[  OK  ] Started Getty on tty4.
[  OK  ] Started Getty on tty3.
[  OK  ] Started Getty on tty2.
[  OK  ] Started Serial Getty on ttyS0.
[  OK  ] Started Getty on tty1.
[  OK  ] Reached target Login Prompts.
[  OK  ] Reached target Multi-User System.
[  OK  ] Reached target Graphical Interface.
         Starting Update UTMP about System Runlevel Changes...
[  OK  ] Started Update UTMP about System Runlevel Changes.
         Starting Load/Save RF Kill Switch Status...
[  OK  ] Started Load/Save RF Kill Switch Status.

Debian GNU/Linux 9 syzkaller ttyS0

Warning: Permanently added '10.128.0.182' (ECDSA) to the list of known hosts.
2021/11/29 01:21:42 fuzzer started
2021/11/29 01:21:43 dialing manager at 10.128.0.169:45305
2021/11/29 01:21:43 syscalls: 3513
2021/11/29 01:21:43 code coverage: enabled
2021/11/29 01:21:43 comparison tracing: enabled
2021/11/29 01:21:43 extra coverage: enabled
2021/11/29 01:21:43 setuid sandbox: enabled
2021/11/29 01:21:43 namespace sandbox: enabled
2021/11/29 01:21:43 Android sandbox: /sys/fs/selinux/policy does not exist
2021/11/29 01:21:43 fault injection: enabled
2021/11/29 01:21:43 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2021/11/29 01:21:43 net packet injection: enabled
2021/11/29 01:21:43 net device setup: enabled
2021/11/29 01:21:43 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2021/11/29 01:21:43 devlink PCI setup: PCI device 0000:00:10.0 is not available
2021/11/29 01:21:43 USB emulation: enabled
2021/11/29 01:21:43 hci packet injection: enabled
2021/11/29 01:21:43 wifi device emulation: enabled
2021/11/29 01:21:43 802.15.4 emulation: enabled
2021/11/29 01:21:43 fetching corpus: 0, signal 0/2000 (executing program)
syzkaller login: [   56.758101][ T6511] cgroup: Unknown subsys name 'net'
[   56.768340][ T6511] cgroup: Unknown subsys name 'rlimit'
2021/11/29 01:21:43 fetching corpus: 50, signal 62020/65731 (executing program)
2021/11/29 01:21:43 fetching corpus: 100, signal 91780/97117 (executing program)
2021/11/29 01:21:43 fetching corpus: 150, signal 110254/117228 (executing program)
2021/11/29 01:21:43 fetching corpus: 200, signal 122411/130983 (executing program)
2021/11/29 01:21:44 fetching corpus: 250, signal 139964/150050 (executing program)
2021/11/29 01:21:44 fetching corpus: 300, signal 157372/168882 (executing program)
2021/11/29 01:21:44 fetching corpus: 350, signal 165929/178956 (executing program)
2021/11/29 01:21:44 fetching corpus: 400, signal 176322/190748 (executing program)
2021/11/29 01:21:44 fetching corpus: 450, signal 187466/203295 (executing program)
2021/11/29 01:21:44 fetching corpus: 499, signal 196538/213653 (executing program)
2021/11/29 01:21:44 fetching corpus: 549, signal 204891/223297 (executing program)
2021/11/29 01:21:45 fetching corpus: 599, signal 213576/233220 (executing program)
2021/11/29 01:21:45 fetching corpus: 649, signal 219379/240380 (executing program)
2021/11/29 01:21:45 fetching corpus: 698, signal 226703/248962 (executing program)
2021/11/29 01:21:45 fetching corpus: 748, signal 231179/254741 (executing program)
2021/11/29 01:21:45 fetching corpus: 798, signal 235567/260457 (executing program)
2021/11/29 01:21:45 fetching corpus: 848, signal 243928/269939 (executing program)
2021/11/29 01:21:45 fetching corpus: 898, signal 249229/276468 (executing program)
2021/11/29 01:21:45 fetching corpus: 948, signal 254330/282756 (executing program)
2021/11/29 01:21:46 fetching corpus: 998, signal 261238/290748 (executing program)
2021/11/29 01:21:46 fetching corpus: 1048, signal 266915/297531 (executing program)
2021/11/29 01:21:46 fetching corpus: 1097, signal 271753/303488 (executing program)
2021/11/29 01:21:46 fetching corpus: 1147, signal 276834/309700 (executing program)
2021/11/29 01:21:46 fetching corpus: 1196, signal 280652/314624 (executing program)
2021/11/29 01:21:46 fetching corpus: 1244, signal 285047/320120 (executing program)
2021/11/29 01:21:46 fetching corpus: 1293, signal 289473/325655 (executing program)
2021/11/29 01:21:46 fetching corpus: 1343, signal 292509/329833 (executing program)
2021/11/29 01:21:47 fetching corpus: 1392, signal 297061/335443 (executing program)
2021/11/29 01:21:47 fetching corpus: 1441, signal 300987/340421 (executing program)
2021/11/29 01:21:47 fetching corpus: 1491, signal 305611/346030 (executing program)
2021/11/29 01:21:47 fetching corpus: 1541, signal 309424/350879 (executing program)
2021/11/29 01:21:47 fetching corpus: 1590, signal 313741/356180 (executing program)
2021/11/29 01:21:47 fetching corpus: 1640, signal 316443/359977 (executing program)
2021/11/29 01:21:48 fetching corpus: 1690, signal 322195/366562 (executing program)
2021/11/29 01:21:48 fetching corpus: 1740, signal 326584/371854 (executing program)
2021/11/29 01:21:48 fetching corpus: 1790, signal 329284/375620 (executing program)
2021/11/29 01:21:48 fetching corpus: 1840, signal 331310/378693 (executing program)
2021/11/29 01:21:48 fetching corpus: 1890, signal 334846/383216 (executing program)
2021/11/29 01:21:48 fetching corpus: 1940, signal 337886/387188 (executing program)
2021/11/29 01:21:48 fetching corpus: 1989, signal 340880/391146 (executing program)
2021/11/29 01:21:49 fetching corpus: 2038, signal 344386/395479 (executing program)
2021/11/29 01:21:49 fetching corpus: 2087, signal 347053/399080 (executing program)
2021/11/29 01:21:49 fetching corpus: 2136, signal 350011/402926 (executing program)
2021/11/29 01:21:49 fetching corpus: 2185, signal 352665/406567 (executing program)
2021/11/29 01:21:49 fetching corpus: 2233, signal 355083/409942 (executing program)
2021/11/29 01:21:49 fetching corpus: 2283, signal 358512/414232 (executing program)
2021/11/29 01:21:49 fetching corpus: 2333, signal 361408/417958 (executing program)
2021/11/29 01:21:50 fetching corpus: 2382, signal 363901/421340 (executing program)
2021/11/29 01:21:50 fetching corpus: 2432, signal 365814/424183 (executing program)
2021/11/29 01:21:50 fetching corpus: 2482, signal 367790/427117 (executing program)
2021/11/29 01:21:50 fetching corpus: 2532, signal 369639/429957 (executing program)
2021/11/29 01:21:50 fetching corpus: 2582, signal 372710/433759 (executing program)
2021/11/29 01:21:50 fetching corpus: 2632, signal 375069/436956 (executing program)
2021/11/29 01:21:50 fetching corpus: 2682, signal 377541/440272 (executing program)
2021/11/29 01:21:50 fetching corpus: 2731, signal 380164/443709 (executing program)
2021/11/29 01:21:51 fetching corpus: 2780, signal 382922/447241 (executing program)
2021/11/29 01:21:51 fetching corpus: 2830, signal 385354/450459 (executing program)
2021/11/29 01:21:51 fetching corpus: 2880, signal 387628/453590 (executing program)
2021/11/29 01:21:51 fetching corpus: 2930, signal 389840/456591 (executing program)
2021/11/29 01:21:51 fetching corpus: 2980, signal 392864/460307 (executing program)
2021/11/29 01:21:51 fetching corpus: 3029, signal 395498/463718 (executing program)
2021/11/29 01:21:51 fetching corpus: 3079, signal 397751/466764 (executing program)
2021/11/29 01:21:52 fetching corpus: 3129, signal 399255/469171 (executing program)
2021/11/29 01:21:52 fetching corpus: 3178, signal 401672/472310 (executing program)
2021/11/29 01:21:52 fetching corpus: 3226, signal 403292/474758 (executing program)
2021/11/29 01:21:52 fetching corpus: 3276, signal 404830/477114 (executing program)
2021/11/29 01:21:52 fetching corpus: 3326, signal 407134/480168 (executing program)
2021/11/29 01:21:52 fetching corpus: 3375, signal 409023/482814 (executing program)
2021/11/29 01:21:52 fetching corpus: 3425, signal 411128/485625 (executing program)
2021/11/29 01:21:52 fetching corpus: 3475, signal 412957/488210 (executing program)
2021/11/29 01:21:53 fetching corpus: 3525, signal 415415/491382 (executing program)
2021/11/29 01:21:53 fetching corpus: 3575, signal 416866/493622 (executing program)
2021/11/29 01:21:53 fetching corpus: 3625, signal 418530/496025 (executing program)
2021/11/29 01:21:53 fetching corpus: 3675, signal 420964/499080 (executing program)
2021/11/29 01:21:53 fetching corpus: 3725, signal 422592/501433 (executing program)
2021/11/29 01:21:53 fetching corpus: 3775, signal 424468/504022 (executing program)
2021/11/29 01:21:53 fetching corpus: 3824, signal 426008/506315 (executing program)
2021/11/29 01:21:54 fetching corpus: 3873, signal 428448/509352 (executing program)
2021/11/29 01:21:54 fetching corpus: 3923, signal 429830/511507 (executing program)
2021/11/29 01:21:54 fetching corpus: 3971, signal 431599/513990 (executing program)
2021/11/29 01:21:54 fetching corpus: 4020, signal 433701/516726 (executing program)
2021/11/29 01:21:54 fetching corpus: 4070, signal 435257/519008 (executing program)
2021/11/29 01:21:54 fetching corpus: 4119, signal 436990/521388 (executing program)
2021/11/29 01:21:54 fetching corpus: 4167, signal 438122/523331 (executing program)
2021/11/29 01:21:55 fetching corpus: 4216, signal 439568/525533 (executing program)
2021/11/29 01:21:55 fetching corpus: 4266, signal 441237/527860 (executing program)
2021/11/29 01:21:55 fetching corpus: 4316, signal 442766/530080 (executing program)
2021/11/29 01:21:55 fetching corpus: 4366, signal 444201/532209 (executing program)
2021/11/29 01:21:55 fetching corpus: 4416, signal 446188/534757 (executing program)
2021/11/29 01:21:55 fetching corpus: 4466, signal 447972/537214 (executing program)
2021/11/29 01:21:55 fetching corpus: 4515, signal 449195/539157 (executing program)
2021/11/29 01:21:56 fetching corpus: 4561, signal 450433/541111 (executing program)
2021/11/29 01:21:56 fetching corpus: 4610, signal 451563/542973 (executing program)
2021/11/29 01:21:56 fetching corpus: 4658, signal 453027/545105 (executing program)
2021/11/29 01:21:56 fetching corpus: 4708, signal 454550/547260 (executing program)
2021/11/29 01:21:56 fetching corpus: 4758, signal 456169/549485 (executing program)
2021/11/29 01:21:56 fetching corpus: 4808, signal 457784/551722 (executing program)
2021/11/29 01:21:56 fetching corpus: 4858, signal 459801/554245 (executing program)
2021/11/29 01:21:56 fetching corpus: 4908, signal 461175/556277 (executing program)
[   70.569516][ T1225] ieee802154 phy0 wpan0: encryption failed: -22
[   70.577735][ T1225] ieee802154 phy1 wpan1: encryption failed: -22
2021/11/29 01:21:57 fetching corpus: 4957, signal 462812/558509 (executing program)
2021/11/29 01:21:57 fetching corpus: 5005, signal 464313/560610 (executing program)
2021/11/29 01:21:57 fetching corpus: 5055, signal 465710/562666 (executing program)
2021/11/29 01:21:57 fetching corpus: 5105, signal 467196/564788 (executing program)
2021/11/29 01:21:57 fetching corpus: 5155, signal 468577/566780 (executing program)
2021/11/29 01:21:57 fetching corpus: 5205, signal 469878/568675 (executing program)
2021/11/29 01:21:57 fetching corpus: 5255, signal 471190/570626 (executing program)
2021/11/29 01:21:58 fetching corpus: 5304, signal 472717/572688 (executing program)
2021/11/29 01:21:58 fetching corpus: 5354, signal 474248/574771 (executing program)
2021/11/29 01:21:58 fetching corpus: 5404, signal 475578/576694 (executing program)
2021/11/29 01:21:58 fetching corpus: 5454, signal 477196/578866 (executing program)
2021/11/29 01:21:58 fetching corpus: 5504, signal 478509/580789 (executing program)
2021/11/29 01:21:58 fetching corpus: 5553, signal 479792/582637 (executing program)
2021/11/29 01:21:58 fetching corpus: 5602, signal 481442/584769 (executing program)
2021/11/29 01:21:59 fetching corpus: 5652, signal 482756/586672 (executing program)
2021/11/29 01:21:59 fetching corpus: 5702, signal 484095/588544 (executing program)
2021/11/29 01:21:59 fetching corpus: 5751, signal 485738/590630 (executing program)
2021/11/29 01:21:59 fetching corpus: 5801, signal 486767/592299 (executing program)
2021/11/29 01:21:59 fetching corpus: 5851, signal 487998/594095 (executing program)
2021/11/29 01:21:59 fetching corpus: 5901, signal 489593/596121 (executing program)
2021/11/29 01:21:59 fetching corpus: 5951, signal 490937/598000 (executing program)
2021/11/29 01:22:00 fetching corpus: 6001, signal 492394/599915 (executing program)
2021/11/29 01:22:00 fetching corpus: 6050, signal 493545/601560 (executing program)
2021/11/29 01:22:00 fetching corpus: 6100, signal 494808/603359 (executing program)
2021/11/29 01:22:00 fetching corpus: 6150, signal 497426/606141 (executing program)
2021/11/29 01:22:00 fetching corpus: 6199, signal 498459/607757 (executing program)
2021/11/29 01:22:00 fetching corpus: 6249, signal 499526/609436 (executing program)
2021/11/29 01:22:00 fetching corpus: 6297, signal 500666/611127 (executing program)
2021/11/29 01:22:01 fetching corpus: 6347, signal 501754/612747 (executing program)
2021/11/29 01:22:01 fetching corpus: 6397, signal 502653/614196 (executing program)
2021/11/29 01:22:01 fetching corpus: 6446, signal 503484/615561 (executing program)
2021/11/29 01:22:01 fetching corpus: 6496, signal 504351/616999 (executing program)
2021/11/29 01:22:01 fetching corpus: 6546, signal 505543/618712 (executing program)
2021/11/29 01:22:01 fetching corpus: 6596, signal 506529/620230 (executing program)
2021/11/29 01:22:01 fetching corpus: 6646, signal 507579/621769 (executing program)
2021/11/29 01:22:02 fetching corpus: 6696, signal 508769/623505 (executing program)
2021/11/29 01:22:02 fetching corpus: 6746, signal 509939/625125 (executing program)
2021/11/29 01:22:02 fetching corpus: 6796, signal 511308/626892 (executing program)
2021/11/29 01:22:02 fetching corpus: 6846, signal 512606/628605 (executing program)
2021/11/29 01:22:02 fetching corpus: 6896, signal 513479/630050 (executing program)
2021/11/29 01:22:02 fetching corpus: 6946, signal 514254/631369 (executing program)
2021/11/29 01:22:02 fetching corpus: 6996, signal 515236/632860 (executing program)
2021/11/29 01:22:02 fetching corpus: 7046, signal 516598/634581 (executing program)
2021/11/29 01:22:03 fetching corpus: 7096, signal 517639/636072 (executing program)
2021/11/29 01:22:03 fetching corpus: 7146, signal 518541/637498 (executing program)
2021/11/29 01:22:03 fetching corpus: 7196, signal 519600/639062 (executing program)
2021/11/29 01:22:03 fetching corpus: 7245, signal 520491/640485 (executing program)
2021/11/29 01:22:03 fetching corpus: 7295, signal 521420/641892 (executing program)
2021/11/29 01:22:03 fetching corpus: 7345, signal 522459/643475 (executing program)
2021/11/29 01:22:03 fetching corpus: 7395, signal 523395/644906 (executing program)
2021/11/29 01:22:03 fetching corpus: 7445, signal 524450/646424 (executing program)
2021/11/29 01:22:04 fetching corpus: 7494, signal 525827/648130 (executing program)
2021/11/29 01:22:04 fetching corpus: 7544, signal 526990/649599 (executing program)
2021/11/29 01:22:04 fetching corpus: 7593, signal 527856/650978 (executing program)
2021/11/29 01:22:04 fetching corpus: 7643, signal 529026/652541 (executing program)
2021/11/29 01:22:04 fetching corpus: 7693, signal 529969/653955 (executing program)
2021/11/29 01:22:04 fetching corpus: 7743, signal 530918/655332 (executing program)
2021/11/29 01:22:04 fetching corpus: 7792, signal 532190/656961 (executing program)
2021/11/29 01:22:04 fetching corpus: 7841, signal 533265/658462 (executing program)
2021/11/29 01:22:05 fetching corpus: 7890, signal 534129/659800 (executing program)
2021/11/29 01:22:05 fetching corpus: 7940, signal 534952/661117 (executing program)
2021/11/29 01:22:05 fetching corpus: 7989, signal 535856/662468 (executing program)
2021/11/29 01:22:05 fetching corpus: 8039, signal 536567/663695 (executing program)
2021/11/29 01:22:05 fetching corpus: 8089, signal 537347/664949 (executing program)
2021/11/29 01:22:05 fetching corpus: 8138, signal 538491/666435 (executing program)
2021/11/29 01:22:05 fetching corpus: 8187, signal 539465/667830 (executing program)
2021/11/29 01:22:06 fetching corpus: 8236, signal 540525/669224 (executing program)
2021/11/29 01:22:06 fetching corpus: 8286, signal 541790/670726 (executing program)
2021/11/29 01:22:06 fetching corpus: 8336, signal 542602/671982 (executing program)
2021/11/29 01:22:06 fetching corpus: 8386, signal 543502/673296 (executing program)
2021/11/29 01:22:06 fetching corpus: 8436, signal 544422/674591 (executing program)
2021/11/29 01:22:06 fetching corpus: 8485, signal 545709/676168 (executing program)
2021/11/29 01:22:07 fetching corpus: 8535, signal 546604/677437 (executing program)
2021/11/29 01:22:07 fetching corpus: 8582, signal 549015/679596 (executing program)
2021/11/29 01:22:07 fetching corpus: 8632, signal 549825/680838 (executing program)
2021/11/29 01:22:07 fetching corpus: 8682, signal 551041/682294 (executing program)
2021/11/29 01:22:07 fetching corpus: 8732, signal 551950/683602 (executing program)
2021/11/29 01:22:07 fetching corpus: 8782, signal 553017/684996 (executing program)
2021/11/29 01:22:07 fetching corpus: 8832, signal 554011/686305 (executing program)
2021/11/29 01:22:07 fetching corpus: 8882, signal 554870/687517 (executing program)
2021/11/29 01:22:08 fetching corpus: 8932, signal 555669/688745 (executing program)
2021/11/29 01:22:08 fetching corpus: 8982, signal 556799/690187 (executing program)
2021/11/29 01:22:08 fetching corpus: 9029, signal 557739/691467 (executing program)
2021/11/29 01:22:08 fetching corpus: 9078, signal 559009/692944 (executing program)
2021/11/29 01:22:08 fetching corpus: 9127, signal 559888/694192 (executing program)
2021/11/29 01:22:08 fetching corpus: 9177, signal 560665/695355 (executing program)
2021/11/29 01:22:08 fetching corpus: 9227, signal 561666/696672 (executing program)
2021/11/29 01:22:09 fetching corpus: 9277, signal 563049/698152 (executing program)
2021/11/29 01:22:09 fetching corpus: 9327, signal 564003/699414 (executing program)
2021/11/29 01:22:09 fetching corpus: 9377, signal 564778/700522 (executing program)
2021/11/29 01:22:09 fetching corpus: 9427, signal 565621/701684 (executing program)
2021/11/29 01:22:09 fetching corpus: 9475, signal 566724/703046 (executing program)
2021/11/29 01:22:09 fetching corpus: 9525, signal 567368/704099 (executing program)
2021/11/29 01:22:09 fetching corpus: 9575, signal 567974/705115 (executing program)
2021/11/29 01:22:09 fetching corpus: 9625, signal 568618/706156 (executing program)
2021/11/29 01:22:10 fetching corpus: 9675, signal 569868/707518 (executing program)
2021/11/29 01:22:10 fetching corpus: 9725, signal 570928/708791 (executing program)
2021/11/29 01:22:10 fetching corpus: 9775, signal 571807/709993 (executing program)
2021/11/29 01:22:10 fetching corpus: 9824, signal 572750/711240 (executing program)
2021/11/29 01:22:10 fetching corpus: 9872, signal 573588/712397 (executing program)
2021/11/29 01:22:10 fetching corpus: 9920, signal 574318/713472 (executing program)
2021/11/29 01:22:10 fetching corpus: 9970, signal 575203/714607 (executing program)
2021/11/29 01:22:10 fetching corpus: 10020, signal 576258/715826 (executing program)
2021/11/29 01:22:11 fetching corpus: 10070, signal 577122/717002 (executing program)
2021/11/29 01:22:11 fetching corpus: 10120, signal 578070/718220 (executing program)
2021/11/29 01:22:11 fetching corpus: 10170, signal 578912/719352 (executing program)
2021/11/29 01:22:11 fetching corpus: 10220, signal 579495/720363 (executing program)
2021/11/29 01:22:11 fetching corpus: 10269, signal 580275/721411 (executing program)
2021/11/29 01:22:11 fetching corpus: 10318, signal 581064/722477 (executing program)
2021/11/29 01:22:11 fetching corpus: 10368, signal 581682/723429 (executing program)
2021/11/29 01:22:12 fetching corpus: 10417, signal 582304/724446 (executing program)
2021/11/29 01:22:12 fetching corpus: 10467, signal 583047/725503 (executing program)
2021/11/29 01:22:12 fetching corpus: 10517, signal 583686/726524 (executing program)
2021/11/29 01:22:12 fetching corpus: 10567, signal 584613/727668 (executing program)
2021/11/29 01:22:12 fetching corpus: 10617, signal 585494/728815 (executing program)
2021/11/29 01:22:12 fetching corpus: 10667, signal 586296/729917 (executing program)
2021/11/29 01:22:12 fetching corpus: 10717, signal 587212/731063 (executing program)
2021/11/29 01:22:12 fetching corpus: 10767, signal 587678/732004 (executing program)
2021/11/29 01:22:13 fetching corpus: 10816, signal 588675/733126 (executing program)
2021/11/29 01:22:13 fetching corpus: 10864, signal 589308/734105 (executing program)
2021/11/29 01:22:13 fetching corpus: 10914, signal 589869/735050 (executing program)
