z_erofs_readahead: readahead error at page 26 @ nid 36
[  177.990871][ T5541] erofs: (device loop1): z_erofs_fill_inode_lazy: unknown compression format 1 for nid 36, please upgrade kernel
[  178.003022][ T5541] erofs: (device loop1): z_erofs_readahead: readahead error at page 25 @ nid 36
[  178.013456][ T5541] erofs: (device loop1): z_erofs_fill_inode_lazy: unknown compression format 1 for nid 36, please upgrade kernel
[  178.025597][ T5541] erofs: (device loop1): z_erofs_readahead: readahead error at page 24 @ nid 36
[  178.034795][ T5541] erofs: (device loop1): z_erofs_fill_inode_lazy: unknown compression format 1 for nid 36, please upgrade kernel
[  178.046880][ T5541] erofs: (device loop1): z_erofs_readahead: readahead error at page 23 @ nid 36
[  178.056467][ T5541] erofs: (device loop1): z_erofs_fill_inode_lazy: unknown compression format 1 for nid 36, please upgrade kernel
[  178.068593][ T5541] erofs: (device loop1): z_erofs_readahead: readahead error at page 22 @ nid 36
[  178.077923][ T5541] erofs: (device loop1): z_erofs_fill_inode_lazy: unknown compression format 1 for nid 36, please upgrade kernel
[  178.090127][ T5541] erofs: (device loop1): z_erofs_readahead: readahead error at page 21 @ nid 36
[  178.099667][ T5541] erofs: (device loop1): z_erofs_fill_inode_lazy: unknown compression format 1 for nid 36, please upgrade kernel
[  178.111867][ T5541] erofs: (device loop1): z_erofs_readahead: readahead error at page 20 @ nid 36
[  178.121175][ T5541] erofs: (device loop1): z_erofs_fill_inode_lazy: unknown compression format 1 for nid 36, please upgrade kernel
[  178.133210][ T5541] erofs: (device loop1): z_erofs_readahead: readahead error at page 19 @ nid 36
[  178.142461][ T5541] erofs: (device loop1): z_erofs_fill_inode_lazy: unknown compression format 1 for nid 36, please upgrade kernel
[  178.154652][ T5541] erofs: (device loop1): z_erofs_readahead: readahead error at page 18 @ nid 36
[  178.193854][ T5541] erofs: (device loop1): z_erofs_fill_inode_lazy: unknown compression format 1 for nid 36, please upgrade kernel
[  178.206218][ T5541] erofs: (device loop1): z_erofs_readahead: readahead error at page 17 @ nid 36
[  178.215700][ T5541] erofs: (device loop1): z_erofs_fill_inode_lazy: unknown compression format 1 for nid 36, please upgrade kernel
[  178.227736][ T5541] erofs: (device loop1): z_erofs_readahead: readahead error at page 16 @ nid 36
[  178.236811][ T5541] erofs: (device loop1): z_erofs_fill_inode_lazy: unknown compression format 1 for nid 36, please upgrade kernel
[  178.244262][   T13] Bluetooth: hci3: command 0x0419 tx timeout
[  178.248801][ T5541] erofs: (device loop1): z_erofs_readahead: readahead error at page 15 @ nid 36
[  178.259923][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  178.263838][ T5541] erofs: (device loop1): z_erofs_fill_inode_lazy: unknown compression format 1 for nid 36, please upgrade kernel
[  178.283268][ T5541] erofs: (device loop1): z_erofs_readahead: readahead error at page 14 @ nid 36
[  178.292548][ T5541] erofs: (device loop1): z_erofs_fill_inode_lazy: unknown compression format 1 for nid 36, please upgrade kernel
[  178.303013][   T13] usb 6-1: USB disconnect, device number 3
[  178.304897][ T5541] erofs: (device loop1): z_erofs_readahead: readahead error at page 13 @ nid 36
[  178.320130][ T5541] erofs: (device loop1): z_erofs_fill_inode_lazy: unknown compression format 1 for nid 36, please upgrade kernel
[  178.332428][ T5541] erofs: (device loop1): z_erofs_readahead: readahead error at page 12 @ nid 36
[  178.341570][ T5541] erofs: (device loop1): z_erofs_fill_inode_lazy: unknown compression format 1 for nid 36, please upgrade kernel
[  178.353818][ T5541] erofs: (device loop1): z_erofs_readahead: readahead error at page 11 @ nid 36
[  178.363327][ T5541] erofs: (device loop1): z_erofs_fill_inode_lazy: unknown compression format 1 for nid 36, please upgrade kernel
[  178.376086][ T5541] erofs: (device loop1): z_erofs_readahead: readahead error at page 10 @ nid 36
[  178.551720][ T5434] 8021q: adding VLAN 0 to HW filter on device team0
[  178.610917][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  178.651926][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  178.693804][ T4302] bridge0: port 1(bridge_slave_0) entered blocking state
[  178.696338][ T5552] loop6: detected capacity change from 0 to 512
[  178.700960][ T4302] bridge0: port 1(bridge_slave_0) entered forwarding state
[  178.709958][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  178.732684][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  178.748654][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  178.768228][ T4300] bridge0: port 2(bridge_slave_1) entered blocking state
[  178.775401][ T4300] bridge0: port 2(bridge_slave_1) entered forwarding state
[  178.817075][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  178.870481][ T5552] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  178.897825][ T4320] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  178.922943][ T4303] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.965425][ T5552] EXT4-fs (loop6): 1 truncate cleaned up
[  178.971989][ T5552] EXT4-fs (loop6): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro,. Quota mode: none.
