last executing test programs:

1m39.903101467s ago: executing program 0 (id=71):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x20a201, 0x0)
close(r6)
socket$tipc(0x1e, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x80, 0x2, [@TCA_MATCHALL_ACT={0x7c, 0x2, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x8, 0x1, 0x7fff, 0x7}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x36}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000640)="442ea407603a16ff", 0x8}], 0x2}, 0x20000085)

1m39.605175864s ago: executing program 0 (id=74):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$packet(0x11, 0x2, 0x300)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
socket(0x10, 0x803, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002940), 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000002980)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"})
syz_open_pts(r0, 0x141601)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYBLOB='\a'], 0x0)

1m35.34829441s ago: executing program 0 (id=92):
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r0, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./gadget/ep1in-bulk\x00', 0x2, 0x24)
openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
close(r0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000840)='./file0\x00', 0x801, &(0x7f0000000080), 0x64, 0x527, &(0x7f0000001880)="$eJzs3UFvI1cdAPD/OPZ2s5ttUuAAlSiFFmVXsHbS0DbiUIqE4FQJKPclJE4UxYmj2Gk3UUWz4gMgIQRInODCBYkPgIQqceGIkCrBGQQIhGALBw7QQWNP0mwyTpzijbPx7ydN5s2bef6/52jG82aeZgIYWU9HxMsR8W6aprciYjLPL+VT7HWnbLt37r+xmE1JpOmrf08iyfP2PyvJ59fzYlcj4qtfivhGcjxua2d3baHRqG/ly7X2+mattbN7e3V9YaW+Ut+Ym5t9Yf7F+efnZwbSzhsR8dIX/vy9b//kiy/94tOv/+HOX29+M6vWRL7+cDvOqHzSym7TK53v4nCBrfcZ7CIqd1qYGy/aYuxYzr2HXCcAAIpl5/gfiIhPRMStmIyxk09nAQAAgEdQ+rmJ+E8SkRa70iMfAAAAeISUOmNgk1I1HwswEaVStdodw/uhuFZqNFvtTy03tzeWumNlp6JSWl5t1GfyscJTUUmy5dlO+r3l544sz0XEExHx3cnxznJ1sdlYGvbFDwAAABgR14/0//812e3/AwAAAJfM1LArAAAAADx0+v8AAABw+en/AwAAwKX25VdeyaZ0//3XS6/tbK81X7u9VG+tVde3F6uLza3N6kqzudJ5Zt/6aZ/XaDY3PxMb23dr7XqrXWvt7N5Zb25vtO+sPvAKbAAAAOAcPfGxt36XRMTeZ8c7U+ZKf0X73Ay4qMoHqSSfF+zWv3+8O//TOVUKOBdjw64AMDTloxlJMpyKAOeuMuwKAMNT6s6O/Oof6xb0HLzz63z+8QHXCwAAGLjpjxTd/+8+EKB0Ysm9k1cDF56dGEaX+/8wujr3//sdyetkAS6VijMAGHmH7v+nbxasP/X+/6nS9Oy1AgAABmmiMyWlan55byJKpWo14kbntQCVZHm1UZ+JiMcj4reTlcey5dlOyeTomGEAAAAAAAAAAAAAAAAAAAAAAAAAoIc0TSIFAAAALrWI0l+SX3af5T89+ezE0esDV5J/T0b+itDXf/jq9+8utNtbs1n+Pw7y2z/I858bxhUMAAAAGAlneoH/fj99vx8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIP0zv03Fven84z7t89HxFRR/HJc7cyvRiUirv0zifKhcklEjA0g/nj258NF8ZOsWgchi+KPDyD+3r0T48dU/i0Uxb8+gPgwyt7Kjj8vF+1/pXi6My/e/8oRDyy/X72Pf3Fw/Bvrsf/f6DPGk2//rNYz/r2IJ8vFx5/9+EmP+M/0Gf/rX9vd7bUu/VHEdOHvT/JArFp7fbPW2tm9vbq+sFJfqW/Mzc2+MP/i/PPzM7Xl1UY9/xuPFcT4zkd//u5J7b/WI/7UKe1/ts/2//ftu/c/2E1WiuLffKYg/q9+nG9xPH4p/+37ZJ7O1k/vp/e66cOe+ulvnjqp/Us92n/a//9mn+2/9ZVv/bHPTQGAc9Da2V1baDTqW49EIjvrOGuprJd+ISovceESbw70A9M0TbN96v/4nCQuwtfSSQz7yAQAAAzaeyf9w64JAAAAAAAAAAAAAAAAAAAAjK7zeJzY0Zh7B6lkEI/QBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYiP8FAAD//0Qu2U4=")
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x20000000)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r1, 0xffffffffffffffff, 0x0)

1m34.387109764s ago: executing program 0 (id=98):
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[], 0x4, 0x129f, &(0x7f00000007c0)="$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")
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r0 = add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8)
add_key(0x0, 0x0, 0x0, 0x0, r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a80)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x0, 0x0, 0x200e}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x2000)
mkdirat(0xffffffffffffff9c, &(0x7f0000001ac0)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000001b00)='./proc\x00', &(0x7f0000001b40)='proc\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000001b80)='./proc/net/netfilter/nfnetlink_log\x00', 0x0, 0x0)
read(r2, &(0x7f0000001bc0), 0x1000)

1m33.961276374s ago: executing program 0 (id=102):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00')
read$FUSE(r1, &(0x7f00000059c0)={0x2020}, 0x2020)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x300, 0x0, 0x2, 0x9, 0x0, 0x4}, 0x20)
read$FUSE(r1, &(0x7f00000000c0)={0x2020}, 0x2020)
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x3}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0xad}]}, 0x24}, 0x1, 0x0, 0x0, 0x44840}, 0x24000040)

1m31.203313272s ago: executing program 0 (id=111):
ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000180)={{}, "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"})
syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB], 0x22)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc048aeca, &(0x7f0000000180)={0x3, 0x0, [{0x303, 0x0, 0xffffffffffffffff}, {0x127c91937a50e468, 0x0, 0x100000003}, {0xa11, 0x0, 0x66}]})
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0)
r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x7b36}, 0x30, 0x0)
landlock_restrict_self(r3, 0xe)
socket$inet6(0xa, 0x3, 0x8000000003c)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_vhci(&(0x7f0000001180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x54}, "c0b37ff07463b50bb24678bf08e510b20708cd1f29e750e4f0c3bd87e268df545c1b7770f49844f6270f8956fbb067a83b153b1f98c6cca763b1764b0d2a343eacf4c02c07270ed3e28d253cc8c6cb582ef356f6"}, 0x58)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x120}}, 0x0)
r5 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring)

1m31.088225465s ago: executing program 32 (id=111):
ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000180)={{}, "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"})
syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB], 0x22)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc048aeca, &(0x7f0000000180)={0x3, 0x0, [{0x303, 0x0, 0xffffffffffffffff}, {0x127c91937a50e468, 0x0, 0x100000003}, {0xa11, 0x0, 0x66}]})
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0)
r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x7b36}, 0x30, 0x0)
landlock_restrict_self(r3, 0xe)
socket$inet6(0xa, 0x3, 0x8000000003c)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_vhci(&(0x7f0000001180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x54}, "c0b37ff07463b50bb24678bf08e510b20708cd1f29e750e4f0c3bd87e268df545c1b7770f49844f6270f8956fbb067a83b153b1f98c6cca763b1764b0d2a343eacf4c02c07270ed3e28d253cc8c6cb582ef356f6"}, 0x58)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a010400000000000000000200000708000240000000020900010073797a31000000004c000000030a01040000000000000000020000070900010073797a31000000000900030073797a320000000014000480080001000000000308000200000000000b00070066696c746572000084000000060a01040000000000000000020000070900010073797a31000000000900020073797a320000000058000480540001800a0001006d61746368000000440002800b0001006e6661636374000008000200000000002c00030073797a3000000000000000000000000000000000000000000000000000000000000000000000000014000000110001000000000000000000"], 0x120}}, 0x0)
r5 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring)

11.322798479s ago: executing program 1 (id=375):
socket$nl_route(0x10, 0x3, 0x0)
userfaultfd(0x801)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x13, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2827e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac008000000000000200", "f4bd000000801900", [0x8, 0xffffffff9673e359]}})
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
ppoll(&(0x7f0000000300)=[{r3, 0xc226}], 0x1, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r4, 0x8001}}, 0x48)
writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

10.268950335s ago: executing program 1 (id=376):
syz_emit_ethernet(0xa3, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
r1 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x48002)
write$binfmt_aout(r1, 0x0, 0xc8)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x80}}, 0x0)
r4 = fsopen(&(0x7f0000002200)='ubifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)

10.250635126s ago: executing program 4 (id=378):
r0 = socket(0x400000000010, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
semctl$SETALL(0x0, 0x0, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
sendto$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$USBDEVFS_ALLOC_STREAMS(0xffffffffffffffff, 0x8008551c, 0x0)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000340)=0x18)

9.27677618s ago: executing program 3 (id=380):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
keyctl$restrict_keyring(0x10, 0xfffffffffffffff8, 0x0, 0x0)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r1, r1)
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x0, 0x0)
setpgid(0x0, r1)
tkill(r1, 0x7)
prlimit64(r1, 0xa, 0x0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x4080000)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f0000000380)={0x8a001, 0x0, 0x12}, 0x18)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', 0x0, 0x0)

8.774333912s ago: executing program 2 (id=381):
setns(0xc9, 0x0)
r0 = socket(0x2a, 0x2, 0x9)
r1 = socket$packet(0x11, 0x3, 0x300)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1005004, 0x0, 0x0, 0x0, &(0x7f0000000140))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0)
setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0)

6.530668638s ago: executing program 1 (id=382):
syz_open_dev$vcsa(&(0x7f0000000080), 0x8000000000000000, 0x103402)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x0]}}, &(0x7f0000000540)=""/145, 0x1b, 0x91, 0x1}, 0x28)
syz_mount_image$squashfs(&(0x7f0000000940), &(0x7f00000001c0)='./file1\x00', 0x2000000, &(0x7f00000003c0)=ANY=[], 0x1, 0x184, &(0x7f0000000700)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x200, 0x50)
getdents64(r0, &(0x7f0000000280)=""/175, 0xaf)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x140, 0x8)
setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000040)=0x1, 0x4)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0xfffd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x6e6bb8, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x2b}, 0xa, @in=@broadcast}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x9}, 0x4040000)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000340)={0x81, 0x0, 0x2})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x22852, r1, 0x0)
r3 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
ioctl$EXT4_IOC_GETSTATE(r3, 0x40046629, &(0x7f0000000040))
mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff)
bpf$MAP_CREATE(0x0, &(0x7f0000003e40)=ANY=[@ANYBLOB], 0x50)

6.530343038s ago: executing program 2 (id=383):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x42001, 0x0)
close(r1)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$kcm(0x11, 0x3, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000003340)=@newtfilter={0x88c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x860, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x400014, 0x10000, 0x80000001, 0x3, 0x3, 0x80000000, 0x5, 0xbf, 0x4, 0xf4, 0xffffffff, 0x7, 0x1, 0x81, 0x80000000, 0x81, 0x6, 0x0, 0x7, 0x9cc7, 0xfff, 0xff, 0x9, 0x5, 0x7f, 0x9, 0x1000003, 0x3, 0x4, 0x9, 0x0, 0x2, 0x1, 0x6, 0xfffffd0b, 0x4, 0x3, 0x8, 0xfffffffd, 0x1, 0xd, 0x40, 0x1, 0x0, 0x7fffffff, 0x9, 0x101, 0x107, 0x263, 0x98, 0x80, 0x80000001, 0x6, 0x4, 0xfffffffa, 0x5, 0x0, 0x9, 0x4, 0x5, 0x27, 0x0, 0x8, 0xfffffe01, 0x7d4, 0x0, 0x1389, 0x53b7, 0xd18, 0x6, 0x5, 0x56, 0x645ec805, 0x4, 0x3, 0xfffffffb, 0x5007, 0x3, 0x2, 0x8a92, 0x4, 0x7, 0x4, 0xbbb, 0x5ffee5c7, 0x8, 0x9, 0x271, 0xffffe819, 0xa, 0xe8, 0x3, 0x200, 0x8001, 0x3, 0x87d7, 0x9, 0x851, 0x2, 0x8, 0x3, 0x7, 0x8, 0x6f47, 0x3, 0x5c90, 0x5, 0x1ff, 0x0, 0xf02, 0x1e, 0x57e7, 0x5adaaf8c, 0x3f8, 0x4, 0x79, 0x7, 0x5, 0x4, 0x2, 0x2, 0x1, 0x7, 0x3ff, 0x85f, 0x8, 0x7, 0x3, 0x2000002, 0x25a, 0x4, 0x3, 0x0, 0xfffffff8, 0x8001, 0xffff6a70, 0x6, 0x5, 0x2, 0x9, 0x8001, 0x5, 0x5, 0x1, 0xffffffc0, 0x9, 0x3ff, 0x5, 0x9, 0xb, 0x7, 0xf, 0xfffffff7, 0x8, 0x7fff, 0x0, 0x2e7, 0x3ff, 0x8, 0x5, 0x7, 0x7fffffff, 0x5, 0x5, 0x5, 0x2, 0x1, 0x1000, 0x5, 0x3, 0x4, 0x7, 0x2, 0x0, 0x0, 0x1, 0x80, 0x6670, 0x5, 0x16d, 0x2, 0x4, 0x9, 0x200, 0xc, 0x9, 0x13f9, 0x9, 0x0, 0x5, 0x7, 0x45, 0x80000001, 0xb, 0x3, 0x2, 0x0, 0x6, 0x8000, 0x4, 0x3, 0x6, 0x2, 0x9, 0x8, 0x1, 0xc, 0x6, 0x7, 0x400, 0x2, 0x401, 0x8, 0x205, 0x5072f7e2, 0x1000, 0x1, 0x58ba, 0x5, 0x59b1, 0x40005, 0x120, 0x3, 0x5, 0x5, 0x6f1da0e, 0x80000001, 0x2, 0x8, 0x4, 0x696, 0x5, 0x8, 0x2, 0x3ff, 0x3, 0x0, 0x8, 0x2, 0x8f0d, 0x5, 0xa, 0xfffffff6, 0xfffffff7, 0x6, 0x6, 0x1, 0x80, 0x5, 0x0, 0x6, 0x8e, 0xb5d, 0x9, 0xfffffd4c]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xc2, 0x20000000, 0x859, 0xaedb, 0x7, {0x7, 0x2, 0xd, 0x8, 0x204, 0x95a5}, {0x8, 0x2, 0x7ff, 0xf95b, 0x2, 0x280000}, 0x10001, 0xfffffffd, 0x6}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4009, 0x0, 0xfffffffe, 0x14, 0x5, 0x0, 0x9, 0x0, 0x7, 0x8, 0x4d8b, 0x6, 0x40, 0x1, 0x0, 0x81, 0x0, 0xf, 0x0, 0x0, 0x5, 0xc, 0x8000, 0x4, 0x9, 0x9, 0x81, 0xa00000, 0xe, 0x4, 0x80000000, 0x6, 0xfffffff9, 0x3, 0x2, 0x7, 0x7, 0x1, 0x14f, 0x8, 0x200, 0x7, 0x5, 0x69, 0x84, 0xc, 0x0, 0xf0e7, 0x7, 0x487, 0x4, 0x8, 0x7fffffff, 0x3ff, 0x7fffffff, 0x0, 0xbd, 0x6, 0x0, 0xa, 0x10001, 0x2, 0x200043, 0x1, 0x7, 0x38095a10, 0x6, 0x8333f, 0x7, 0xc8a, 0x6, 0x1, 0x3, 0x7f, 0x7, 0x8, 0x100, 0x8003, 0x8, 0x4, 0x9, 0x81, 0x5, 0x4, 0x4, 0x0, 0x7f, 0x9, 0x6, 0x4, 0x4, 0x2, 0x9, 0x2, 0xffffff78, 0x4, 0x4e, 0x3, 0x8004, 0x1ff, 0x4, 0x4, 0x5b3a, 0xfffffff7, 0x6d, 0x8001, 0x10000, 0x4000001, 0x2c29, 0x7, 0x4, 0x0, 0x5, 0x0, 0xfffffffb, 0xea, 0x0, 0x9, 0x40, 0xfffffffa, 0xffffff00, 0x1, 0x7, 0xda, 0x7f, 0x3, 0x8566, 0x2f, 0x9, 0xfffffff9, 0xb, 0xa97e, 0x8, 0x9, 0x2002b36, 0x60f63eb, 0x4, 0x6, 0x2, 0x7f, 0x5, 0x1ff, 0x7d, 0x101, 0xfffffffa, 0xd, 0x6, 0x0, 0xf, 0x9, 0xb, 0x7f, 0x1, 0x10, 0x0, 0x5, 0x1038, 0x9, 0x5, 0xf0, 0x200, 0x0, 0x6, 0x80000000, 0x5, 0xffffffff, 0x6, 0x2, 0x3ff, 0x3, 0x7ff, 0x5, 0x1, 0xd, 0x3, 0x632, 0x2, 0xc4, 0xffff, 0x8, 0x1, 0x9, 0x3, 0x8, 0x5, 0x7, 0x3, 0x10001, 0xd, 0xd, 0x7, 0x7, 0xf2, 0x5, 0x600000, 0x7, 0x4, 0xfffffff7, 0x1, 0x3, 0x33fbb166, 0x9, 0x3, 0x4, 0x8, 0x4, 0xc, 0x6, 0x400, 0x9, 0x8, 0x1, 0x2e5c, 0x5, 0x7, 0x5, 0x1, 0x7fff, 0x80000001, 0x8c, 0xffffffc0, 0x80000000, 0x7, 0x7d3, 0xfff0, 0x1, 0x8, 0xb, 0x7ff, 0x4, 0x0, 0x6, 0x4, 0x5, 0x6, 0xd143, 0x4, 0x3a6, 0x7, 0x6, 0x7, 0x1000, 0x1, 0x4, 0x2b, 0x7, 0xa, 0x6, 0xdfb, 0x30d, 0xfff, 0x1, 0x3ff, 0x7ff, 0xfffffffd, 0x7]}]}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x24048001}, 0x20044804)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$kcm(r6, &(0x7f0000000440)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1}, 0x804)