2021/11/29 01:22:13 fetching corpus: 10962, signal 590540/736048 (executing program)
2021/11/29 01:22:13 fetching corpus: 11012, signal 591084/736980 (executing program)
2021/11/29 01:22:13 fetching corpus: 11060, signal 591679/737895 (executing program)
2021/11/29 01:22:14 fetching corpus: 11110, signal 592275/738814 (executing program)
2021/11/29 01:22:14 fetching corpus: 11160, signal 593235/739960 (executing program)
2021/11/29 01:22:14 fetching corpus: 11210, signal 593978/740951 (executing program)
2021/11/29 01:22:14 fetching corpus: 11260, signal 594906/742045 (executing program)
2021/11/29 01:22:14 fetching corpus: 11310, signal 595657/743025 (executing program)
2021/11/29 01:22:14 fetching corpus: 11358, signal 596596/744161 (executing program)
2021/11/29 01:22:14 fetching corpus: 11404, signal 597126/745071 (executing program)
2021/11/29 01:22:15 fetching corpus: 11453, signal 597762/746026 (executing program)
2021/11/29 01:22:15 fetching corpus: 11503, signal 598436/747025 (executing program)
2021/11/29 01:22:15 fetching corpus: 11553, signal 599384/748097 (executing program)
2021/11/29 01:22:15 fetching corpus: 11602, signal 600330/749206 (executing program)
2021/11/29 01:22:15 fetching corpus: 11651, signal 600826/750082 (executing program)
2021/11/29 01:22:15 fetching corpus: 11701, signal 601705/751106 (executing program)
2021/11/29 01:22:15 fetching corpus: 11749, signal 602457/752108 (executing program)
2021/11/29 01:22:15 fetching corpus: 11798, signal 603262/753093 (executing program)
2021/11/29 01:22:16 fetching corpus: 11848, signal 603804/753966 (executing program)
2021/11/29 01:22:16 fetching corpus: 11897, signal 604612/754978 (executing program)
2021/11/29 01:22:16 fetching corpus: 11946, signal 605121/755834 (executing program)
2021/11/29 01:22:16 fetching corpus: 11995, signal 605734/756726 (executing program)
2021/11/29 01:22:16 fetching corpus: 12044, signal 606589/757683 (executing program)
2021/11/29 01:22:16 fetching corpus: 12094, signal 607261/758602 (executing program)
2021/11/29 01:22:16 fetching corpus: 12143, signal 607980/759548 (executing program)
2021/11/29 01:22:16 fetching corpus: 12192, signal 608430/760346 (executing program)
2021/11/29 01:22:17 fetching corpus: 12241, signal 609067/761214 (executing program)
2021/11/29 01:22:17 fetching corpus: 12289, signal 609734/762107 (executing program)
2021/11/29 01:22:17 fetching corpus: 12338, signal 610357/762958 (executing program)
2021/11/29 01:22:17 fetching corpus: 12388, signal 610981/763834 (executing program)
2021/11/29 01:22:17 fetching corpus: 12436, signal 611591/764741 (executing program)
2021/11/29 01:22:17 fetching corpus: 12485, signal 612097/765525 (executing program)
2021/11/29 01:22:17 fetching corpus: 12534, signal 612762/766396 (executing program)
2021/11/29 01:22:18 fetching corpus: 12583, signal 613853/767489 (executing program)
2021/11/29 01:22:18 fetching corpus: 12633, signal 614685/768408 (executing program)
2021/11/29 01:22:18 fetching corpus: 12683, signal 615462/769327 (executing program)
2021/11/29 01:22:18 fetching corpus: 12733, signal 616108/770205 (executing program)
2021/11/29 01:22:18 fetching corpus: 12783, signal 617203/771253 (executing program)
2021/11/29 01:22:18 fetching corpus: 12831, signal 617934/772162 (executing program)
2021/11/29 01:22:18 fetching corpus: 12881, signal 618476/772987 (executing program)
2021/11/29 01:22:19 fetching corpus: 12930, signal 619327/773879 (executing program)
2021/11/29 01:22:19 fetching corpus: 12979, signal 620178/774780 (executing program)
2021/11/29 01:22:19 fetching corpus: 13029, signal 620595/775549 (executing program)
2021/11/29 01:22:19 fetching corpus: 13079, signal 621114/776273 (executing program)
2021/11/29 01:22:19 fetching corpus: 13127, signal 621518/777003 (executing program)
2021/11/29 01:22:19 fetching corpus: 13177, signal 622099/777838 (executing program)
2021/11/29 01:22:19 fetching corpus: 13227, signal 622840/778665 (executing program)
2021/11/29 01:22:19 fetching corpus: 13276, signal 623686/779570 (executing program)
2021/11/29 01:22:19 fetching corpus: 13325, signal 624282/780363 (executing program)
2021/11/29 01:22:20 fetching corpus: 13375, signal 624924/781245 (executing program)
2021/11/29 01:22:20 fetching corpus: 13425, signal 625635/782077 (executing program)
2021/11/29 01:22:20 fetching corpus: 13474, signal 626218/782868 (executing program)
2021/11/29 01:22:20 fetching corpus: 13524, signal 626800/783653 (executing program)
2021/11/29 01:22:20 fetching corpus: 13574, signal 627406/784409 (executing program)
2021/11/29 01:22:20 fetching corpus: 13622, signal 628058/785216 (executing program)
2021/11/29 01:22:20 fetching corpus: 13672, signal 628722/785991 (executing program)
2021/11/29 01:22:20 fetching corpus: 13722, signal 629313/786778 (executing program)
2021/11/29 01:22:21 fetching corpus: 13772, signal 629900/787545 (executing program)
2021/11/29 01:22:21 fetching corpus: 13822, signal 630593/788334 (executing program)
2021/11/29 01:22:21 fetching corpus: 13872, signal 631020/789066 (executing program)
2021/11/29 01:22:21 fetching corpus: 13921, signal 631703/789869 (executing program)
2021/11/29 01:22:21 fetching corpus: 13971, signal 632180/790580 (executing program)
2021/11/29 01:22:21 fetching corpus: 14021, signal 632820/791340 (executing program)
2021/11/29 01:22:22 fetching corpus: 14071, signal 633516/792139 (executing program)
2021/11/29 01:22:22 fetching corpus: 14121, signal 634060/792906 (executing program)
2021/11/29 01:22:22 fetching corpus: 14171, signal 634533/793589 (executing program)
2021/11/29 01:22:22 fetching corpus: 14218, signal 635296/794391 (executing program)
2021/11/29 01:22:22 fetching corpus: 14267, signal 635760/795151 (executing program)
2021/11/29 01:22:22 fetching corpus: 14317, signal 636412/795895 (executing program)
2021/11/29 01:22:22 fetching corpus: 14365, signal 636859/796578 (executing program)
2021/11/29 01:22:22 fetching corpus: 14414, signal 637659/797365 (executing program)
2021/11/29 01:22:23 fetching corpus: 14463, signal 638200/798109 (executing program)
2021/11/29 01:22:23 fetching corpus: 14512, signal 638828/798828 (executing program)
2021/11/29 01:22:23 fetching corpus: 14561, signal 639536/799578 (executing program)
2021/11/29 01:22:23 fetching corpus: 14611, signal 640304/800357 (executing program)
2021/11/29 01:22:23 fetching corpus: 14661, signal 640876/801052 (executing program)
2021/11/29 01:22:23 fetching corpus: 14711, signal 641617/801819 (executing program)
2021/11/29 01:22:23 fetching corpus: 14761, signal 642295/802522 (executing program)
2021/11/29 01:22:24 fetching corpus: 14811, signal 642769/803184 (executing program)
2021/11/29 01:22:24 fetching corpus: 14860, signal 643674/803990 (executing program)
2021/11/29 01:22:24 fetching corpus: 14910, signal 644264/804691 (executing program)
2021/11/29 01:22:24 fetching corpus: 14959, signal 644846/805415 (executing program)
2021/11/29 01:22:24 fetching corpus: 15007, signal 645475/806127 (executing program)
2021/11/29 01:22:24 fetching corpus: 15056, signal 646053/806815 (executing program)
2021/11/29 01:22:24 fetching corpus: 15105, signal 646616/807506 (executing program)
2021/11/29 01:22:25 fetching corpus: 15155, signal 647088/808137 (executing program)
2021/11/29 01:22:25 fetching corpus: 15205, signal 647728/808830 (executing program)
2021/11/29 01:22:25 fetching corpus: 15255, signal 648338/809505 (executing program)
2021/11/29 01:22:25 fetching corpus: 15304, signal 648991/810200 (executing program)
2021/11/29 01:22:25 fetching corpus: 15354, signal 649648/810919 (executing program)
2021/11/29 01:22:25 fetching corpus: 15402, signal 650229/811674 (executing program)
2021/11/29 01:22:25 fetching corpus: 15451, signal 650695/812336 (executing program)
2021/11/29 01:22:26 fetching corpus: 15501, signal 652799/813444 (executing program)
2021/11/29 01:22:26 fetching corpus: 15551, signal 653304/814126 (executing program)
2021/11/29 01:22:26 fetching corpus: 15601, signal 653703/814760 (executing program)
2021/11/29 01:22:26 fetching corpus: 15651, signal 654248/815434 (executing program)
2021/11/29 01:22:26 fetching corpus: 15701, signal 654714/816055 (executing program)
2021/11/29 01:22:26 fetching corpus: 15751, signal 655617/816810 (executing program)
2021/11/29 01:22:26 fetching corpus: 15800, signal 656276/817492 (executing program)
2021/11/29 01:22:26 fetching corpus: 15849, signal 656737/818147 (executing program)
2021/11/29 01:22:27 fetching corpus: 15899, signal 657258/818784 (executing program)
2021/11/29 01:22:27 fetching corpus: 15947, signal 657761/819412 (executing program)
2021/11/29 01:22:27 fetching corpus: 15995, signal 658214/820023 (executing program)
2021/11/29 01:22:27 fetching corpus: 16044, signal 658829/820695 (executing program)
2021/11/29 01:22:27 fetching corpus: 16094, signal 659376/821337 (executing program)
2021/11/29 01:22:27 fetching corpus: 16144, signal 659951/821965 (executing program)
2021/11/29 01:22:27 fetching corpus: 16194, signal 660409/822559 (executing program)
2021/11/29 01:22:28 fetching corpus: 16244, signal 660829/823179 (executing program)
2021/11/29 01:22:28 fetching corpus: 16292, signal 661635/823825 (executing program)
2021/11/29 01:22:28 fetching corpus: 16340, signal 662033/824445 (executing program)
2021/11/29 01:22:28 fetching corpus: 16389, signal 662821/825089 (executing program)
2021/11/29 01:22:28 fetching corpus: 16439, signal 663297/825678 (executing program)
2021/11/29 01:22:28 fetching corpus: 16489, signal 663784/826293 (executing program)
2021/11/29 01:22:29 fetching corpus: 16539, signal 664388/826908 (executing program)
2021/11/29 01:22:29 fetching corpus: 16589, signal 664980/827543 (executing program)
2021/11/29 01:22:29 fetching corpus: 16638, signal 665749/828173 (executing program)
2021/11/29 01:22:29 fetching corpus: 16688, signal 666173/828758 (executing program)
2021/11/29 01:22:29 fetching corpus: 16737, signal 666601/829285 (executing program)
2021/11/29 01:22:29 fetching corpus: 16787, signal 666948/829905 (executing program)
2021/11/29 01:22:29 fetching corpus: 16836, signal 667362/830492 (executing program)
2021/11/29 01:22:30 fetching corpus: 16886, signal 668007/831105 (executing program)
2021/11/29 01:22:30 fetching corpus: 16935, signal 668505/831682 (executing program)
2021/11/29 01:22:30 fetching corpus: 16983, signal 668939/832220 (executing program)
2021/11/29 01:22:30 fetching corpus: 17032, signal 669570/832846 (executing program)
2021/11/29 01:22:30 fetching corpus: 17081, signal 670166/833437 (executing program)
2021/11/29 01:22:30 fetching corpus: 17131, signal 670635/833976 (executing program)
2021/11/29 01:22:30 fetching corpus: 17181, signal 671116/834530 (executing program)
2021/11/29 01:22:30 fetching corpus: 17231, signal 671659/835100 (executing program)
2021/11/29 01:22:31 fetching corpus: 17281, signal 672170/835666 (executing program)
2021/11/29 01:22:31 fetching corpus: 17330, signal 672607/836249 (executing program)
2021/11/29 01:22:31 fetching corpus: 17379, signal 673068/836807 (executing program)
2021/11/29 01:22:31 fetching corpus: 17429, signal 673767/837418 (executing program)
2021/11/29 01:22:31 fetching corpus: 17479, signal 674153/837944 (executing program)
2021/11/29 01:22:31 fetching corpus: 17529, signal 674625/838496 (executing program)
2021/11/29 01:22:31 fetching corpus: 17578, signal 675156/839069 (executing program)
2021/11/29 01:22:31 fetching corpus: 17628, signal 675718/839625 (executing program)
2021/11/29 01:22:32 fetching corpus: 17678, signal 676123/840174 (executing program)
2021/11/29 01:22:32 fetching corpus: 17727, signal 676506/840678 (executing program)
2021/11/29 01:22:32 fetching corpus: 17777, signal 676996/841218 (executing program)
2021/11/29 01:22:32 fetching corpus: 17827, signal 677518/841773 (executing program)
2021/11/29 01:22:32 fetching corpus: 17877, signal 677985/842306 (executing program)
2021/11/29 01:22:32 fetching corpus: 17926, signal 678455/842827 (executing program)
2021/11/29 01:22:32 fetching corpus: 17975, signal 678879/843327 (executing program)
2021/11/29 01:22:32 fetching corpus: 18024, signal 679277/843869 (executing program)
2021/11/29 01:22:33 fetching corpus: 18073, signal 679612/844371 (executing program)
2021/11/29 01:22:33 fetching corpus: 18123, signal 680117/844910 (executing program)
2021/11/29 01:22:33 fetching corpus: 18173, signal 680863/845496 (executing program)
2021/11/29 01:22:33 fetching corpus: 18223, signal 681362/846036 (executing program)
2021/11/29 01:22:33 fetching corpus: 18272, signal 681848/846541 (executing program)
2021/11/29 01:22:33 fetching corpus: 18321, signal 682328/847064 (executing program)
2021/11/29 01:22:33 fetching corpus: 18371, signal 682911/847592 (executing program)
2021/11/29 01:22:33 fetching corpus: 18420, signal 683435/848126 (executing program)
2021/11/29 01:22:34 fetching corpus: 18470, signal 683935/848642 (executing program)
2021/11/29 01:22:34 fetching corpus: 18520, signal 684464/849142 (executing program)
2021/11/29 01:22:34 fetching corpus: 18570, signal 684909/849677 (executing program)
2021/11/29 01:22:34 fetching corpus: 18620, signal 685333/850212 (executing program)
2021/11/29 01:22:34 fetching corpus: 18667, signal 685729/850690 (executing program)
2021/11/29 01:22:34 fetching corpus: 18715, signal 686205/851237 (executing program)
2021/11/29 01:22:34 fetching corpus: 18765, signal 686695/851746 (executing program)
2021/11/29 01:22:35 fetching corpus: 18815, signal 687065/852221 (executing program)
2021/11/29 01:22:35 fetching corpus: 18865, signal 687485/852671 (executing program)
2021/11/29 01:22:35 fetching corpus: 18914, signal 688396/853251 (executing program)
2021/11/29 01:22:35 fetching corpus: 18963, signal 688925/853723 (executing program)
2021/11/29 01:22:35 fetching corpus: 19013, signal 689336/854189 (executing program)
2021/11/29 01:22:35 fetching corpus: 19063, signal 689748/854650 (executing program)
2021/11/29 01:22:35 fetching corpus: 19113, signal 690211/855118 (executing program)
2021/11/29 01:22:36 fetching corpus: 19162, signal 690736/855555 (executing program)
2021/11/29 01:22:36 fetching corpus: 19212, signal 691225/856071 (executing program)
2021/11/29 01:22:36 fetching corpus: 19262, signal 691659/856539 (executing program)
2021/11/29 01:22:36 fetching corpus: 19312, signal 692017/856986 (executing program)
2021/11/29 01:22:36 fetching corpus: 19362, signal 692551/857467 (executing program)
2021/11/29 01:22:36 fetching corpus: 19411, signal 693098/857987 (executing program)
2021/11/29 01:22:36 fetching corpus: 19461, signal 693511/858464 (executing program)
2021/11/29 01:22:37 fetching corpus: 19511, signal 694007/858912 (executing program)
2021/11/29 01:22:37 fetching corpus: 19561, signal 694338/859348 (executing program)
2021/11/29 01:22:37 fetching corpus: 19610, signal 694916/859821 (executing program)
2021/11/29 01:22:37 fetching corpus: 19660, signal 695322/860270 (executing program)
2021/11/29 01:22:37 fetching corpus: 19710, signal 695827/860735 (executing program)
2021/11/29 01:22:37 fetching corpus: 19760, signal 696306/861181 (executing program)
2021/11/29 01:22:37 fetching corpus: 19810, signal 696882/861632 (executing program)
2021/11/29 01:22:37 fetching corpus: 19860, signal 697404/862108 (executing program)
2021/11/29 01:22:38 fetching corpus: 19910, signal 698044/862550 (executing program)
2021/11/29 01:22:38 fetching corpus: 19960, signal 698488/863004 (executing program)
2021/11/29 01:22:38 fetching corpus: 20009, signal 699047/863438 (executing program)
2021/11/29 01:22:38 fetching corpus: 20058, signal 699479/863863 (executing program)
2021/11/29 01:22:38 fetching corpus: 20108, signal 699890/864294 (executing program)
2021/11/29 01:22:38 fetching corpus: 20158, signal 700317/864723 (executing program)
2021/11/29 01:22:38 fetching corpus: 20208, signal 700992/865156 (executing program)
2021/11/29 01:22:38 fetching corpus: 20258, signal 701359/865618 (executing program)
2021/11/29 01:22:38 fetching corpus: 20306, signal 701759/866039 (executing program)
2021/11/29 01:22:39 fetching corpus: 20355, signal 702227/866450 (executing program)
2021/11/29 01:22:39 fetching corpus: 20405, signal 702651/866895 (executing program)
2021/11/29 01:22:39 fetching corpus: 20453, signal 702970/867307 (executing program)
2021/11/29 01:22:39 fetching corpus: 20501, signal 703333/867706 (executing program)
2021/11/29 01:22:39 fetching corpus: 20551, signal 703752/868166 (executing program)
2021/11/29 01:22:39 fetching corpus: 20601, signal 704090/868585 (executing program)
2021/11/29 01:22:39 fetching corpus: 20651, signal 704641/869021 (executing program)
2021/11/29 01:22:39 fetching corpus: 20700, signal 705076/869452 (executing program)
2021/11/29 01:22:40 fetching corpus: 20750, signal 705447/869850 (executing program)
2021/11/29 01:22:40 fetching corpus: 20799, signal 705761/870249 (executing program)
2021/11/29 01:22:40 fetching corpus: 20848, signal 706132/870650 (executing program)
2021/11/29 01:22:40 fetching corpus: 20898, signal 706592/871084 (executing program)
2021/11/29 01:22:40 fetching corpus: 20948, signal 706938/871463 (executing program)
2021/11/29 01:22:40 fetching corpus: 20998, signal 707564/871880 (executing program)
2021/11/29 01:22:41 fetching corpus: 21048, signal 707999/872271 (executing program)
2021/11/29 01:22:41 fetching corpus: 21098, signal 708319/872647 (executing program)
2021/11/29 01:22:41 fetching corpus: 21148, signal 708701/873017 (executing program)
2021/11/29 01:22:41 fetching corpus: 21197, signal 709098/873386 (executing program)
2021/11/29 01:22:41 fetching corpus: 21247, signal 709400/873785 (executing program)
2021/11/29 01:22:41 fetching corpus: 21297, signal 709869/874153 (executing program)
2021/11/29 01:22:41 fetching corpus: 21347, signal 710274/874557 (executing program)
2021/11/29 01:22:41 fetching corpus: 21396, signal 710584/874937 (executing program)
2021/11/29 01:22:42 fetching corpus: 21446, signal 710986/875304 (executing program)
2021/11/29 01:22:42 fetching corpus: 21495, signal 711399/875683 (executing program)
2021/11/29 01:22:42 fetching corpus: 21545, signal 712133/876080 (executing program)
2021/11/29 01:22:42 fetching corpus: 21595, signal 713576/876473 (executing program)
2021/11/29 01:22:42 fetching corpus: 21645, signal 713914/876838 (executing program)
2021/11/29 01:22:42 fetching corpus: 21693, signal 714271/877051 (executing program)
2021/11/29 01:22:42 fetching corpus: 21743, signal 714587/877051 (executing program)
2021/11/29 01:22:43 fetching corpus: 21792, signal 715000/877051 (executing program)
2021/11/29 01:22:43 fetching corpus: 21842, signal 715439/877051 (executing program)
2021/11/29 01:22:43 fetching corpus: 21891, signal 715809/877051 (executing program)
2021/11/29 01:22:43 fetching corpus: 21939, signal 716192/877053 (executing program)
2021/11/29 01:22:43 fetching corpus: 21988, signal 716576/877053 (executing program)
2021/11/29 01:22:43 fetching corpus: 22037, signal 717122/877053 (executing program)
2021/11/29 01:22:44 fetching corpus: 22086, signal 717628/877058 (executing program)
2021/11/29 01:22:44 fetching corpus: 22133, signal 718594/877058 (executing program)
2021/11/29 01:22:44 fetching corpus: 22183, signal 719137/877058 (executing program)
2021/11/29 01:22:44 fetching corpus: 22232, signal 719759/877058 (executing program)
2021/11/29 01:22:44 fetching corpus: 22281, signal 720149/877058 (executing program)
2021/11/29 01:22:44 fetching corpus: 22330, signal 720669/877058 (executing program)
2021/11/29 01:22:44 fetching corpus: 22380, signal 721074/877062 (executing program)
2021/11/29 01:22:44 fetching corpus: 22429, signal 721548/877062 (executing program)
2021/11/29 01:22:45 fetching corpus: 22478, signal 721958/877062 (executing program)
2021/11/29 01:22:45 fetching corpus: 22528, signal 722429/877062 (executing program)
2021/11/29 01:22:45 fetching corpus: 22578, signal 722974/877062 (executing program)
2021/11/29 01:22:45 fetching corpus: 22627, signal 723698/877062 (executing program)
2021/11/29 01:22:45 fetching corpus: 22676, signal 724176/877062 (executing program)
2021/11/29 01:22:45 fetching corpus: 22725, signal 724554/877069 (executing program)
2021/11/29 01:22:45 fetching corpus: 22774, signal 724890/877070 (executing program)
2021/11/29 01:22:45 fetching corpus: 22822, signal 725189/877070 (executing program)