[  179.018623][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  179.051038][ T5544] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  179.075481][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  179.100401][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  179.133258][ T4303] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.149546][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  179.159205][ T4320] usb 2-1: Using ep0 maxpacket: 32
[  179.167631][ T5545] IPVS: length: 233 != 8
[  179.174314][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  179.185551][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  179.195036][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  179.205189][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  179.215573][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  179.224540][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  179.238585][ T5434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  179.263456][ T4303] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.280905][ T4320] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  179.313032][ T4320] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  179.353639][ T4303] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.377925][ T4320] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  179.397905][ T4320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.466151][ T4320] usb 2-1: config 0 descriptor??
[  179.518748][ T4320] hub 2-1:0.0: USB hub found
[  179.846081][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  179.858471][ T4320] hub 2-1:0.0: 1 port detected
[  179.869047][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  179.884103][ T5434] 8021q: adding VLAN 0 to HW filter on device batadv0
[  180.019062][ T5584] loop6: detected capacity change from 0 to 512
[  180.061250][ T5584] EXT4-fs (loop6): Ignoring removed orlov option
[  180.114597][ T5584] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodelalloc,orlov,auto_da_alloc,,errors=continue. Quota mode: writeback.
[  180.130953][ T5584] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  180.522635][ T4721] hub 2-1:0.0: activate --> -90
[  180.544560][ T5601] loop5: detected capacity change from 0 to 512
[  180.576879][ T5601] EXT4-fs (loop5): Ignoring removed orlov option
[  180.638176][ T5601] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodelalloc,orlov,auto_da_alloc,,errors=continue. Quota mode: writeback.
[  180.684459][ T5601] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  180.707289][ T5607] loop4: detected capacity change from 0 to 256
[  180.959913][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  180.974152][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  181.113317][ T1107] usb 2-1: USB disconnect, device number 8
[  181.120267][ T1324] hub 2-1:0.0: hub_ext_port_status failed (err = -71)
[  181.710846][ T5434] device veth0_vlan entered promiscuous mode
[  181.722441][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  181.765907][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  181.819927][ T5628] netlink: 52 bytes leftover after parsing attributes in process `syz.5.262'.
[  181.827419][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  181.873356][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  181.898965][ T5434] device veth1_vlan entered promiscuous mode
[  181.946360][ T5624] netlink: 28 bytes leftover after parsing attributes in process `syz.4.261'.
[  182.018152][ T5637] loop6: detected capacity change from 0 to 512
[  182.101708][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  182.121539][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  182.202759][ T5434] device veth0_macvtap entered promiscuous mode
[  182.221532][ T5637] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  182.376164][ T5632] IPVS: length: 233 != 8
[  182.385315][ T5637] EXT4-fs (loop6): 1 truncate cleaned up
[  182.403048][ T5434] device veth1_macvtap entered promiscuous mode
[  182.414057][ T5637] EXT4-fs (loop6): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro,. Quota mode: none.