6.530212948s ago: executing program 3 (id=384):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/target/core/rd_mcp_0\x00', 0x1ed)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0x1ed)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/target/core/rd_mcp_0/ramdisk0/control\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='rd_pages=1024\n', 0xe)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/target/core/rd_mcp_0/ramdisk0/enable\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='1\n', 0x2)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000540)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000fea000/0x7000)=nil, 0x0}, 0x68)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff)
symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/uac2.usb0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r2, &(0x7f0000000480)='usbip-vudc.0', 0xc)
write(r2, &(0x7f00000004c0)='\n', 0x1)

6.530100568s ago: executing program 4 (id=385):
openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0xff}, 0x0)
ioctl$SNDCTL_TMR_STOP(0xffffffffffffffff, 0x5403)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r5=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7040010000000f00000005002e000000000008000300", @ANYRES32=r5, @ANYBLOB="05002f"], 0x2c}}, 0x18)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)

6.511760279s ago: executing program 5 (id=392):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x4a6042, 0x1)
ptrace$PTRACE_SETSIGMASK(0x420b, r0, 0x8, &(0x7f0000000380)={[0x200000000673]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff)
r3 = syz_open_dev$usbmon(&(0x7f0000000100), 0x6e2, 0x20480)
ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205)
mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0)
write(r4, &(0x7f0000000100)='select <kernel>\n', 0x10)

5.854579644s ago: executing program 4 (id=386):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x42001, 0x0)
close(r1)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$kcm(0x11, 0x3, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000003340)=@newtfilter={0x88c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x860, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x400014, 0x10000, 0x80000001, 0x3, 0x3, 0x80000000, 0x5, 0xbf, 0x4, 0xf4, 0xffffffff, 0x7, 0x1, 0x81, 0x80000000, 0x81, 0x6, 0x0, 0x7, 0x9cc7, 0xfff, 0xff, 0x9, 0x5, 0x7f, 0x9, 0x1000003, 0x3, 0x4, 0x9, 0x0, 0x2, 0x1, 0x6, 0xfffffd09, 0x4, 0x3, 0x8, 0xfffffffd, 0x1, 0xd, 0x40, 0x0, 0x0, 0x7fffffff, 0x9, 0x101, 0x107, 0x263, 0x98, 0x80, 0x80000001, 0x6, 0x4, 0xfffffffa, 0x5, 0x0, 0x9, 0x4, 0x5, 0x27, 0x0, 0x8, 0xfffffe01, 0x7d4, 0x0, 0x1389, 0x53b7, 0xd18, 0x6, 0x5, 0x56, 0x645ec805, 0x4, 0x3, 0xfffffffb, 0x5007, 0x3, 0x2, 0x8a92, 0x4, 0x7, 0x4, 0xbbb, 0x5ffee5c7, 0x8, 0x9, 0x271, 0xffffe819, 0xa, 0xe8, 0x3, 0x200, 0x8001, 0x3, 0x87d7, 0x9, 0x851, 0x2, 0x8, 0x3, 0x7, 0x8, 0x6f47, 0x3, 0x5c90, 0x5, 0x1ff, 0x0, 0xf02, 0x1e, 0x57e7, 0x5adaaf8c, 0x3f8, 0x4, 0x79, 0x7, 0x5, 0x4, 0x2, 0x2, 0x1, 0x7, 0x3ff, 0x85f, 0x8, 0x7, 0x3, 0x2, 0x25a, 0x4, 0x3, 0x0, 0xfffffff8, 0x8001, 0xffff6a70, 0x6, 0x5, 0x2, 0x9, 0x8001, 0x5, 0x5, 0x1, 0xffffffc0, 0x9, 0x3ff, 0x5, 0x9, 0xb, 0x7, 0xf, 0xfffffff7, 0x8, 0x7fff, 0x0, 0x2e7, 0x3ff, 0x8, 0x450, 0x7, 0x7fffffff, 0x5, 0x5, 0x5, 0x2, 0x1, 0x1000, 0x5, 0x3, 0x4, 0x7, 0x2, 0x0, 0x0, 0x1, 0x80, 0x6670, 0x5, 0x16d, 0x2, 0x4, 0x9, 0x200, 0xc, 0x9, 0x13f9, 0x9, 0x0, 0x5, 0x7, 0x45, 0x80000001, 0xb, 0x3, 0x2, 0x0, 0x6, 0x8000, 0x4, 0x3, 0x6, 0x2, 0x9, 0xa262, 0x1, 0xc, 0x6, 0x7, 0x400, 0x2, 0x401, 0x8, 0x205, 0x5072f7e2, 0x1000, 0x1, 0x58ba, 0x5, 0x59b1, 0x40005, 0x120, 0x3, 0x5, 0x5, 0x6f1da0e, 0x80000001, 0x2, 0x8, 0x4, 0x696, 0x5, 0x8, 0x2, 0x3ff, 0x3, 0x0, 0x8, 0x2, 0x8f0d, 0x4, 0xa, 0xfffffff6, 0xfffffff7, 0x6, 0x6, 0x1, 0x80, 0x5, 0x0, 0x6, 0x8e, 0xb5d, 0x9, 0xfffffd4c]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xc2, 0x5, 0x859, 0xaedb, 0x7, {0x7, 0x2, 0xd, 0x8, 0x204, 0x95a5}, {0x8, 0x2, 0x7ff, 0xf95b, 0x2, 0x280000}, 0x10001, 0xfffffffd, 0x6}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4009, 0x0, 0xfffffffe, 0x10, 0x5, 0x0, 0x9, 0x0, 0x7, 0x8, 0x4d8b, 0x6, 0x40, 0x1, 0x0, 0x81, 0x0, 0xf, 0x0, 0x0, 0x5, 0xc, 0x8000, 0x4, 0x9, 0x9, 0x81, 0xa00000, 0xe, 0x4, 0x80000000, 0x6, 0xfffffff9, 0x3, 0x2, 0x7, 0x7, 0x1, 0x14f, 0x8, 0x200, 0x7, 0x5, 0x69, 0x84, 0xc, 0x0, 0xf0e7, 0x7, 0x487, 0x4, 0x8, 0x7fffffff, 0x3ff, 0x7fffffff, 0x0, 0xbd, 0x6, 0x0, 0xa, 0x10001, 0x2, 0x200043, 0x1, 0x7, 0x38095a10, 0x6, 0x8333f, 0x7, 0xc8a, 0x6, 0x1, 0x3, 0x7f, 0x7, 0x8, 0x100, 0x8003, 0x8, 0x4, 0x9, 0x81, 0x5, 0x4, 0x4, 0x0, 0x7f, 0x9, 0x6, 0x4, 0x4, 0x2, 0x9, 0x2, 0xfffffff8, 0x4, 0x4e, 0x3, 0x8004, 0x1ff, 0x4, 0x4, 0x5b3a, 0xfffffff7, 0x6d, 0x8001, 0x10000, 0x4000001, 0x2c29, 0x7, 0x4, 0x0, 0x5, 0x0, 0xfffffffb, 0xea, 0x0, 0x9, 0x40, 0xfffffffa, 0xffffff00, 0x1, 0x7, 0xda, 0x7f, 0x3, 0x8566, 0x2f, 0x9, 0xfffffff9, 0xb, 0xa97e, 0x8, 0x9, 0x2002b36, 0x60f63eb, 0x4, 0x6, 0x2, 0x7f, 0x5, 0x1ff, 0x7f, 0x101, 0xfffffffa, 0xd, 0x6, 0x0, 0xf, 0x9, 0xb, 0x7f, 0x1, 0x10, 0x0, 0x5, 0x1038, 0x9, 0x5, 0xf0, 0x200, 0x0, 0x6, 0x80000000, 0x5, 0xffffffff, 0x6, 0x2, 0x3ff, 0x3, 0x7ff, 0x5, 0x1, 0xd, 0x3, 0x632, 0x2, 0xc4, 0xffff, 0x8, 0x1, 0x9, 0x3, 0x8, 0x5, 0x7, 0x3, 0x10001, 0xd, 0xd, 0x7, 0x7, 0xf2, 0x5, 0x600000, 0x7, 0x4, 0xfffffff7, 0x1, 0x3, 0x33fbb166, 0x9, 0x3, 0x4, 0x8, 0x4, 0xc, 0x6, 0x400, 0x9, 0x8, 0x1, 0x2e5c, 0x5, 0x7, 0x5, 0x1, 0x7fff, 0x80000001, 0x8c, 0xffffffc0, 0x80000000, 0x7, 0x7d3, 0xfff0, 0x1, 0x8, 0xb, 0x7ff, 0x4, 0x0, 0x6, 0x4, 0x5, 0x6, 0xd143, 0x4, 0x3a6, 0x7, 0x6, 0x7, 0x1000, 0x1, 0x4, 0x2b, 0x7, 0xa, 0x6, 0xdfb, 0x30d, 0xfff, 0x1, 0x3ff, 0x7ff, 0xfffffffd, 0x7]}]}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x24048001}, 0x20044804)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$kcm(r6, &(0x7f0000000440)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1}, 0x804)

5.744178928s ago: executing program 3 (id=387):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
listen(r3, 0x5)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026ae7000fcdbdf2502000000080069005e1ced0308000c0100"], 0x24}, 0x1, 0x0, 0x0, 0x44840}, 0x4000040)
sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r5, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @void}}}, 0x28}}, 0x0)

5.742315168s ago: executing program 5 (id=388):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000280)={0x0, 0x4, 0x1, [0x59, 0xfffffffffffffffd, 0x9, 0x8, 0xfffffffffffff991], [0xfffffffffffffff8, 0x81, 0xf7, 0x0, 0x2, 0x84fb, 0x76, 0x8000000000000001, 0x0, 0x8, 0x100000001, 0x5, 0x3, 0x3, 0x593, 0x8, 0x3, 0x1e, 0x6, 0x7, 0x10001, 0x83b4, 0x8000000000000000, 0xe, 0x1002, 0x2, 0x4d5afdaf, 0x3, 0x4, 0x7, 0xe03, 0x2b79, 0x7, 0x6, 0x3, 0x2, 0x0, 0x4, 0x6, 0xffffffffffff7fff, 0x912d, 0xe729, 0x80000001, 0x1, 0x401, 0x0, 0x3, 0x40, 0x0, 0x84d7, 0x100, 0x2, 0x3, 0x9, 0x200, 0x6, 0x1000, 0x3, 0x10, 0x4, 0x5, 0x1000, 0x1, 0x7, 0x4, 0xc6d, 0x2, 0x6fd0, 0x6, 0x6, 0x8, 0x8000, 0x9, 0xd87, 0x89, 0x0, 0x62, 0x9a39, 0x4, 0x200, 0x9, 0x4, 0x400, 0x7, 0xb, 0xf, 0x1d68, 0x3, 0x20e, 0xfd, 0x5e, 0x1, 0x40, 0x5, 0xff, 0x4, 0x7fff, 0x1000, 0xfffffffffffffffd, 0x5, 0xd, 0xfff, 0x100, 0xb, 0x7, 0x7, 0x1, 0x0, 0x9, 0xe, 0x1, 0x3000000000000000, 0xa, 0x10000, 0x0, 0x800, 0xff, 0x7ff, 0x9, 0x4, 0x9]})
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r0=>0x0})
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000340)={0x1d, r0, 0x0, {0x0, 0xff, 0x6}, 0xfe}, 0x18)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = socket$kcm(0xf, 0x3, 0x2)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000cc0)=@allocspi={0xf8, 0x16, 0x1, 0x70bd2b, 0x25dfdbfd, {{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@mcast1, 0x4e23, 0x200, 0x4e20, 0x0, 0xcae7388a885de62c, 0xe0, 0x20, 0x3b}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d3, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}, {0x9, 0x100000001, 0x6, 0x2, 0x1, 0x7, 0xc0d, 0x9}, {0xffffffff7fffffff, 0x0, 0x8000000000000, 0x2}, {0x7, 0x2000000, 0x488}, 0x70bd26, 0x3505, 0x2, 0x86fa708a8da4f410, 0x6, 0x82}, 0x0, 0xe}}, 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x4040888)
sendmsg$inet(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0)
r3 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r3, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0)
sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0)
r4 = socket(0x10, 0x803, 0x6)
sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)

5.476894094s ago: executing program 2 (id=389):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x1000}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r8)
socket$unix(0x1, 0x5, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

4.851694479s ago: executing program 5 (id=390):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000280)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x2, 0x0, @multicast2, {0x5, 0x4, 0x0, 0x4, 0x0, 0x64, 0x0, 0x1, 0x11, 0x6, @empty, @dev={0xac, 0x14, 0x14, 0x15}}}}}}}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x240000d4}, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
lsetxattr$trusted_overlay_redirect(0x0, &(0x7f00000002c0), &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x23, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/hid.usb0/subclass\x00', 0x2, 0x0)
ioctl$SNDRV_PCM_IOCTL_DRAIN(r3, 0x4144, 0x0)

4.744053362s ago: executing program 1 (id=391):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket(0x10, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x0, 0x1, 0x1}})
syz_open_dev$loop(&(0x7f0000000100), 0x6, 0x2300)
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000380)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x3f00, 0xa000, 0x0, 0x51, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}})

4.743044192s ago: executing program 3 (id=393):
syz_emit_ethernet(0xa3, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
r1 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x48002)
write$binfmt_aout(r1, 0x0, 0xc8)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x80}}, 0x0)
r4 = fsopen(&(0x7f0000002200)='ubifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)

4.692475953s ago: executing program 2 (id=394):
syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
socket$netlink(0x10, 0x3, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp(0xa, 0x2, 0x3a)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket(0x400000000010, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
epoll_create1(0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x305, 0x0, 0x0, 0x0, 0xffe8, 0x0, 0x6, 0x8})
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r1, &(0x7f0000000000), 0xd)

4.690555343s ago: executing program 5 (id=395):
syz_clone3(0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r6)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x1}]}}]}, 0x40}}, 0x4890)
ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

4.536387948s ago: executing program 4 (id=396):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write(r0, 0x0, 0x0)
close(r0)
write(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write(r1, 0x0, 0x0)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x2, 0x0)
write(r2, &(0x7f00000003c0)='8', 0x1)
close(r2)
write(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)