2021/11/29 01:22:46 fetching corpus: 22871, signal 725633/877082 (executing program)
2021/11/29 01:22:46 fetching corpus: 22921, signal 726067/877092 (executing program)
2021/11/29 01:22:46 fetching corpus: 22970, signal 726454/877092 (executing program)
2021/11/29 01:22:46 fetching corpus: 23020, signal 726957/877092 (executing program)
2021/11/29 01:22:46 fetching corpus: 23069, signal 727392/877092 (executing program)
2021/11/29 01:22:46 fetching corpus: 23119, signal 727810/877092 (executing program)
2021/11/29 01:22:46 fetching corpus: 23167, signal 728284/877092 (executing program)
2021/11/29 01:22:47 fetching corpus: 23214, signal 728618/877102 (executing program)
2021/11/29 01:22:47 fetching corpus: 23263, signal 728986/877102 (executing program)
2021/11/29 01:22:47 fetching corpus: 23313, signal 729392/877102 (executing program)
2021/11/29 01:22:47 fetching corpus: 23362, signal 729835/877102 (executing program)
2021/11/29 01:22:47 fetching corpus: 23412, signal 730180/877102 (executing program)
2021/11/29 01:22:47 fetching corpus: 23461, signal 730608/877108 (executing program)
2021/11/29 01:22:47 fetching corpus: 23510, signal 730959/877108 (executing program)
2021/11/29 01:22:48 fetching corpus: 23560, signal 731361/877113 (executing program)
2021/11/29 01:22:48 fetching corpus: 23608, signal 731758/877114 (executing program)
2021/11/29 01:22:48 fetching corpus: 23658, signal 732176/877119 (executing program)
2021/11/29 01:22:48 fetching corpus: 23706, signal 732536/877119 (executing program)
2021/11/29 01:22:48 fetching corpus: 23755, signal 732954/877127 (executing program)
2021/11/29 01:22:48 fetching corpus: 23804, signal 733514/877127 (executing program)
2021/11/29 01:22:48 fetching corpus: 23854, signal 734099/877127 (executing program)
2021/11/29 01:22:49 fetching corpus: 23904, signal 734544/877135 (executing program)
2021/11/29 01:22:49 fetching corpus: 23953, signal 734889/877135 (executing program)
2021/11/29 01:22:49 fetching corpus: 24003, signal 735164/877135 (executing program)
2021/11/29 01:22:49 fetching corpus: 24052, signal 735483/877135 (executing program)
2021/11/29 01:22:49 fetching corpus: 24102, signal 735774/877135 (executing program)
2021/11/29 01:22:49 fetching corpus: 24152, signal 736212/877149 (executing program)
2021/11/29 01:22:49 fetching corpus: 24200, signal 736741/877156 (executing program)
2021/11/29 01:22:49 fetching corpus: 24250, signal 737039/877170 (executing program)
2021/11/29 01:22:50 fetching corpus: 24299, signal 737496/877170 (executing program)
2021/11/29 01:22:50 fetching corpus: 24348, signal 737925/877170 (executing program)
2021/11/29 01:22:50 fetching corpus: 24396, signal 738305/877170 (executing program)
2021/11/29 01:22:50 fetching corpus: 24446, signal 738674/877170 (executing program)
2021/11/29 01:22:50 fetching corpus: 24494, signal 739001/877170 (executing program)
2021/11/29 01:22:50 fetching corpus: 24544, signal 739436/877171 (executing program)
2021/11/29 01:22:50 fetching corpus: 24593, signal 739704/877171 (executing program)
2021/11/29 01:22:51 fetching corpus: 24642, signal 740238/877171 (executing program)
2021/11/29 01:22:51 fetching corpus: 24692, signal 740707/877172 (executing program)
2021/11/29 01:22:51 fetching corpus: 24741, signal 741092/877172 (executing program)
2021/11/29 01:22:51 fetching corpus: 24790, signal 741420/877172 (executing program)
2021/11/29 01:22:51 fetching corpus: 24840, signal 741781/877172 (executing program)
2021/11/29 01:22:51 fetching corpus: 24890, signal 742061/877172 (executing program)
2021/11/29 01:22:51 fetching corpus: 24940, signal 742378/877172 (executing program)
2021/11/29 01:22:51 fetching corpus: 24989, signal 742690/877172 (executing program)
2021/11/29 01:22:52 fetching corpus: 25037, signal 743041/877181 (executing program)
2021/11/29 01:22:52 fetching corpus: 25085, signal 743460/877181 (executing program)
2021/11/29 01:22:52 fetching corpus: 25134, signal 743828/877184 (executing program)
2021/11/29 01:22:52 fetching corpus: 25184, signal 744102/877184 (executing program)
2021/11/29 01:22:52 fetching corpus: 25234, signal 744477/877184 (executing program)
2021/11/29 01:22:52 fetching corpus: 25283, signal 744756/877189 (executing program)
2021/11/29 01:22:52 fetching corpus: 25331, signal 745038/877189 (executing program)
2021/11/29 01:22:52 fetching corpus: 25380, signal 745277/877189 (executing program)
2021/11/29 01:22:53 fetching corpus: 25429, signal 745644/877190 (executing program)
2021/11/29 01:22:53 fetching corpus: 25477, signal 745973/877190 (executing program)
2021/11/29 01:22:53 fetching corpus: 25526, signal 746336/877194 (executing program)
2021/11/29 01:22:53 fetching corpus: 25574, signal 746757/877199 (executing program)
2021/11/29 01:22:53 fetching corpus: 25623, signal 747055/877199 (executing program)
2021/11/29 01:22:53 fetching corpus: 25673, signal 747387/877199 (executing program)
2021/11/29 01:22:53 fetching corpus: 25722, signal 748007/877204 (executing program)
2021/11/29 01:22:53 fetching corpus: 25769, signal 748471/877204 (executing program)
2021/11/29 01:22:54 fetching corpus: 25819, signal 748827/877204 (executing program)
2021/11/29 01:22:54 fetching corpus: 25868, signal 749182/877204 (executing program)
2021/11/29 01:22:54 fetching corpus: 25918, signal 749427/877204 (executing program)
2021/11/29 01:22:54 fetching corpus: 25968, signal 749728/877204 (executing program)
2021/11/29 01:22:54 fetching corpus: 26018, signal 750032/877204 (executing program)
2021/11/29 01:22:54 fetching corpus: 26068, signal 750373/877204 (executing program)
2021/11/29 01:22:54 fetching corpus: 26116, signal 750711/877204 (executing program)
2021/11/29 01:22:54 fetching corpus: 26165, signal 751008/877214 (executing program)
2021/11/29 01:22:54 fetching corpus: 26214, signal 751433/877216 (executing program)
2021/11/29 01:22:55 fetching corpus: 26263, signal 751776/877216 (executing program)
2021/11/29 01:22:55 fetching corpus: 26313, signal 752010/877216 (executing program)
2021/11/29 01:22:55 fetching corpus: 26362, signal 752286/877217 (executing program)
2021/11/29 01:22:55 fetching corpus: 26411, signal 752748/877217 (executing program)
2021/11/29 01:22:55 fetching corpus: 26460, signal 753115/877220 (executing program)
2021/11/29 01:22:55 fetching corpus: 26508, signal 753462/877223 (executing program)
2021/11/29 01:22:55 fetching corpus: 26558, signal 753863/877223 (executing program)
2021/11/29 01:22:55 fetching corpus: 26607, signal 754299/877223 (executing program)
2021/11/29 01:22:56 fetching corpus: 26656, signal 754703/877226 (executing program)
2021/11/29 01:22:56 fetching corpus: 26706, signal 755102/877227 (executing program)
2021/11/29 01:22:56 fetching corpus: 26756, signal 755403/877227 (executing program)
2021/11/29 01:22:56 fetching corpus: 26805, signal 755701/877228 (executing program)
2021/11/29 01:22:56 fetching corpus: 26855, signal 756211/877229 (executing program)
2021/11/29 01:22:56 fetching corpus: 26905, signal 756477/877229 (executing program)
2021/11/29 01:22:57 fetching corpus: 26955, signal 756817/877229 (executing program)
2021/11/29 01:22:57 fetching corpus: 27004, signal 757195/877231 (executing program)
2021/11/29 01:22:57 fetching corpus: 27054, signal 757507/877231 (executing program)
2021/11/29 01:22:57 fetching corpus: 27104, signal 757846/877231 (executing program)
2021/11/29 01:22:57 fetching corpus: 27154, signal 758192/877231 (executing program)
2021/11/29 01:22:57 fetching corpus: 27204, signal 758497/877235 (executing program)
2021/11/29 01:22:57 fetching corpus: 27251, signal 758804/877235 (executing program)
2021/11/29 01:22:57 fetching corpus: 27299, signal 759131/877237 (executing program)
2021/11/29 01:22:58 fetching corpus: 27347, signal 759539/877239 (executing program)
2021/11/29 01:22:58 fetching corpus: 27396, signal 759755/877244 (executing program)
2021/11/29 01:22:58 fetching corpus: 27444, signal 760024/877244 (executing program)
2021/11/29 01:22:58 fetching corpus: 27493, signal 760335/877244 (executing program)
[  132.007531][ T1225] ieee802154 phy0 wpan0: encryption failed: -22
[  132.014459][ T1225] ieee802154 phy1 wpan1: encryption failed: -22
2021/11/29 01:22:58 fetching corpus: 27542, signal 760709/877244 (executing program)
2021/11/29 01:22:58 fetching corpus: 27592, signal 761006/877244 (executing program)
2021/11/29 01:22:58 fetching corpus: 27641, signal 761306/877244 (executing program)
2021/11/29 01:22:59 fetching corpus: 27690, signal 761685/877244 (executing program)
2021/11/29 01:22:59 fetching corpus: 27738, signal 762006/877248 (executing program)
2021/11/29 01:22:59 fetching corpus: 27788, signal 762327/877248 (executing program)
2021/11/29 01:22:59 fetching corpus: 27837, signal 762758/877248 (executing program)
2021/11/29 01:22:59 fetching corpus: 27887, signal 763130/877252 (executing program)
2021/11/29 01:22:59 fetching corpus: 27937, signal 763503/877252 (executing program)
2021/11/29 01:23:00 fetching corpus: 27985, signal 763833/877262 (executing program)
2021/11/29 01:23:00 fetching corpus: 28031, signal 764177/877262 (executing program)
2021/11/29 01:23:00 fetching corpus: 28078, signal 764508/877266 (executing program)
2021/11/29 01:23:00 fetching corpus: 28124, signal 764773/877268 (executing program)
2021/11/29 01:23:00 fetching corpus: 28174, signal 765147/877277 (executing program)
2021/11/29 01:23:00 fetching corpus: 28224, signal 765471/877277 (executing program)
2021/11/29 01:23:01 fetching corpus: 28274, signal 765813/877277 (executing program)
2021/11/29 01:23:01 fetching corpus: 28324, signal 766099/877280 (executing program)
2021/11/29 01:23:01 fetching corpus: 28374, signal 766389/877281 (executing program)
2021/11/29 01:23:01 fetching corpus: 28424, signal 766710/877281 (executing program)
2021/11/29 01:23:01 fetching corpus: 28473, signal 767023/877281 (executing program)
2021/11/29 01:23:01 fetching corpus: 28520, signal 767343/877299 (executing program)
2021/11/29 01:23:01 fetching corpus: 28570, signal 767684/877299 (executing program)
2021/11/29 01:23:01 fetching corpus: 28618, signal 767959/877299 (executing program)
2021/11/29 01:23:02 fetching corpus: 28666, signal 768313/877305 (executing program)
2021/11/29 01:23:02 fetching corpus: 28716, signal 768604/877305 (executing program)
2021/11/29 01:23:02 fetching corpus: 28764, signal 768955/877306 (executing program)
2021/11/29 01:23:02 fetching corpus: 28812, signal 769270/877306 (executing program)
2021/11/29 01:23:02 fetching corpus: 28861, signal 769653/877306 (executing program)
2021/11/29 01:23:02 fetching corpus: 28910, signal 769940/877306 (executing program)
2021/11/29 01:23:02 fetching corpus: 28959, signal 770256/877306 (executing program)
2021/11/29 01:23:02 fetching corpus: 29006, signal 770498/877306 (executing program)
2021/11/29 01:23:03 fetching corpus: 29056, signal 770726/877306 (executing program)
2021/11/29 01:23:03 fetching corpus: 29105, signal 771078/877306 (executing program)
2021/11/29 01:23:03 fetching corpus: 29150, signal 771464/877308 (executing program)
2021/11/29 01:23:03 fetching corpus: 29200, signal 771842/877308 (executing program)
2021/11/29 01:23:03 fetching corpus: 29250, signal 772156/877308 (executing program)
2021/11/29 01:23:03 fetching corpus: 29300, signal 772491/877310 (executing program)
2021/11/29 01:23:03 fetching corpus: 29349, signal 772762/877312 (executing program)
2021/11/29 01:23:04 fetching corpus: 29399, signal 773108/877312 (executing program)
2021/11/29 01:23:04 fetching corpus: 29446, signal 773579/877325 (executing program)
2021/11/29 01:23:04 fetching corpus: 29496, signal 773892/877325 (executing program)
2021/11/29 01:23:04 fetching corpus: 29544, signal 774224/877334 (executing program)
2021/11/29 01:23:04 fetching corpus: 29593, signal 774556/877335 (executing program)
2021/11/29 01:23:04 fetching corpus: 29639, signal 774797/877335 (executing program)
2021/11/29 01:23:04 fetching corpus: 29688, signal 775127/877339 (executing program)
2021/11/29 01:23:04 fetching corpus: 29737, signal 775416/877339 (executing program)
2021/11/29 01:23:05 fetching corpus: 29786, signal 775718/877349 (executing program)
2021/11/29 01:23:05 fetching corpus: 29836, signal 776013/877349 (executing program)
2021/11/29 01:23:05 fetching corpus: 29886, signal 776410/877383 (executing program)
2021/11/29 01:23:05 fetching corpus: 29935, signal 776842/877383 (executing program)
2021/11/29 01:23:05 fetching corpus: 29984, signal 777131/877383 (executing program)
2021/11/29 01:23:05 fetching corpus: 30034, signal 777421/877383 (executing program)
2021/11/29 01:23:05 fetching corpus: 30083, signal 777701/877383 (executing program)
2021/11/29 01:23:06 fetching corpus: 30133, signal 777969/877385 (executing program)
2021/11/29 01:23:06 fetching corpus: 30181, signal 778242/877385 (executing program)
2021/11/29 01:23:06 fetching corpus: 30230, signal 778476/877385 (executing program)
2021/11/29 01:23:06 fetching corpus: 30279, signal 778833/877386 (executing program)
2021/11/29 01:23:06 fetching corpus: 30328, signal 779264/877386 (executing program)
2021/11/29 01:23:06 fetching corpus: 30378, signal 779564/877387 (executing program)
2021/11/29 01:23:06 fetching corpus: 30428, signal 779828/877387 (executing program)
2021/11/29 01:23:07 fetching corpus: 30473, signal 780110/877396 (executing program)
2021/11/29 01:23:07 fetching corpus: 30523, signal 780403/877401 (executing program)
2021/11/29 01:23:07 fetching corpus: 30572, signal 780718/877401 (executing program)
2021/11/29 01:23:07 fetching corpus: 30622, signal 781200/877401 (executing program)
2021/11/29 01:23:07 fetching corpus: 30670, signal 781571/877401 (executing program)
2021/11/29 01:23:07 fetching corpus: 30720, signal 781837/877401 (executing program)
2021/11/29 01:23:07 fetching corpus: 30768, signal 782086/877403 (executing program)
2021/11/29 01:23:07 fetching corpus: 30818, signal 782857/877403 (executing program)
2021/11/29 01:23:07 fetching corpus: 30868, signal 783143/877403 (executing program)
2021/11/29 01:23:08 fetching corpus: 30916, signal 783435/877405 (executing program)
2021/11/29 01:23:08 fetching corpus: 30965, signal 783797/877414 (executing program)
2021/11/29 01:23:08 fetching corpus: 31015, signal 784221/877414 (executing program)
2021/11/29 01:23:08 fetching corpus: 31065, signal 784527/877414 (executing program)
2021/11/29 01:23:08 fetching corpus: 31115, signal 784787/877414 (executing program)
2021/11/29 01:23:08 fetching corpus: 31164, signal 785135/877418 (executing program)
2021/11/29 01:23:08 fetching corpus: 31214, signal 785463/877418 (executing program)
2021/11/29 01:23:09 fetching corpus: 31262, signal 785791/877422 (executing program)
2021/11/29 01:23:09 fetching corpus: 31310, signal 786150/877450 (executing program)
2021/11/29 01:23:09 fetching corpus: 31360, signal 786365/877450 (executing program)
2021/11/29 01:23:09 fetching corpus: 31409, signal 786652/877450 (executing program)
2021/11/29 01:23:09 fetching corpus: 31458, signal 787002/877450 (executing program)
2021/11/29 01:23:09 fetching corpus: 31508, signal 787355/877460 (executing program)
2021/11/29 01:23:09 fetching corpus: 31557, signal 787627/877460 (executing program)
2021/11/29 01:23:09 fetching corpus: 31606, signal 787947/877460 (executing program)
2021/11/29 01:23:10 fetching corpus: 31655, signal 788224/877464 (executing program)
2021/11/29 01:23:10 fetching corpus: 31703, signal 788529/877475 (executing program)
2021/11/29 01:23:10 fetching corpus: 31753, signal 788827/877475 (executing program)
2021/11/29 01:23:10 fetching corpus: 31803, signal 789216/877478 (executing program)
2021/11/29 01:23:10 fetching corpus: 31852, signal 789541/877478 (executing program)
2021/11/29 01:23:10 fetching corpus: 31902, signal 789822/877478 (executing program)
2021/11/29 01:23:11 fetching corpus: 31950, signal 790092/877478 (executing program)
2021/11/29 01:23:11 fetching corpus: 31999, signal 790328/877478 (executing program)
2021/11/29 01:23:11 fetching corpus: 32049, signal 790637/877478 (executing program)
2021/11/29 01:23:11 fetching corpus: 32099, signal 790928/877478 (executing program)
2021/11/29 01:23:11 fetching corpus: 32147, signal 791237/877483 (executing program)
2021/11/29 01:23:11 fetching corpus: 32196, signal 791533/877483 (executing program)
2021/11/29 01:23:11 fetching corpus: 32245, signal 791709/877483 (executing program)
2021/11/29 01:23:11 fetching corpus: 32295, signal 791909/877483 (executing program)
2021/11/29 01:23:12 fetching corpus: 32345, signal 792240/877489 (executing program)
2021/11/29 01:23:12 fetching corpus: 32393, signal 792450/877494 (executing program)
2021/11/29 01:23:12 fetching corpus: 32443, signal 792729/877494 (executing program)
2021/11/29 01:23:12 fetching corpus: 32493, signal 795421/877494 (executing program)
2021/11/29 01:23:12 fetching corpus: 32541, signal 795693/877494 (executing program)
2021/11/29 01:23:12 fetching corpus: 32590, signal 796064/877494 (executing program)
2021/11/29 01:23:12 fetching corpus: 32639, signal 796294/877494 (executing program)
2021/11/29 01:23:13 fetching corpus: 32688, signal 796615/877496 (executing program)
2021/11/29 01:23:13 fetching corpus: 32736, signal 796920/877496 (executing program)
2021/11/29 01:23:13 fetching corpus: 32782, signal 797323/877496 (executing program)
2021/11/29 01:23:13 fetching corpus: 32829, signal 797712/877497 (executing program)
2021/11/29 01:23:13 fetching corpus: 32879, signal 798017/877499 (executing program)
2021/11/29 01:23:13 fetching corpus: 32928, signal 798279/877499 (executing program)
2021/11/29 01:23:13 fetching corpus: 32977, signal 798621/877499 (executing program)
2021/11/29 01:23:14 fetching corpus: 33025, signal 798988/877502 (executing program)
2021/11/29 01:23:14 fetching corpus: 33074, signal 799306/877505 (executing program)
2021/11/29 01:23:14 fetching corpus: 33123, signal 799566/877505 (executing program)
2021/11/29 01:23:14 fetching corpus: 33172, signal 799772/877505 (executing program)
2021/11/29 01:23:14 fetching corpus: 33221, signal 800129/877505 (executing program)
2021/11/29 01:23:14 fetching corpus: 33270, signal 800388/877505 (executing program)
2021/11/29 01:23:14 fetching corpus: 33319, signal 800644/877515 (executing program)
2021/11/29 01:23:15 fetching corpus: 33369, signal 800891/877515 (executing program)
2021/11/29 01:23:15 fetching corpus: 33418, signal 801178/877531 (executing program)
2021/11/29 01:23:15 fetching corpus: 33467, signal 801475/877531 (executing program)
2021/11/29 01:23:15 fetching corpus: 33517, signal 801893/877531 (executing program)
2021/11/29 01:23:15 fetching corpus: 33565, signal 802169/877531 (executing program)
2021/11/29 01:23:15 fetching corpus: 33614, signal 802458/877542 (executing program)
2021/11/29 01:23:15 fetching corpus: 33663, signal 802745/877542 (executing program)
2021/11/29 01:23:15 fetching corpus: 33711, signal 802975/877544 (executing program)
2021/11/29 01:23:16 fetching corpus: 33761, signal 803287/877555 (executing program)
2021/11/29 01:23:16 fetching corpus: 33810, signal 803560/877555 (executing program)
2021/11/29 01:23:16 fetching corpus: 33859, signal 803778/877559 (executing program)
2021/11/29 01:23:16 fetching corpus: 33908, signal 804029/877560 (executing program)
2021/11/29 01:23:16 fetching corpus: 33956, signal 804256/877590 (executing program)
2021/11/29 01:23:16 fetching corpus: 34005, signal 804680/877590 (executing program)
2021/11/29 01:23:16 fetching corpus: 34052, signal 805073/877590 (executing program)
2021/11/29 01:23:17 fetching corpus: 34100, signal 805329/877598 (executing program)
2021/11/29 01:23:17 fetching corpus: 34150, signal 805566/877598 (executing program)
2021/11/29 01:23:17 fetching corpus: 34197, signal 805852/877600 (executing program)
2021/11/29 01:23:17 fetching corpus: 34244, signal 806125/877600 (executing program)
2021/11/29 01:23:17 fetching corpus: 34291, signal 806445/877600 (executing program)
2021/11/29 01:23:17 fetching corpus: 34341, signal 806786/877602 (executing program)
2021/11/29 01:23:17 fetching corpus: 34390, signal 807030/877603 (executing program)
2021/11/29 01:23:18 fetching corpus: 34437, signal 807260/877609 (executing program)
2021/11/29 01:23:18 fetching corpus: 34486, signal 807473/877613 (executing program)
2021/11/29 01:23:18 fetching corpus: 34535, signal 807765/877613 (executing program)