[  182.524589][ T5434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  182.576666][ T5434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  182.596254][ T5434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  182.607485][ T5434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  182.617434][ T5434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  182.629824][ T5434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  182.641485][ T5434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  182.654422][ T5434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  182.666361][ T5434] batman_adv: batadv0: Interface activated: batadv_slave_0
[  182.674284][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  182.691839][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  182.719535][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  182.733295][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  182.753322][ T5434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  182.773784][ T5434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  182.786931][ T5434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  182.804737][ T5434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  182.817096][ T5434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  182.834914][ T5434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  182.854982][ T5434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  182.867009][ T5434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  182.892225][ T5434] batman_adv: batadv0: Interface activated: batadv_slave_1
[  182.919042][ T4320] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  182.936989][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  182.950535][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  182.981656][ T5434] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  183.009418][ T5434] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  183.037461][ T5668] loop6: detected capacity change from 0 to 256
[  183.037570][ T5434] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  183.071239][ T5434] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  183.177749][ T1324] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  183.198496][ T4303] device hsr_slave_0 left promiscuous mode
[  183.213287][ T4303] device hsr_slave_1 left promiscuous mode
[  183.254656][ T4303] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  183.264059][ T4303] batman_adv: batadv0: Removing interface: batadv_slave_0
[  183.273275][ T4303] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  183.281467][ T4303] batman_adv: batadv0: Removing interface: batadv_slave_1
[  183.289009][ T4320] usb 5-1: unable to get BOS descriptor or descriptor too short
[  183.297271][ T4303] device bridge_slave_1 left promiscuous mode
[  183.303686][ T4303] bridge0: port 2(bridge_slave_1) entered disabled state
[  183.312635][ T4303] device bridge_slave_0 left promiscuous mode
[  183.320726][ T4303] bridge0: port 1(bridge_slave_0) entered disabled state
[  183.332164][ T4303] device veth1_macvtap left promiscuous mode
[  183.338736][ T4303] device veth0_macvtap left promiscuous mode
[  183.344790][ T4303] device veth1_vlan left promiscuous mode
[  183.351129][ T4320] usb 5-1: unable to read config index 0 descriptor/start: -71
[  183.353840][ T4303] device veth0_vlan left promiscuous mode
[  183.358909][ T4320] usb 5-1: can't read configurations, error -71
[  183.437738][ T1324] usb 2-1: Using ep0 maxpacket: 16
[  183.517955][ T4721] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  183.527405][ T4303] team0 (unregistering): Port device team_slave_1 removed
[  183.543197][ T4303] team0 (unregistering): Port device team_slave_0 removed
[  183.557249][ T4303] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  183.575784][ T4303] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  183.640680][ T4303] bond0 (unregistering): Released all slaves
[  183.718414][ T1324] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  183.764193][ T1324] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  183.792498][ T4618] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  183.829841][ T4618] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  183.835805][ T3080] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  183.847846][ T1324] usb 2-1: Product: syz
[  183.854294][ T3080] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  183.863867][ T1324] usb 2-1: Manufacturer: syz
[  183.892885][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  183.906401][ T1324] usb 2-1: SerialNumber: syz
[  183.911754][ T4721] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  183.924407][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  183.950431][ T1324] usb 2-1: config 0 descriptor??
[  183.969186][ T4721] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  183.986664][ T4721] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  184.005604][ T4721] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  184.107931][ T4721] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  184.124654][ T4721] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  184.137475][ T4721] usb 7-1: Manufacturer: syz
[  184.162425][ T4721] usb 7-1: config 0 descriptor??
[  184.260512][ T5692] binder_alloc: 5691: binder_alloc_buf, no vma
[  184.276620][ T4273] usb 2-1: USB disconnect, device number 9
[  184.279646][ T5692] binder: 5691:5692 ioctl c0306201 200000000240 returned -11
[  184.653187][ T4721] appleir 0003:05AC:8243.0001: unknown main item tag 0x0
[  184.703893][ T4721] appleir 0003:05AC:8243.0001: No inputs registered, leaving
[  184.925832][ T4721] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0
[  184.945486][ T4721] usb 7-1: USB disconnect, device number 4
[  184.961034][ T5710] loop7: detected capacity change from 0 to 512
[  185.096669][ T5712] syz.4.279[5712] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  185.097735][ T5712] syz.4.279[5712] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  185.190823][ T5712] loop4: detected capacity change from 0 to 512
[  186.120953][ T5710] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  186.612248][ T5710] EXT4-fs (loop7): 1 truncate cleaned up
[  186.642156][ T5712] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e800c018, mo2=0002]
[  186.651011][ T5712] System zones: 0-2, 18-18, 34-34
[  186.680278][ T5712] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,debug,grpjquota=,dioread_lock,nobarrier,,errors=continue. Quota mode: writeback.