4.480884169s ago: executing program 2 (id=397):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20040004)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r5)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
r6 = socket$kcm(0x11, 0x3, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x9, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x6}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x0, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0xde4, 0x2}, {0x0, 0x3, 0x2, 0x1, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x8006, 0xe, 0x0, 0x80}, {0xd, 0x638c, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x1, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x9, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x8000, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x8, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x1, 0x8f, 0x9, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x9}, {0x9, 0x7, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x9, 0xffffff11, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x6}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x80, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x8002, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x47, 0x6, 0x8936, 0xdcb, 0x7, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0x9, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff7, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x5, 0xfffffffa, 0xff, 0x80004, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {}, {}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0xa}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000340)=@xdp={0x2c, 0x8, r4, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)="6b46afbe0e1232a8a371039dbee9", 0xfa}], 0x1}, 0x20000885)

3.769837766s ago: executing program 3 (id=398):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
socket(0x2, 0x80805, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf9477000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
semctl$SETVAL(0x0, 0x0, 0x10, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/console\x00', 0x1, 0x0)
write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x2d, 0x7, 0x10c4404, 0x2, 0x6, 0x7, 0x6, 0x0, 0x0, 0x4}}, 0xff18)

3.476875333s ago: executing program 4 (id=399):
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x81)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0)
read$msr(r3, &(0x7f000000bc00)=""/102392, 0x18ff8)
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x2004c884)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r4, &(0x7f0000000400)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8)
sendmmsg(r4, &(0x7f0000000540), 0x800001d, 0x1c)

3.347518627s ago: executing program 1 (id=400):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x11, @broadcast, 0x800, 0x3, 'lc\x00', 0x2, 0x7ff, 0x3e}, 0x2c)
getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x88b02, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0)

2.640312984s ago: executing program 5 (id=401):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380))
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$sock_int(r1, 0x1, 0x22, 0x0, 0x0)
write$binfmt_misc(r1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0), 0x1, 0x5a3, &(0x7f00000002c0)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x101042, 0x15)
pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x200700, &(0x7f0000000280)={[{@data_err_ignore}, {@prjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}, {@inode_readahead_blks}, {@nodelalloc}, {@debug}]}, 0x1, 0x499, &(0x7f00000010c0)="$eJzs3M1rHOUfAPDvTF7a/vqS/Gp9aa0aLUJQTJq0ag9eFAURRUEP9RiTbQndNtJEsbXYVMSTID14Fo+if4E3EUQ9CV49eZJC0V7aelqZ2Zlms90kJtl00+znA7v7zMyzM893n3l55nl2N4CuNZQ9JRG7IuL3iBioTy7OMFR/uXHtwuTNaxcmk6jV3vwryfNdv3Zhssxavm9nMTGcRqSfJMVGFps9d/7URLVaOVtMj86dfnd09tz5p94/PXGycrJyZvzYsaNHxp59ZvzptsSZxXX9wEczB/e//Pbl1yaPX37n52+z8u4qljfG0S5DWeB/13LNyx5v98Y6bHdDOuntYEFYlZ6IyKqrLz/+B6InFipvIF76uKOFAzZUdm3atvTi+RqwhSXR6RIAnVFe6LP73/Jxh5oem8LV5+s3QFncN4pHfUlvpEWevqb723Yaiojj8/98mT1ig/ohAAAafTb5xavZ64c3v3kla3sMRETZH3Rf/vxH/rynGEMZjIj/R8TeiLgnIvZFxL1F3vsj4oF1luf29k96ZZ2rXFbW/nuuGNta3P4rW38x2FNM7c7j70tOTFcrh4vPZDj6tmXTY8ts4/sXf/t8qWWN7b/skW2/bAsW5bjS29RBNzUxN5E3Stvg6qWIA72t4k9ujQQkEbE/Ig6sbtV7ysT0E18fXCrTyvEvow3jTLWvsvDms/jnoyn+UtI4Pjl92/jk6PaoVg6PlnvF7X759dM38kSLOltX/G1wtVJ/baj/5iyDSeN47Wx7t7/G/T/tT97Kx5n7i3kfTMzNnR2L6E/y09ni+eML7y2ny/zZ/j98qPXxv7d4Txb/gxGR7cQPRcTDEfFIUfZHI+KxiDi0TIw/vbBy/JF2qP4vRUy1PP/d2v+b6n/1iZ5TP3631Pb/W/0fzVPDxZz8/LeCVsXJThfNBVzPZwcAAAB3izT/DnySjtxKp+nISP07/Pvif2l1ZnbuyRMz752Zqn9XfjD60rKna6DoD61OVytjyXyxxnr/6HjRV1z2lx4p+o37enbk0yOTM9WpDscO3W7nEsd/5s+eTpcO2GA7Ws4d77/jBQE6oHkcPV08efH1cDKArcrvtaF7rXD8N/4OplGtxf9aAHcZ13/oXvnxfzEW3flfbMpjLAC2Jtd/6F6Of+hS6Q+dLgHQQQvXf3f50EXW9Lv+7cWb1/RvAE2JHdFq0fa1rLBWi1h3eTZBYl1/trAhiWRhTpT1FekmKNiqEunmKMZdkujwiQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBN/g0AAP//D0flnQ==")
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
syz_emit_ethernet(0x32, &(0x7f0000000000)={@random="e904a200", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0x4}}}}}}}, 0x0)

661.919953ms ago: executing program 2 (id=402):
socket$packet(0x11, 0x2, 0x300)
syz_emit_ethernet(0x80d, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(0x0, r0)
signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0xf]}, 0x8)
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000040)={0xc, 0xffffffffffffffff, 'id0\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019c80)=""/102400, 0x19000)
kcmp(r1, r2, 0x1, 0xffffffffffffffff, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb2}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
syz_emit_vhci(0x0, 0x8)

472.763628ms ago: executing program 3 (id=403):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x20000)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}}, 0x24}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r6=>0x0})
r7 = socket$inet(0x2, 0x2, 0x0)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x101040, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000200)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000600)={'wlan0\x00', 0x1})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000000c0)={0x24, r1, 0x5, 0x0, 0x4000000, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}]]}, 0x24}}, 0x0)

472.465788ms ago: executing program 4 (id=404):
syz_open_dev$vcsa(&(0x7f0000000080), 0x8000000000000000, 0x103402)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x0]}}, &(0x7f0000000540)=""/145, 0x1b, 0x91, 0x1}, 0x28)
syz_mount_image$squashfs(&(0x7f0000000940), &(0x7f00000001c0)='./file1\x00', 0x2000000, &(0x7f00000003c0)=ANY=[], 0x1, 0x184, &(0x7f0000000700)="$eJzskL9OKkEUxr/ZXfbCLW4uya1oILlGsVCWRY2x0RJ7H0ACKxIX/7AkAqFYYgyFhbH0CXgNE19AC0Os6UwoqKwMZnbODsMzOL9iv51zvnPmnDkNroJfAL5m/SoOEGHiD14ZgwUgy0Rsagh9IH0jvReCF/IdUvyGNBN0e2cV3/daub0c0ovAnH3OBYD0BPsDA9Oo1XjWr/KfYwDcZQOoAR9pAKrHfLeii0QnIGMB/6Il5tLDHfywBqDQbl4Wgm5vo9Gs1L26d+66pR1ny3G23cJJw/cc8bVpL15Oq4DrOgD+XillhASAW/L8pnwMU0ajPFNrbeUN8/+xhIGU/I97MDzJ2vgeE8ARVpEEcB2yRXQsuliIViqDwaRD0VLmE65klNisXvi1IRhYXDaCJXsUJxhQge+5EyRkprQbxqMOSVdIy6Qj5Rk5WXs5YEUd7uiUD+MRW0Vu7CTj/p1Ku91ybfn3N4TSiN/6aCwv92xAo9FoNBqNRqPRaH463wEAAP//Mu15jw==")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x200, 0x50)
getdents64(r0, &(0x7f0000000280)=""/175, 0xaf)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x140, 0x8)
setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000040)=0x1, 0x4)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0xfffd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x6e6bb8, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x2b}, 0xa, @in=@broadcast}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x9}, 0x4040000)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000340)={0x81, 0x0, 0x2})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x22852, r1, 0x0)
r3 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
ioctl$EXT4_IOC_GETSTATE(r3, 0x40046629, &(0x7f0000000040))
mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff)
bpf$MAP_CREATE(0x0, &(0x7f0000003e40)=ANY=[@ANYBLOB], 0x50)

472.138248ms ago: executing program 1 (id=405):
syz_emit_ethernet(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
socket$inet6(0xa, 0x80002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$tty20(0xc, 0x4, 0x1)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x500, &(0x7f0000000580)={&(0x7f00000002c0)={0x28, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffd, 0x6b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054)

0s ago: executing program 5 (id=406):
prlimit64(0x0, 0xe, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000004c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0)
read$msr(r0, &(0x7f0000000540)=""/102392, 0x18ff8)
r1 = syz_open_dev$dvb_demux(&(0x7f0000019540), 0x0, 0x20000)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000019580)={0xfff, 0x1, 0x3, 0xa, 0x4})
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200), 0x0, 0xfffffffffffffffe)
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f000046f000/0x4000)=nil, &(0x7f000061e000/0x4000)=nil, &(0x7f00006f8000/0x2000)=nil, &(0x7f0000485000/0x1000)=nil, &(0x7f000096e000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000a8c000/0x1000)=nil, &(0x7f00005b3000/0x4000)=nil, &(0x7f0000914000/0x3000)=nil, &(0x7f0000abd000/0x1000)=nil, &(0x7f0000022000/0x3000)=nil, 0x0}, 0x68)

kernel console output (not intermixed with test programs):

no interfaces have a carrier
[   38.901322][ T3850] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.914312][ T3850] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting crond: OK
Starting sshd: OK