2021/11/29 01:23:18 fetching corpus: 34582, signal 808082/877613 (executing program)
2021/11/29 01:23:18 fetching corpus: 34629, signal 808335/877614 (executing program)
2021/11/29 01:23:18 fetching corpus: 34678, signal 808660/877616 (executing program)
2021/11/29 01:23:18 fetching corpus: 34727, signal 809424/877616 (executing program)
2021/11/29 01:23:19 fetching corpus: 34776, signal 809733/877632 (executing program)
2021/11/29 01:23:19 fetching corpus: 34825, signal 814764/877639 (executing program)
2021/11/29 01:23:19 fetching corpus: 34875, signal 815054/877639 (executing program)
2021/11/29 01:23:19 fetching corpus: 34921, signal 815315/877639 (executing program)
2021/11/29 01:23:19 fetching corpus: 34971, signal 815586/877639 (executing program)
2021/11/29 01:23:19 fetching corpus: 35020, signal 815860/877639 (executing program)
2021/11/29 01:23:19 fetching corpus: 35068, signal 816154/877639 (executing program)
2021/11/29 01:23:20 fetching corpus: 35115, signal 816375/877639 (executing program)
2021/11/29 01:23:20 fetching corpus: 35164, signal 816667/877641 (executing program)
2021/11/29 01:23:20 fetching corpus: 35214, signal 816857/877643 (executing program)
2021/11/29 01:23:20 fetching corpus: 35263, signal 817204/877643 (executing program)
2021/11/29 01:23:20 fetching corpus: 35312, signal 817473/877643 (executing program)
2021/11/29 01:23:20 fetching corpus: 35362, signal 817853/877643 (executing program)
2021/11/29 01:23:20 fetching corpus: 35412, signal 818075/877643 (executing program)
2021/11/29 01:23:20 fetching corpus: 35460, signal 818388/877643 (executing program)
2021/11/29 01:23:21 fetching corpus: 35509, signal 818598/877651 (executing program)
2021/11/29 01:23:21 fetching corpus: 35558, signal 818842/877651 (executing program)
2021/11/29 01:23:21 fetching corpus: 35605, signal 819048/877661 (executing program)
2021/11/29 01:23:21 fetching corpus: 35654, signal 819347/877661 (executing program)
2021/11/29 01:23:21 fetching corpus: 35703, signal 819631/877663 (executing program)
2021/11/29 01:23:21 fetching corpus: 35750, signal 819874/877663 (executing program)
2021/11/29 01:23:22 fetching corpus: 35798, signal 820150/877663 (executing program)
2021/11/29 01:23:22 fetching corpus: 35847, signal 820347/877676 (executing program)
2021/11/29 01:23:22 fetching corpus: 35896, signal 820602/877676 (executing program)
2021/11/29 01:23:22 fetching corpus: 35946, signal 820898/877684 (executing program)
2021/11/29 01:23:22 fetching corpus: 35995, signal 821236/877684 (executing program)
2021/11/29 01:23:22 fetching corpus: 36043, signal 821491/877687 (executing program)
2021/11/29 01:23:22 fetching corpus: 36093, signal 821726/877687 (executing program)
2021/11/29 01:23:22 fetching corpus: 36143, signal 821953/877687 (executing program)
2021/11/29 01:23:23 fetching corpus: 36191, signal 822239/877692 (executing program)
2021/11/29 01:23:23 fetching corpus: 36240, signal 822473/877692 (executing program)
2021/11/29 01:23:23 fetching corpus: 36290, signal 822940/877702 (executing program)
2021/11/29 01:23:23 fetching corpus: 36340, signal 823210/877710 (executing program)
2021/11/29 01:23:23 fetching corpus: 36389, signal 823897/877710 (executing program)
2021/11/29 01:23:23 fetching corpus: 36437, signal 824156/877710 (executing program)
2021/11/29 01:23:23 fetching corpus: 36487, signal 824485/877710 (executing program)
2021/11/29 01:23:23 fetching corpus: 36532, signal 824756/877710 (executing program)
2021/11/29 01:23:24 fetching corpus: 36582, signal 824982/877710 (executing program)
2021/11/29 01:23:24 fetching corpus: 36632, signal 825298/877710 (executing program)
2021/11/29 01:23:24 fetching corpus: 36682, signal 825536/877710 (executing program)
2021/11/29 01:23:24 fetching corpus: 36731, signal 825786/877710 (executing program)
2021/11/29 01:23:24 fetching corpus: 36781, signal 826072/877711 (executing program)
2021/11/29 01:23:24 fetching corpus: 36831, signal 826291/877711 (executing program)
2021/11/29 01:23:24 fetching corpus: 36880, signal 826468/877711 (executing program)
2021/11/29 01:23:24 fetching corpus: 36928, signal 826713/877711 (executing program)
2021/11/29 01:23:25 fetching corpus: 36978, signal 826987/877711 (executing program)
2021/11/29 01:23:25 fetching corpus: 37028, signal 827214/877713 (executing program)
2021/11/29 01:23:25 fetching corpus: 37078, signal 827439/877713 (executing program)
2021/11/29 01:23:25 fetching corpus: 37124, signal 827641/877714 (executing program)
2021/11/29 01:23:25 fetching corpus: 37174, signal 827891/877714 (executing program)
2021/11/29 01:23:25 fetching corpus: 37222, signal 828083/877714 (executing program)
2021/11/29 01:23:25 fetching corpus: 37271, signal 828354/877714 (executing program)
2021/11/29 01:23:25 fetching corpus: 37321, signal 828558/877716 (executing program)
2021/11/29 01:23:26 fetching corpus: 37370, signal 828869/877725 (executing program)
2021/11/29 01:23:26 fetching corpus: 37418, signal 829152/877728 (executing program)
2021/11/29 01:23:26 fetching corpus: 37466, signal 829354/877729 (executing program)
2021/11/29 01:23:26 fetching corpus: 37514, signal 829553/877730 (executing program)
2021/11/29 01:23:26 fetching corpus: 37564, signal 829827/877730 (executing program)
2021/11/29 01:23:26 fetching corpus: 37613, signal 830039/877730 (executing program)
2021/11/29 01:23:26 fetching corpus: 37663, signal 830333/877742 (executing program)
2021/11/29 01:23:27 fetching corpus: 37713, signal 830697/877742 (executing program)
2021/11/29 01:23:27 fetching corpus: 37763, signal 830920/877760 (executing program)
2021/11/29 01:23:27 fetching corpus: 37812, signal 831382/877760 (executing program)
2021/11/29 01:23:27 fetching corpus: 37860, signal 831631/877761 (executing program)
2021/11/29 01:23:27 fetching corpus: 37908, signal 831887/877763 (executing program)
2021/11/29 01:23:27 fetching corpus: 37957, signal 832095/877763 (executing program)
2021/11/29 01:23:27 fetching corpus: 38006, signal 832315/877763 (executing program)
2021/11/29 01:23:27 fetching corpus: 38055, signal 832524/877766 (executing program)
2021/11/29 01:23:28 fetching corpus: 38104, signal 832856/877766 (executing program)
2021/11/29 01:23:28 fetching corpus: 38153, signal 833024/877773 (executing program)
2021/11/29 01:23:28 fetching corpus: 38203, signal 833229/877773 (executing program)
2021/11/29 01:23:28 fetching corpus: 38252, signal 833498/877773 (executing program)
2021/11/29 01:23:28 fetching corpus: 38302, signal 833962/877773 (executing program)
2021/11/29 01:23:28 fetching corpus: 38351, signal 834209/877773 (executing program)
2021/11/29 01:23:28 fetching corpus: 38400, signal 834469/877775 (executing program)
2021/11/29 01:23:29 fetching corpus: 38450, signal 835004/877775 (executing program)
2021/11/29 01:23:29 fetching corpus: 38499, signal 835279/877782 (executing program)
2021/11/29 01:23:29 fetching corpus: 38548, signal 835455/877782 (executing program)
2021/11/29 01:23:29 fetching corpus: 38598, signal 835736/877783 (executing program)
2021/11/29 01:23:29 fetching corpus: 38644, signal 835979/877789 (executing program)
2021/11/29 01:23:29 fetching corpus: 38694, signal 836138/877796 (executing program)
2021/11/29 01:23:29 fetching corpus: 38744, signal 836409/877796 (executing program)
2021/11/29 01:23:29 fetching corpus: 38792, signal 836621/877796 (executing program)
2021/11/29 01:23:30 fetching corpus: 38841, signal 836887/877805 (executing program)
2021/11/29 01:23:30 fetching corpus: 38891, signal 837190/877805 (executing program)
2021/11/29 01:23:30 fetching corpus: 38941, signal 837376/877805 (executing program)
2021/11/29 01:23:30 fetching corpus: 38989, signal 837651/877805 (executing program)
2021/11/29 01:23:30 fetching corpus: 39037, signal 837956/877806 (executing program)
2021/11/29 01:23:30 fetching corpus: 39085, signal 838222/877806 (executing program)
2021/11/29 01:23:31 fetching corpus: 39133, signal 838442/877806 (executing program)
2021/11/29 01:23:31 fetching corpus: 39183, signal 838664/877806 (executing program)
2021/11/29 01:23:31 fetching corpus: 39232, signal 838922/877828 (executing program)
2021/11/29 01:23:31 fetching corpus: 39281, signal 839130/877828 (executing program)
2021/11/29 01:23:31 fetching corpus: 39330, signal 839416/877828 (executing program)
2021/11/29 01:23:31 fetching corpus: 39378, signal 839656/877836 (executing program)
2021/11/29 01:23:31 fetching corpus: 39428, signal 839945/877836 (executing program)
2021/11/29 01:23:31 fetching corpus: 39476, signal 840221/877837 (executing program)
2021/11/29 01:23:32 fetching corpus: 39526, signal 840466/877847 (executing program)
2021/11/29 01:23:32 fetching corpus: 39575, signal 840702/877875 (executing program)
2021/11/29 01:23:32 fetching corpus: 39623, signal 840977/877875 (executing program)
2021/11/29 01:23:32 fetching corpus: 39671, signal 841185/877875 (executing program)
2021/11/29 01:23:32 fetching corpus: 39721, signal 841379/877875 (executing program)
2021/11/29 01:23:32 fetching corpus: 39770, signal 841683/877881 (executing program)
2021/11/29 01:23:32 fetching corpus: 39818, signal 841900/877881 (executing program)
2021/11/29 01:23:33 fetching corpus: 39866, signal 842071/877887 (executing program)
2021/11/29 01:23:33 fetching corpus: 39916, signal 842356/877895 (executing program)
2021/11/29 01:23:33 fetching corpus: 39964, signal 842565/877895 (executing program)
2021/11/29 01:23:33 fetching corpus: 40012, signal 842789/877895 (executing program)
2021/11/29 01:23:33 fetching corpus: 40055, signal 843027/877923 (executing program)
2021/11/29 01:23:33 fetching corpus: 40102, signal 843233/877923 (executing program)
2021/11/29 01:23:34 fetching corpus: 40149, signal 843508/877935 (executing program)
2021/11/29 01:23:34 fetching corpus: 40199, signal 843737/877945 (executing program)
2021/11/29 01:23:34 fetching corpus: 40246, signal 843919/877945 (executing program)
2021/11/29 01:23:34 fetching corpus: 40295, signal 844195/877945 (executing program)
2021/11/29 01:23:34 fetching corpus: 40344, signal 844445/877945 (executing program)
2021/11/29 01:23:34 fetching corpus: 40390, signal 844686/877960 (executing program)
2021/11/29 01:23:34 fetching corpus: 40439, signal 844880/877960 (executing program)
2021/11/29 01:23:34 fetching corpus: 40488, signal 845099/877960 (executing program)
2021/11/29 01:23:34 fetching corpus: 40536, signal 845291/877960 (executing program)
2021/11/29 01:23:35 fetching corpus: 40586, signal 845510/877966 (executing program)
2021/11/29 01:23:35 fetching corpus: 40634, signal 845724/877967 (executing program)
2021/11/29 01:23:35 fetching corpus: 40684, signal 845944/877967 (executing program)
2021/11/29 01:23:35 fetching corpus: 40734, signal 846179/877967 (executing program)
2021/11/29 01:23:35 fetching corpus: 40784, signal 846478/877967 (executing program)
2021/11/29 01:23:35 fetching corpus: 40833, signal 846786/877972 (executing program)
2021/11/29 01:23:35 fetching corpus: 40883, signal 847019/877972 (executing program)
2021/11/29 01:23:35 fetching corpus: 40931, signal 847201/877972 (executing program)
2021/11/29 01:23:36 fetching corpus: 40981, signal 847423/877975 (executing program)
2021/11/29 01:23:36 fetching corpus: 41029, signal 847642/877975 (executing program)
2021/11/29 01:23:36 fetching corpus: 41078, signal 847906/877975 (executing program)
2021/11/29 01:23:36 fetching corpus: 41126, signal 848089/877975 (executing program)
2021/11/29 01:23:36 fetching corpus: 41176, signal 848306/877975 (executing program)
2021/11/29 01:23:36 fetching corpus: 41224, signal 848499/877975 (executing program)
2021/11/29 01:23:36 fetching corpus: 41272, signal 848733/877975 (executing program)
2021/11/29 01:23:37 fetching corpus: 41322, signal 849008/877975 (executing program)
2021/11/29 01:23:37 fetching corpus: 41371, signal 849261/877976 (executing program)
2021/11/29 01:23:37 fetching corpus: 41420, signal 849488/877976 (executing program)
2021/11/29 01:23:37 fetching corpus: 41469, signal 849697/877976 (executing program)
2021/11/29 01:23:37 fetching corpus: 41518, signal 849929/877976 (executing program)
2021/11/29 01:23:38 fetching corpus: 41566, signal 850180/878009 (executing program)
2021/11/29 01:23:38 fetching corpus: 41616, signal 850509/878029 (executing program)
2021/11/29 01:23:38 fetching corpus: 41662, signal 850777/878030 (executing program)
2021/11/29 01:23:38 fetching corpus: 41711, signal 850977/878031 (executing program)
2021/11/29 01:23:38 fetching corpus: 41761, signal 851234/878031 (executing program)
2021/11/29 01:23:38 fetching corpus: 41810, signal 851535/878035 (executing program)
2021/11/29 01:23:38 fetching corpus: 41859, signal 851734/878035 (executing program)
2021/11/29 01:23:39 fetching corpus: 41907, signal 851984/878041 (executing program)
2021/11/29 01:23:39 fetching corpus: 41957, signal 852239/878067 (executing program)
2021/11/29 01:23:39 fetching corpus: 42004, signal 852501/878067 (executing program)
2021/11/29 01:23:39 fetching corpus: 42052, signal 852665/878068 (executing program)
2021/11/29 01:23:39 fetching corpus: 42102, signal 852938/878073 (executing program)
2021/11/29 01:23:39 fetching corpus: 42150, signal 853102/878076 (executing program)
2021/11/29 01:23:40 fetching corpus: 42197, signal 853269/878076 (executing program)
2021/11/29 01:23:40 fetching corpus: 42244, signal 853462/878094 (executing program)
2021/11/29 01:23:40 fetching corpus: 42293, signal 853705/878098 (executing program)
2021/11/29 01:23:40 fetching corpus: 42341, signal 853955/878098 (executing program)
2021/11/29 01:23:40 fetching corpus: 42387, signal 854187/878098 (executing program)
2021/11/29 01:23:40 fetching corpus: 42435, signal 854402/878098 (executing program)
2021/11/29 01:23:40 fetching corpus: 42484, signal 854610/878103 (executing program)
2021/11/29 01:23:40 fetching corpus: 42532, signal 854914/878105 (executing program)
2021/11/29 01:23:41 fetching corpus: 42579, signal 855088/878107 (executing program)
2021/11/29 01:23:41 fetching corpus: 42627, signal 855269/878107 (executing program)
2021/11/29 01:23:41 fetching corpus: 42676, signal 855461/878107 (executing program)
2021/11/29 01:23:41 fetching corpus: 42725, signal 855674/878107 (executing program)
2021/11/29 01:23:41 fetching corpus: 42774, signal 855848/878107 (executing program)
2021/11/29 01:23:41 fetching corpus: 42823, signal 856113/878107 (executing program)
2021/11/29 01:23:41 fetching corpus: 42871, signal 856412/878120 (executing program)
2021/11/29 01:23:42 fetching corpus: 42919, signal 856667/878121 (executing program)
2021/11/29 01:23:42 fetching corpus: 42966, signal 856854/878162 (executing program)
2021/11/29 01:23:42 fetching corpus: 43015, signal 857057/878162 (executing program)
2021/11/29 01:23:42 fetching corpus: 43065, signal 857287/878162 (executing program)
2021/11/29 01:23:42 fetching corpus: 43114, signal 857461/878162 (executing program)
2021/11/29 01:23:42 fetching corpus: 43160, signal 857728/878165 (executing program)
2021/11/29 01:23:42 fetching corpus: 43208, signal 857923/878169 (executing program)
2021/11/29 01:23:43 fetching corpus: 43258, signal 858138/878169 (executing program)
2021/11/29 01:23:43 fetching corpus: 43305, signal 858357/878178 (executing program)
2021/11/29 01:23:43 fetching corpus: 43351, signal 858695/878187 (executing program)
2021/11/29 01:23:43 fetching corpus: 43400, signal 858888/878193 (executing program)
2021/11/29 01:23:43 fetching corpus: 43448, signal 859123/878193 (executing program)
2021/11/29 01:23:43 fetching corpus: 43493, signal 859361/878196 (executing program)
2021/11/29 01:23:43 fetching corpus: 43542, signal 859603/878196 (executing program)
2021/11/29 01:23:44 fetching corpus: 43590, signal 859833/878198 (executing program)
2021/11/29 01:23:44 fetching corpus: 43639, signal 860048/878199 (executing program)
2021/11/29 01:23:44 fetching corpus: 43689, signal 860260/878200 (executing program)
2021/11/29 01:23:44 fetching corpus: 43739, signal 860483/878205 (executing program)
2021/11/29 01:23:44 fetching corpus: 43787, signal 860693/878205 (executing program)
2021/11/29 01:23:44 fetching corpus: 43834, signal 860913/878205 (executing program)
2021/11/29 01:23:44 fetching corpus: 43883, signal 861144/878205 (executing program)
2021/11/29 01:23:45 fetching corpus: 43930, signal 861442/878208 (executing program)
2021/11/29 01:23:45 fetching corpus: 43980, signal 861650/878217 (executing program)
2021/11/29 01:23:45 fetching corpus: 44029, signal 861887/878217 (executing program)
2021/11/29 01:23:45 fetching corpus: 44078, signal 862117/878217 (executing program)
2021/11/29 01:23:45 fetching corpus: 44127, signal 862354/878217 (executing program)
2021/11/29 01:23:45 fetching corpus: 44177, signal 862637/878224 (executing program)
2021/11/29 01:23:45 fetching corpus: 44224, signal 862852/878232 (executing program)
2021/11/29 01:23:45 fetching corpus: 44273, signal 863079/878236 (executing program)
2021/11/29 01:23:46 fetching corpus: 44320, signal 863370/878242 (executing program)
2021/11/29 01:23:46 fetching corpus: 44366, signal 863531/878242 (executing program)
2021/11/29 01:23:46 fetching corpus: 44416, signal 863769/878256 (executing program)
2021/11/29 01:23:46 fetching corpus: 44464, signal 864076/878257 (executing program)
2021/11/29 01:23:46 fetching corpus: 44514, signal 864372/878257 (executing program)
2021/11/29 01:23:46 fetching corpus: 44563, signal 864555/878257 (executing program)
2021/11/29 01:23:47 fetching corpus: 44612, signal 864726/878264 (executing program)
2021/11/29 01:23:47 fetching corpus: 44659, signal 864889/878269 (executing program)
2021/11/29 01:23:47 fetching corpus: 44706, signal 865106/878269 (executing program)
2021/11/29 01:23:47 fetching corpus: 44756, signal 865298/878269 (executing program)
2021/11/29 01:23:47 fetching corpus: 44805, signal 865545/878269 (executing program)
2021/11/29 01:23:47 fetching corpus: 44854, signal 865886/878278 (executing program)
2021/11/29 01:23:47 fetching corpus: 44902, signal 866097/878278 (executing program)
2021/11/29 01:23:48 fetching corpus: 44952, signal 866337/878278 (executing program)
2021/11/29 01:23:48 fetching corpus: 45002, signal 866557/878278 (executing program)
2021/11/29 01:23:48 fetching corpus: 45051, signal 866732/878291 (executing program)
2021/11/29 01:23:48 fetching corpus: 45097, signal 866959/878291 (executing program)
2021/11/29 01:23:48 fetching corpus: 45146, signal 867154/878291 (executing program)
2021/11/29 01:23:48 fetching corpus: 45194, signal 867375/878292 (executing program)
2021/11/29 01:23:48 fetching corpus: 45242, signal 867569/878298 (executing program)
2021/11/29 01:23:48 fetching corpus: 45290, signal 868048/878310 (executing program)
2021/11/29 01:23:49 fetching corpus: 45339, signal 868250/878314 (executing program)
2021/11/29 01:23:49 fetching corpus: 45387, signal 868466/878318 (executing program)
2021/11/29 01:23:49 fetching corpus: 45436, signal 868622/878318 (executing program)
2021/11/29 01:23:49 fetching corpus: 45482, signal 868805/878318 (executing program)
2021/11/29 01:23:49 fetching corpus: 45532, signal 868976/878318 (executing program)
2021/11/29 01:23:49 fetching corpus: 45582, signal 869252/878318 (executing program)
2021/11/29 01:23:49 fetching corpus: 45631, signal 869481/878323 (executing program)
2021/11/29 01:23:49 fetching corpus: 45680, signal 869724/878323 (executing program)
2021/11/29 01:23:50 fetching corpus: 45729, signal 869913/878323 (executing program)
2021/11/29 01:23:50 fetching corpus: 45779, signal 870202/878329 (executing program)
2021/11/29 01:23:50 fetching corpus: 45828, signal 870399/878329 (executing program)
2021/11/29 01:23:50 fetching corpus: 45876, signal 870554/878340 (executing program)
2021/11/29 01:23:50 fetching corpus: 45926, signal 870719/878344 (executing program)
2021/11/29 01:23:50 fetching corpus: 45975, signal 870914/878347 (executing program)
2021/11/29 01:23:50 fetching corpus: 46024, signal 871122/878347 (executing program)
2021/11/29 01:23:50 fetching corpus: 46031, signal 871141/878347 (executing program)
2021/11/29 01:23:50 fetching corpus: 46031, signal 871141/878347 (executing program)
2021/11/29 01:23:52 starting 6 fuzzer processes
01:23:52 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000e00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fchmod(r0, 0x0)