[  186.696544][ T5712] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  186.960374][ T5710] EXT4-fs (loop7): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro,. Quota mode: none.
[  187.471501][ T5711] fido_id[5711]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[  187.592150][ T5727] loop6: detected capacity change from 0 to 256
[  187.801022][ T5727] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x368b264c, utbl_chksum : 0xe619d30d)
[  189.331631][ T5727] exFAT-fs (loop6): IO charset B not found
[  189.824135][ T5745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.286'.
[  190.012857][ T5748] fuse: root generation should be zero
[  190.020054][ T5751] binder_alloc: 5750: binder_alloc_buf, no vma
[  190.047084][ T5751] binder: 5750:5751 ioctl c0306201 200000000240 returned -11
[  190.426169][ T5767] 9pnet_virtio: no channels available for device syz
[  190.430964][ T5769] loop5: detected capacity change from 0 to 128
[  190.698974][ T5770] loop6: detected capacity change from 0 to 512
[  190.994022][ T5770] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  191.158476][ T5769] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  191.178002][ T5769] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  191.334588][ T5770] EXT4-fs (loop6): 1 truncate cleaned up
[  191.364185][ T5770] EXT4-fs (loop6): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro,. Quota mode: none.
[  191.747703][ T4537] usb 5-1: new full-speed USB device number 7 using dummy_hcd
[  192.128045][ T4537] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  192.164820][ T4537] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64
[  192.247119][ T4537] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  192.357775][ T4537] usb 5-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.00
[  192.406024][ T4537] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.442363][ T4537] usb 5-1: config 0 descriptor??
[  192.467828][ T5785] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  192.729751][ T5807] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  192.736309][ T5827] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  193.186206][ T5807] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  193.244929][ T4537] wacom 0003:056A:0028.0002: unknown main item tag 0x0
[  193.458103][ T4537] wacom 0003:056A:0028.0002: unknown main item tag 0x0
[  193.465489][ T4537] wacom 0003:056A:0028.0002: unknown main item tag 0x0
[  193.495945][ T4537] wacom 0003:056A:0028.0002: unknown main item tag 0x0
[  193.503520][ T4537] wacom 0003:056A:0028.0002: unknown main item tag 0x0
[  193.510308][ T5823] overlayfs: statfs failed on './file0'
[  193.511952][ T4537] wacom 0003:056A:0028.0002: Unknown device_type for 'HID 056a:0028'. Assuming pen.
[  193.528798][ T4537] wacom 0003:056A:0028.0002: hidraw0: USB HID v1.01 Device [HID 056a:0028] on usb-dummy_hcd.4-1/input0
[  193.560673][ T5836] raw_sendmsg: syz.7.307 forgot to set AF_INET. Fix it!
[  193.595649][ T4537] input: Wacom Intuos5 touch L Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0028.0002/input/input10
[  193.660762][ T5839] loop6: detected capacity change from 0 to 512
[  193.710960][ T5843] loop5: detected capacity change from 0 to 128
[  193.742917][ T4537] usb 5-1: USB disconnect, device number 7
[  193.751884][ T5839] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  193.803700][ T5843] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  193.834850][ T5846] tipc: Cannot configure node identity twice
[  193.854209][ T5839] EXT4-fs (loop6): 1 truncate cleaned up
[  193.877555][ T5839] EXT4-fs (loop6): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro,. Quota mode: none.
[  193.926409][ T5854] fido_id[5854]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory
[  193.942496][ T5843] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  194.221299][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  194.230707][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  194.245941][ T5864] loop7: detected capacity change from 0 to 1024
[  194.878848][ T5864] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  195.106567][ T5891] autofs4:pid:5891:autofs_fill_super: called with bogus options
[  195.126229][ T5891] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  195.456862][   T26] kauditd_printk_skb: 16 callbacks suppressed
[  195.456877][   T26] audit: type=1800 audit(1755650440.183:31): pid=5896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.315" name="file1" dev="loop7" ino=15 res=0 errno=0
[  195.924686][ T5911] syzkaller0: tun_chr_ioctl cmd 1074025677
[  195.952624][ T5911] syzkaller0: linktype set to 519
[  195.992357][ T5916] loop1: detected capacity change from 0 to 512
[  196.033858][ T5919] netlink: 24 bytes leftover after parsing attributes in process `syz.7.330'.