syzkaller
Warning: Permanently added '10.128.1.93' (ED25519) to the list of known hosts.
syzkaller login: [   58.870114][ T4172] cgroup: Unknown subsys name 'net'
[   59.007802][ T4172] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   60.235247][ T4172] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k FS
[   61.677597][ T4185] chnl_net:caif_netlink_parms(): no params data found
[   61.702105][ T4186] chnl_net:caif_netlink_parms(): no params data found
[   61.726354][ T4184] chnl_net:caif_netlink_parms(): no params data found
[   61.745650][ T4190] chnl_net:caif_netlink_parms(): no params data found
[   61.805377][ T4194] chnl_net:caif_netlink_parms(): no params data found
[   61.906600][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.913851][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.922001][ T4186] device bridge_slave_0 entered promiscuous mode
[   61.934857][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.941943][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.950318][ T4185] device bridge_slave_0 entered promiscuous mode
[   61.964320][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.971597][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.979655][ T4184] device bridge_slave_0 entered promiscuous mode
[   61.988292][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.995611][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.003759][ T4186] device bridge_slave_1 entered promiscuous mode
[   62.015032][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.022196][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.030030][ T4185] device bridge_slave_1 entered promiscuous mode
[   62.037975][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.045151][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.053561][ T4190] device bridge_slave_0 entered promiscuous mode
[   62.061085][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.068233][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.076489][ T4184] device bridge_slave_1 entered promiscuous mode
[   62.107516][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.122218][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.130201][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.138121][ T4190] device bridge_slave_1 entered promiscuous mode
[   62.151241][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.178169][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.185455][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.193271][ T4194] device bridge_slave_0 entered promiscuous mode
[   62.206578][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.213891][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.221935][ T4194] device bridge_slave_1 entered promiscuous mode
[   62.231424][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.248009][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.259336][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.287600][ T4186] team0: Port device team_slave_0 added
[   62.295490][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.306189][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.327865][ T4186] team0: Port device team_slave_1 added
[   62.341167][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.351886][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.363314][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.374226][ T4184] team0: Port device team_slave_0 added
[   62.414841][ T4184] team0: Port device team_slave_1 added
[   62.427791][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.434981][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.461272][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.474976][ T4185] team0: Port device team_slave_0 added
[   62.481194][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.488246][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.514178][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.537719][ T4194] team0: Port device team_slave_0 added
[   62.544951][ T4185] team0: Port device team_slave_1 added
[   62.551783][ T4194] team0: Port device team_slave_1 added
[   62.564029][ T4190] team0: Port device team_slave_0 added
[   62.581971][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.589301][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.615744][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.647287][ T4190] team0: Port device team_slave_1 added
[   62.658109][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.665377][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.691407][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.703224][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.710188][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.737168][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.770689][ T4186] device hsr_slave_0 entered promiscuous mode
[   62.778000][ T4186] device hsr_slave_1 entered promiscuous mode
[   62.785178][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.792143][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.818346][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.833512][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.840496][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.866838][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.885180][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.892248][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.918743][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.941005][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.948175][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.974889][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.987877][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.995245][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.021504][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.069736][ T4185] device hsr_slave_0 entered promiscuous mode
[   63.076721][ T4185] device hsr_slave_1 entered promiscuous mode
[   63.083618][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   63.091449][ T4185] Cannot create hsr debugfs directory
[   63.103441][ T4184] device hsr_slave_0 entered promiscuous mode
[   63.110270][ T4184] device hsr_slave_1 entered promiscuous mode
[   63.116734][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   63.124501][ T4184] Cannot create hsr debugfs directory
[   63.145853][ T4194] device hsr_slave_0 entered promiscuous mode
[   63.153288][ T4194] device hsr_slave_1 entered promiscuous mode
[   63.159725][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   63.167488][ T4194] Cannot create hsr debugfs directory
[   63.239078][ T4190] device hsr_slave_0 entered promiscuous mode
[   63.245901][ T4190] device hsr_slave_1 entered promiscuous mode
[   63.252680][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   63.260246][ T4190] Cannot create hsr debugfs directory
[   63.363363][ T1330] Bluetooth: hci1: command 0x0409 tx timeout
[   63.442512][   T23] Bluetooth: hci0: command 0x0409 tx timeout
[   63.452419][ T1330] Bluetooth: hci4: command 0x0409 tx timeout
[   63.461254][ T1330] Bluetooth: hci3: command 0x0409 tx timeout
[   63.467618][ T1330] Bluetooth: hci2: command 0x0409 tx timeout
[   63.523568][ T4185] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   63.535881][ T4185] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   63.548498][ T4185] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   63.560865][ T4185] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   63.602640][ T4194] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   63.611805][ T4194] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   63.621268][ T4194] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   63.631616][ T4194] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   63.696753][ T4184] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   63.707215][ T4184] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   63.718186][ T4184] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   63.732070][ T4184] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   63.758829][ T4186] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   63.784870][ T4186] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   63.809412][ T4186] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   63.819412][ T4186] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   63.836602][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.859640][ T4185] 8021q: adding VLAN 0 to HW filter on device team0
[   63.868231][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   63.878258][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   63.935452][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.944472][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   63.953730][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   63.962782][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.970400][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.979053][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   63.988648][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   63.997915][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.005177][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.014000][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   64.023293][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   64.037629][ T4190] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   64.046392][ T4190] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   64.058456][ T4190] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   64.070889][ T4190] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   64.079675][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   64.091323][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   64.101873][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   64.111293][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   64.120716][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   64.146740][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   64.155709][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   64.165891][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   64.177975][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   64.186489][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   64.200183][ T4194] 8021q: adding VLAN 0 to HW filter on device team0
[   64.210590][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   64.221075][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   64.229103][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   64.256924][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   64.266076][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   64.275609][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.282745][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.290578][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   64.308950][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.331326][ T4184] 8021q: adding VLAN 0 to HW filter on device team0
[   64.348565][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   64.360378][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   64.370520][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.377763][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.385729][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   64.395444][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   64.403304][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   64.411026][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   64.419778][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   64.429055][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   64.438584][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   64.468134][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   64.485574][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   64.498661][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.505834][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.515930][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   64.524580][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   64.533098][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.540142][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.550348][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   64.559804][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   64.568812][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   64.578124][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   64.586701][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   64.601681][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   64.623281][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.634256][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   64.647262][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   64.655505][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   64.664376][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   64.673082][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   64.688426][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   64.697441][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   64.706352][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   64.715541][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   64.729824][ T4186] 8021q: adding VLAN 0 to HW filter on device team0
[   64.753712][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   64.761675][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   64.769612][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   64.778742][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   64.787374][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   64.795162][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   64.804638][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   64.813399][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.820477][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.830131][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   64.839006][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   64.847569][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.854660][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.863084][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   64.871503][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   64.880666][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   64.896902][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.918832][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   64.937439][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   64.957010][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   64.971981][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   64.981353][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   64.991150][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   65.003205][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   65.016296][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   65.025385][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   65.050481][ T4186] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   65.062344][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   65.090305][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   65.110375][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   65.135893][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   65.153469][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   65.170766][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   65.180167][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   65.198073][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   65.242040][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.278971][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   65.292546][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   65.319341][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.355290][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   65.370244][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   65.397248][ T4190] 8021q: adding VLAN 0 to HW filter on device team0
[   65.410272][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   65.420952][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   65.431486][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   65.439613][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   65.452623][ T4230] Bluetooth: hci1: command 0x041b tx timeout
[   65.462321][ T4194] device veth0_vlan entered promiscuous mode
[   65.471981][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   65.481300][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   65.491248][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   65.499658][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   65.515787][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   65.526139][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   65.534546][ T4230] Bluetooth: hci2: command 0x041b tx timeout
[   65.540857][ T4230] Bluetooth: hci3: command 0x041b tx timeout
[   65.547827][ T4230] Bluetooth: hci4: command 0x041b tx timeout
[   65.554118][ T4230] Bluetooth: hci0: command 0x041b tx timeout
[   65.557493][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.577443][ T4194] device veth1_vlan entered promiscuous mode
[   65.588364][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   65.596600][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   65.606576][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   65.615379][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.622466][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.630784][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   65.638614][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   65.646318][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   65.655213][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   65.664027][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.671060][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.680101][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   65.718251][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.734253][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   65.742967][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   65.751728][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   65.761322][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   65.770382][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   65.780231][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   65.789207][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   65.797959][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   65.838360][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   65.847967][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   65.857468][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   65.867649][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   65.877225][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   65.886305][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   65.895774][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   65.904219][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   65.912742][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   65.920905][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   65.931674][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   65.940186][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   65.955227][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   65.964398][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   65.976702][ T4194] device veth0_macvtap entered promiscuous mode
[   65.990354][ T4185] device veth0_vlan entered promiscuous mode
[   66.003666][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   66.023607][ T4186] device veth0_vlan entered promiscuous mode
[   66.031341][ T4184] device veth0_vlan entered promiscuous mode
[   66.038824][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   66.047941][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   66.057331][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   66.067129][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   66.075874][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   66.084985][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   66.092912][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   66.100678][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   66.110020][ T4194] device veth1_macvtap entered promiscuous mode
[   66.121905][ T4185] device veth1_vlan entered promiscuous mode
[   66.139956][ T4184] device veth1_vlan entered promiscuous mode
[   66.171536][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.190512][ T4186] device veth1_vlan entered promiscuous mode
[   66.203318][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   66.211638][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   66.221873][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   66.230460][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   66.239817][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   66.249360][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   66.263061][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.300695][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   66.317791][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   66.353339][ T4194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.363601][ T4194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.372771][ T4194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.381670][ T4194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.397702][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   66.406782][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   66.415701][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   66.425093][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   66.435118][ T4184] device veth0_macvtap entered promiscuous mode