01:23:52 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r0, 0x4b31, &(0x7f0000000200))

01:23:53 executing program 2:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0)
r1 = dup(r0)
ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f0000000000))

01:23:53 executing program 3:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000004000000007fffffff850000000e000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0xba)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r2 = dup(r1)
shutdown(r2, 0x0)

01:23:53 executing program 4:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x1418, 0x1}, 0x10}}, 0x0)

01:23:53 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0)
r1 = dup(r0)
ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x810c5701, 0x0)

[  187.614456][ T6529] chnl_net:caif_netlink_parms(): no params data found
[  187.673457][ T6529] bridge0: port 1(bridge_slave_0) entered blocking state
[  187.680984][ T6529] bridge0: port 1(bridge_slave_0) entered disabled state
[  187.689337][ T6529] device bridge_slave_0 entered promiscuous mode
[  187.699628][ T6529] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.706683][ T6529] bridge0: port 2(bridge_slave_1) entered disabled state
[  187.714766][ T6529] device bridge_slave_1 entered promiscuous mode
[  187.739826][ T6529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  187.750752][ T6529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  187.792160][ T6529] team0: Port device team_slave_0 added
[  187.825022][ T6529] team0: Port device team_slave_1 added
[  187.848031][ T6529] batman_adv: batadv0: Adding interface: batadv_slave_0
[  187.854990][ T6529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  187.881627][ T6529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  187.896520][ T6529] batman_adv: batadv0: Adding interface: batadv_slave_1
[  187.904104][ T6529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  187.930407][ T6529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  188.028880][ T6529] device hsr_slave_0 entered promiscuous mode
[  188.041047][ T6529] device hsr_slave_1 entered promiscuous mode
[  188.383947][ T6534] chnl_net:caif_netlink_parms(): no params data found
[  188.437208][ T6533] chnl_net:caif_netlink_parms(): no params data found
[  188.635924][ T6536] chnl_net:caif_netlink_parms(): no params data found
[  188.693879][ T6533] bridge0: port 1(bridge_slave_0) entered blocking state
[  188.702494][ T6533] bridge0: port 1(bridge_slave_0) entered disabled state
[  188.710550][ T6533] device bridge_slave_0 entered promiscuous mode
[  188.731806][ T6534] bridge0: port 1(bridge_slave_0) entered blocking state
[  188.741937][ T6534] bridge0: port 1(bridge_slave_0) entered disabled state
[  188.752147][ T6534] device bridge_slave_0 entered promiscuous mode
[  188.761445][ T6534] bridge0: port 2(bridge_slave_1) entered blocking state
[  188.768901][ T6534] bridge0: port 2(bridge_slave_1) entered disabled state
[  188.776495][ T6534] device bridge_slave_1 entered promiscuous mode
[  188.795263][ T6533] bridge0: port 2(bridge_slave_1) entered blocking state
[  188.806266][ T6533] bridge0: port 2(bridge_slave_1) entered disabled state
[  188.814808][ T6533] device bridge_slave_1 entered promiscuous mode
[  188.837660][ T6529] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  188.848023][ T6529] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  188.903716][ T6529] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  188.914496][ T6534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  188.930314][ T6533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  188.949518][ T6529] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  188.963358][ T6534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  188.982342][ T6533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  189.014744][ T6538] chnl_net:caif_netlink_parms(): no params data found
[  189.059730][ T6533] team0: Port device team_slave_0 added
[  189.081155][ T6534] team0: Port device team_slave_0 added
[  189.099830][ T6533] team0: Port device team_slave_1 added
[  189.117711][ T6536] bridge0: port 1(bridge_slave_0) entered blocking state
[  189.124848][ T6536] bridge0: port 1(bridge_slave_0) entered disabled state
[  189.133452][ T6536] device bridge_slave_0 entered promiscuous mode
[  189.146430][ T6534] team0: Port device team_slave_1 added
[  189.172444][ T6536] bridge0: port 2(bridge_slave_1) entered blocking state
[  189.185101][ T6536] bridge0: port 2(bridge_slave_1) entered disabled state
[  189.194691][ T6536] device bridge_slave_1 entered promiscuous mode
[  189.226571][ T6533] batman_adv: batadv0: Adding interface: batadv_slave_0
[  189.233717][ T6533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  189.260855][ T6533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  189.291290][ T6534] batman_adv: batadv0: Adding interface: batadv_slave_0
[  189.298746][ T6534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  189.326689][ T6534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  189.342716][ T6534] batman_adv: batadv0: Adding interface: batadv_slave_1
[  189.349881][ T6534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  189.376086][ T6534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  189.388030][ T6533] batman_adv: batadv0: Adding interface: batadv_slave_1
[  189.395045][ T6533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  189.422230][ T6533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  189.447509][    T7] Bluetooth: hci0: command 0x0409 tx timeout
[  189.472257][ T6538] bridge0: port 1(bridge_slave_0) entered blocking state
[  189.479915][ T6538] bridge0: port 1(bridge_slave_0) entered disabled state
[  189.488292][ T6538] device bridge_slave_0 entered promiscuous mode
[  189.498071][ T6538] bridge0: port 2(bridge_slave_1) entered blocking state
[  189.505582][ T6538] bridge0: port 2(bridge_slave_1) entered disabled state
[  189.515425][ T6538] device bridge_slave_1 entered promiscuous mode
[  189.524357][ T6536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  189.591411][ T6536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  189.602955][ T6538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  189.619301][ T6538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  189.639231][ T6533] device hsr_slave_0 entered promiscuous mode
[  189.646548][ T6533] device hsr_slave_1 entered promiscuous mode
[  189.654666][ T6533] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  189.663204][ T6533] Cannot create hsr debugfs directory
[  189.704083][ T6534] device hsr_slave_0 entered promiscuous mode
[  189.711644][ T6534] device hsr_slave_1 entered promiscuous mode
[  189.720597][ T6534] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  189.728924][ T6534] Cannot create hsr debugfs directory
[  189.744470][ T6536] team0: Port device team_slave_0 added
[  189.756488][ T6538] team0: Port device team_slave_0 added
[  189.781320][ T6536] team0: Port device team_slave_1 added
[  189.804669][ T6538] team0: Port device team_slave_1 added
[  189.856936][    T7] Bluetooth: hci2: command 0x0409 tx timeout
[  189.871739][ T6536] batman_adv: batadv0: Adding interface: batadv_slave_0
[  189.884253][ T6536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  189.911554][ T6536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  189.934586][ T6538] batman_adv: batadv0: Adding interface: batadv_slave_0
[  189.942919][ T6538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  189.970558][ T6538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  189.986690][ T6538] batman_adv: batadv0: Adding interface: batadv_slave_1
[  189.994432][ T6538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  190.021168][ T1142] Bluetooth: hci3: command 0x0409 tx timeout
[  190.027655][ T6538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  190.043740][ T6536] batman_adv: batadv0: Adding interface: batadv_slave_1
[  190.050982][ T6536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  190.077539][ T6536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  190.134658][ T6538] device hsr_slave_0 entered promiscuous mode
[  190.142251][ T6538] device hsr_slave_1 entered promiscuous mode
[  190.148872][ T6538] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  190.156641][ T6538] Cannot create hsr debugfs directory
[  190.167004][  T918] Bluetooth: hci4: command 0x0409 tx timeout
[  190.181656][ T6529] 8021q: adding VLAN 0 to HW filter on device bond0
[  190.234852][ T6536] device hsr_slave_0 entered promiscuous mode
[  190.243637][ T6536] device hsr_slave_1 entered promiscuous mode
[  190.251566][ T6536] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  190.257069][ T1142] Bluetooth: hci5: command 0x0409 tx timeout
[  190.259774][ T6536] Cannot create hsr debugfs directory
[  190.290040][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  190.299030][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  190.334607][ T6529] 8021q: adding VLAN 0 to HW filter on device team0
[  190.411244][  T918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  190.422940][  T918] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  190.432350][  T918] bridge0: port 1(bridge_slave_0) entered blocking state
[  190.439752][  T918] bridge0: port 1(bridge_slave_0) entered forwarding state
[  190.448313][  T918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  190.456741][  T918] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  190.465573][  T918] bridge0: port 2(bridge_slave_1) entered blocking state
[  190.472674][  T918] bridge0: port 2(bridge_slave_1) entered forwarding state
[  190.517130][ T7317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  190.525542][ T7317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  190.534347][ T7317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  190.547534][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  190.556212][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  190.571584][ T6533] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  190.631850][ T1142] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  190.642255][ T1142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  190.652110][ T1142] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  190.661036][ T1142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  190.670043][ T1142] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  190.679701][ T1142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  190.689362][ T1142] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  190.698566][ T6533] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  190.707941][ T6533] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  190.726683][ T6529] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  190.754183][ T6533] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  190.793369][ T7317] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  190.805408][ T7317] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  190.815460][ T6534] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  190.842281][ T6529] 8021q: adding VLAN 0 to HW filter on device batadv0
[  190.856370][ T6534] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  190.872763][ T6534] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  190.883575][ T6534] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  190.916070][ T6538] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  190.940428][ T6538] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  190.965548][ T6538] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  191.000064][ T6538] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  191.036925][  T918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  191.045608][  T918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  191.057376][  T918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  191.065566][  T918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  191.090256][ T6529] device veth0_vlan entered promiscuous mode
[  191.101858][ T6536] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  191.111297][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  191.119266][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  191.134872][ T6533] 8021q: adding VLAN 0 to HW filter on device bond0
[  191.147819][ T6536] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  191.159362][ T6536] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  191.170364][ T6536] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  191.201401][ T6534] 8021q: adding VLAN 0 to HW filter on device bond0
[  191.210145][ T6529] device veth1_vlan entered promiscuous mode
[  191.224646][ T6533] 8021q: adding VLAN 0 to HW filter on device team0
[  191.242357][ T8092] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  191.251728][ T8092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  191.260631][ T8092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  191.274777][ T6534] 8021q: adding VLAN 0 to HW filter on device team0
[  191.282493][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  191.290835][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  191.314143][ T8137] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  191.323062][ T8137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  191.332700][ T8137] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  191.341555][ T8137] bridge0: port 1(bridge_slave_0) entered blocking state
[  191.348631][ T8137] bridge0: port 1(bridge_slave_0) entered forwarding state
[  191.356343][ T8137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  191.364941][ T8137] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  191.373823][ T8137] bridge0: port 2(bridge_slave_1) entered blocking state
[  191.381117][ T8137] bridge0: port 2(bridge_slave_1) entered forwarding state
[  191.389154][ T8137] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  191.407143][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  191.428242][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  191.442328][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  191.451069][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  191.458415][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  191.466939][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  191.476399][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  191.485684][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  191.496722][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  191.506355][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  191.515129][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  191.523745][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  191.536460][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  191.537197][ T8183] Bluetooth: hci0: command 0x041b tx timeout
[  191.544541][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  191.567155][ T8092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  191.577473][ T8092] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  191.585778][ T8092] bridge0: port 2(bridge_slave_1) entered blocking state
[  191.593076][ T8092] bridge0: port 2(bridge_slave_1) entered forwarding state
[  191.604407][ T6529] device veth0_macvtap entered promiscuous mode
[  191.617794][ T6529] device veth1_macvtap entered promiscuous mode
[  191.626690][ T6533] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  191.639818][ T6533] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  191.656611][  T918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  191.665990][  T918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  191.675660][  T918] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  191.683564][  T918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  191.692329][  T918] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  191.701729][  T918] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  191.729810][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  191.738533][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  191.750947][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  191.759076][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  191.774420][ T6529] batman_adv: batadv0: Interface activated: batadv_slave_0
[  191.796474][ T6538] 8021q: adding VLAN 0 to HW filter on device bond0
[  191.808665][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  191.819675][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  191.828847][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  191.838532][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  191.849910][ T6533] 8021q: adding VLAN 0 to HW filter on device batadv0
[  191.860934][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  191.878145][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  191.891898][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  191.900630][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  191.914589][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  191.931001][ T6529] batman_adv: batadv0: Interface activated: batadv_slave_1
[  191.936993][ T8183] Bluetooth: hci2: command 0x041b tx timeout
[  191.941132][ T6529] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  191.954860][ T6529] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  191.964465][ T6529] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  191.973615][ T6529] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  191.988871][ T6538] 8021q: adding VLAN 0 to HW filter on device team0
[  192.003328][ T6536] 8021q: adding VLAN 0 to HW filter on device bond0
[  192.013548][  T918] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  192.022908][  T918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  192.031884][  T918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  192.040684][  T918] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  192.049452][  T918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  192.058030][  T918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  192.067694][ T6534] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  192.087628][ T8183] Bluetooth: hci3: command 0x041b tx timeout
[  192.109714][ T8183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  192.118479][ T8183] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  192.127452][ T8183] bridge0: port 1(bridge_slave_0) entered blocking state
[  192.134510][ T8183] bridge0: port 1(bridge_slave_0) entered forwarding state
[  192.142720][ T8183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  192.151505][ T8183] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  192.160055][ T8183] bridge0: port 2(bridge_slave_1) entered blocking state
[  192.167159][ T8183] bridge0: port 2(bridge_slave_1) entered forwarding state
[  192.175599][ T8183] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  192.194187][ T6536] 8021q: adding VLAN 0 to HW filter on device team0
[  192.211947][  T918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  192.221729][  T918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  192.237461][  T918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  192.245259][  T918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  192.254721][  T918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  192.264082][  T918] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  192.274008][  T918] bridge0: port 1(bridge_slave_0) entered blocking state
[  192.281601][  T918] bridge0: port 1(bridge_slave_0) entered forwarding state
[  192.291367][   T26] Bluetooth: hci4: command 0x041b tx timeout
[  192.322529][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  192.331669][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  192.337283][    T7] Bluetooth: hci5: command 0x041b tx timeout
[  192.344181][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  192.356727][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  192.369854][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  192.377158][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  192.386326][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  192.400025][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  192.410614][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  192.421958][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  192.431096][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  192.439030][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  192.450682][ T6533] device veth0_vlan entered promiscuous mode
[  192.481054][ T6534] 8021q: adding VLAN 0 to HW filter on device batadv0
[  192.494709][  T918] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  192.502871][  T918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  192.513649][  T918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  192.522898][  T918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  192.532200][  T918] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  192.541399][  T918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  192.550796][  T918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  192.559408][  T918] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  192.569517][  T918] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  192.581436][  T918] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  192.588956][  T918] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  192.600424][   T10] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  192.622747][ T6536] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  192.644117][   T10] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  192.657068][ T6536] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  192.695660][ T8092] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  192.704274][ T8092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  192.713878][ T8092] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  192.723198][ T8092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  192.732085][ T8092] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  192.740758][ T8092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  192.750360][ T8092] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  192.759106][ T8092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  192.767705][ T8092] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  192.775762][ T8092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  192.784807][ T8092] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  192.800809][ T6538] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  192.811350][ T6533] device veth1_vlan entered promiscuous mode
[  192.830908][ T8092] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  192.839031][  T977] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  192.843299][ T8092] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  192.856979][  T977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  192.874986][ T6534] device veth0_vlan entered promiscuous mode
[  192.885981][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  192.894738][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  192.903139][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  192.912843][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  192.921580][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  192.929978][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  192.946181][ T6536] 8021q: adding VLAN 0 to HW filter on device batadv0
[  192.974086][ T6538] 8021q: adding VLAN 0 to HW filter on device batadv0
[  192.982955][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  192.993155][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  193.001259][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  193.009040][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  193.037909][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  193.062867][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  193.099213][ T6534] device veth1_vlan entered promiscuous mode
[  193.121904][ T6533] device veth0_macvtap entered promiscuous mode
[  193.151874][ T8137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  193.168349][ T8137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
01:23:59 executing program 0:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_getres(0x0, 0x0)

[  193.206509][ T8137] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  193.231163][ T6533] device veth1_macvtap entered promiscuous mode
[  193.309084][ T8183] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  193.319099][ T8183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  193.338727][ T8183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
01:23:59 executing program 0:
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000100)="69fc8c38fd50c08aa5f320ef92f2ba609508e351d21474a7fca80411e26c6dca4ed948a5f1", 0x25}, {&(0x7f0000000400)="f892598a", 0x4}], 0x2, 0x0)
dup3(r3, r2, 0x0)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10)
connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x3723)
splice(r0, 0x0, r2, 0x0, 0x10003, 0x0)

[  193.361944][ T6533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  193.376496][ T6533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  193.390942][ T6533] batman_adv: batadv0: Interface activated: batadv_slave_0
[  193.400295][ T6534] device veth0_macvtap entered promiscuous mode
[  193.456518][ T8137] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  193.465333][ T1225] ieee802154 phy0 wpan0: encryption failed: -22
[  193.466713][ T8137] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  193.471736][ T1225] ieee802154 phy1 wpan1: encryption failed: -22
[  193.483897][ T8137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
01:24:00 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/497], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x27, 0x304, &(0x7f0000000040)="b90803600000f000009e0ff008001fffffe104004000638877fbac14141ae0002001be3e7d2a182fff", 0x0, 0x104, 0xa000000, 0xa0061000, 0xfeb9, &(0x7f0000000640)="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", &(0x7f0000000100)}, 0x28)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x1)
accept4(0xffffffffffffffff, 0x0, &(0x7f0000004300), 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x0, 0x983a}, 0x1c)
r2 = socket$kcm(0x10, 0x0, 0x4)
sendmsg$kcm(r2, 0x0, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000000), 0x8)

[  193.523230][ T8137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  193.551591][ T8137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  193.567803][ T6533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  193.583672][ T6533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  193.595346][ T6533] batman_adv: batadv0: Interface activated: batadv_slave_1
[  193.611429][    C1] hrtimer: interrupt took 42680 ns
[  193.618873][    T5] Bluetooth: hci0: command 0x040f tx timeout
[  193.625868][ T6534] device veth1_macvtap entered promiscuous mode
[  193.638787][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  193.649555][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  193.662199][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  193.673207][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  193.685304][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  193.705348][ T6533] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  193.715003][ T6533] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  193.732408][ T6533] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  193.746280][ T6533] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  193.774734][ T6534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  193.794074][ T6534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  193.805875][ T6534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  193.823106][ T6534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  193.842176][ T6534] batman_adv: batadv0: Interface activated: batadv_slave_0
[  193.872049][ T8183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  193.882574][ T8183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  193.896275][ T8183] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  193.910963][ T8183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  193.924376][ T6538] device veth0_vlan entered promiscuous mode
[  193.941919][ T6538] device veth1_vlan entered promiscuous mode
01:24:00 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/497], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x27, 0x304, &(0x7f0000000040)="b90803600000f000009e0ff008001fffffe104004000638877fbac14141ae0002001be3e7d2a182fff", 0x0, 0x104, 0xa000000, 0xa0061000, 0xfeb9, &(0x7f0000000640)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0f2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688edd291a3e9d08952adbdf60462bb7f7faebcdfccf17115708b0d73d0f3a469ce7d8374219b3f92c92bcec4958d474bb281c26691949d054b784a5866f081e53eb9cfd7", &(0x7f0000000100)}, 0x28)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x1)
accept4(0xffffffffffffffff, 0x0, &(0x7f0000004300), 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x0, 0x983a}, 0x1c)
r2 = socket$kcm(0x10, 0x0, 0x4)
sendmsg$kcm(r2, 0x0, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000000), 0x8)

[  193.966491][ T6536] device veth0_vlan entered promiscuous mode
[  193.978727][ T6534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  193.996569][ T6534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.010083][ T6534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  194.021081][ T8233] Bluetooth: hci2: command 0x040f tx timeout
[  194.032620][ T6534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.047950][ T6534] batman_adv: batadv0: Interface activated: batadv_slave_1
[  194.055277][ T8183] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  194.064146][ T8183] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  194.076657][ T8183] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  194.087697][ T8183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  194.096010][ T8183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  194.128335][ T8183] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  194.148070][ T8183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  194.172202][ T8233] Bluetooth: hci3: command 0x040f tx timeout
[  194.300075][ T6536] device veth1_vlan entered promiscuous mode
[  194.314318][ T6534] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  194.326875][ T6534] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  194.330814][   T26] Bluetooth: hci4: command 0x040f tx timeout
01:24:00 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8bffffd79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fefdff0000850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465c3a1f59916ffc9bf00000000000000c00cf8df05502407755f2bd58ced0cf819b5c0c00000000000090af27db5b56024df96b4673b4e8d5467e3554508535766c80114604eab9b290a248a1a0c9c6e39f403ff065fd3052aae80677eeba68562eaeaea5fecf298ca20f274233106e2baf69b1c66c01e44d1dd5c50b7420b48a93fe94c756108afcd0b2eb785632e0a85f02a5a0474ae549070000000000000094fba0ed5020e6477cc92141b995197a0b975e947cd6d4a561ced23b0b4a902be6af7ec2d1ba00000000000000000000000000000000008ca7dfee7f4b413568b7a3b4ab3b21753a83f86c1df4d3f50d507b15b15b7a80bded0e4a20522ec2eaf182c45a45b60a0eb68554c97540187ebc2a5f5f29108ddf8654697130ad2850b0318f11e08ccd24b486795901c0d9edae0ed33afd18e4f55ee27ea5e8887f88b023241027eac9c446ace00836d4cf379e53d45ac44ca2532c29fe40f33b5d00b3ca4000"/497], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x27, 0x304, &(0x7f0000000040)="b90803600000f000009e0ff008001fffffe104004000638877fbac14141ae0002001be3e7d2a182fff", 0x0, 0x104, 0xa000000, 0xa0061000, 0xfeb9, &(0x7f0000000640)="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", &(0x7f0000000100)}, 0x28)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x1)
accept4(0xffffffffffffffff, 0x0, &(0x7f0000004300), 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x0, 0x983a}, 0x1c)
r2 = socket$kcm(0x10, 0x0, 0x4)
sendmsg$kcm(r2, 0x0, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000000), 0x8)

[  194.335934][ T6534] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  194.351355][ T6534] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  194.376942][ T8183] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  194.386566][ T8183] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  194.408417][ T8233] Bluetooth: hci5: command 0x040f tx timeout
[  194.424065][ T6538] device veth0_macvtap entered promiscuous mode
[  194.447948][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  194.456369][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  194.469503][ T6538] device veth1_macvtap entered promiscuous mode
[  194.495774][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  194.504672][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
01:24:01 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/497], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x27, 0x304, &(0x7f0000000040)="b90803600000f000009e0ff008001fffffe104004000638877fbac14141ae0002001be3e7d2a182fff", 0x0, 0x104, 0xa000000, 0xa0061000, 0xfeb9, &(0x7f0000000640)="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", &(0x7f0000000100)}, 0x28)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x1)
accept4(0xffffffffffffffff, 0x0, &(0x7f0000004300), 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x0, 0x983a}, 0x1c)
r2 = socket$kcm(0x10, 0x0, 0x4)
sendmsg$kcm(r2, 0x0, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000000), 0x8)

[  194.796244][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  194.811840][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  194.840914][ T6536] device veth0_macvtap entered promiscuous mode
[  194.909510][ T6538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  194.948077][ T6538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.982456][ T6538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  195.007801][ T6538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.033409][ T6538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  195.095917][ T6538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.144853][ T6538] batman_adv: batadv0: Interface activated: batadv_slave_0
[  195.191403][ T6536] device veth1_macvtap entered promiscuous mode
[  195.202121][    T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  195.212360][    T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  195.232219][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
01:24:01 executing program 0:
r0 = syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x20000000000001f4, 0x1, &(0x7f0000000080)=[{&(0x7f00000004c0)="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", 0x1f2}], 0x0, &(0x7f00000001c0)=ANY=[])
openat(r0, &(0x7f0000000480)='./file1\x00', 0x0, 0x0)