[  196.066395][ T5916] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  196.138012][ T5916] EXT4-fs (loop1): 1 truncate cleaned up
[  196.183575][ T5916] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro,. Quota mode: none.
[  196.237117][ T5933] netlink: 8 bytes leftover after parsing attributes in process `syz.4.333'.
[  196.591030][ T5955] binder: BINDER_SET_CONTEXT_MGR already set
[  196.616856][ T5955] binder: 5951:5955 ioctl 4018620d 2000000002c0 returned -16
[  196.822232][ T5970] netlink: 24 bytes leftover after parsing attributes in process `syz.4.346'.
[  196.841498][ T5959] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  196.888074][ T5959] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  196.916691][ T5974] loop6: detected capacity change from 0 to 256
[  197.165134][ T4200] Bluetooth: hci4: unknown advertising packet type: 0x82
[  197.165201][ T4200] Bluetooth: hci4: Malicious advertising data.
[  197.734567][ T5966] netlink: 48 bytes leftover after parsing attributes in process `syz.7.344'.
[  197.802488][ T6006] loop1: detected capacity change from 0 to 512
[  198.024707][ T6006] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  198.107678][ T6006] EXT4-fs (loop1): 1 truncate cleaned up
[  198.130824][ T6006] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro,. Quota mode: none.
[  198.195354][ T6018] loop7: detected capacity change from 0 to 256
[  198.878480][ T6048] input: syz0 as /devices/virtual/input/input13
[  199.280184][ T6068] loop7: detected capacity change from 0 to 256
[  199.775984][ T6075] loop7: detected capacity change from 0 to 512
[  199.869222][ T6075] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  199.945166][ T6075] EXT4-fs (loop7): 1 truncate cleaned up
[  199.954588][ T6075] EXT4-fs (loop7): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro,. Quota mode: none.
[  200.204559][ T6089] loop7: detected capacity change from 0 to 512
[  200.302212][ T6089] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  200.350207][ T6089] EXT4-fs (loop7): 1 truncate cleaned up
[  200.358313][ T6089] EXT4-fs (loop7): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro,. Quota mode: none.
[  200.514755][ T6097] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  200.542832][ T6097] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  200.556821][ T6105] binder: BINDER_SET_CONTEXT_MGR already set
[  200.577706][ T6105] binder: 6104:6105 ioctl 4018620d 2000000002c0 returned -16
[  200.629789][ T6105] binder: 6104:6105 ioctl c0306201 200000000240 returned -11
[  200.731777][ T6114] loop1: detected capacity change from 0 to 256
[  201.885667][ T6132] ==================================================================
[  201.894625][ T6132] BUG: KASAN: use-after-free in ax25_fillin_cb+0x459/0x640
[  201.902263][ T6132] Read of size 4 at addr ffff888020dc4e38 by task syz.7.389/6132
[  201.910086][ T6132] 
[  201.912452][ T6132] CPU: 1 PID: 6132 Comm: syz.7.389 Not tainted 5.15.189-syzkaller #0
[  201.919102][ T6141] loop5: detected capacity change from 0 to 512
[  201.921341][ T6132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  201.937959][ T6132] Call Trace:
[  201.941245][ T6132]  <TASK>
[  201.944260][ T6132]  dump_stack_lvl+0x168/0x230
[  201.949067][ T6132]  ? show_regs_print_info+0x20/0x20
[  201.954456][ T6132]  ? _printk+0xcc/0x110
[  201.958627][ T6132]  ? ax25_fillin_cb+0x459/0x640
[  201.963496][ T6132]  ? load_image+0x3b0/0x3b0
[  201.968103][ T6132]  print_address_description+0x60/0x2d0