[   66.451835][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.462994][ T4185] device veth0_macvtap entered promiscuous mode
[   66.480383][ T4184] device veth1_macvtap entered promiscuous mode
[   66.490097][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   66.498718][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   66.510661][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   66.519453][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   66.527223][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   66.540666][ T4186] device veth0_macvtap entered promiscuous mode
[   66.550763][ T4185] device veth1_macvtap entered promiscuous mode
[   66.580113][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.591277][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.604022][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.611431][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   66.619951][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   66.628702][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   66.637972][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   66.647683][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   66.660802][ T4186] device veth1_macvtap entered promiscuous mode
[   66.675347][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.686481][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.697531][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.708285][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   66.716606][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   66.728597][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   66.737572][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   66.746595][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   66.755872][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   66.795540][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.807970][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.820927][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.831830][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.846701][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.856441][ T4184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.865817][ T4184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.875020][ T4184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.884700][ T4184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.908044][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   66.919385][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   66.928244][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   66.937296][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   66.948301][ T4190] device veth0_vlan entered promiscuous mode
[   66.963405][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.974275][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.984526][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.996226][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.007866][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.016243][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.027189][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.037210][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.048410][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.058349][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.070207][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.081175][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.100919][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   67.113902][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   67.121638][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   67.132146][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   67.140945][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   67.150201][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   67.164813][ T4190] device veth1_vlan entered promiscuous mode
[   67.174441][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.186350][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.197268][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.208243][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.218928][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.229892][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.240803][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.265622][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.275041][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.284938][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.294151][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.305644][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   67.316492][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   67.328214][ T4185] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.337435][ T4185] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.346428][ T4185] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.356232][ T4185] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.385672][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.396392][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.436479][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   67.459264][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.469849][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.486410][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   67.516007][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   67.526497][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   67.535717][ T4227] Bluetooth: hci1: command 0x040f tx timeout
[   67.539842][ T4190] device veth0_macvtap entered promiscuous mode
[   67.563127][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.571465][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.586914][ T4190] device veth1_macvtap entered promiscuous mode
[   67.595861][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   67.604531][ T4226] Bluetooth: hci0: command 0x040f tx timeout
[   67.604964][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   67.610921][ T4226] Bluetooth: hci4: command 0x040f tx timeout
[   67.625420][ T4226] Bluetooth: hci3: command 0x040f tx timeout
[   67.626270][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   67.631493][ T4226] Bluetooth: hci2: command 0x040f tx timeout
[   67.675119][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.687401][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.697626][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.708443][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.718446][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.728900][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.738769][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.749631][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.762070][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.777406][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   67.789196][ T4208] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.789326][  T509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.803259][ T4208] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.810525][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   67.819091][  T509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.839623][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.861301][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.876506][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.888228][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.898623][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.909383][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.920879][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.931706][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.947295][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.963610][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   67.971574][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   67.979933][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   67.990116][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   68.024996][ T4190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.038126][ T4190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.047213][ T4190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.059704][ T4190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.093750][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.126719][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.156937][  T509] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   68.166520][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.189421][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.211041][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   68.362434][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.758952][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.052337][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!!
[   69.084593][ T4271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.135683][ T4274] Cannot find add_set index 0 as target
[   69.153844][ T4271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.284939][  T509] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   69.384485][  T509] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   69.522032][  T509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.563478][  T509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.605265][   T23] Bluetooth: hci1: command 0x0419 tx timeout
[   69.684946][   T23] Bluetooth: hci2: command 0x0419 tx timeout
[   69.702831][   T23] Bluetooth: hci3: command 0x0419 tx timeout
[   69.719093][   T23] Bluetooth: hci4: command 0x0419 tx timeout
[   69.729268][   T23] Bluetooth: hci0: command 0x0419 tx timeout
[   69.776733][  T509] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   70.848786][ T4305] process 'syz.2.11' launched './file1' with NULL argv: empty string added
[   71.312330][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!!
[   71.332327][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[   71.342324][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[   71.352323][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[   71.362322][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[   71.372322][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[   71.382337][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[   71.392334][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[   71.402618][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[   72.457581][ T1431] ieee802154 phy0 wpan0: encryption failed: -22
[   72.480746][ T1431] ieee802154 phy1 wpan1: encryption failed: -22
[   72.580229][ T4324] netlink: 'syz.3.17': attribute type 4 has an invalid length.
[   73.084785][ T4236] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   73.776008][ T4341] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   74.058824][ T4344] device syzkaller0 entered promiscuous mode
[   74.106655][ T4344] tipc: Started in network mode
[   74.115999][ T4236] usb 4-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00
[   74.140159][ T4344] tipc: Node identity 080211, cluster identity 4711
[   74.141169][ T4236] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   74.178665][ T4344] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   74.423324][ T4352] CacheFiles: Failed to register: -95
[   74.517588][ T4236] net1080 4-1:1.0 usb0: register 'net1080' at usb-dummy_hcd.3-1, NetChip TurboCONNECT, fa:5a:f9:1f:bb:88
[   74.848457][ T4231] usb 4-1: USB disconnect, device number 2
[   74.953570][ T4231] net1080 4-1:1.0 usb0: unregister 'net1080' usb-dummy_hcd.3-1, NetChip TurboCONNECT
[   75.440569][   T23] tipc: Node number set to 134353152
[   76.948075][ T4378] loop1: detected capacity change from 0 to 2048
[   78.531781][ T4378] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   78.577206][ T4367] device wlan0 entered promiscuous mode
[   78.661806][ T4384] netlink: 28 bytes leftover after parsing attributes in process `syz.4.31'.
[   78.828713][ T4367] syz.2.28 (4367) used greatest stack depth: 20944 bytes left
[   79.277970][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   79.311956][ T4407] device syzkaller0 entered promiscuous mode
[   79.472322][ T4422] loop0: detected capacity change from 0 to 128
[   79.653118][   T13] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   79.672874][ T4426] fuse: Unknown parameter 'fuse'
[   79.882961][ T4433] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4184] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[4433]
[   80.023512][   T13] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   80.194408][   T13] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[   80.592595][   T13] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   80.622043][   T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   80.657493][   T13] usb 5-1: Product: syz
[   80.661755][   T13] usb 5-1: Manufacturer: syz
[   80.677385][   T13] usb 5-1: SerialNumber: syz
[   80.743422][   T13] cdc_mbim 5-1:1.0: skipping garbage
[   80.860951][ T4453] kvm: emulating exchange as write
[   80.861362][ T4455] jffs2: notice: (4455) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   80.914393][ T4457] netlink: 44 bytes leftover after parsing attributes in process `syz.1.48'.
[   80.927964][ T4458] overlayfs: failed to resolve './file2': -2
[   80.946187][ T4417] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   80.956405][ T4457] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.964011][ T4457] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.125948][ T4465] loop2: detected capacity change from 0 to 512
[   81.280462][ T4465] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   81.583754][ T4465] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[   81.656922][ T4465] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[   81.720301][ T4465] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[   81.795990][ T4465] System zones: 0-2, 18-18, 34-35
[   81.925782][ T4465] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   82.042512][ T4417] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   82.092545][   T13] cdc_mbim 5-1:1.0: setting tx_max = 16384
[   82.109427][ T4465] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[   82.133591][   T13] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device
[   82.156827][   T13] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, ca:2e:af:6d:c7:00
[   82.205388][ T4236] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   82.212545][    C1] cdc_mbim 5-1:1.0: nonzero urb status received: -71
[   82.220386][    C1] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes
[   82.245480][    C1] cdc_mbim 5-1:1.0: nonzero urb status received: -71
[   82.252238][    C1] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes
[   82.272353][    C1] cdc_mbim 5-1:1.0: nonzero urb status received: -71
[   82.279108][    C1] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes
[   82.279554][ T4480] device-mapper: table: 248:0: mirror: Invalid offset
[   82.302365][    C1] cdc_mbim 5-1:1.0: nonzero urb status received: -71
[   82.309102][    C1] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes
[   82.338555][ T4480] device-mapper: ioctl: error adding target to table
[   82.345369][    C1] cdc_mbim 5-1:1.0: nonzero urb status received: -71
[   82.345393][    C1] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes
[   82.362373][    C1] cdc_mbim 5-1:1.0: nonzero urb status received: -71
[   82.369094][    C1] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes
[   82.399246][ T4487] trusted_key: encrypted_key: insufficient parameters specified
[   82.402362][    C1] cdc_mbim 5-1:1.0: nonzero urb status received: -71
[   82.413817][    C1] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes
[   82.418327][ T4488] loop0: detected capacity change from 0 to 512
[   82.442340][    C1] cdc_mbim 5-1:1.0: nonzero urb status received: -71
[   82.449118][    C1] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes
[   82.463259][ T4236] usb 4-1: Using ep0 maxpacket: 16
[   82.487589][   T23] usb 5-1: USB disconnect, device number 2
[   82.490623][ T4488] EXT4-fs error (device loop0): ext4_quota_enable:6444: comm syz.0.57: inode #524288: comm syz.0.57: iget: illegal inode #
[   82.494118][   T23] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM
[   82.519358][ T4487] FAULT_INJECTION: forcing a failure.
[   82.519358][ T4487] name failslab, interval 1, probability 0, space 0, times 1
[   82.530560][ T4488] EXT4-fs error (device loop0): ext4_quota_enable:6447: comm syz.0.57: Bad quota inode: 524288, type: 2
[   82.550465][ T4488] EXT4-fs warning (device loop0): ext4_enable_quotas:6488: Failed to enable quota tracking (type=2, err=-117, ino=524288). Please run e2fsck to fix.
[   82.552498][ T4487] CPU: 1 PID: 4487 Comm: syz.2.56 Not tainted syzkaller #0
[   82.572852][ T4487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   82.574460][ T4488] EXT4-fs (loop0): mount failed
[   82.582926][ T4487] Call Trace:
[   82.582940][ T4487]  <TASK>
[   82.582948][ T4487]  dump_stack_lvl+0x188/0x250
[   82.582985][ T4487]  ? show_regs_print_info+0x20/0x20
[   82.583002][ T4487]  ? load_image+0x410/0x410
[   82.583021][ T4487]  ? __might_sleep+0xf0/0xf0
[   82.583039][ T4487]  ? __lock_acquire+0x7d40/0x7d40
[   82.583063][ T4487]  should_fail+0x383/0x4b0
[   82.583086][ T4487]  should_failslab+0x5/0x20
[   82.583104][ T4487]  slab_pre_alloc_hook+0x51/0xc0
[   82.583124][ T4487]  kmem_cache_alloc_node_trace+0x4a/0x2f0
[   82.583141][ T4487]  ? throtl_pd_alloc+0x9a/0x5f0
[   82.583164][ T4487]  throtl_pd_alloc+0x9a/0x5f0
[   82.583183][ T4487]  blkg_alloc+0x485/0x640
[   82.583209][ T4487]  blkg_conf_prep+0x52f/0x830
[   82.583238][ T4487]  tg_set_conf+0xdb/0x3c0
[   82.592384][ T4236] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   82.594272][ T4487]  ? tg_prfill_conf_u64+0x80/0x80
[   82.675440][ T4487]  ? __mutex_lock_common+0x435/0x2400
[   82.680817][ T4487]  ? tg_print_conf_uint+0xe0/0xe0
[   82.685829][ T4487]  cgroup_file_write+0x2c4/0x670
[   82.690755][ T4487]  ? read_lock_is_recursive+0x10/0x10
[   82.696119][ T4487]  ? cgroup_seqfile_stop+0xd0/0xd0
[   82.701235][ T4487]  ? cgroup_seqfile_stop+0xd0/0xd0
[   82.706332][ T4487]  kernfs_fop_write_iter+0x3a8/0x500
[   82.711610][ T4487]  vfs_write+0x748/0xd70
[   82.715845][ T4487]  ? file_end_write+0x250/0x250
[   82.720709][ T4487]  ? mutex_lock_nested+0x17/0x20
[   82.725633][ T4487]  ? __fdget_pos+0x2bf/0x370
[   82.730229][ T4487]  ? ksys_write+0x70/0x260
[   82.734633][ T4487]  ksys_write+0x153/0x260
[   82.738952][ T4487]  ? __ia32_sys_read+0x80/0x80
[   82.743712][ T4487]  ? lockdep_hardirqs_on+0x94/0x140
[   82.748903][ T4487]  do_syscall_64+0x4c/0xa0
[   82.753308][ T4487]  ? clear_bhb_loop+0x30/0x80
[   82.757980][ T4487]  ? clear_bhb_loop+0x30/0x80
[   82.762645][ T4487]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   82.768543][ T4487] RIP: 0033:0x7f26599f52d9
[   82.772944][ T4487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   82.792552][ T4487] RSP: 002b:00007f2657c4d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   82.800954][ T4487] RAX: ffffffffffffffda RBX: 00007f2659c7cfa0 RCX: 00007f26599f52d9
[   82.809020][ T4487] RDX: 0000000000000007 RSI: 00002000000002c0 RDI: 0000000000000003
[   82.816975][ T4487] RBP: 00007f2659a8c888 R08: 0000000000000000 R09: 0000000000000000
[   82.824930][ T4487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   82.832884][ T4487] R13: 00007f2659c7d038 R14: 00007f2659c7cfa0 R15: 00007ffc6d530768
[   82.840857][ T4487]  </TASK>
[   82.856840][ T4236] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[   82.937518][ T4495] netlink: 128 bytes leftover after parsing attributes in process `syz.1.58'.
[   82.956267][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[   82.998049][ T4495] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   83.055867][ T4236] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   83.076602][ T4236] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   83.104728][ T4488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.57'.
[   83.107263][ T4236] usb 4-1: Product: syz
[   83.119677][ T4488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.57'.
[   83.135145][ T4236] usb 4-1: Manufacturer: syz
[   83.144376][ T4236] usb 4-1: SerialNumber: syz
[   83.162457][ T4495] syz.1.58 (4495) used greatest stack depth: 20368 bytes left
[   83.273538][   T26] audit: type=1326 audit(1791898777.258:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4506 comm="syz.1.60" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f57387732d9 code=0x0
[   83.472597][ T4236] usb 4-1: 0:2 : does not exist
[   83.476990][ T4518] EXT4-fs warning (device sda1): verify_group_input:171: Bad blocks count 0
[   83.539193][ T4236] usb 4-1: USB disconnect, device number 3
[   83.754755][ T4530] Zero length message leads to an empty skb