[  195.242118][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  195.251875][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  195.277458][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  195.287965][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  195.300220][ T6538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  195.316065][ T8274] loop0: detected capacity change from 0 to 264192
[  195.324525][ T6538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.342396][ T6538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  195.355579][ T6538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.372029][ T6538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  195.380155][ T8274] SQUASHFS error: lzo decompression failed, data probably corrupt
[  195.383459][ T6538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.391242][ T8274] SQUASHFS error: Failed to read block 0x1b6: -5
[  195.408311][ T8274] SQUASHFS error: Unable to read metadata cache entry [1b4]
[  195.419275][ T8274] SQUASHFS error: lzo decompression failed, data probably corrupt
[  195.426546][ T6538] batman_adv: batadv0: Interface activated: batadv_slave_1
[  195.428444][ T8274] SQUASHFS error: Failed to read block 0x60: -5
[  195.441825][ T8274] SQUASHFS error: Unable to read fragment cache entry [60]
[  195.452262][ T8274] SQUASHFS error: Unable to read page, block 60, size 1f
[  195.487230][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  195.489136][ T8274] SQUASHFS error: Unable to read fragment cache entry [60]
[  195.516974][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  195.517086][ T8274] SQUASHFS error: Unable to read page, block 60, size 1f
[  195.533289][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  195.556201][   T25] audit: type=1800 audit(1638149042.052:2): pid=8274 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file1" dev="loop0" ino=5 res=0 errno=0
[  195.568299][ T6538] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  195.597547][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  195.622817][ T6538] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  195.638603][ T6538] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  195.648445][ T6538] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  195.672683][ T6536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  195.685284][ T6536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.696681][ T6536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  195.699544][ T8183] Bluetooth: hci0: command 0x0419 tx timeout
[  195.707410][ T6536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.723065][ T6536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  195.733589][ T6536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.743615][ T6536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  195.754665][ T6536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.766123][ T6536] batman_adv: batadv0: Interface activated: batadv_slave_0
[  195.781707][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  195.790921][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  195.802246][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  195.842586][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  195.849982][ T6536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  195.867043][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  195.869066][ T6536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.890217][ T6536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  195.903521][ T6536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.914761][ T6536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  195.926063][ T6536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.936653][ T6536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  195.947970][ T6536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.959028][ T6536] batman_adv: batadv0: Interface activated: batadv_slave_1
[  195.972951][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  195.977097][   T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  195.989577][   T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  195.992832][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  196.011447][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  196.022308][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  196.061363][ T6536] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  196.080366][ T6536] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  196.090148][ T8137] Bluetooth: hci2: command 0x0419 tx timeout
[  196.099454][ T6536] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  196.108732][ T6536] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  196.208186][    T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  196.240317][    T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  196.263244][ T8137] Bluetooth: hci3: command 0x0419 tx timeout
[  196.285920][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  196.321851][   T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  196.345541][   T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  196.386900][    T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  196.389886][ T8137] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  196.395015][    T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  196.407194][   T26] Bluetooth: hci4: command 0x0419 tx timeout
[  196.412756][ T8137] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  196.439528][   T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  196.453215][   T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  196.485616][ T8137] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  196.486883][   T26] Bluetooth: hci5: command 0x0419 tx timeout
[  201.529691][ T8356] chnl_net:caif_netlink_parms(): no params data found
[  201.583436][ T8356] bridge0: port 1(bridge_slave_0) entered blocking state
[  201.591117][ T8356] bridge0: port 1(bridge_slave_0) entered disabled state
[  201.601366][ T8356] device bridge_slave_0 entered promiscuous mode
[  201.610536][ T8356] bridge0: port 2(bridge_slave_1) entered blocking state
[  201.621360][ T8356] bridge0: port 2(bridge_slave_1) entered disabled state
[  201.630221][ T8356] device bridge_slave_1 entered promiscuous mode
[  201.655395][ T8356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  201.666581][ T8356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  201.693149][ T8356] team0: Port device team_slave_0 added
[  201.701967][ T8356] team0: Port device team_slave_1 added
[  201.728650][ T8356] batman_adv: batadv0: Adding interface: batadv_slave_0
[  201.735692][ T8356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  201.762035][ T8356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  201.774116][ T8356] batman_adv: batadv0: Adding interface: batadv_slave_1
[  201.781708][ T8356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  201.812190][ T8356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  201.846432][ T8356] device hsr_slave_0 entered promiscuous mode
[  201.854855][ T8356] device hsr_slave_1 entered promiscuous mode
[  201.862702][ T8356] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  201.870531][ T8356] Cannot create hsr debugfs directory
[  201.971005][ T8356] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  201.981510][ T8356] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  201.991509][ T8356] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  202.002040][ T8356] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  202.026269][ T8356] bridge0: port 2(bridge_slave_1) entered blocking state
[  202.033447][ T8356] bridge0: port 2(bridge_slave_1) entered forwarding state
[  202.041082][ T8356] bridge0: port 1(bridge_slave_0) entered blocking state
[  202.048263][ T8356] bridge0: port 1(bridge_slave_0) entered forwarding state
[  202.090317][ T8356] 8021q: adding VLAN 0 to HW filter on device bond0
[  202.104112][ T8204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  202.114685][ T8204] bridge0: port 1(bridge_slave_0) entered disabled state
[  202.122760][ T8204] bridge0: port 2(bridge_slave_1) entered disabled state
[  202.131862][ T8204] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  202.145522][ T8356] 8021q: adding VLAN 0 to HW filter on device team0
[  202.158979][ T8204] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  202.167385][ T8204] bridge0: port 1(bridge_slave_0) entered blocking state
[  202.174528][ T8204] bridge0: port 1(bridge_slave_0) entered forwarding state
[  202.183008][ T8204] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  202.191630][ T8204] bridge0: port 2(bridge_slave_1) entered blocking state
[  202.198706][ T8204] bridge0: port 2(bridge_slave_1) entered forwarding state
[  202.218883][ T8204] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  202.227340][ T8204] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  202.235588][ T8204] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  202.248267][ T8184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  202.266951][ T8184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  202.277396][ T8356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  202.296385][ T8356] 8021q: adding VLAN 0 to HW filter on device batadv0
[  202.304658][ T8204] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  202.312696][ T8204] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  202.338629][ T8204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  202.353781][ T8356] device veth0_vlan entered promiscuous mode
[  202.361149][ T8204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  202.370274][ T8204] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  202.378152][ T8204] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  202.391255][ T8356] device veth1_vlan entered promiscuous mode
[  202.412252][ T8232] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  202.421144][ T8232] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  202.429685][ T8232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  202.441348][ T8356] device veth0_macvtap entered promiscuous mode
[  202.452169][ T8356] device veth1_macvtap entered promiscuous mode
[  202.466231][ T8356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  202.477090][ T8356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  202.489189][ T8356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  202.499862][ T8356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  202.510128][ T8356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  202.520927][ T8356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  202.531172][ T8356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  202.542386][ T8356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  202.552540][ T8356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  202.563299][ T8356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  202.575607][ T8356] batman_adv: batadv0: Interface activated: batadv_slave_0
[  202.584923][ T8232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  202.594907][ T8232] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  202.607568][ T8356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  202.618240][ T8356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  202.629043][ T8356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  202.639878][ T8356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  202.649858][ T8356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  202.661911][ T8356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  202.671860][ T8356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  202.683638][ T8356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  202.693875][ T8356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  202.704951][ T8356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  202.716455][ T8356] batman_adv: batadv0: Interface activated: batadv_slave_1
[  202.726633][ T8232] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  202.737943][ T8232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  202.748255][ T8356] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  202.758219][ T8356] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  202.767338][ T8356] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  202.776291][ T8356] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  202.858266][   T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  202.866295][   T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  202.883528][ T8184] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  202.917596][   T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  202.925533][   T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  202.937309][ T8184] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
01:24:09 executing program 1:
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x20000000)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffc, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x0, 0x5, 0x0, 0x8}, 0x0, 0xc, r0, 0x4)
add_key$keyring(&(0x7f0000000340), 0x0, 0x0, 0x0, 0x0)
r2 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004000, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
close(0xffffffffffffffff)
r3 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, &(0x7f0000000300)=@keyring={'key_or_keyring:', r2})
r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x20000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x3, 0x3, &(0x7f0000000000)=@raw=[@ldst={0x3, 0x3, 0x3, 0x7, 0x0, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x2}], &(0x7f0000000100)='syzkaller\x00', 0x9, 0xd6, &(0x7f0000000440)=""/214, 0x40f00, 0xb, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000140), 0x8, 0x10, 0x0, 0x0, 0x0, r4}, 0x78)
ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x20006000)

01:24:09 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48)

01:24:09 executing program 3:
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @random="5b9778c60197", @val={@void}, {@generic={0x4305, "d7d13d3c0752a38d317e9971414105869dbd2d9844985cb4"}}}, 0x0)

01:24:09 executing program 2:
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
ioctl$SIOCAX25ADDUID(r0, 0x89e8, &(0x7f00000000c0)={0x3, @bcast})

01:24:09 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a01060000000000000000000000000400048009000200dd387d00000000000900010073797a30000000000800034000000001"], 0x80}}, 0x0)

01:24:09 executing program 4:
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0xc, 0x1e1441)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47, 0x2}, @rumble})
write$evdev(r0, &(0x7f0000000040), 0x2b8)

01:24:09 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x1d, 0x0, 0x0)

01:24:09 executing program 2:
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
ioctl$SIOCAX25ADDUID(r0, 0x89e8, &(0x7f00000000c0)={0x3, @bcast})

01:24:09 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a01060000000000000000000000000400048009000200dd387d00000000000900010073797a30000000000800034000000001"], 0x80}}, 0x0)

01:24:09 executing program 4:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = socket$inet_sctp(0x2, 0x400000000001, 0x84)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000100)={0x0, 0x1, r1, 0x2})

01:24:09 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xfe}, 0x0)
getpid()
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xd2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000002200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8104}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8400}, 0x8800)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00')
preadv(r1, &(0x7f00000017c0), 0x1d0, 0x6c000000, 0x0)
readv(0xffffffffffffffff, &(0x7f00000012c0)=[{&(0x7f0000001400)=""/4110, 0x100e}], 0x31)
perf_event_open(&(0x7f00000000c0)={0xd1af2611bb6b3044, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3ff, 0x2, @perf_config_ext={0xffffffffffffffe0, 0x5e}, 0x0, 0xfffffffffffffffd, 0xffff, 0x9, 0x8000, 0xc9164e2, 0x7, 0x0, 0x8, 0x0, 0x9}, 0x0, 0x1, 0xffffffffffffffff, 0x3)

[  203.229974][ T8721] ubi0: attaching mtd0
01:24:09 executing program 3:
r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008f80)=[{{0x0, 0x0, &(0x7f0000003040)=[{&(0x7f0000002e80)=""/199, 0xc7}], 0x1}}], 0x1, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000001340)='net/packet\x00')
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={<r2=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={r2, 0x1, r1})
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000240))
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500803103000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000d94b352a0a2f80c06d5709ffc2c654"}, 0x46)
bind$packet(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000280)=ANY=[@ANYRES32=0x0]})
socket(0x200000000000011, 0x4000000000080002, 0x0)
preadv(r1, &(0x7f00000017c0), 0x3da, 0xf0ffff, 0x0)

[  203.290098][ T8721] ubi0: scanning is finished
[  203.295058][ T8721] ubi0: empty MTD device detected
[  203.447225][ T8232] Bluetooth: hci1: command 0x0409 tx timeout
[  203.617340][ T8721] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  203.625036][ T8721] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  203.651754][ T8721] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  203.666461][ T8721] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  203.678503][ T8721] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  203.685576][ T8721] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  203.716964][ T8721] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1561427392
[  203.739001][ T8721] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  203.750511][ T8742] ubi0: background thread "ubi_bgt0d" started, PID 8742
01:24:10 executing program 1:
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x20000000)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffc, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x0, 0x5, 0x0, 0x8}, 0x0, 0xc, r0, 0x4)
add_key$keyring(&(0x7f0000000340), 0x0, 0x0, 0x0, 0x0)
r2 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004000, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
close(0xffffffffffffffff)
r3 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, &(0x7f0000000300)=@keyring={'key_or_keyring:', r2})
r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x20000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x3, 0x3, &(0x7f0000000000)=@raw=[@ldst={0x3, 0x3, 0x3, 0x7, 0x0, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x2}], &(0x7f0000000100)='syzkaller\x00', 0x9, 0xd6, &(0x7f0000000440)=""/214, 0x40f00, 0xb, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000140), 0x8, 0x10, 0x0, 0x0, 0x0, r4}, 0x78)
ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x20006000)

01:24:10 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a01060000000000000000000000000400048009000200dd387d00000000000900010073797a30000000000800034000000001"], 0x80}}, 0x0)

01:24:10 executing program 4:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = socket$inet_sctp(0x2, 0x400000000001, 0x84)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000100)={0x0, 0x1, r1, 0x2})

01:24:10 executing program 2:
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
ioctl$SIOCAX25ADDUID(r0, 0x89e8, &(0x7f00000000c0)={0x3, @bcast})

01:24:10 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}, 0x1, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @bond={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_IP_TARGET={0x4}]}}}]}, 0x38}}, 0x0)
socket(0x11, 0x0, 0x0)

01:24:10 executing program 3:
r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008f80)=[{{0x0, 0x0, &(0x7f0000003040)=[{&(0x7f0000002e80)=""/199, 0xc7}], 0x1}}], 0x1, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000001340)='net/packet\x00')
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={<r2=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={r2, 0x1, r1})
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000240))
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500803103000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000d94b352a0a2f80c06d5709ffc2c654"}, 0x46)
bind$packet(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000280)=ANY=[@ANYRES32=0x0]})
socket(0x200000000000011, 0x4000000000080002, 0x0)
preadv(r1, &(0x7f00000017c0), 0x3da, 0xf0ffff, 0x0)

01:24:10 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a01060000000000000000000000000400048009000200dd387d00000000000900010073797a30000000000800034000000001"], 0x80}}, 0x0)

01:24:10 executing program 2:
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
ioctl$SIOCAX25ADDUID(r0, 0x89e8, &(0x7f00000000c0)={0x3, @bcast})

01:24:10 executing program 3:
r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008f80)=[{{0x0, 0x0, &(0x7f0000003040)=[{&(0x7f0000002e80)=""/199, 0xc7}], 0x1}}], 0x1, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000001340)='net/packet\x00')
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={<r2=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={r2, 0x1, r1})
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000240))
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500803103000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000d94b352a0a2f80c06d5709ffc2c654"}, 0x46)
bind$packet(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000280)=ANY=[@ANYRES32=0x0]})
socket(0x200000000000011, 0x4000000000080002, 0x0)
preadv(r1, &(0x7f00000017c0), 0x3da, 0xf0ffff, 0x0)

[  203.961802][ T8763] ubi0: detaching mtd0
01:24:10 executing program 4:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = socket$inet_sctp(0x2, 0x400000000001, 0x84)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000100)={0x0, 0x1, r1, 0x2})

[  204.083718][ T8763] ubi0: mtd0 is detached
01:24:10 executing program 5:
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x20000000)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffc, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x0, 0x5, 0x0, 0x8}, 0x0, 0xc, r0, 0x4)
add_key$keyring(&(0x7f0000000340), 0x0, 0x0, 0x0, 0x0)
r2 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004000, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
close(0xffffffffffffffff)
r3 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, &(0x7f0000000300)=@keyring={'key_or_keyring:', r2})
r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x20000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x3, 0x3, &(0x7f0000000000)=@raw=[@ldst={0x3, 0x3, 0x3, 0x7, 0x0, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x2}], &(0x7f0000000100)='syzkaller\x00', 0x9, 0xd6, &(0x7f0000000440)=""/214, 0x40f00, 0xb, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000140), 0x8, 0x10, 0x0, 0x0, 0x0, r4}, 0x78)
ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x20006000)

[  204.116424][ T8803] ubi0: attaching mtd0
[  204.122354][ T8803] ubi0: scanning is finished
01:24:10 executing program 4:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = socket$inet_sctp(0x2, 0x400000000001, 0x84)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000100)={0x0, 0x1, r1, 0x2})

[  204.299162][ T8803] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  204.321283][ T8803] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  204.339639][ T8803] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  204.346686][ T8803] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  204.354490][ T8803] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  204.362563][ T8803] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  204.381917][ T8803] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1561427392
[  204.395779][ T8803] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  204.409960][ T8849] ubi0: background thread "ubi_bgt0d" started, PID 8849
[  204.420734][ T8847] ubi0: detaching mtd0
[  204.435488][ T8847] ubi0: mtd0 is detached
01:24:10 executing program 1:
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x20000000)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffc, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x0, 0x5, 0x0, 0x8}, 0x0, 0xc, r0, 0x4)
add_key$keyring(&(0x7f0000000340), 0x0, 0x0, 0x0, 0x0)
r2 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004000, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
close(0xffffffffffffffff)
r3 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, &(0x7f0000000300)=@keyring={'key_or_keyring:', r2})
r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x20000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x3, 0x3, &(0x7f0000000000)=@raw=[@ldst={0x3, 0x3, 0x3, 0x7, 0x0, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x2}], &(0x7f0000000100)='syzkaller\x00', 0x9, 0xd6, &(0x7f0000000440)=""/214, 0x40f00, 0xb, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000140), 0x8, 0x10, 0x0, 0x0, 0x0, r4}, 0x78)
ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x20006000)

01:24:10 executing program 2:
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x20000000)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffc, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x0, 0x5, 0x0, 0x8}, 0x0, 0xc, r0, 0x4)
add_key$keyring(&(0x7f0000000340), 0x0, 0x0, 0x0, 0x0)
r2 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004000, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
close(0xffffffffffffffff)
r3 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, &(0x7f0000000300)=@keyring={'key_or_keyring:', r2})
r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x20000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x3, 0x3, &(0x7f0000000000)=@raw=[@ldst={0x3, 0x3, 0x3, 0x7, 0x0, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x2}], &(0x7f0000000100)='syzkaller\x00', 0x9, 0xd6, &(0x7f0000000440)=""/214, 0x40f00, 0xb, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000140), 0x8, 0x10, 0x0, 0x0, 0x0, r4}, 0x78)
ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x20006000)

01:24:10 executing program 0:
r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008f80)=[{{0x0, 0x0, &(0x7f0000003040)=[{&(0x7f0000002e80)=""/199, 0xc7}], 0x1}}], 0x1, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000001340)='net/packet\x00')
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={<r2=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={r2, 0x1, r1})
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000240))
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500803103000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000d94b352a0a2f80c06d5709ffc2c654"}, 0x46)
bind$packet(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000280)=ANY=[@ANYRES32=0x0]})
socket(0x200000000000011, 0x4000000000080002, 0x0)
preadv(r1, &(0x7f00000017c0), 0x3da, 0xf0ffff, 0x0)

01:24:10 executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000180)=0x3, 0x4)
recvmmsg(r0, &(0x7f0000003000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

01:24:10 executing program 3:
r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008f80)=[{{0x0, 0x0, &(0x7f0000003040)=[{&(0x7f0000002e80)=""/199, 0xc7}], 0x1}}], 0x1, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000001340)='net/packet\x00')
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={<r2=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={r2, 0x1, r1})
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000240))
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500803103000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000d94b352a0a2f80c06d5709ffc2c654"}, 0x46)
bind$packet(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000280)=ANY=[@ANYRES32=0x0]})
socket(0x200000000000011, 0x4000000000080002, 0x0)
preadv(r1, &(0x7f00000017c0), 0x3da, 0xf0ffff, 0x0)

[  204.449213][ T8853] ubi0: attaching mtd0
[  204.454227][ T8853] ubi0: scanning is finished
01:24:11 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = dup(0xffffffffffffffff)
io_uring_enter(0xffffffffffffffff, 0x6700, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x40, 0x0, 0x42, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x7f, 0x2}, 0x38a01, 0x1000, 0x2bc, 0x3, 0x0, 0x4, 0x5, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x4, r0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0)
ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000380)=ANY=[@ANYBLOB="000000002a250000d68a00000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010800000000000000002697"])
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300)={0xffffffffffffffff}, 0x4)

[  204.599388][ T8853] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  204.635280][ T8853] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
01:24:11 executing program 0:
r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008f80)=[{{0x0, 0x0, &(0x7f0000003040)=[{&(0x7f0000002e80)=""/199, 0xc7}], 0x1}}], 0x1, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000001340)='net/packet\x00')
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={<r2=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={r2, 0x1, r1})
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000240))
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500803103000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000d94b352a0a2f80c06d5709ffc2c654"}, 0x46)
bind$packet(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000280)=ANY=[@ANYRES32=0x0]})
socket(0x200000000000011, 0x4000000000080002, 0x0)
preadv(r1, &(0x7f00000017c0), 0x3da, 0xf0ffff, 0x0)

01:24:11 executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000180)=0x3, 0x4)
recvmmsg(r0, &(0x7f0000003000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

[  204.672103][ T8853] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  204.704661][ T8853] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  204.732074][ T8853] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  204.765057][ T8853] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
01:24:11 executing program 0:
r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008f80)=[{{0x0, 0x0, &(0x7f0000003040)=[{&(0x7f0000002e80)=""/199, 0xc7}], 0x1}}], 0x1, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000001340)='net/packet\x00')
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={<r2=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={r2, 0x1, r1})
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000240))
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500803103000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000d94b352a0a2f80c06d5709ffc2c654"}, 0x46)
bind$packet(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000280)=ANY=[@ANYRES32=0x0]})
socket(0x200000000000011, 0x4000000000080002, 0x0)
preadv(r1, &(0x7f00000017c0), 0x3da, 0xf0ffff, 0x0)

[  204.779575][ T8853] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1561427392
[  204.797865][ T8853] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  204.852770][ T8870] ubi0: background thread "ubi_bgt0d" started, PID 8870
[  204.861073][ T8862] ubi0: detaching mtd0
[  204.869431][ T8862] ubi0: mtd0 is detached
[  204.879844][ T8872] ubi0: attaching mtd0
[  204.884759][ T8872] ubi0: scanning is finished
01:24:11 executing program 5:
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x20000000)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffc, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x0, 0x5, 0x0, 0x8}, 0x0, 0xc, r0, 0x4)
add_key$keyring(&(0x7f0000000340), 0x0, 0x0, 0x0, 0x0)
r2 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004000, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
close(0xffffffffffffffff)
r3 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, &(0x7f0000000300)=@keyring={'key_or_keyring:', r2})
r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x20000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x3, 0x3, &(0x7f0000000000)=@raw=[@ldst={0x3, 0x3, 0x3, 0x7, 0x0, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x2}], &(0x7f0000000100)='syzkaller\x00', 0x9, 0xd6, &(0x7f0000000440)=""/214, 0x40f00, 0xb, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000140), 0x8, 0x10, 0x0, 0x0, 0x0, r4}, 0x78)
ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x20006000)

01:24:11 executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000180)=0x3, 0x4)
recvmmsg(r0, &(0x7f0000003000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

[  205.037593][ T8872] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  205.061023][ T8872] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
01:24:11 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000640)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000000080)}, {&(0x7f0000000040)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}, {&(0x7f0000013900)="111fc0d901000000", 0x8, 0x30000}], 0x2800880, &(0x7f00000000c0)=ANY=[])
userfaultfd(0x1)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0)
r1 = creat(&(0x7f0000000400)='./file0/file1\x00', 0x0)
write$cgroup_type(r1, &(0x7f00000009c0), 0xd4ba0ff)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
ftruncate(r1, 0x0)