[  201.973661][ T6132]  ? ax25_fillin_cb+0x459/0x640
[  201.978543][ T6132]  kasan_report+0xdf/0x130
[  201.983074][ T6132]  ? ax25_fillin_cb+0x459/0x640
[  201.987924][ T6132]  ax25_fillin_cb+0x459/0x640
[  201.992604][ T6132]  ax25_setsockopt+0x8a2/0xa40
[  201.997661][ T6132]  ? ax25_shutdown+0x10/0x10
[  202.002268][ T6132]  ? aa_sock_opt_perm+0x74/0x100
[  202.007281][ T6132]  ? bpf_lsm_socket_setsockopt+0x5/0x10
[  202.012992][ T6132]  ? security_socket_setsockopt+0x7a/0xa0
[  202.018699][ T6132]  ? ax25_shutdown+0x10/0x10
[  202.023374][ T6132]  __sys_setsockopt+0x2bf/0x3d0
[  202.028508][ T6132]  __x64_sys_setsockopt+0xb1/0xc0
[  202.033523][ T6132]  do_syscall_64+0x4c/0xa0
[  202.037927][ T6132]  ? clear_bhb_loop+0x30/0x80
[  202.042589][ T6132]  ? clear_bhb_loop+0x30/0x80
[  202.047340][ T6132]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  202.053595][ T6132] RIP: 0033:0x7fee2f74cbe9
[  202.058017][ T6132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  202.077877][ T6132] RSP: 002b:00007fee2d9b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  202.086287][ T6132] RAX: ffffffffffffffda RBX: 00007fee2f973fa0 RCX: 00007fee2f74cbe9
[  202.094275][ T6132] RDX: 0000000000000019 RSI: 0000000000000101 RDI: 0000000000000008
[  202.102359][ T6132] RBP: 00007fee2f7cfe19 R08: 0000000000000010 R09: 0000000000000000
[  202.110383][ T6132] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  202.118862][ T6132] R13: 00007fee2f974038 R14: 00007fee2f973fa0 R15: 00007ffc765ef4b8
[  202.127883][ T6132]  </TASK>
[  202.132029][ T6132] 
[  202.134356][ T6132] Allocated by task 4668:
[  202.139196][ T6132]  __kasan_kmalloc+0xb5/0xf0
[  202.144195][ T6132]  ax25_dev_device_up+0x50/0x580
[  202.150854][ T6132]  ax25_device_event+0x483/0x4f0
[  202.155976][ T6132]  raw_notifier_call_chain+0xcb/0x160
[  202.161790][ T6132]  __dev_notify_flags+0x178/0x2d0
[  202.166836][ T6132]  dev_change_flags+0xe3/0x1a0
[  202.172020][ T6132]  dev_ifsioc+0x147/0xe70
[  202.176526][ T6132]  dev_ioctl+0x55f/0xe50
[  202.181409][ T6132]  sock_do_ioctl+0x222/0x2f0
[  202.186652][ T6132]  sock_ioctl+0x4ed/0x6e0
[  202.191558][ T6132]  __se_sys_ioctl+0xfa/0x170
[  202.196349][ T6132]  do_syscall_64+0x4c/0xa0
[  202.201172][ T6132]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  202.207515][ T6132] 
[  202.209837][ T6132] Freed by task 6084:
[  202.213810][ T6132]  kasan_set_track+0x4b/0x70
[  202.218577][ T6132]  kasan_set_free_info+0x1f/0x40
[  202.223716][ T6132]  ____kasan_slab_free+0xd5/0x110
[  202.228871][ T6132]  slab_free_freelist_hook+0xea/0x170
[  202.234499][ T6132]  kfree+0xef/0x2a0
[  202.238510][ T6132]  ax25_release+0x661/0x870
[  202.243108][ T6132]  sock_close+0xd5/0x240
[  202.247347][ T6132]  __fput+0x234/0x930
[  202.251570][ T6132]  task_work_run+0x125/0x1a0
[  202.256142][ T6132]  exit_to_user_mode_loop+0x10f/0x130
[  202.261507][ T6132]  exit_to_user_mode_prepare+0xb1/0x140
[  202.267358][ T6132]  syscall_exit_to_user_mode+0x16/0x40
[  202.273010][ T6132]  do_syscall_64+0x58/0xa0
[  202.277531][ T6132]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  202.283428][ T6132] 
[  202.285748][ T6132] Last potentially related work creation:
[  202.291834][ T6132]  kasan_save_stack+0x35/0x60
[  202.296784][ T6132]  kasan_record_aux_stack+0xb8/0x100
[  202.302180][ T6132]  insert_work+0x54/0x3d0
[  202.306690][ T6132]  __queue_work+0x9c5/0xd50
[  202.311958][ T6132]  queue_work_on+0x11d/0x1d0
[  202.316736][ T6132]  inet6addr_event+0x9c/0xc0
[  202.322161][ T6132]  atomic_notifier_call_chain+0x15d/0x280