[   83.786555][ T4527] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   83.859993][ T4357] udevd[4357]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   84.162661][ T4236] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[   84.311989][ T4546] device syzkaller0 entered promiscuous mode
[   84.388307][ T4544] pit: kvm: requested 19276 ns i8254 timer period limited to 200000 ns
[   84.429767][ T4553] device syzkaller0 entered promiscuous mode
[   84.522687][ T4236] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[   84.568520][ T4236] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[   84.609853][ T4236] usb 3-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00
[   84.649667][ T4557] device syzkaller0 entered promiscuous mode
[   84.786686][ T4236] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.932701][ T4229] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   85.507010][ T4569] loop4: detected capacity change from 0 to 8192
[   85.675561][ T4569]  loop4: p1 p3 p4
[   85.679575][ T4569] loop4: partition table partially beyond EOD, truncated
[   85.697967][ T4569] loop4: p1 start 393225 is beyond EOD, truncated
[   85.708504][ T4569] loop4: p3 start 16777216 is beyond EOD, truncated
[   85.729321][ T4569] loop4: p4 start 4294967295 is beyond EOD, truncated
[   85.769875][   T26] audit: type=1326 audit(1791898779.748:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4578 comm="syz.3.79" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631f88d2d9 code=0x7ffc0000
[   85.800445][   T26] audit: type=1326 audit(1791898779.778:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4578 comm="syz.3.79" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f631f88d2d9 code=0x7ffc0000
[   85.852435][   T26] audit: type=1326 audit(1791898779.778:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4578 comm="syz.3.79" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631f88d2d9 code=0x7ffc0000
[   85.883402][ T4229] usb 1-1: Using ep0 maxpacket: 16
[   85.893511][   T26] audit: type=1326 audit(1791898779.778:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4578 comm="syz.3.79" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f631f88d2d9 code=0x7ffc0000
[   85.920544][   T26] audit: type=1326 audit(1791898779.778:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4578 comm="syz.3.79" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631f88d2d9 code=0x7ffc0000
[   86.009900][   T26] audit: type=1326 audit(1791898779.778:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4578 comm="syz.3.79" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f631f88d2d9 code=0x7ffc0000
[   86.040143][   T26] audit: type=1326 audit(1791898779.778:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4578 comm="syz.3.79" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631f88d2d9 code=0x7ffc0000
[   86.066712][ T4229] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   86.083694][ T4229] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   86.097374][   T26] audit: type=1326 audit(1791898779.778:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4578 comm="syz.3.79" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f631f88d2d9 code=0x7ffc0000
[   86.183960][ T4236] pegasus 3-1:1.0: can't reset MAC
[   86.192740][ T4236] pegasus: probe of 3-1:1.0 failed with error -5
[   86.218714][ T4236] usb 3-1: USB disconnect, device number 2
[   86.228473][ T4602] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0
[   86.264888][ T4601] loop1: detected capacity change from 0 to 1024
[   86.303212][ T4229] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   86.335350][ T4229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.365288][ T4229] usb 1-1: Product: syz
[   86.376392][ T4229] usb 1-1: Manufacturer: syz
[   86.392053][ T4229] usb 1-1: SerialNumber: syz
[   87.440643][ T1108] cfg80211: failed to load regulatory.db
[   87.502583][ T4229] usb 1-1: 0:2 : does not exist
[   87.584056][ T4229] usb 1-1: USB disconnect, device number 2
[   87.639197][ T4641] futex_wake_op: syz.3.88 tries to shift op by 144; fix this program
[   87.690556][ T4357] udevd[4357]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   87.875889][ T4642] =======================================================
[   87.875889][ T4642] WARNING: The mand mount option has been deprecated and
[   87.875889][ T4642]          and is ignored by this kernel. Remove the mand
[   87.875889][ T4642]          option from the mount to silence this warning.
[   87.875889][ T4642] =======================================================
[   88.344041][ T4651] loop1: detected capacity change from 0 to 1024
[   88.620443][ T4651] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a016c118, mo2=0002]
[   88.728035][ T4651] System zones: 0-1, 3-12
[   88.849283][ T4651] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_dev=0x0000000000000007,debug,nodioread_nolock,min_batch_time=0x0000000000000006,debug_want_extra_isize=0x0000000000000080,grpquota,nodelalloc,jqfmt=vfsv1,norecovery,,errors=continue. Quota mode: writeback.
[   89.224260][ T4659] gadgetfs: bound to dummy_udc driver
[   89.338805][ T4659] loop0: detected capacity change from 0 to 512
[   89.428914][ T4659] EXT4-fs (loop0): orphan cleanup on readonly fs
[   89.491297][ T4659] Quota error (device loop0): v2_read_file_info: Number of blocks too big for quota file size (1073747968 > 6144).
[   89.578505][ T4659] EXT4-fs warning (device loop0): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   89.632394][ T4659] EXT4-fs (loop0): Cannot turn on quotas: error -117
[   89.645324][ T4672] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000
[   89.674856][ T4659] EXT4-fs (loop0): 1 truncate cleaned up
[   89.695594][ T4659] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   89.890783][ T4676] loop4: detected capacity change from 0 to 4096
[   89.931348][ T4651] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2812: Unable to expand inode 12. Delete some EAs or run e2fsck.
[   89.993956][ T4187] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   90.001959][ T4676] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512)
[   90.010040][ T4682] loop0: detected capacity change from 0 to 8192
[   90.052120][ T4676] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[   90.079853][ T4676] ntfs3: loop4: Failed to load $BadClus.
[   90.238683][ T4184] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF
[   90.262392][ T4187] usb 3-1: Using ep0 maxpacket: 8
[   90.326366][ T4184] FAT-fs (loop0): Filesystem has been set read-only
[   90.391151][ T4184] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00006c6c)
[   90.416687][ T4187] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[   90.436256][ T4184] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00006c6c)
[   90.446387][ T4187] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   90.446412][ T4187] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   90.446433][ T4187] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[   90.503806][ T4187] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[   90.516732][ T4187] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[   90.525849][ T4187] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.543362][ T4187] usb 3-1: config 0 descriptor??
[   90.573163][ T4673] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   90.726902][ T4685] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.735234][ T4685] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.055528][ T4272] usb 3-1: USB disconnect, device number 3
[   91.103061][ T4685] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   91.137027][ T4685] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   91.401671][ T4685] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   91.410798][ T4685] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   91.419759][ T4685] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   91.428707][ T4685] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   92.264710][  T144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.985793][ T4722] device syzkaller0 entered promiscuous mode
[   93.062129][ T4726] netlink: 'syz.2.112': attribute type 14 has an invalid length.
[   93.071143][ T4726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.112'.
[   93.097486][ T4726] bond0: option xmit_hash_policy: invalid value (103)
[   93.171644][  T144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.337109][  T144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.457409][  T144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.519864][ T4740] device syzkaller0 entered promiscuous mode
[   93.767940][ T4745] syz.4.118 uses obsolete (PF_INET,SOCK_PACKET)
[   93.848663][ T4735] chnl_net:caif_netlink_parms(): no params data found
[   94.158029][ T4745] Set syz1 is full, maxelem 6117 reached
[   94.164525][ T4192] Bluetooth: Wrong link type (-22)
[   94.208479][ T4735] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.333911][ T4735] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.471175][ T4735] device bridge_slave_0 entered promiscuous mode
[   94.596041][ T4735] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.683019][ T4735] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.813040][ T4735] device bridge_slave_1 entered promiscuous mode
[   95.315503][ T4764] loop3: detected capacity change from 0 to 512
[   95.362583][ T4236] Bluetooth: hci0: command 0x0409 tx timeout
[   95.604823][ T4735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   95.782642][ T4735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   95.814991][ T4735] team0: Port device team_slave_0 added
[   95.851853][ T4735] team0: Port device team_slave_1 added
[   95.899123][ T4771] loop2: detected capacity change from 0 to 512
[   95.914916][ T4735] batman_adv: batadv0: Adding interface: batadv_slave_0
[   95.921930][ T4735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   96.004861][ T4771] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   96.071125][ T4735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   96.184048][ T4735] batman_adv: batadv0: Adding interface: batadv_slave_1
[   96.225862][ T4735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   96.306320][ T4735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   96.490744][ T4735] device hsr_slave_0 entered promiscuous mode
[   96.505901][ T4774] loop1: detected capacity change from 0 to 32768
[   96.530783][ T4735] device hsr_slave_1 entered promiscuous mode
[   96.558079][ T4774] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.123 (4774)
[   96.577739][ T4735] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   96.603735][ T4735] Cannot create hsr debugfs directory
[   96.668452][ T4774] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[   96.817250][ T4798] loop2: detected capacity change from 0 to 2048
[   97.330059][ T4798] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   97.453966][ T4236] Bluetooth: hci0: command 0x041b tx timeout
[   97.765409][ T4774] BTRFS info (device loop1): turning on async discard
[   97.772224][ T4774] BTRFS info (device loop1): using free space tree
[   97.783349][ T4774] BTRFS info (device loop1): has skinny extents
[   99.358912][ T4774] BTRFS error (device loop1): open_ctree failed: -12
[   99.521583][ T4735] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   99.547693][ T4735] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   99.722222][ T4735] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   99.744823][ T4735] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   99.762398][ T1330] Bluetooth: hci0: command 0x040f tx timeout
[   99.913135][ T4836] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  100.047697][  T144] device hsr_slave_0 left promiscuous mode
[  100.123172][  T144] device hsr_slave_1 left promiscuous mode
[  100.195243][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  100.245566][  T144] batman_adv: batadv0: Removing interface: batadv_slave_0
[  100.333292][ T4836] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  100.344923][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  100.370307][ T4836] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  100.398969][  T144] batman_adv: batadv0: Removing interface: batadv_slave_1
[  100.444637][ T4836] usb 2-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00
[  100.466800][ T4836] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.479634][  T144] device bridge_slave_1 left promiscuous mode
[  100.491179][  T144] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.537762][ T4836] usb 2-1: 1:1 : no or invalid class specific endpoint descriptor
[  100.554678][  T144] device bridge_slave_0 left promiscuous mode
[  100.581370][  T144] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.640710][  T144] device veth1_macvtap left promiscuous mode
[  100.661203][  T144] device veth0_macvtap left promiscuous mode
[  100.688642][  T144] device veth1_vlan left promiscuous mode
[  100.703705][  T144] device veth0_vlan left promiscuous mode
[  100.952551][ T4836] usb 2-1: setting selector (id 3) to 1 failed (current: 0)
[  101.122211][  T144] team0 (unregistering): Port device team_slave_1 removed
[  101.162558][ T4836] usb 2-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 4)
[  101.187684][  T144] team0 (unregistering): Port device team_slave_0 removed
[  101.222056][ T4836] usb 2-1: USB disconnect, device number 2
[  101.235543][  T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  101.295108][  T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  101.303561][ T4859] jffs2: notice: (4859) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  101.406371][  T144] bond0 (unregistering): Released all slaves
[  101.455782][ T4855] bridge0: port 3(syz_tun) entered blocking state
[  101.472705][ T4855] bridge0: port 3(syz_tun) entered disabled state
[  101.490994][ T4855] device syz_tun entered promiscuous mode
[  101.507839][ T4357] udevd[4357]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  101.539173][ T4862] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  101.579735][ T4735] 8021q: adding VLAN 0 to HW filter on device bond0
[  101.658062][ T4735] 8021q: adding VLAN 0 to HW filter on device team0
[  101.675011][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  101.687867][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  101.709510][ T4873] Bluetooth: hci0: unsupported parameter 5135
[  101.776709][ T4873] Bluetooth: hci0: unsupported parameter 65
[  101.809036][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  101.826205][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  101.834973][ T4873] Bluetooth: hci0: unsupported parameter 5135
[  101.845497][ T4230] Bluetooth: hci0: command 0x0419 tx timeout
[  101.874478][ T4873] Bluetooth: hci0: unsupported parameter 65
[  101.896169][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.903331][ T4271] bridge0: port 1(bridge_slave_0) entered forwarding state
[  101.940671][ T4890] loop2: detected capacity change from 0 to 1024
[  101.949676][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  101.991975][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  102.038663][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.045835][ T4271] bridge0: port 2(bridge_slave_1) entered forwarding state
[  102.061621][ T4890] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  102.078773][ T4890] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  102.100200][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  102.118657][ T4897] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  102.159326][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  102.229701][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  102.276385][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  102.289470][    T9] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28
[  102.305594][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  102.317750][    T9] EXT4-fs (loop2): This should not happen!! Data will be lost
[  102.317750][    T9] 
[  102.328547][ T4883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.138'.
[  102.358258][    T9] EXT4-fs (loop2): Total free blocks count 0
[  102.369816][    T9] EXT4-fs (loop2): Free/Dirty block details
[  102.379460][    T9] EXT4-fs (loop2): free_blocks=0
[  102.399501][    T9] EXT4-fs (loop2): dirty_blocks=16
[  102.405409][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  102.438441][    T9] EXT4-fs (loop2): Block reservation details
[  102.451781][    T9] EXT4-fs (loop2): i_reserved_data_blocks=1
[  102.458650][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  102.469380][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  102.508954][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  102.518947][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  102.534497][ T4735] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  102.546193][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  102.575053][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  102.593608][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  102.765722][ T4922] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  102.798358][ T4922] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  103.017868][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  103.042472][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  103.069718][ T4735] 8021q: adding VLAN 0 to HW filter on device batadv0
[  103.082459][ T4236] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  103.672488][ T4705] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  104.008103][ T4963] binder_alloc: 4962: binder_alloc_buf size 65536 failed, no address space
[  104.022789][ T4963] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 8192 (num: 1 largest: 8192)
[  104.092623][ T4236] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  104.129236][ T4236] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  104.182340][ T4236] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  104.222644][ T4705] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  104.240910][ T4236] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  104.262485][ T4705] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  104.272263][ T4705] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  104.291993][ T4236] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  104.342450][ T4236] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  104.362416][ T4705] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  104.377391][ T4236] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.391895][ T4705] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.422764][ T4929] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  104.444324][ T4705] usb 5-1: config 0 descriptor??
[  104.473083][ T4236] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected
[  104.516638][ T4236] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84
[  104.537123][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  104.545447][ T4236] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2
[  104.555251][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  104.568698][ T4951] loop3: detected capacity change from 0 to 40427
[  104.586721][ T4236] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  104.660316][ T4236] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88
[  104.712119][ T4236] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6
[  104.776394][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  104.802064][ T4951] F2FS-fs (loop3): Invalid SB checksum offset: 0
[  105.108884][ T4705] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving
[  105.454734][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  105.469129][ T4951] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  105.483907][ T4735] device veth0_vlan entered promiscuous mode
[  105.532074][ T4951] F2FS-fs (loop3): invalid crc value
[  105.552819][ T4705] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  105.572517][ T4236] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  105.584038][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  105.600627][ T4236] usb 3-1: USB disconnect, device number 4
[  105.607337][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  105.631383][ T4951] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  105.770991][ T4735] device veth1_vlan entered promiscuous mode
[  105.803575][ T4705] usb 5-1: USB disconnect, device number 3
[  105.838336][ T4236] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  105.868942][ T4236] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  105.941556][ T4236] keyspan 3-1:1.0: device disconnected
[  105.958340][ T4951] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[  105.965847][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  105.977477][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  105.992419][ T4951] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  106.005977][ T4735] device veth0_macvtap entered promiscuous mode
[  106.045777][ T4989] fido_id[4989]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  106.063413][ T4735] device veth1_macvtap entered promiscuous mode
[  106.095723][ T4735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.122512][ T4735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.172557][ T4735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.203622][ T4735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.221652][ T4735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.255052][ T4735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.274183][ T4735] batman_adv: batadv0: Interface activated: batadv_slave_0