[  205.090053][ T8872] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  205.124092][ T8872] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  205.148075][ T8872] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  205.150281][ T8895] loop0: detected capacity change from 0 to 4096
[  205.173206][ T8872] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  205.224857][ T8872] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1561427392
[  205.261637][ T8872] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  205.324448][ T8889] ubi0: background thread "ubi_bgt0d" started, PID 8889
[  205.332502][ T8871] ubi0: detaching mtd0
[  205.371539][ T8895] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  205.407756][ T8871] ubi0: mtd0 is detached
[  205.444595][ T8878] ubi0: attaching mtd0
[  205.452570][ T8878] ubi0: scanning is finished
[  205.527055][  T136] Bluetooth: hci1: command 0x041b tx timeout
[  205.539282][ T8878] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4
[  205.574910][ T8898] ubi0: attaching mtd0
[  205.580843][ T8898] ubi0: scanning is finished
01:24:12 executing program 1:
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x20000000)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffc, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x0, 0x5, 0x0, 0x8}, 0x0, 0xc, r0, 0x4)
add_key$keyring(&(0x7f0000000340), 0x0, 0x0, 0x0, 0x0)
r2 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004000, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
close(0xffffffffffffffff)
r3 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, &(0x7f0000000300)=@keyring={'key_or_keyring:', r2})
r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x20000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x3, 0x3, &(0x7f0000000000)=@raw=[@ldst={0x3, 0x3, 0x3, 0x7, 0x0, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x2}], &(0x7f0000000100)='syzkaller\x00', 0x9, 0xd6, &(0x7f0000000440)=""/214, 0x40f00, 0xb, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000140), 0x8, 0x10, 0x0, 0x0, 0x0, r4}, 0x78)
ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x20006000)

01:24:12 executing program 2:
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x20000000)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffc, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x0, 0x5, 0x0, 0x8}, 0x0, 0xc, r0, 0x4)
add_key$keyring(&(0x7f0000000340), 0x0, 0x0, 0x0, 0x0)
r2 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004000, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
close(0xffffffffffffffff)
r3 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, &(0x7f0000000300)=@keyring={'key_or_keyring:', r2})
r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x20000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x3, 0x3, &(0x7f0000000000)=@raw=[@ldst={0x3, 0x3, 0x3, 0x7, 0x0, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x2}], &(0x7f0000000100)='syzkaller\x00', 0x9, 0xd6, &(0x7f0000000440)=""/214, 0x40f00, 0xb, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000140), 0x8, 0x10, 0x0, 0x0, 0x0, r4}, 0x78)
ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x20006000)

01:24:12 executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000180)=0x3, 0x4)
recvmmsg(r0, &(0x7f0000003000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

01:24:12 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = dup(0xffffffffffffffff)
io_uring_enter(0xffffffffffffffff, 0x6700, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x40, 0x0, 0x42, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x7f, 0x2}, 0x38a01, 0x1000, 0x2bc, 0x3, 0x0, 0x4, 0x5, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x4, r0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0)
ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000380)=ANY=[@ANYBLOB="000000002a250000d68a00000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010800000000000000002697"])
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300)={0xffffffffffffffff}, 0x4)

[  205.687781][ T8898] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  205.723283][ T8898] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  205.739152][ T8898] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  205.746331][ T8898] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  205.760205][ T8898] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  205.776964][ T8898] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  205.785422][ T8898] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1561427392
[  205.814739][ T8898] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  205.829531][ T8916] ubi0: background thread "ubi_bgt0d" started, PID 8916
01:24:12 executing program 5:
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x20000000)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffc, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x0, 0x5, 0x0, 0x8}, 0x0, 0xc, r0, 0x4)
add_key$keyring(&(0x7f0000000340), 0x0, 0x0, 0x0, 0x0)
r2 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004000, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
close(0xffffffffffffffff)
r3 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, &(0x7f0000000300)=@keyring={'key_or_keyring:', r2})
r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x20000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x3, 0x3, &(0x7f0000000000)=@raw=[@ldst={0x3, 0x3, 0x3, 0x7, 0x0, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x2}], &(0x7f0000000100)='syzkaller\x00', 0x9, 0xd6, &(0x7f0000000440)=""/214, 0x40f00, 0xb, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000140), 0x8, 0x10, 0x0, 0x0, 0x0, r4}, 0x78)
ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x20006000)

[  205.843726][ T8915] ubi0: detaching mtd0
[  205.854498][ T8915] ubi0: mtd0 is detached
[  205.862855][ T8925] ubi0: attaching mtd0
[  205.868446][ T8925] ubi0: scanning is finished
[  205.987347][ T8925] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  206.011838][ T8925] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  206.020558][ T8925] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  206.028631][ T8925] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  206.036213][ T8925] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  206.044446][ T8925] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  206.059829][ T8925] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1561427392
[  206.073908][ T8925] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
01:24:12 executing program 1:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="d800000018008103e00f80ecdb15b9040a6002f0ffff7c02e87c55a1bc000900b8000699030000000500050007008178a800050040003cc00200001203ac040000d67f6f94007134cf6efb800fa007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1, 0x0, 0x0, 0x8000000}, 0x0)

[  206.087427][ T8926] ubi: mtd0 is already attached to ubi0
[  206.092198][ T8931] ubi0: background thread "ubi_bgt0d" started, PID 8931
[  206.101674][ T8930] ubi0: detaching mtd0
[  206.126844][ T8930] ubi0: mtd0 is detached
01:24:12 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r1 = syz_io_uring_setup(0x365, &(0x7f00000002c0)={0x0, 0x43e7, 0x0, 0x2, 0x33f}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000eec000/0x2000)=nil, &(0x7f0000000380), 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
mount$bind(&(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000240), 0x0, 0x0)
r2 = openat$cgroup_root(0xffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
sendfile(r0, r2, &(0x7f00000004c0), 0x5)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1)
syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @dev, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "48fd88", 0x0, "3bba37"}}}}}}, 0x0)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
syz_emit_ethernet(0xa5, &(0x7f0000000500)={@random="b330483071a7", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void}, &(0x7f00000000c0)={0x0, 0x3, [0xce3, 0xe2f, 0x9c9, 0x211]})
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
umount2(&(0x7f0000000040)='./file0\x00', 0xa)
r4 = socket(0x10, 0x80002, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r5=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@dellink={0x20, 0x11, 0x1, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r5, 0x0, 0x10}}, 0x20}}, 0x10000004)

[  206.164379][ T8937] ubi0: attaching mtd0
[  206.170175][ T8937] ubi0: scanning is finished
[  206.176416][ T8941] IPv6: Can't replace route, no match found
01:24:12 executing program 2:
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x20000000)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffc, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x0, 0x5, 0x0, 0x8}, 0x0, 0xc, r0, 0x4)
add_key$keyring(&(0x7f0000000340), 0x0, 0x0, 0x0, 0x0)
r2 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004000, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
close(0xffffffffffffffff)
r3 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, &(0x7f0000000300)=@keyring={'key_or_keyring:', r2})
r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x20000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x3, 0x3, &(0x7f0000000000)=@raw=[@ldst={0x3, 0x3, 0x3, 0x7, 0x0, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x2}], &(0x7f0000000100)='syzkaller\x00', 0x9, 0xd6, &(0x7f0000000440)=""/214, 0x40f00, 0xb, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000140), 0x8, 0x10, 0x0, 0x0, 0x0, r4}, 0x78)
ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x20006000)

[  206.220778][ T8942] IPv6: Can't replace route, no match found
01:24:12 executing program 1:
r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r3=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000180)={0x0, r3+30000000}, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
link(0x0, &(0x7f0000000400)='./file0\x00')
sched_setscheduler(0x0, 0x1, 0x0)
ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect)

[  206.345200][ T8937] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  206.377718][ T8937] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  206.385109][ T8944] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[  206.431318][ T8937] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  206.457277][ T8944] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  206.485016][ T8944] batman_adv: batadv0: Removing interface: batadv_slave_0
[  206.490124][ T8937] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  206.561132][ T8937] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  206.572337][ T8944] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  206.609106][ T8944] batman_adv: batadv0: Removing interface: batadv_slave_1
[  206.609784][ T8937] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  206.736894][ T8937] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1561427392
[  206.816972][ T8937] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
01:24:13 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000640)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000000080)}, {&(0x7f0000000040)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}, {&(0x7f0000013900)="111fc0d901000000", 0x8, 0x30000}], 0x2800880, &(0x7f00000000c0)=ANY=[])
userfaultfd(0x1)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0)
r1 = creat(&(0x7f0000000400)='./file0/file1\x00', 0x0)
write$cgroup_type(r1, &(0x7f00000009c0), 0xd4ba0ff)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
ftruncate(r1, 0x0)

[  206.863521][ T8947] ubi0: background thread "ubi_bgt0d" started, PID 8947
[  206.867414][ T8948] ubi0: detaching mtd0
[  206.914238][ T8948] ubi0: mtd0 is detached
01:24:13 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = dup(0xffffffffffffffff)
io_uring_enter(0xffffffffffffffff, 0x6700, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x40, 0x0, 0x42, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x7f, 0x2}, 0x38a01, 0x1000, 0x2bc, 0x3, 0x0, 0x4, 0x5, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x4, r0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0)
ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000380)=ANY=[@ANYBLOB="000000002a250000d68a00000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010800000000000000002697"])
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300)={0xffffffffffffffff}, 0x4)

[  206.997816][ T8954] ubi0: attaching mtd0
[  207.003192][ T8954] ubi0: scanning is finished
01:24:13 executing program 5:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000080)=0x9, 0x4)

[  207.091442][ T8954] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  207.099430][ T8954] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  207.107035][ T8954] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  207.140197][ T8968] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[  207.149453][ T8954] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  207.238068][ T8954] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
01:24:13 executing program 5:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000080)=0x9, 0x4)

01:24:13 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = dup(0xffffffffffffffff)
io_uring_enter(0xffffffffffffffff, 0x6700, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x40, 0x0, 0x42, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x7f, 0x2}, 0x38a01, 0x1000, 0x2bc, 0x3, 0x0, 0x4, 0x5, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x4, r0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0)
ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000380)=ANY=[@ANYBLOB="000000002a250000d68a00000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010800000000000000002697"])
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300)={0xffffffffffffffff}, 0x4)

01:24:13 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r1 = syz_io_uring_setup(0x365, &(0x7f00000002c0)={0x0, 0x43e7, 0x0, 0x2, 0x33f}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000eec000/0x2000)=nil, &(0x7f0000000380), 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
mount$bind(&(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000240), 0x0, 0x0)
r2 = openat$cgroup_root(0xffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
sendfile(r0, r2, &(0x7f00000004c0), 0x5)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1)
syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @dev, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "48fd88", 0x0, "3bba37"}}}}}}, 0x0)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
syz_emit_ethernet(0xa5, &(0x7f0000000500)={@random="b330483071a7", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void}, &(0x7f00000000c0)={0x0, 0x3, [0xce3, 0xe2f, 0x9c9, 0x211]})
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
umount2(&(0x7f0000000040)='./file0\x00', 0xa)
r4 = socket(0x10, 0x80002, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r5=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@dellink={0x20, 0x11, 0x1, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r5, 0x0, 0x10}}, 0x20}}, 0x10000004)

[  207.347333][ T8954] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  207.355569][ T8954] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1561427392
01:24:14 executing program 5:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000080)=0x9, 0x4)

[  207.462339][ T8954] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
01:24:14 executing program 1:
r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r3=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000180)={0x0, r3+30000000}, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
link(0x0, &(0x7f0000000400)='./file0\x00')
sched_setscheduler(0x0, 0x1, 0x0)
ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect)

[  207.507853][ T8984] loop0: detected capacity change from 0 to 4096
[  207.526866][ T8965] ubi0: background thread "ubi_bgt0d" started, PID 8965
01:24:14 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r1 = syz_io_uring_setup(0x365, &(0x7f00000002c0)={0x0, 0x43e7, 0x0, 0x2, 0x33f}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000eec000/0x2000)=nil, &(0x7f0000000380), 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
mount$bind(&(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000240), 0x0, 0x0)
r2 = openat$cgroup_root(0xffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
sendfile(r0, r2, &(0x7f00000004c0), 0x5)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1)
syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @dev, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "48fd88", 0x0, "3bba37"}}}}}}, 0x0)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
syz_emit_ethernet(0xa5, &(0x7f0000000500)={@random="b330483071a7", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void}, &(0x7f00000000c0)={0x0, 0x3, [0xce3, 0xe2f, 0x9c9, 0x211]})
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
umount2(&(0x7f0000000040)='./file0\x00', 0xa)
r4 = socket(0x10, 0x80002, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r5=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@dellink={0x20, 0x11, 0x1, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r5, 0x0, 0x10}}, 0x20}}, 0x10000004)

01:24:14 executing program 5:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000080)=0x9, 0x4)

[  207.606957][ T8232] Bluetooth: hci1: command 0x040f tx timeout
[  207.703212][ T8999] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
01:24:14 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r1 = syz_io_uring_setup(0x365, &(0x7f00000002c0)={0x0, 0x43e7, 0x0, 0x2, 0x33f}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000eec000/0x2000)=nil, &(0x7f0000000380), 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
mount$bind(&(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000240), 0x0, 0x0)
r2 = openat$cgroup_root(0xffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
sendfile(r0, r2, &(0x7f00000004c0), 0x5)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1)
syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @dev, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "48fd88", 0x0, "3bba37"}}}}}}, 0x0)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
syz_emit_ethernet(0xa5, &(0x7f0000000500)={@random="b330483071a7", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void}, &(0x7f00000000c0)={0x0, 0x3, [0xce3, 0xe2f, 0x9c9, 0x211]})
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
umount2(&(0x7f0000000040)='./file0\x00', 0xa)
r4 = socket(0x10, 0x80002, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r5=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@dellink={0x20, 0x11, 0x1, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r5, 0x0, 0x10}}, 0x20}}, 0x10000004)

[  207.742523][ T8984] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
01:24:14 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
mbind(&(0x7f0000ec8000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x8)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0)
mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f00000003c0)=0x871, 0x4)
bind$inet(r1, &(0x7f0000000440)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x20024ffc, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000180), 0x4)
r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x10, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0, 0x4)
write$binfmt_misc(r2, 0x0, 0xc)
sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x6d)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4)
recvmsg(r1, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0xb2c86da597010019}, 0x100)

[  207.812406][ T8907] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.911379][ T8999] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  207.938073][ T8999] batman_adv: batadv0: Removing interface: batadv_slave_0
[  208.005391][ T9010] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[  208.048342][ T8999] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  208.097513][ T9014] mmap: syz-executor.3 (9014) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  208.139057][ T8999] batman_adv: batadv0: Removing interface: batadv_slave_1
[  208.335818][ T9010] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  208.352857][ T9010] batman_adv: batadv0: Removing interface: batadv_slave_0
[  208.471613][ T9010] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  208.548846][ T9010] batman_adv: batadv0: Removing interface: batadv_slave_1
[  208.811245][ T8907] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.927187][ T8907] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
01:24:15 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000640)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000000080)}, {&(0x7f0000000040)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}, {&(0x7f0000013900)="111fc0d901000000", 0x8, 0x30000}], 0x2800880, &(0x7f00000000c0)=ANY=[])
userfaultfd(0x1)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0)
r1 = creat(&(0x7f0000000400)='./file0/file1\x00', 0x0)
write$cgroup_type(r1, &(0x7f00000009c0), 0xd4ba0ff)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
ftruncate(r1, 0x0)

01:24:15 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r1 = syz_io_uring_setup(0x365, &(0x7f00000002c0)={0x0, 0x43e7, 0x0, 0x2, 0x33f}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000eec000/0x2000)=nil, &(0x7f0000000380), 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
mount$bind(&(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000240), 0x0, 0x0)
r2 = openat$cgroup_root(0xffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
sendfile(r0, r2, &(0x7f00000004c0), 0x5)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1)
syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @dev, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "48fd88", 0x0, "3bba37"}}}}}}, 0x0)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
syz_emit_ethernet(0xa5, &(0x7f0000000500)={@random="b330483071a7", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void}, &(0x7f00000000c0)={0x0, 0x3, [0xce3, 0xe2f, 0x9c9, 0x211]})
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
umount2(&(0x7f0000000040)='./file0\x00', 0xa)
r4 = socket(0x10, 0x80002, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r5=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@dellink={0x20, 0x11, 0x1, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r5, 0x0, 0x10}}, 0x20}}, 0x10000004)

01:24:15 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
mbind(&(0x7f0000ec8000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x8)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0)
mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f00000003c0)=0x871, 0x4)
bind$inet(r1, &(0x7f0000000440)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x20024ffc, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000180), 0x4)
r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x10, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0, 0x4)
write$binfmt_misc(r2, 0x0, 0xc)
sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x6d)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4)
recvmsg(r1, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0xb2c86da597010019}, 0x100)

01:24:15 executing program 1:
r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r3=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000180)={0x0, r3+30000000}, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
link(0x0, &(0x7f0000000400)='./file0\x00')
sched_setscheduler(0x0, 0x1, 0x0)
ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect)

01:24:15 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r1 = syz_io_uring_setup(0x365, &(0x7f00000002c0)={0x0, 0x43e7, 0x0, 0x2, 0x33f}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000eec000/0x2000)=nil, &(0x7f0000000380), 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
mount$bind(&(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000240), 0x0, 0x0)
r2 = openat$cgroup_root(0xffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
sendfile(r0, r2, &(0x7f00000004c0), 0x5)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1)
syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @dev, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "48fd88", 0x0, "3bba37"}}}}}}, 0x0)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
syz_emit_ethernet(0xa5, &(0x7f0000000500)={@random="b330483071a7", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void}, &(0x7f00000000c0)={0x0, 0x3, [0xce3, 0xe2f, 0x9c9, 0x211]})
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
umount2(&(0x7f0000000040)='./file0\x00', 0xa)
r4 = socket(0x10, 0x80002, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r5=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@dellink={0x20, 0x11, 0x1, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r5, 0x0, 0x10}}, 0x20}}, 0x10000004)

01:24:15 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r1 = syz_io_uring_setup(0x365, &(0x7f00000002c0)={0x0, 0x43e7, 0x0, 0x2, 0x33f}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000eec000/0x2000)=nil, &(0x7f0000000380), 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
mount$bind(&(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000240), 0x0, 0x0)
r2 = openat$cgroup_root(0xffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
sendfile(r0, r2, &(0x7f00000004c0), 0x5)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1)
syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @dev, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "48fd88", 0x0, "3bba37"}}}}}}, 0x0)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
syz_emit_ethernet(0xa5, &(0x7f0000000500)={@random="b330483071a7", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void}, &(0x7f00000000c0)={0x0, 0x3, [0xce3, 0xe2f, 0x9c9, 0x211]})
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
umount2(&(0x7f0000000040)='./file0\x00', 0xa)
r4 = socket(0x10, 0x80002, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r5=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@dellink={0x20, 0x11, 0x1, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r5, 0x0, 0x10}}, 0x20}}, 0x10000004)

[  209.078825][ T8907] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
01:24:15 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r1 = syz_io_uring_setup(0x365, &(0x7f00000002c0)={0x0, 0x43e7, 0x0, 0x2, 0x33f}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000eec000/0x2000)=nil, &(0x7f0000000380), 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
mount$bind(&(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000240), 0x0, 0x0)
r2 = openat$cgroup_root(0xffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
sendfile(r0, r2, &(0x7f00000004c0), 0x5)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1)
syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @dev, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "48fd88", 0x0, "3bba37"}}}}}}, 0x0)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
syz_emit_ethernet(0xa5, &(0x7f0000000500)={@random="b330483071a7", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void}, &(0x7f00000000c0)={0x0, 0x3, [0xce3, 0xe2f, 0x9c9, 0x211]})
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
umount2(&(0x7f0000000040)='./file0\x00', 0xa)
r4 = socket(0x10, 0x80002, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r5=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@dellink={0x20, 0x11, 0x1, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r5, 0x0, 0x10}}, 0x20}}, 0x10000004)

01:24:15 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r1 = syz_io_uring_setup(0x365, &(0x7f00000002c0)={0x0, 0x43e7, 0x0, 0x2, 0x33f}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000eec000/0x2000)=nil, &(0x7f0000000380), 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
mount$bind(&(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000240), 0x0, 0x0)
r2 = openat$cgroup_root(0xffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
sendfile(r0, r2, &(0x7f00000004c0), 0x5)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1)
syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @dev, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "48fd88", 0x0, "3bba37"}}}}}}, 0x0)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
syz_emit_ethernet(0xa5, &(0x7f0000000500)={@random="b330483071a7", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void}, &(0x7f00000000c0)={0x0, 0x3, [0xce3, 0xe2f, 0x9c9, 0x211]})
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
umount2(&(0x7f0000000040)='./file0\x00', 0xa)
r4 = socket(0x10, 0x80002, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r5=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@dellink={0x20, 0x11, 0x1, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r5, 0x0, 0x10}}, 0x20}}, 0x10000004)

[  209.334100][ T9052] loop0: detected capacity change from 0 to 4096
[  209.599645][ T9052] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  209.686918][ T7598] Bluetooth: hci1: command 0x0419 tx timeout
01:24:16 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000640)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000000080)}, {&(0x7f0000000040)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}, {&(0x7f0000013900)="111fc0d901000000", 0x8, 0x30000}], 0x2800880, &(0x7f00000000c0)=ANY=[])
userfaultfd(0x1)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0)
r1 = creat(&(0x7f0000000400)='./file0/file1\x00', 0x0)
write$cgroup_type(r1, &(0x7f00000009c0), 0xd4ba0ff)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
ftruncate(r1, 0x0)

01:24:16 executing program 2:
epoll_create1(0x0)
syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee9000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0)
io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0)

01:24:16 executing program 5:
setgroups(0x4000000000000015, &(0x7f0000000200))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$sock_buf(r0, 0x1, 0x3b, &(0x7f0000000100)=""/210, &(0x7f0000000080)=0xd2)

01:24:16 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
mbind(&(0x7f0000ec8000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x8)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0)
mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f00000003c0)=0x871, 0x4)
bind$inet(r1, &(0x7f0000000440)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x20024ffc, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000180), 0x4)
r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x10, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0, 0x4)
write$binfmt_misc(r2, 0x0, 0xc)
sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x6d)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4)
recvmsg(r1, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0xb2c86da597010019}, 0x100)

01:24:16 executing program 1:
r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r3=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000180)={0x0, r3+30000000}, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
link(0x0, &(0x7f0000000400)='./file0\x00')
sched_setscheduler(0x0, 0x1, 0x0)
ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect)