[  202.327995][ T6132]  ipv6_add_addr+0xb30/0xde0
[  202.332871][ T6132]  addrconf_add_linklocal+0x280/0x6b0
[  202.338248][ T6132]  addrconf_addr_gen+0x4ee/0x620
[  202.343304][ T6132]  addrconf_init_auto_addrs+0x6d5/0xa80
[  202.349235][ T6132]  addrconf_notify+0xa6b/0xf00
[  202.354317][ T6132]  raw_notifier_call_chain+0xcb/0x160
[  202.359859][ T6132]  netdev_state_change+0xd2/0x140
[  202.364873][ T6132]  linkwatch_do_dev+0x10d/0x160
[  202.370008][ T6132]  __linkwatch_run_queue+0x4a9/0x7b0
[  202.375379][ T6132]  linkwatch_event+0x48/0x50
[  202.380143][ T6132]  process_one_work+0x863/0x1000
[  202.385165][ T6132]  worker_thread+0xaa8/0x12a0
[  202.390016][ T6132]  kthread+0x436/0x520
[  202.394104][ T6132]  ret_from_fork+0x1f/0x30
[  202.398712][ T6132] 
[  202.401054][ T6132] The buggy address belongs to the object at ffff888020dc4e00
[  202.401054][ T6132]  which belongs to the cache kmalloc-192 of size 192
[  202.415178][ T6132] The buggy address is located 56 bytes inside of
[  202.415178][ T6132]  192-byte region [ffff888020dc4e00, ffff888020dc4ec0)
[  202.428562][ T6132] The buggy address belongs to the page:
[  202.434286][ T6132] page:ffffea0000837100 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888020dc4a00 pfn:0x20dc4
[  202.445744][ T6132] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff)
[  202.453314][ T6132] raw: 00fff00000000200 ffffea000091a648 ffffea00008d4cc8 ffff888016841a00
[  202.461891][ T6132] raw: ffff888020dc4a00 000000000010000e 00000001ffffffff 0000000000000000
[  202.470539][ T6132] page dumped because: kasan: bad access detected
[  202.476938][ T6132] page_owner tracks the page as allocated
[  202.483004][ T6132] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 4187, ts 60748314267, free_ts 60531092752
[  202.498997][ T6132]  get_page_from_freelist+0x1b77/0x1c60
[  202.504651][ T6132]  __alloc_pages+0x1e1/0x470
[  202.509222][ T6132]  new_slab+0xb6/0x4b0
[  202.513384][ T6132]  ___slab_alloc+0x81e/0xdf0
[  202.517962][ T6132]  __kmalloc_node+0x200/0x3b0
[  202.522883][ T6132]  memcg_alloc_page_obj_cgroups+0x81/0x120
[  202.528776][ T6132]  new_slab+0x100/0x4b0
[  202.532949][ T6132]  ___slab_alloc+0x81e/0xdf0
[  202.537711][ T6132]  kmem_cache_alloc+0x195/0x290
[  202.542666][ T6132]  sock_alloc_inode+0x17/0xb0
[  202.547373][ T6132]  new_inode_pseudo+0x5f/0x210
[  202.552249][ T6132]  __sock_create+0x129/0x900
[  202.556873][ T6132]  __sys_socket+0xe2/0x170
[  202.561394][ T6132]  __x64_sys_socket+0x76/0x80
[  202.566200][ T6132]  do_syscall_64+0x4c/0xa0
[  202.570625][ T6132]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  202.576709][ T6132] page last free stack trace:
[  202.581473][ T6132]  free_unref_page_prepare+0x637/0x6c0
[  202.586934][ T6132]  free_unref_page_list+0x122/0x7e0
[  202.592178][ T6132]  release_pages+0x184b/0x1bb0
[  202.596940][ T6132]  tlb_finish_mmu+0x164/0x2e0
[  202.601734][ T6132]  exit_mmap+0x3a6/0x5f0
[  202.606063][ T6132]  __mmput+0x115/0x3b0
[  202.610237][ T6132]  exit_mm+0x567/0x6c0
[  202.614417][ T6132]  do_exit+0x5a1/0x20a0
[  202.618590][ T6132]  do_group_exit+0x12e/0x300
[  202.623443][ T6132]  get_signal+0x6ca/0x12c0
[  202.627868][ T6132]  arch_do_signal_or_restart+0xc1/0x1300
[  202.633604][ T6132]  exit_to_user_mode_loop+0x9e/0x130
[  202.639231][ T6132]  exit_to_user_mode_prepare+0xb1/0x140
[  202.644931][ T6132]  syscall_exit_to_user_mode+0x16/0x40
[  202.650647][ T6132]  do_syscall_64+0x58/0xa0
[  202.655691][ T6132]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  202.661606][ T6132] 