[  106.289737][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  106.325702][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  106.590468][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  106.750951][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  106.952855][ T4735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  107.423716][ T4735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.534013][ T4735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  107.656737][ T4735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.684843][ T4735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  107.695488][ T4735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.706764][ T4735] batman_adv: batadv0: Interface activated: batadv_slave_1
[  107.739828][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  107.779076][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  107.834288][ T4735] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  107.845631][ T4735] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  107.863724][ T4735] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  107.899287][ T4735] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  108.201478][ T4271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.234502][ T4271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.264046][ T5023] netlink: 'syz.4.162': attribute type 1 has an invalid length.
[  108.442851][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  108.487325][ T5023] netlink: 84 bytes leftover after parsing attributes in process `syz.4.162'.
[  108.510058][ T5024] netlink: 'syz.4.162': attribute type 1 has an invalid length.
[  108.605268][ T5036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.163'.
[  108.693121][ T4634] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.772807][ T4634] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.986278][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  109.224615][ T5010] netlink: 32 bytes leftover after parsing attributes in process `syz.2.159'.
[  109.361123][ T5044] loop5: detected capacity change from 0 to 164
[  109.407149][ T5047] device syzkaller0 entered promiscuous mode
[  109.847141][ T5057] device syzkaller0 entered promiscuous mode
[  110.159584][ T5070] capability: warning: `syz.1.171' uses deprecated v2 capabilities in a way that may be insecure
[  110.203787][ T5070] Invalid option length (137) for dns_resolver key
[  110.281102][   T26] audit: type=1800 audit(1791898804.258:11): pid=5079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.173" name="idProduct" dev="configfs" ino=36489 res=0 errno=0
[  110.369596][   T26] audit: type=1800 audit(1791898804.298:12): pid=5083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.173" name="serialnumber" dev="configfs" ino=35731 res=0 errno=0
[  110.470153][   T26] audit: type=1800 audit(1791898804.378:13): pid=5079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.173" name="report_length" dev="configfs" ino=36497 res=0 errno=0
[  110.532929][ T5089] netlink: 'syz.1.176': attribute type 1 has an invalid length.
[  110.582093][ T5089] 8021q: adding VLAN 0 to HW filter on device bond1
[  111.476524][ T5089] device gretap1 entered promiscuous mode
[  111.496863][ T5089] bond1: (slave gretap1): making interface the new active one
[  111.544737][ T5089] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  111.569312][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  111.620866][ T5097] device syzkaller0 entered promiscuous mode
[  111.639103][ T1108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  111.653189][ T5097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  111.705965][ T5108] loop5: detected capacity change from 0 to 512
[  111.741213][ T5109] loop2: detected capacity change from 0 to 256
[  111.782755][ T5109] FAT-fs (loop2): bogus logical sector size 11520
[  111.804062][ T5109] FAT-fs (loop2): Can't find a valid FAT filesystem
[  111.837743][ T5108] EXT4-fs (loop5): Test dummy encryption mode enabled
[  111.852880][ T5108] EXT4-fs (loop5): Test dummy encryption mode enabled
[  111.859816][ T5108] EXT4-fs (loop5): Unrecognized mount option "smackfstransmute=ext4" or missing value
[  113.633555][ T5134] loop5: detected capacity change from 0 to 164
[  115.680430][ T5179] loop4: detected capacity change from 0 to 40427
[  115.717526][ T5179] F2FS-fs (loop4): Invalid SB checksum offset: 0
[  115.724047][ T5179] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  115.739986][ T5179] F2FS-fs (loop4): invalid crc value
[  115.808085][ T5179] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  115.892366][ T5179] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  115.899454][ T5179] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  115.934225][ T5162] loop3: detected capacity change from 0 to 40427
[  116.054849][ T5162] F2FS-fs (loop3): invalid crc value
[  116.114584][ T5162] F2FS-fs (loop3): Found nat_bits in checkpoint
[  116.404064][ T5196] attempt to access beyond end of device
[  116.404064][ T5196] loop4: rw=10241, want=53256, limit=40427
[  116.968764][ T5162] F2FS-fs (loop3): Inconsistent segment (8) type [1, 0] in SSA and SIT
[  117.021481][ T4185] attempt to access beyond end of device
[  117.021481][ T4185] loop4: rw=2049, want=45104, limit=40427
[  118.507374][ T5219] netlink: 'syz.1.203': attribute type 1 has an invalid length.
[  118.560861][ T5219] netlink: 'syz.1.203': attribute type 2 has an invalid length.
[  118.677831][ T5222] device syzkaller0 entered promiscuous mode
[  118.751813][ T5225] device syzkaller0 entered promiscuous mode
[  118.776841][ T5229] netlink: 12 bytes leftover after parsing attributes in process `syz.1.205'.
[  118.886486][ T5231] loop5: detected capacity change from 0 to 1024
[  118.977128][ T5231] EXT4-fs (loop5): Ignoring removed orlov option
[  119.032785][ T5233] FAULT_INJECTION: forcing a failure.
[  119.032785][ T5233] name failslab, interval 1, probability 0, space 0, times 0
[  119.086180][ T5233] CPU: 0 PID: 5233 Comm: syz.1.207 Not tainted syzkaller #0
[  119.093532][ T5233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  119.097476][ T5201] loop2: detected capacity change from 0 to 32768
[  119.104233][ T5233] Call Trace:
[  119.113958][ T5233]  <TASK>
[  119.116892][ T5233]  dump_stack_lvl+0x188/0x250
[  119.121561][ T5233]  ? show_regs_print_info+0x20/0x20
[  119.126751][ T5233]  ? load_image+0x410/0x410
[  119.131247][ T5233]  ? __might_sleep+0xf0/0xf0
[  119.135829][ T5233]  ? __lock_acquire+0x7d40/0x7d40
[  119.141112][ T5233]  should_fail+0x383/0x4b0
[  119.145520][ T5233]  should_failslab+0x5/0x20
[  119.150015][ T5233]  slab_pre_alloc_hook+0x51/0xc0
[  119.154951][ T5233]  kmem_cache_alloc_trace+0x47/0x290
[  119.160500][ T5233]  ? allocate_cgrp_cset_links+0xaa/0x320
[  119.166576][ T5233]  allocate_cgrp_cset_links+0xaa/0x320
[  119.172082][ T5233]  find_css_set+0x9ec/0x1520
[  119.176671][ T5233]  ? cgroup_migrate_prepare_dst+0xc10/0xc10
[  119.182904][ T5233]  ? mark_lock+0x94/0x320
[  119.187237][ T5233]  cgroup_migrate_prepare_dst+0x114/0xc10
[  119.192949][ T5233]  cgroup_attach_task+0x55d/0x830
[  119.197959][ T5233]  ? cgroup_migrate_execute+0xff0/0xff0
[  119.203509][ T5233]  ? get_task_cred+0x2b6/0x330
[  119.208262][ T5233]  __cgroup1_procs_write+0x2ea/0x3f0
[  119.213546][ T5233]  ? cgroup_pidlist_destroy_work_fn+0x1f0/0x1f0
[  119.219799][ T5233]  ? cgroup_pidlist_stop+0xf0/0xf0
[  119.225091][ T5233]  cgroup_file_write+0x2c4/0x670
[  119.230281][ T5233]  ? read_lock_is_recursive+0x10/0x10
[  119.235646][ T5233]  ? cgroup_seqfile_stop+0xd0/0xd0
[  119.240777][ T5233]  ? cgroup_seqfile_stop+0xd0/0xd0
[  119.245872][ T5233]  kernfs_fop_write_iter+0x3a8/0x500
[  119.251150][ T5233]  vfs_write+0x748/0xd70
[  119.255387][ T5233]  ? file_end_write+0x250/0x250
[  119.260236][ T5233]  ? mutex_lock_nested+0x17/0x20
[  119.265163][ T5233]  ? __fdget_pos+0x2bf/0x370
[  119.269827][ T5233]  ? ksys_write+0x70/0x260
[  119.274231][ T5233]  ksys_write+0x153/0x260
[  119.278552][ T5233]  ? __ia32_sys_read+0x80/0x80
[  119.283305][ T5233]  ? lockdep_hardirqs_on+0x94/0x140
[  119.288494][ T5233]  do_syscall_64+0x4c/0xa0
[  119.292897][ T5233]  ? clear_bhb_loop+0x30/0x80
[  119.297559][ T5233]  ? clear_bhb_loop+0x30/0x80
[  119.302397][ T5233]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  119.308280][ T5233] RIP: 0033:0x7f57387732d9
[  119.312684][ T5233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  119.332276][ T5233] RSP: 002b:00007f57369cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  119.340702][ T5233] RAX: ffffffffffffffda RBX: 00007f57389fafa0 RCX: 00007f57387732d9
[  119.348660][ T5233] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 0000000000000005
[  119.356618][ T5233] RBP: 00007f573880a888 R08: 0000000000000000 R09: 0000000000000000
[  119.364573][ T5233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  119.372529][ T5233] R13: 00007f57389fb038 R14: 00007f57389fafa0 R15: 00007ffdce0e9c08
[  119.380497][ T5233]  </TASK>
[  119.466255][ T5231] EXT4-fs (loop5): mounted filesystem without journal. Opts: block_validity,bsddf,nogrpid,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,grpjquota=,jqfmt=vfsold,min_batch_time=0x0000000000000000,,errors=continue. Quota mode: none.
[  120.072402][ T4227] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  120.129731][ T4236] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  120.387808][ T4236] usb 5-1: Using ep0 maxpacket: 8
[  120.432704][ T4236] usb 5-1: no configurations
[  120.437696][ T4236] usb 5-1: can't read configurations, error -22
[  120.462655][ T4227] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  120.626658][ T4227] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  120.635662][ T4227] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  120.692384][ T4236] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  120.882674][ T4227] usb 4-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00
[  120.902426][ T4227] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.910451][ T4227] usb 4-1: Product: syz
[  120.914726][ T4227] usb 4-1: Manufacturer: syz
[  120.914743][ T4227] usb 4-1: SerialNumber: syz
[  120.972349][ T4236] usb 5-1: Using ep0 maxpacket: 8
[  120.985907][ T4227] usb 4-1: Found UVC 1.00 device syz (046d:0821)
[  121.002447][ T4227] usb 4-1: No streaming interface found for terminal 2.
[  121.012641][ T4236] usb 5-1: no configurations
[  121.017261][ T4236] usb 5-1: can't read configurations, error -22
[  121.036698][ T4236] usb usb5-port1: attempt power cycle
[  121.241607][ T5253] udc-core: couldn't find an available UDC or it's busy
[  121.255791][ T5253] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  121.294485][ T1108] usb 4-1: USB disconnect, device number 4
[  121.449924][ T5299] loop2: detected capacity change from 0 to 4096
[  121.464168][ T4236] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  121.499941][ T5299] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  121.563472][ T4236] usb 5-1: Using ep0 maxpacket: 8
[  121.608282][ T4236] usb 5-1: no configurations
[  121.613635][ T4236] usb 5-1: can't read configurations, error -22
[  121.765529][ T4236] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  121.874919][ T4236] usb 5-1: Using ep0 maxpacket: 8
[  121.919642][ T4236] usb 5-1: no configurations
[  121.929931][ T4236] usb 5-1: can't read configurations, error -22
[  121.953699][ T4236] usb usb5-port1: unable to enumerate USB device
[  122.096545][ T5323] loop2: detected capacity change from 0 to 256
[  122.256032][ T5323] FAT-fs (loop2): Unrecognized mount option "iocharsetp857" or missing value
[  124.962408][    C0] net_ratelimit: 37 callbacks suppressed
[  125.083993][ T5368] fuse: Bad value for 'fd'
[  126.040492][ T5380] netlink: 'syz.2.237': attribute type 4 has an invalid length.
[  126.274597][ T5387] device syzkaller0 entered promiscuous mode
[  126.413753][ T4228] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  126.662408][   T23] usb 4-1: new full-speed USB device number 5 using dummy_hcd
[  126.755418][ T5408] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  126.785947][ T5408] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  126.828294][ T4228] usb 3-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00
[  126.843092][ T4228] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.072727][   T23] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  127.083448][   T23] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  127.176382][ T4228] net1080 3-1:1.0 usb0: register 'net1080' at usb-dummy_hcd.2-1, NetChip TurboCONNECT, 46:b4:73:1b:84:30
[  127.203046][   T23] usb 4-1: New USB device found, idVendor=08b7, idProduct=ec00, bcdDevice= 0.00
[  127.221287][   T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  127.330722][   T23] usb 4-1: SerialNumber: syz
[  127.841251][   T23] usb 4-1: 0:2 : does not exist
[  127.990487][ T4836] usb 3-1: USB disconnect, device number 5
[  128.130191][ T4836] net1080 3-1:1.0 usb0: unregister 'net1080' usb-dummy_hcd.2-1, NetChip TurboCONNECT
[  128.203923][   T23] usb 4-1: USB disconnect, device number 5
[  128.395679][ T5428] device syzkaller0 entered promiscuous mode
[  128.525327][ T4357] udevd[4357]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  129.478343][ T5462] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  129.568093][ T5462] comedi comedi1: pc212e: I/O port conflict (0x1010164,32)
[  130.082368][    C0] net_ratelimit: 33 callbacks suppressed
[  131.533387][ T5510] netlink: 'syz.5.263': attribute type 4 has an invalid length.
[  131.621616][ T5509] loop1: detected capacity change from 0 to 4096
[  131.678259][ T5509] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled
[  131.701131][ T5511] loop2: detected capacity change from 0 to 164
[  132.805397][ T1431] ieee802154 phy0 wpan0: encryption failed: -22
[  132.811741][ T1431] ieee802154 phy1 wpan1: encryption failed: -22
[  132.918265][ T5509] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,,errors=continue. Quota mode: writeback.
[  133.744765][ T5551] loop3: detected capacity change from 0 to 128
[  134.056429][ T5553] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.126913][ T5562] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4190] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5562]
[  134.807131][ T5563] device syzkaller0 left promiscuous mode
[  135.317300][ T5553] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.395719][ T5584] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4735] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5584]
[  135.446182][ T4228] net_ratelimit: 34 callbacks suppressed
[  135.508555][ T5577] netlink: 'syz.3.279': attribute type 1 has an invalid length.
[  135.954223][ T5577] 8021q: adding VLAN 0 to HW filter on device bond1
[  136.293592][ T5586] device macvlan2 entered promiscuous mode
[  136.299962][ T5586] device bond1 entered promiscuous mode
[  136.306657][ T5586] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  136.335843][ T5586] team0: Port device macvlan2 added
[  136.429463][ T5588] bond1: (slave ip6gretap1): making interface the new active one
[  136.498682][ T5588] device ip6gretap1 entered promiscuous mode
[  136.550910][ T5588] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[  136.648746][ T5604] loop4: detected capacity change from 0 to 2048
[  136.716696][ T5604] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  137.013260][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  137.227502][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan2: link becomes ready
[  137.618226][ T5553] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.775847][ T5553] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.927241][ T5607] device syzkaller0 entered promiscuous mode
[  138.052724][ T5553] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  138.134531][ T5553] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  138.201999][ T5553] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  138.278136][ T5553] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  138.479698][ T5602] ODEBUG: Out of memory. ODEBUG disabled
[  140.078009][ T5645] loop4: detected capacity change from 0 to 512
[  140.091609][ T5646] loop1: detected capacity change from 0 to 256
[  140.364330][ T5649] loop3: detected capacity change from 0 to 164
[  140.484249][ T4239] net_ratelimit: 32 callbacks suppressed
[  140.976257][ T4188] Bluetooth: Wrong link type (-22)
[  141.074052][ T5645] loop4: detected capacity change from 0 to 2048
[  141.237529][ T5645] UDF-fs: bad mount option "˙˙000000000000000000000030xffffffffffffffff˙˙˙˙" or missing value
[  142.316767][ T5663] jffs2: notice: (5663) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  142.584323][ T5671] loop1: detected capacity change from 0 to 2048
[  142.684168][ T5671] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  143.755064][ T5684] block device autoloading is deprecated and will be removed.
[  145.602350][    C0] net_ratelimit: 36 callbacks suppressed
[  147.271759][ T5713] loop2: detected capacity change from 0 to 256
[  149.390826][ T5757] device syzkaller0 entered promiscuous mode
[  149.490318][ T5769] loop4: detected capacity change from 0 to 164
[  150.010123][ T5759] kvm_msr_ignored_check: 440 callbacks suppressed
[  150.952427][    C0] net_ratelimit: 37 callbacks suppressed
[  151.140892][ T5786] device syzkaller0 entered promiscuous mode
[  151.298090][ T5793] jffs2: notice: (5793) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  151.333162][ T5786] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  152.102733][ T5786] tipc: Resetting bearer <eth:syzkaller0>
[  153.317562][ T5827] mmap: syz.5.328 (5827) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  153.654276][   T26] audit: type=1800 audit(1791898847.638:14): pid=5843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.330" name="subclass" dev="configfs" ino=38529 res=0 errno=0
[  153.813422][ T5845] device syzkaller0 left promiscuous mode
[  154.940370][ T5841] loop1: detected capacity change from 0 to 32768
[  154.975852][ T5861] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  155.114963][ T5870] netlink: 32 bytes leftover after parsing attributes in process `syz.3.336'.
[  155.607276][ T5841] XFS (loop1): Mounting V5 Filesystem
[  155.964687][ T5841] XFS (loop1): Ending clean mount
[  156.014551][ T1108] net_ratelimit: 33 callbacks suppressed
[  158.686262][ T5904] overlayfs: failed to clone upperpath
[  159.793546][ T5906] FAULT_INJECTION: forcing a failure.
[  159.793546][ T5906] name failslab, interval 1, probability 0, space 0, times 0
[  159.823243][ T5906] CPU: 1 PID: 5906 Comm: syz.4.344 Not tainted syzkaller #0
[  159.830586][ T5906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  159.840648][ T5906] Call Trace:
[  159.843934][ T5906]  <TASK>
[  159.846877][ T5906]  dump_stack_lvl+0x188/0x250
[  159.851561][ T5906]  ? show_regs_print_info+0x20/0x20
[  159.856769][ T5906]  ? load_image+0x410/0x410
[  159.861283][ T5906]  ? __might_sleep+0xf0/0xf0
[  159.865877][ T5906]  ? __lock_acquire+0x7d40/0x7d40
[  159.870919][ T5906]  should_fail+0x383/0x4b0
[  159.875354][ T5906]  should_failslab+0x5/0x20
[  159.879864][ T5906]  slab_pre_alloc_hook+0x51/0xc0
[  159.884806][ T5906]  ? key_alloc+0x302/0x1030
[  159.889316][ T5906]  kmem_cache_alloc+0x3d/0x280
[  159.894121][ T5906]  key_alloc+0x302/0x1030
[  159.898474][ T5906]  keyring_alloc+0x41/0xa0
[  159.902903][ T5906]  look_up_user_keyrings+0x459/0x670
[  159.908201][ T5906]  ? key_validate+0xf0/0xf0
[  159.912726][ T5906]  ? lookup_user_key+0xd1/0x1160
[  159.917678][ T5906]  lookup_user_key+0x37c/0x1160
[  159.922537][ T5906]  ? lookup_user_key_possessed+0x40/0x40
[  159.928161][ T5906]  ? mark_lock+0x94/0x320
[  159.932483][ T5906]  ? search_process_keyrings_rcu+0x2b0/0x2b0
[  159.932552][ T5906]  keyctl_get_persistent+0x24b/0x780
[  159.932580][ T5906]  ? proc_key_users_show+0x310/0x310
[  159.932600][ T5906]  ? verify_lock_unused+0x140/0x140
[  159.932621][ T5906]  ? verify_lock_unused+0x140/0x140
[  159.932643][ T5906]  ? do_futex+0xdc2/0x12b0
[  159.964380][ T5906]  ? vfs_write+0xaa6/0xd70
[  159.968813][ T5906]  __se_sys_keyctl+0x61e/0xa20
[  159.973581][ T5906]  ? __x64_sys_keyctl+0xc0/0xc0
[  159.978425][ T5906]  ? __context_tracking_exit+0x4c/0x80
[  159.983864][ T5906]  ? __lock_acquire+0x7d40/0x7d40
[  159.988871][ T5906]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  159.994927][ T5906]  ? lock_chain_count+0x20/0x20
[  159.999763][ T5906]  ? lockdep_hardirqs_on+0x94/0x140
[  160.004944][ T5906]  ? __x64_sys_keyctl+0x1c/0xc0
[  160.009781][ T5906]  do_syscall_64+0x4c/0xa0
[  160.014181][ T5906]  ? clear_bhb_loop+0x30/0x80
[  160.018841][ T5906]  ? clear_bhb_loop+0x30/0x80
[  160.023592][ T5906]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  160.026858][ T4186] XFS (loop1): Unmounting Filesystem
[  160.029495][ T5906] RIP: 0033:0x7f83179f22d9
[  160.029517][ T5906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  160.029530][ T5906] RSP: 002b:00007f8315c4a028 EFLAGS: 00000246
[  160.039377][ T5906]  ORIG_RAX: 00000000000000fa
[  160.039389][ T5906] RAX: ffffffffffffffda RBX: 00007f8317c79fa0 RCX: 00007f83179f22d9
[  160.039403][ T5906] RDX: fffffffffffffffd RSI: ffffffffffffffff RDI: 0000000000000016