[  202.663924][ T6132] Memory state around the buggy address:
[  202.669735][ T6132]  ffff888020dc4d00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  202.678232][ T6132]  ffff888020dc4d80: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc
[  202.686649][ T6132] >ffff888020dc4e00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  202.694876][ T6132]                                         ^
[  202.700772][ T6132]  ffff888020dc4e80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  202.708867][ T6132]  ffff888020dc4f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  202.716908][ T6132] ==================================================================
[  202.725058][ T6132] Disabling lock debugging due to kernel taint
[  202.756286][ T6132] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  202.763955][ T6132] CPU: 0 PID: 6132 Comm: syz.7.389 Tainted: G    B             5.15.189-syzkaller #0
[  202.773521][ T6132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  202.783686][ T6132] Call Trace:
[  202.786986][ T6132]  <TASK>
[  202.790096][ T6132]  dump_stack_lvl+0x168/0x230
[  202.794780][ T6132]  ? show_regs_print_info+0x20/0x20
[  202.799992][ T6132]  ? load_image+0x3b0/0x3b0
[  202.804510][ T6132]  panic+0x2c9/0x7f0
[  202.808510][ T6132]  ? bpf_jit_dump+0xd0/0xd0
[  202.813134][ T6132]  ? _raw_spin_unlock_irqrestore+0xf6/0x100
[  202.819205][ T6132]  ? _raw_spin_unlock+0x40/0x40
[  202.821998][ T6141] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  202.824257][ T6132]  ? print_memory_metadata+0x314/0x400
[  202.824290][ T6132]  ? ax25_fillin_cb+0x459/0x640
[  202.844641][ T6132]  check_panic_on_warn+0x80/0xa0
[  202.849703][ T6132]  ? ax25_fillin_cb+0x459/0x640
[  202.854743][ T6132]  end_report+0x6d/0xf0
[  202.859395][ T6132]  kasan_report+0x102/0x130
[  202.864008][ T6132]  ? ax25_fillin_cb+0x459/0x640
[  202.865337][ T6141] EXT4-fs (loop5): 1 truncate cleaned up
[  202.868874][ T6132]  ax25_fillin_cb+0x459/0x640
[  202.868903][ T6132]  ax25_setsockopt+0x8a2/0xa40
[  202.868920][ T6132]  ? ax25_shutdown+0x10/0x10
[  202.868934][ T6132]  ? aa_sock_opt_perm+0x74/0x100
[  202.868948][ T6132]  ? bpf_lsm_socket_setsockopt+0x5/0x10
[  202.874605][ T6141] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro,. Quota mode: none.
[  202.879227][ T6132]  ? security_socket_setsockopt+0x7a/0xa0
[  202.879252][ T6132]  ? ax25_shutdown+0x10/0x10
[  202.879270][ T6132]  __sys_setsockopt+0x2bf/0x3d0
[  202.879288][ T6132]  __x64_sys_setsockopt+0xb1/0xc0
[  202.879302][ T6132]  do_syscall_64+0x4c/0xa0
[  202.879318][ T6132]  ? clear_bhb_loop+0x30/0x80
[  202.879332][ T6132]  ? clear_bhb_loop+0x30/0x80
[  202.946540][ T6132]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  202.952705][ T6132] RIP: 0033:0x7fee2f74cbe9
[  202.957115][ T6132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  202.977609][ T6132] RSP: 002b:00007fee2d9b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  202.986505][ T6132] RAX: ffffffffffffffda RBX: 00007fee2f973fa0 RCX: 00007fee2f74cbe9
[  202.994680][ T6132] RDX: 0000000000000019 RSI: 0000000000000101 RDI: 0000000000000008
[  203.002990][ T6132] RBP: 00007fee2f7cfe19 R08: 0000000000000010 R09: 0000000000000000
[  203.010995][ T6132] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  203.019048][ T6132] R13: 00007fee2f974038 R14: 00007fee2f973fa0 R15: 00007ffc765ef4b8
[  203.027412][ T6132]  </TASK>
[  203.030768][ T6132] Kernel Offset: disabled
[  203.035098][ T6132] Rebooting in 86400 seconds..