[  160.039414][ T5906] RBP: 00007f8317a89888 R08: 0000000000000000 R09: 0000000000000000
[  160.039424][ T5906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  160.039435][ T5906] R13: 00007f8317c7a038 R14: 00007f8317c79fa0 R15: 00007fff2b0bae08
[  160.039458][ T5906]  </TASK>
[  160.797555][ T5916] FAULT_INJECTION: forcing a failure.
[  160.797555][ T5916] name failslab, interval 1, probability 5, space 0, times 1000
[  160.817701][ T5918] device lo entered promiscuous mode
[  160.833817][ T5918] device tunl0 entered promiscuous mode
[  160.839550][ T5918] device gre0 entered promiscuous mode
[  160.853113][ T5916] CPU: 0 PID: 5916 Comm: syz.1.346 Not tainted syzkaller #0
[  160.860446][ T5916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  160.870524][ T5916] Call Trace:
[  160.873499][ T5914] 9pnet: Insufficient options for proto=fd
[  160.873807][ T5916]  <TASK>
[  160.882629][ T5916]  dump_stack_lvl+0x188/0x250
[  160.887316][ T5916]  ? show_regs_print_info+0x20/0x20
[  160.892517][ T5916]  ? load_image+0x410/0x410
[  160.897040][ T5916]  ? prandom_u32+0x217/0x250
[  160.901644][ T5916]  should_fail+0x383/0x4b0
[  160.906081][ T5916]  should_failslab+0x5/0x20
[  160.910594][ T5916]  slab_pre_alloc_hook+0x51/0xc0
[  160.915540][ T5916]  __kmalloc+0x6b/0x340
[  160.919701][ T5916]  ? tomoyo_encode+0x28a/0x550
[  160.924479][ T5916]  tomoyo_encode+0x28a/0x550
[  160.929081][ T5916]  tomoyo_realpath_from_path+0x5a2/0x5e0
[  160.934737][ T5916]  tomoyo_check_open_permission+0x1eb/0x410
[  160.940637][ T5916]  ? tomoyo_check_path_number_acl+0x280/0x280
[  160.946742][ T5916]  ? __lock_acquire+0x7d40/0x7d40
[  160.951770][ T5916]  ? __rwlock_init+0x140/0x140
[  160.956542][ T5916]  ? hook_file_open+0xf1/0x230
[  160.957373][ T5918] device gretap0 entered promiscuous mode
[  160.961395][ T5916]  ? tomoyo_file_open+0xe9/0x170
[  160.961424][ T5916]  security_file_open+0x5e/0xa0
[  160.961446][ T5916]  do_dentry_open+0x321/0xf90
[  160.981916][ T5916]  ? vfs_open+0x2b/0x80
[  160.986103][ T5916]  path_openat+0x2718/0x2fb0
[  160.986141][ T5916]  ? __kasan_slab_alloc+0xa9/0xc0
[  160.986168][ T5916]  ? do_filp_open+0x400/0x400
[  160.986197][ T5916]  do_filp_open+0x1df/0x400
[  160.986223][ T5916]  ? vfs_tmpfile+0x300/0x300
[  160.996099][ T5916]  ? _raw_spin_unlock+0x24/0x40
[  160.996124][ T5916]  ? alloc_fd+0x59e/0x650
[  161.005270][ T5916]  do_sys_openat2+0x14b/0x500
[  161.005289][ T5916]  ? __lock_acquire+0x7d40/0x7d40
[  161.014690][ T5916]  ? do_sys_open+0xe0/0xe0
[  161.014708][ T5916]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  161.023855][ T5916]  ? lock_chain_count+0x20/0x20
[  161.023887][ T5916]  __x64_sys_openat+0x135/0x160
[  161.023912][ T5916]  do_syscall_64+0x4c/0xa0
[  161.033324][ T5916]  ? clear_bhb_loop+0x30/0x80
[  161.033348][ T5916]  ? clear_bhb_loop+0x30/0x80
[  161.044142][ T5916]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  161.044164][ T5916] RIP: 0033:0x7f5738733b0e
[  161.053374][ T5916] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  161.053388][ T5916] RSP: 002b:00007f57369cab28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  161.053408][ T5916] RAX: ffffffffffffffda RBX: 00007f57369cb6c0 RCX: 00007f5738733b0e
[  161.062709][ T5916] RDX: 0000000000000002 RSI: 00007f57369cac00 RDI: ffffffffffffff9c
[  161.062723][ T5916] RBP: 00007f57369cac00 R08: 0000000000000000 R09: 0000000000000000
[  161.062736][ T5916] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  161.068654][    C1] net_ratelimit: 41 callbacks suppressed
[  161.073011][ T5916] R13: 00007f57389fb038 R14: 00007f57389fafa0 R15: 00007ffdce0e9c08
[  161.073038][ T5916]  </TASK>
[  161.157494][ T5918] device erspan0 entered promiscuous mode
[  161.198414][ T5916] ERROR: Out of memory at tomoyo_realpath_from_path.
[  161.205596][ T5918] device ip_vti0 entered promiscuous mode
[  161.211532][ T5918] device ip6_vti0 entered promiscuous mode
[  161.228231][ T5918] device sit0 entered promiscuous mode
[  161.234334][ T5918] device ip6tnl0 entered promiscuous mode
[  161.240408][ T5918] device ip6gre0 entered promiscuous mode
[  161.925117][ T5918] device ip6gretap0 entered promiscuous mode
[  161.931283][ T5918] device bridge0 entered promiscuous mode
[  161.941795][ T5927] loop2: detected capacity change from 0 to 8
[  161.948044][ T5925] loop4: detected capacity change from 0 to 8
[  161.973084][ T5918] device vcan0 entered promiscuous mode
[  162.025422][ T5918] device bond0 entered promiscuous mode
[  162.094208][ T5918] device bond_slave_0 entered promiscuous mode
[  162.104326][ T5918] device bond_slave_1 entered promiscuous mode
[  162.177793][ T5918] device team0 entered promiscuous mode
[  162.228299][ T5933] SQUASHFS error: Unable to read directory block [26067d:ffff]
[  162.274054][ T5918] device team_slave_0 entered promiscuous mode
[  162.364031][ T5918] device team_slave_1 entered promiscuous mode
[  162.445131][ T5918] device dummy0 entered promiscuous mode
[  162.514759][ T5918] device nlmon0 entered promiscuous mode
[  162.550259][ T5930] SQUASHFS error: Unable to read directory block [1d0:26]
[  162.588145][ T5918] device caif0 entered promiscuous mode
[  162.650296][ T5918] device batadv0 entered promiscuous mode
[  162.714849][ T5918] device vxcan0 entered promiscuous mode
[  162.783906][ T5918] device vxcan1 entered promiscuous mode
[  162.847271][ T5918] device veth0 entered promiscuous mode
[  162.885785][   T26] audit: type=1800 audit(1791898856.858:15): pid=5932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.350" name="file1" dev="loop4" ino=5 res=0 errno=0
[  162.933855][ T5918] device veth1 entered promiscuous mode
[  163.021926][ T5918] device wg0 entered promiscuous mode
[  163.093974][ T5918] device wg1 entered promiscuous mode
[  163.156954][ T5918] device wg2 entered promiscuous mode
[  163.220420][ T5918] device veth0_to_bridge entered promiscuous mode
[  163.297488][ T5918] device veth1_to_bridge entered promiscuous mode
[  163.376541][ T5918] device veth0_to_bond entered promiscuous mode
[  163.453651][ T5918] device veth1_to_bond entered promiscuous mode
[  163.534924][ T5918] device veth0_to_team entered promiscuous mode
[  163.636440][ T5918] device veth1_to_team entered promiscuous mode
[  163.725363][ T5918] device veth0_to_batadv entered promiscuous mode
[  163.810258][ T5918] device batadv_slave_0 entered promiscuous mode
[  163.883629][ T5918] device veth1_to_batadv entered promiscuous mode
[  164.433537][ T5918] device batadv_slave_1 entered promiscuous mode
[  164.459743][ T5918] device xfrm0 entered promiscuous mode
[  164.508456][ T5918] device veth0_to_hsr entered promiscuous mode
[  164.576450][ T5918] device veth1_to_hsr entered promiscuous mode
[  164.641669][ T5918] device hsr0 entered promiscuous mode
[  164.703155][ T5918] device veth1_virt_wifi entered promiscuous mode
[  164.758705][ T5918] device veth0_virt_wifi entered promiscuous mode
[  164.812739][ T5918] device virt_wifi0 entered promiscuous mode
[  164.856350][ T5918] device vlan0 entered promiscuous mode
[  164.875459][ T5918] device vlan1 entered promiscuous mode
[  164.881352][ T5918] device macvlan0 entered promiscuous mode
[  164.887470][ T5918] device macvlan1 entered promiscuous mode
[  164.893503][ T5918] device ipvlan0 entered promiscuous mode
[  164.899422][ T5918] device ipvlan1 entered promiscuous mode
[  164.905559][ T5918] device macvtap0 entered promiscuous mode
[  164.911556][ T5918] device macsec0 entered promiscuous mode
[  164.917595][ T5918] device geneve0 entered promiscuous mode
[  164.924048][ T5918] device geneve1 entered promiscuous mode
[  164.929972][ T5918] device netdevsim0 entered promiscuous mode
[  164.936172][ T5918] device netdevsim1 entered promiscuous mode
[  164.943105][ T5918] device netdevsim2 entered promiscuous mode
[  164.949284][ T5918] device netdevsim3 entered promiscuous mode
[  164.955522][ T5918] device wlan0 entered promiscuous mode
[  164.961266][ T5918] device wlan1 entered promiscuous mode
[  165.036336][ T5936] netlink: 28 bytes leftover after parsing attributes in process `syz.1.352'.
[  166.082461][    C0] net_ratelimit: 22 callbacks suppressed
[  166.333994][ T5957] jffs2: notice: (5957) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  166.570183][ T5952] netlink: 2 bytes leftover after parsing attributes in process `syz.2.355'.
[  166.585428][ T5957] jffs2: fork failed for JFFS2 garbage collect thread: 4
[  168.570857][ T5980] UBIFS error (pid: 5980): cannot open "c:::", error -22
[  169.653040][ T5989] loop2: detected capacity change from 0 to 8
[  169.948918][ T5995] loop4: detected capacity change from 0 to 8
[  170.236788][   T26] audit: type=1800 audit(1791898864.218:16): pid=5989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.364" name="file1" dev="loop2" ino=5 res=0 errno=0
[  171.097901][ T4227] net_ratelimit: 39 callbacks suppressed
[  171.169518][ T5995] SQUASHFS error: Unable to read directory block [26067d:ffff]
[  172.816069][ T6019] futex_wake_op: syz.2.369 tries to shift op by 144; fix this program
[  173.833518][ T6025] netlink: 2 bytes leftover after parsing attributes in process `syz.4.372'.
[  176.322351][    C1] net_ratelimit: 36 callbacks suppressed
[  176.576042][ T6047] UBIFS error (pid: 6047): cannot open "c:::", error -22
[  177.888168][ T6053] device syzkaller0 entered promiscuous mode
[  177.905628][ T6060] loop1: detected capacity change from 0 to 8
[  178.600795][ T6074] netlink: 2 bytes leftover after parsing attributes in process `syz.5.388'.
[  178.615230][   T26] audit: type=1800 audit(1791898872.508:17): pid=6060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.382" name="file1" dev="loop1" ino=5 res=0 errno=0
[  178.674821][ T6071] device syzkaller0 entered promiscuous mode
[  178.767652][ T6079] netlink: 4 bytes leftover after parsing attributes in process `syz.3.387'.
[  179.374127][ T6081] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  179.721943][   T26] audit: type=1800 audit(1791898873.698:18): pid=6089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.396" name="report_length" dev="configfs" ino=38805 res=0 errno=0
[  179.850137][ T6096] UBIFS error (pid: 6096): cannot open "c:::", error -22
[  180.468095][ T6098] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  180.682016][ T6103] device syzkaller0 left promiscuous mode
[  181.682403][    C1] net_ratelimit: 35 callbacks suppressed
[  182.274892][ T6111] netlink: 40 bytes leftover after parsing attributes in process `syz.1.400'.
[  184.213997][ T6130] device wlan0 left promiscuous mode
[  184.250733][ T6130] ------------[ cut here ]------------
[  184.732850][ T6130] wlan0: Failed check-sdata-in-driver check, flags: 0x4
[  184.740401][ T6130] WARNING: CPU: 0 PID: 6130 at net/mac80211/driver-ops.h:172 ieee80211_bss_info_change_notify+0x37b/0x550
[  184.815124][ T6130] Modules linked in:
[  184.819100][ T6130] CPU: 1 PID: 6130 Comm: syz.3.403 Not tainted syzkaller #0
[  184.826641][ T6130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  185.025946][ T6130] RIP: 0010:ieee80211_bss_info_change_notify+0x37b/0x550
[  185.046875][ T6130] Code: fe 78 f8 49 8b 84 24 00 06 00 00 49 81 c4 20 06 00 00 48 85 c0 4c 0f 45 e0 48 c7 c7 00 66 39 8b 4c 89 e6 89 ea e8 95 bf 71 00 <0f> 0b e9 07 fd ff ff e8 19 b9 33 f8 0f 0b e9 b1 fe ff ff e8 0d b9
[  185.165672][ T6130] RSP: 0018:ffffc900030bf240 EFLAGS: 00010246
[  185.171817][ T6130] RAX: dd16ecefb6342b00 RBX: 0000000000400000 RCX: 0000000000080000
[  185.257197][ T6130] RDX: ffffc9000f0cd000 RSI: 0000000000005f81 RDI: 0000000000005f82
[  185.309555][ T6130] RBP: 0000000000000004 R08: ffffc900030bed67 R09: 1ffff92000617dac
[  185.341272][ T6130] R10: dffffc0000000000 R11: fffff52000617dad R12: ffff88805cc4c000
[  185.378480][ T6130] R13: ffff88805cc4d290 R14: ffff88807ee88e00 R15: ffff88805cc4e268
[  185.424644][ T6130] FS:  00007f631dac46c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  185.468512][ T6130] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  185.494167][ T6130] CR2: 0000555581df94e8 CR3: 000000002b137000 CR4: 00000000003506e0
[  185.521822][ T6130] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  185.547236][ T6130] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  185.574704][ T6130] Call Trace:
[  185.594597][ T6130]  <TASK>
[  185.605053][ T6130]  ? netif_carrier_on+0xd1/0x120
[  185.625776][ T6130]  ieee80211_ocb_leave+0x27f/0x320
[  185.647641][ T6130]  __cfg80211_leave_ocb+0x219/0x400
[  185.667645][ T6130]  cfg80211_leave_ocb+0x53/0x70
[  185.672653][ T6130]  cfg80211_change_iface+0x4ec/0xe10
[  185.677963][ T6130]  nl80211_set_interface+0x5b8/0x810
[  185.718088][ T6130]  ? nl80211_dump_interface+0x560/0x560
[  185.738517][ T6130]  ? mutex_lock_nested+0x17/0x20
[  185.762136][ T6130]  ? nl80211_pre_doit+0x27b/0x540
[  185.788062][ T6130]  genl_rcv_msg+0xd0b/0xfa0
[  185.824138][ T6130]  ? genl_bind+0x370/0x370
[  185.828632][ T6130]  ? verify_lock_unused+0x140/0x140
[  185.855714][ T6130]  ? verify_lock_unused+0x140/0x140
[  185.861028][ T6130]  ? nl80211_dump_interface+0x560/0x560
[  185.911851][ T6130]  netlink_rcv_skb+0x1e9/0x430
[  185.922525][ T6130]  ? genl_bind+0x370/0x370
[  185.939504][ T6130]  ? netlink_ack+0xb10/0xb10
[  185.952450][ T6130]  ? down_read+0x1aa/0x2e0
[  185.956965][ T6130]  genl_rcv+0x24/0x40
[  185.960964][ T6130]  netlink_unicast+0x78f/0x940
[  185.986425][ T6130]  netlink_sendmsg+0x8ba/0xbe0
[  185.991265][ T6130]  ? netlink_getsockopt+0x570/0x570
[  186.015233][ T6130]  ? aa_sock_msg_perm+0x94/0x150
[  186.031634][ T6130]  ? apparmor_socket_sendmsg+0x88/0x230
[  186.044442][ T6130]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  186.062787][ T6139] loop4: detected capacity change from 0 to 8
[  186.069315][ T6130]  ? security_socket_sendmsg+0x7c/0xa0
[  186.075412][ T6130]  ? netlink_getsockopt+0x570/0x570
[  186.080660][ T6130]  ____sys_sendmsg+0x5be/0x8f0
[  186.085952][ T4836] Bluetooth: hci1: command 0x0406 tx timeout
[  186.098522][ T6130]  ? __sys_sendmsg_sock+0x30/0x30
[  186.107104][ T4836] Bluetooth: hci2: command 0x0406 tx timeout
[  186.124150][ T4836] Bluetooth: hci3: command 0x0406 tx timeout
[  186.130271][ T6130]  ? import_iovec+0x6f/0xa0
[  186.176182][ T4836] Bluetooth: hci4: command 0x0406 tx timeout
[  186.199610][ T6142] device: 'vcs23': device_add
[  186.200397][ T6142] kobject: 'vcs23' (ffff88802529f000): kobject_add_internal: parent: 'vc', set: 'devices'
[  186.201970][ T6142] vc vcs23: No ACPI support
[  186.203893][ T6142] PM: Adding info for No Bus:vcs23
[  186.252455][    C0] percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 0
[  186.359392][ T6137] kcov: kcov_task_exit: t = ffff88802b040000, kcov->t = ffff88802b040000
[  186.362758][ T6142] kobject: 'vcs23' (ffff88802529f000): kobject_uevent_env
[  186.362819][ T6142] kobject: 'vcs23' (ffff88802529f000): fill_kobj_path: path = '/devices/virtual/vc/vcs23'
[  186.363500][ T6142] device: 'vcsu23': device_add
[  186.363521][ T6142] kobject: 'vcsu23' (ffff88802529c000): kobject_add_internal: parent: 'vc', set: 'devices'
[  186.363591][ T6142] vc vcsu23: No ACPI support
[  186.363774][ T6142] PM: Adding info for No Bus:vcsu23
[  186.365564][ T6142] kobject: 'vcsu23' (ffff88802529c000): kobject_uevent_env
[  186.365610][ T6142] kobject: 'vcsu23' (ffff88802529c000): fill_kobj_path: path = '/devices/virtual/vc/vcsu23'
[  186.365874][ T6142] device: 'vcsa23': device_add
[  186.365891][ T6142] kobject: 'vcsa23' (ffff88802228b000): kobject_add_internal: parent: 'vc', set: 'devices'
[  186.365949][ T6142] vc vcsa23: No ACPI support
[  186.366186][ T6142] PM: Adding info for No Bus:vcsa23
[  186.366630][ T6130]  ___sys_sendmsg+0x236/0x2e0
[  186.366672][ T6130]  ? __sys_sendmsg+0x290/0x290
[  186.366775][ T6130]  __se_sys_sendmsg+0x1b7/0x2a0
[  186.366802][ T6130]  ? __x64_sys_sendmsg+0x80/0x80
[  186.366822][ T6130]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  186.366860][ T6130]  ? lockdep_hardirqs_on+0x94/0x140
[  186.366888][ T6130]  do_syscall_64+0x4c/0xa0
[  186.366907][ T6130]  ? clear_bhb_loop+0x30/0x80
[  186.366928][ T6130]  ? clear_bhb_loop+0x30/0x80
[  186.366952][ T6130]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  186.366974][ T6130] RIP: 0033:0x7f631f88d2d9
[  186.366994][ T6130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  186.367011][ T6130] RSP: 002b:00007f631dac4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  186.367036][ T6130] RAX: ffffffffffffffda RBX: 00007f631fb15090 RCX: 00007f631f88d2d9
[  186.367051][ T6130] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003
[  186.367065][ T6130] RBP: 00007f631f924888 R08: 0000000000000000 R09: 0000000000000000
[  186.367079][ T6130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  186.367093][ T6130] R13: 00007f631fb15128 R14: 00007f631fb15090 R15: 00007ffe3c557fd8
[  186.367124][ T6130]  </TASK>
[  186.367148][ T6130] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  186.367159][ T6130] CPU: 1 PID: 6130 Comm: syz.3.403 Not tainted syzkaller #0
[  186.367177][ T6130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  186.367189][ T6130] Call Trace:
[  186.367196][ T6130]  <TASK>
[  186.367204][ T6130]  dump_stack_lvl+0x188/0x250
[  186.367227][ T6130]  ? show_regs_print_info+0x20/0x20
[  186.367246][ T6130]  ? load_image+0x410/0x410
[  186.367277][ T6130]  panic+0x2f8/0x850
[  186.367301][ T6130]  ? bpf_jit_dump+0xd0/0xd0
[  186.367332][ T6130]  ? ieee80211_bss_info_change_notify+0x37b/0x550
[  186.367356][ T6130]  __warn+0x248/0x2b0
[  186.367374][ T6130]  ? ieee80211_bss_info_change_notify+0x37b/0x550
[  186.367398][ T6130]  report_bug+0x1b9/0x2e0
[  186.367426][ T6130]  handle_bug+0x3a/0x70
[  186.367442][ T6130]  exc_invalid_op+0x16/0x40
[  186.367462][ T6130]  asm_exc_invalid_op+0x16/0x20
[  186.367481][ T6130] RIP: 0010:ieee80211_bss_info_change_notify+0x37b/0x550
[  186.367503][ T6130] Code: fe 78 f8 49 8b 84 24 00 06 00 00 49 81 c4 20 06 00 00 48 85 c0 4c 0f 45 e0 48 c7 c7 00 66 39 8b 4c 89 e6 89 ea e8 95 bf 71 00 <0f> 0b e9 07 fd ff ff e8 19 b9 33 f8 0f 0b e9 b1 fe ff ff e8 0d b9
[  186.367519][ T6130] RSP: 0018:ffffc900030bf240 EFLAGS: 00010246
[  186.367536][ T6130] RAX: dd16ecefb6342b00 RBX: 0000000000400000 RCX: 0000000000080000
[  186.367549][ T6130] RDX: ffffc9000f0cd000 RSI: 0000000000005f81 RDI: 0000000000005f82
[  186.367563][ T6130] RBP: 0000000000000004 R08: ffffc900030bed67 R09: 1ffff92000617dac
[  186.367576][ T6130] R10: dffffc0000000000 R11: fffff52000617dad R12: ffff88805cc4c000
[  186.367590][ T6130] R13: ffff88805cc4d290 R14: ffff88807ee88e00 R15: ffff88805cc4e268
[  186.367620][ T6130]  ? netif_carrier_on+0xd1/0x120
[  186.367642][ T6130]  ieee80211_ocb_leave+0x27f/0x320
[  186.367671][ T6130]  __cfg80211_leave_ocb+0x219/0x400
[  186.367694][ T6130]  cfg80211_leave_ocb+0x53/0x70
[  186.367713][ T6130]  cfg80211_change_iface+0x4ec/0xe10
[  186.367747][ T6130]  nl80211_set_interface+0x5b8/0x810
[  186.367774][ T6130]  ? nl80211_dump_interface+0x560/0x560
[  186.367798][ T6130]  ? mutex_lock_nested+0x17/0x20
[  186.367815][ T6130]  ? nl80211_pre_doit+0x27b/0x540
[  186.367842][ T6130]  genl_rcv_msg+0xd0b/0xfa0
[  186.367872][ T6130]  ? genl_bind+0x370/0x370
[  186.367903][ T6130]  ? verify_lock_unused+0x140/0x140
[  186.367925][ T6130]  ? verify_lock_unused+0x140/0x140
[  186.367960][ T6130]  ? nl80211_dump_interface+0x560/0x560
[  186.367993][ T6130]  netlink_rcv_skb+0x1e9/0x430
[  186.368012][ T6130]  ? genl_bind+0x370/0x370
[  186.368033][ T6130]  ? netlink_ack+0xb10/0xb10
[  186.368061][ T6130]  ? down_read+0x1aa/0x2e0
[  186.368082][ T6130]  genl_rcv+0x24/0x40
[  186.368099][ T6130]  netlink_unicast+0x78f/0x940
[  186.368132][ T6130]  netlink_sendmsg+0x8ba/0xbe0
[  186.368159][ T6130]  ? netlink_getsockopt+0x570/0x570
[  186.368176][ T6130]  ? aa_sock_msg_perm+0x94/0x150
[  186.368198][ T6130]  ? apparmor_socket_sendmsg+0x88/0x230
[  186.368218][ T6130]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  186.368286][ T6130]  ? security_socket_sendmsg+0x7c/0xa0
[  186.368307][ T6130]  ? netlink_getsockopt+0x570/0x570
[  186.368327][ T6130]  ____sys_sendmsg+0x5be/0x8f0
[  186.368357][ T6130]  ? __sys_sendmsg_sock+0x30/0x30
[  186.368387][ T6130]  ? import_iovec+0x6f/0xa0
[  186.368411][ T6130]  ___sys_sendmsg+0x236/0x2e0
[  186.368440][ T6130]  ? __sys_sendmsg+0x290/0x290
[  186.368500][ T6130]  __se_sys_sendmsg+0x1b7/0x2a0
[  186.368523][ T6130]  ? __x64_sys_sendmsg+0x80/0x80
[  186.368541][ T6130]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  186.368576][ T6130]  ? lockdep_hardirqs_on+0x94/0x140
[  186.368600][ T6130]  do_syscall_64+0x4c/0xa0
[  186.368618][ T6130]  ? clear_bhb_loop+0x30/0x80
[  186.368637][ T6130]  ? clear_bhb_loop+0x30/0x80
[  186.368659][ T6130]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  186.368679][ T6130] RIP: 0033:0x7f631f88d2d9
[  186.368694][ T6130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  186.368709][ T6130] RSP: 002b:00007f631dac4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  186.368729][ T6130] RAX: ffffffffffffffda RBX: 00007f631fb15090 RCX: 00007f631f88d2d9
[  186.368748][ T6130] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003
[  186.368761][ T6130] RBP: 00007f631f924888 R08: 0000000000000000 R09: 0000000000000000
[  186.368774][ T6130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  186.368786][ T6130] R13: 00007f631fb15128 R14: 00007f631fb15090 R15: 00007ffe3c557fd8
[  186.368815][ T6130]  </TASK>
[  186.369115][ T6130] Kernel Offset: disabled
[  187.059467][ T6130] Rebooting in 86400 seconds..