[  210.177561][ T9078] loop0: detected capacity change from 0 to 4096
[  210.280965][ T9078] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  210.621083][ T8907] device hsr_slave_0 left promiscuous mode
[  210.642681][ T8907] device hsr_slave_1 left promiscuous mode
[  210.657571][ T8907] device bridge_slave_1 left promiscuous mode
[  210.716559][ T8907] bridge0: port 2(bridge_slave_1) entered disabled state
[  210.843852][ T8907] device bridge_slave_0 left promiscuous mode
[  210.868368][ T8907] bridge0: port 1(bridge_slave_0) entered disabled state
[  210.925504][ T8907] device veth1_macvtap left promiscuous mode
[  210.932246][ T8907] device veth0_macvtap left promiscuous mode
[  210.940205][ T8907] device veth1_vlan left promiscuous mode
[  210.946256][ T8907] device veth0_vlan left promiscuous mode
[  211.781615][ T8907] team0 (unregistering): Port device team_slave_1 removed
[  212.409982][ T8907] team0 (unregistering): Port device team_slave_0 removed
[  212.434161][ T8907] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  212.448102][ T8907] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  212.529338][ T8907] bond0 (unregistering): Released all slaves
[  213.819376][ T9110] chnl_net:caif_netlink_parms(): no params data found
[  213.935465][ T9110] bridge0: port 1(bridge_slave_0) entered blocking state
[  213.944360][ T9110] bridge0: port 1(bridge_slave_0) entered disabled state
[  213.952665][ T9110] device bridge_slave_0 entered promiscuous mode
[  213.963335][ T9110] bridge0: port 2(bridge_slave_1) entered blocking state
[  213.970745][ T9110] bridge0: port 2(bridge_slave_1) entered disabled state
[  213.980379][ T9110] device bridge_slave_1 entered promiscuous mode
[  214.011660][ T9110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  214.026799][ T9110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  214.064046][ T8907] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.082699][ T9110] team0: Port device team_slave_0 added
[  214.090369][ T9110] team0: Port device team_slave_1 added
[  214.116707][ T9110] batman_adv: batadv0: Adding interface: batadv_slave_0
[  214.125463][ T9110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  214.152381][ T9110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  214.169340][ T8907] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.181631][ T9110] batman_adv: batadv0: Adding interface: batadv_slave_1
[  214.190546][ T9110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  214.218020][ T9110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  214.234013][ T8907] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.268786][ T9110] device hsr_slave_0 entered promiscuous mode
[  214.275679][ T9110] device hsr_slave_1 entered promiscuous mode
[  214.283002][ T9110] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  214.293074][ T9110] Cannot create hsr debugfs directory
[  214.304811][ T8907] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.384465][ T9110] bridge0: port 2(bridge_slave_1) entered blocking state
[  214.391652][ T9110] bridge0: port 2(bridge_slave_1) entered forwarding state
[  214.399175][ T9110] bridge0: port 1(bridge_slave_0) entered blocking state
[  214.406311][ T9110] bridge0: port 1(bridge_slave_0) entered forwarding state
[  214.506581][ T8907] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.591865][ T8907] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.666311][ T9110] 8021q: adding VLAN 0 to HW filter on device bond0
[  214.725123][ T8907] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.792530][ T9110] 8021q: adding VLAN 0 to HW filter on device team0
[  214.848809][ T8232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  214.858193][ T8232] bridge0: port 1(bridge_slave_0) entered disabled state
[  214.868331][ T8232] bridge0: port 2(bridge_slave_1) entered disabled state
[  214.922694][ T8232] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  215.044905][ T8907] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.076999][ T7598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  215.086070][ T7598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  215.095032][ T7598] bridge0: port 1(bridge_slave_0) entered blocking state
[  215.102379][ T7598] bridge0: port 1(bridge_slave_0) entered forwarding state
[  215.110665][ T7598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  215.120515][ T7598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  215.130410][ T7598] bridge0: port 2(bridge_slave_1) entered blocking state
[  215.138180][ T7598] bridge0: port 2(bridge_slave_1) entered forwarding state
[  215.145711][ T7598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  215.187582][ T7317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  215.243971][ T8073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  215.254302][ T8073] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  215.264195][ T8073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  215.273879][ T8073] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  215.330806][ T9110] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  215.341633][ T9110] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  215.353606][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  215.362664][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  215.371034][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  215.379506][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  215.388580][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  215.397626][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  215.432818][ T9157] chnl_net:caif_netlink_parms(): no params data found
[  215.527246][ T1142] Bluetooth: hci2: command 0x0409 tx timeout
[  215.576627][ T7598] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  215.588624][ T7598] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  215.600899][ T9110] 8021q: adding VLAN 0 to HW filter on device batadv0
[  215.971173][ T9157] bridge0: port 1(bridge_slave_0) entered blocking state
[  215.978647][ T9157] bridge0: port 1(bridge_slave_0) entered disabled state
[  215.988263][ T9157] device bridge_slave_0 entered promiscuous mode
[  216.023040][ T9157] bridge0: port 2(bridge_slave_1) entered blocking state
[  216.034578][ T9157] bridge0: port 2(bridge_slave_1) entered disabled state
[  216.045212][ T9157] device bridge_slave_1 entered promiscuous mode
[  216.065736][ T9251] chnl_net:caif_netlink_parms(): no params data found
[  216.090292][ T9157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  216.106558][ T9157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  216.197630][ T9157] team0: Port device team_slave_0 added
[  216.205540][ T7598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  216.215250][ T7598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  216.236230][ T9157] team0: Port device team_slave_1 added
[  216.284837][ T9157] batman_adv: batadv0: Adding interface: batadv_slave_0
[  216.293199][ T9157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  216.325312][ T9157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  216.354988][ T9110] device veth0_vlan entered promiscuous mode
[  216.372802][ T9157] batman_adv: batadv0: Adding interface: batadv_slave_1
[  216.380568][ T9157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  216.409331][ T9157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  216.421661][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  216.430234][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  216.439895][ T9251] bridge0: port 1(bridge_slave_0) entered blocking state
[  216.449877][ T9251] bridge0: port 1(bridge_slave_0) entered disabled state
[  216.457854][ T9251] device bridge_slave_0 entered promiscuous mode
[  216.477098][ T8184] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  216.485055][ T8184] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  216.501096][ T9110] device veth1_vlan entered promiscuous mode
[  216.509876][ T9251] bridge0: port 2(bridge_slave_1) entered blocking state
[  216.519712][ T9251] bridge0: port 2(bridge_slave_1) entered disabled state
[  216.528930][ T9251] device bridge_slave_1 entered promiscuous mode
[  216.564651][ T9157] device hsr_slave_0 entered promiscuous mode
[  216.572549][ T9157] device hsr_slave_1 entered promiscuous mode
[  216.581681][ T9157] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  216.590442][ T9157] Cannot create hsr debugfs directory
[  216.641825][ T9251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  216.656241][ T9251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  216.703346][ T9110] device veth0_macvtap entered promiscuous mode
[  216.715466][ T8232] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  216.724273][ T8232] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  216.734669][ T8232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  216.743810][ T8232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  216.773319][ T9251] team0: Port device team_slave_0 added
[  216.784061][ T9110] device veth1_macvtap entered promiscuous mode
[  216.791823][ T8232] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  216.800096][ T8232] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  216.808413][    T7] Bluetooth: hci4: command 0x0409 tx timeout
[  216.822385][ T9251] team0: Port device team_slave_1 added
[  216.874272][ T9251] batman_adv: batadv0: Adding interface: batadv_slave_0
[  216.881828][ T9251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  216.910092][ T9251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  216.947690][ T9251] batman_adv: batadv0: Adding interface: batadv_slave_1
[  216.954826][ T9251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  216.984461][ T9251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  216.987126][ T8073] Bluetooth: hci5: command 0x0409 tx timeout
[  217.000977][ T9110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  217.011645][ T9110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.021686][ T9110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  217.033285][ T9110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.044121][ T9110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  217.054789][ T9110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.068556][ T9110] batman_adv: batadv0: Interface activated: batadv_slave_0
[  217.080258][ T8232] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  217.092336][ T8232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  217.142718][ T9110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  217.155844][ T9110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.166403][ T9110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  217.176894][ T9110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.186722][ T9110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  217.197384][ T9110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.208692][ T9110] batman_adv: batadv0: Interface activated: batadv_slave_1
[  217.227534][ T9251] device hsr_slave_0 entered promiscuous mode
[  217.234382][ T9251] device hsr_slave_1 entered promiscuous mode
[  217.243146][ T9251] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  217.250885][ T9251] Cannot create hsr debugfs directory
[  217.272132][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  217.282183][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  217.531389][   T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  217.546536][   T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  217.556554][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  217.607163][ T7598] Bluetooth: hci2: command 0x041b tx timeout
[  217.613710][ T8907] device hsr_slave_0 left promiscuous mode
[  217.622383][ T8907] device hsr_slave_1 left promiscuous mode
[  217.631310][ T8907] device bridge_slave_1 left promiscuous mode
[  217.640342][ T8907] bridge0: port 2(bridge_slave_1) entered disabled state
[  217.649668][ T8907] device bridge_slave_0 left promiscuous mode
[  217.655899][ T8907] bridge0: port 1(bridge_slave_0) entered disabled state
[  217.669652][ T8907] device hsr_slave_0 left promiscuous mode
[  217.676421][ T8907] device hsr_slave_1 left promiscuous mode
[  217.684055][ T8907] device bridge_slave_1 left promiscuous mode
[  217.690588][ T8907] bridge0: port 2(bridge_slave_1) entered disabled state
[  217.699562][ T8907] device bridge_slave_0 left promiscuous mode
[  217.705739][ T8907] bridge0: port 1(bridge_slave_0) entered disabled state
[  217.720723][ T8907] device veth1_macvtap left promiscuous mode
[  217.727558][ T8907] device veth0_macvtap left promiscuous mode
[  217.733897][ T8907] device veth1_vlan left promiscuous mode
[  217.740434][ T8907] device veth0_vlan left promiscuous mode
[  217.747680][ T8907] device veth1_macvtap left promiscuous mode
[  217.753699][ T8907] device veth0_macvtap left promiscuous mode
[  217.761259][ T8907] device veth1_vlan left promiscuous mode
[  217.768029][ T8907] device veth0_vlan left promiscuous mode
[  217.967978][ T8907] team0 (unregistering): Port device team_slave_1 removed
[  217.982075][ T8907] team0 (unregistering): Port device team_slave_0 removed
[  217.994424][ T8907] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  218.011368][ T8907] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  218.063314][ T8907] bond0 (unregistering): Released all slaves
[  218.175303][ T8907] team0 (unregistering): Port device team_slave_1 removed
[  218.189950][ T8907] team0 (unregistering): Port device team_slave_0 removed
[  218.203821][ T8907] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  218.220082][ T8907] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  218.266804][ T8907] bond0 (unregistering): Released all slaves
[  218.338756][   T10] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  218.348642][   T10] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  218.390408][ T9157] 8021q: adding VLAN 0 to HW filter on device bond0
[  218.400890][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  218.442444][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  218.453487][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  218.470858][ T9157] 8021q: adding VLAN 0 to HW filter on device team0
[  218.498665][ T9251] 8021q: adding VLAN 0 to HW filter on device bond0
[  218.517006][ T7317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  218.530156][ T7317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  218.542539][ T7317] bridge0: port 1(bridge_slave_0) entered blocking state
[  218.549791][ T7317] bridge0: port 1(bridge_slave_0) entered forwarding state
[  218.565767][ T7317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  218.577698][T10191] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[  218.581701][ T7317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  218.595049][ T7317] bridge0: port 2(bridge_slave_1) entered blocking state
[  218.602182][ T7317] bridge0: port 2(bridge_slave_1) entered forwarding state
[  218.615908][ T7317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  218.625630][T10191] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  218.640759][T10191] batman_adv: batadv0: Removing interface: batadv_slave_0
[  218.664133][T10191] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  218.672444][T10191] batman_adv: batadv0: Removing interface: batadv_slave_1
[  218.735533][ T9251] 8021q: adding VLAN 0 to HW filter on device team0
[  218.744193][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  218.752158][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  218.762164][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  218.773828][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  218.785896][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  218.796592][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  218.807383][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  218.815870][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  218.828971][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
01:24:25 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r1 = syz_io_uring_setup(0x365, &(0x7f00000002c0)={0x0, 0x43e7, 0x0, 0x2, 0x33f}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000eec000/0x2000)=nil, &(0x7f0000000380), 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
mount$bind(&(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000240), 0x0, 0x0)
r2 = openat$cgroup_root(0xffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
sendfile(r0, r2, &(0x7f00000004c0), 0x5)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1)
syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @dev, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "48fd88", 0x0, "3bba37"}}}}}}, 0x0)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
syz_emit_ethernet(0xa5, &(0x7f0000000500)={@random="b330483071a7", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void}, &(0x7f00000000c0)={0x0, 0x3, [0xce3, 0xe2f, 0x9c9, 0x211]})
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
umount2(&(0x7f0000000040)='./file0\x00', 0xa)
r4 = socket(0x10, 0x80002, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r5=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@dellink={0x20, 0x11, 0x1, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r5, 0x0, 0x10}}, 0x20}}, 0x10000004)

01:24:25 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
mbind(&(0x7f0000ec8000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x8)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0)
mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f00000003c0)=0x871, 0x4)
bind$inet(r1, &(0x7f0000000440)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x20024ffc, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000180), 0x4)
r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x10, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0, 0x4)
write$binfmt_misc(r2, 0x0, 0xc)
sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x6d)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4)
recvmsg(r1, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0xb2c86da597010019}, 0x100)

01:24:25 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000004d40)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r1, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

01:24:25 executing program 0:
move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ffa000/0x4000)=nil], 0xfffffffffffffffc, 0x0, 0x0)

[  218.868866][ T8073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  218.881681][ T8073] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  218.910172][ T8073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  218.931596][ T8073] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  218.943168][ T8073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  218.955443][ T8073] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  218.968910][ T8073] bridge0: port 1(bridge_slave_0) entered blocking state
[  218.976018][ T8073] bridge0: port 1(bridge_slave_0) entered forwarding state
[  218.990257][ T8184] Bluetooth: hci4: command 0x041b tx timeout
[  219.009410][ T9157] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
01:24:25 executing program 0:
syz_emit_ethernet(0x7e, &(0x7f0000000340)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xf1, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local, {[@generic={0x0, 0x2}, @timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0x0, [{@loopback}, {@private}, {@empty}]}, @cipso={0x86, 0x1f, 0x0, [{0x0, 0x2}, {0x0, 0x11, "3cccab0ef9c127d09e876caec97154"}, {0x0, 0x6, '\x00\x00\x00\x00'}]}]}}}}}}}, 0x0)

01:24:25 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCX_MFETCH(r0, 0x80089203, 0x0)
syz_open_dev$usbmon(&(0x7f0000000000), 0x60c0, 0x1c041)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, <r1=>0x0, <r2=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005f100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {<r3=>0x0}, {}, {}, {}, {}, {}, {}, {<r4=>0x0}, {0x0, <r5=>0x0}, {0x0, <r6=>0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r7=>0x0}, {}, {}, {<r8=>0x0}, {}, {0x0, <r9=>0x0}, {}, {}, {0x0, <r10=>0x0}, {<r11=>0x0}, {0x0, <r12=>0x0}, {}, {<r13=>0x0, <r14=>0x0}, {0x0, <r15=>0x0}, {<r16=>0x0, <r17=>0x0}, {}, {}, {<r18=>0x0}, {0x0, <r19=>0x0}, {}, {}, {}, {<r20=>0x0}, {0x0, <r21=>0x0}, {0x0, <r22=>0x0}, {}, {}, {}, {}, {}, {}, {0x0, <r23=>0x0}, {}, {<r24=>0x0}, {0x0, <r25=>0x0}, {}, {0x0, <r26=>0x0}, {0x0, <r27=>0x0}, {<r28=>0x0}, {0x0, <r29=>0x0}, {}, {}, {<r30=>0x0}, {}, {}, {<r31=>0x0}, {}, {0x0, <r32=>0x0}, {<r33=>0x0}, {}, {}, {<r34=>0x0, <r35=>0x0}, {}, {}, {}, {}, {}, {}, {<r36=>0x0, <r37=>0x0}, {0x0, <r38=>0x0}, {}, {}, {<r39=>0x0}, {<r40=>0x0}, {}, {}, {}, {0x0, <r41=>0x0}, {}, {<r42=>0x0}, {}, {}, {}, {}, {<r43=>0x0}, {0x0, <r44=>0x0}, {}, {0x0, <r45=>0x0}, {0x0, <r46=>0x0}, {0x0, <r47=>0x0}, {<r48=>0x0}, {}, {0x0, <r49=>0x0}, {}, {}, {}, {}, {<r50=>0x0, <r51=>0x0}, {<r52=>0x0}, {}, {}, {0x0, <r53=>0x0}, {<r54=>0x0}, {0x0, <r55=>0x0}, {<r56=>0x0}, {<r57=>0x0}, {}, {}, {}, {<r58=>0x0}, {}, {<r59=>0x0}, {}, {<r60=>0x0}, {}, {}, {}, {<r61=>0x0}, {<r62=>0x0}, {}, {}, {<r63=>0x0}, {}, {}, {}, {}, {}, {0x0, <r64=>0x0}, {}, {0x0, <r65=>0x0}, {}, {}, {<r66=>0x0}, {0x0, <r67=>0x0}, {}, {0x0, <r68=>0x0}, {<r69=>0x0, <r70=>0x0}, {}, {0x0, <r71=>0x0}, {}, {<r72=>0x0}, {}, {}, {}, {<r73=>0x0, <r74=>0x0}, {<r75=>0x0}, {<r76=>0x0}, {0x0, <r77=>0x0}, {}, {}, {<r78=>0x0}, {}, {}, {}, {}, {0x0, <r79=>0x0}, {<r80=>0x0}, {0x0, <r81=>0x0}, {}, {}, {}, {}, {0x0, <r82=>0x0}, {<r83=>0x0, <r84=>0x0}, {0x0, <r85=>0x0}, {<r86=>0x0}, {<r87=>0x0}, {}, {0x0, <r88=>0x0}, {0x0, <r89=>0x0}, {}, {}, {}, {<r90=>0x0}, {}, {}, {}, {<r91=>0x0}, {<r92=>0x0}, {0x0, <r93=>0x0}, {}, {}, {<r94=>0x0}, {}, {}, {0x0, <r95=>0x0}, {0x0, <r96=>0x0}, {}, {<r97=>0x0, <r98=>0x0}, {<r99=>0x0}, {}, {<r100=>0x0}, {0x0, <r101=>0x0}, {}, {}, {0x0, <r102=>0x0}, {<r103=>0x0}, {}, {}, {}, {}, {}, {}, {0x0, <r104=>0x0}, {<r105=>0x0, <r106=>0x0}, {0x0, <r107=>0x0}, {0x0, <r108=>0x0}, {}, {<r109=>0x0, <r110=>0x0}, {}, {}, {}, {}, {}, {}, {0x0, <r111=>0x0}, {}, {}, {}, {}, {}, {<r112=>0x0}, {}, {<r113=>0x0}, {}, {}, {0x0, <r114=>0x0}, {}, {}, {}, {}, {}, {<r115=>0x0, <r116=>0x0}, {}, {0x0, <r117=>0x0}, {0x0, <r118=>0x0}, {0x0, <r119=>0x0}, {}, {}, {<r120=>0x0, r2}], 0x0, "b67d5166ab9c79"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004d100)={0xfffffffffffffff9, [{}, {0x0, r38}, {}, {0x0, r114}, {}, {}, {}, {}, {}, {0x0, r21}, {}, {r11}, {}, {}, {}, {r39}, {}, {0x0, r2}, {}, {r60}, {}, {r94, r64}, {r33}, {r4}, {r72}, {0x0, r106}, {0x0, r85}, {r76, r88}, {}, {}, {0x0, r79}, {0x0, r17}, {}, {}, {0x0, r68}, {}, {}, {r115, r25}, {}, {}, {0x0, r82}, {r18, r47}, {0x0, r111}, {}, {}, {}, {r59}, {}, {r52, r71}, {0x0, r119}, {}, {0x0, r15}, {0x0, r26}, {}, {r73}, {0x0, r106}, {r105, r116}, {0x0, r84}, {}, {}, {}, {}, {}, {}, {}, {r86}, {r13}, {}, {}, {r50}, {0x0, r5}, {}, {0x0, r89}, {}, {r8, r81}, {r112}, {}, {0x0, r46}, {0x0, r96}, {r90}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {r16}, {r40, r110}, {}, {0x0, r41}, {r57}, {}, {}, {}, {}, {}, {0x0, r35}, {r34, r98}, {}, {r43, r19}, {0x0, r12}, {}, {}, {r58}, {0x0, r49}, {r120}, {r61}, {}, {}, {r100}, {r83}, {}, {}, {0x0, r7}, {}, {0x0, r23}, {r16}, {0x0, r77}, {}, {r92, r6}, {}, {0x0, r27}, {0x0, r65}, {r66}, {r28}, {}, {}, {}, {r87}, {}, {r91}, {}, {}, {}, {}, {r3}, {0x0, r29}, {}, {}, {0x0, r53}, {0x0, r10}, {r16}, {r78}, {r54, r37}, {r113}, {0x0, r45}, {}, {}, {}, {r39}, {0x0, r102}, {0x0, r12}, {r99}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r101}, {r59}, {}, {}, {}, {r30}, {}, {r36, r9}, {r42}, {}, {0x0, r44}, {0x0, r67}, {r63}, {}, {r20, r7}, {}, {0x0, r51}, {0x0, r14}, {r43}, {r97, r35}, {r75, r55}, {}, {0x0, r107}, {r24, r49}, {}, {}, {}, {}, {}, {r103, r117}, {}, {}, {}, {0x0, r108}, {}, {}, {r109}, {r31}, {r62}, {}, {r69}, {}, {}, {}, {}, {}, {0x0, r22}, {0x0, r81}, {}, {}, {r13}, {}, {}, {r78}, {}, {r80, r93}, {}, {r56}, {}, {}, {}, {0x0, r70}, {}, {}, {}, {0x0, r37}, {}, {r1}, {}, {}, {0x0, r118}, {0x0, r74}, {0x0, r95}, {}, {}, {}, {0x0, r17}, {}, {}, {0x0, r104}, {}, {0x0, r32}, {r48}], 0x8, "3c1d4c65c79995"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004fd40)={0x8000, [], 0x3, "29641c499fec9a"})
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r121 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1)
ioctl$USBDEVFS_IOCTL(r121, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000})

[  219.060760][ T8073] Bluetooth: hci5: command 0x041b tx timeout
[  219.068279][ T8204] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  219.095112][ T8204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  219.152596][ T8204] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  219.167868][ T8204] bridge0: port 2(bridge_slave_1) entered blocking state
[  219.175031][ T8204] bridge0: port 2(bridge_slave_1) entered forwarding state
[  219.191397][ T8204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
01:24:25 executing program 0:
syz_emit_ethernet(0x7e, &(0x7f0000000340)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xf1, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local, {[@generic={0x0, 0x2}, @timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0x0, [{@loopback}, {@private}, {@empty}]}, @cipso={0x86, 0x1f, 0x0, [{0x0, 0x2}, {0x0, 0x11, "3cccab0ef9c127d09e876caec97154"}, {0x0, 0x6, '\x00\x00\x00\x00'}]}]}}}}}}}, 0x0)

[  219.216272][ T8204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
01:24:25 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCX_MFETCH(r0, 0x80089203, 0x0)
syz_open_dev$usbmon(&(0x7f0000000000), 0x60c0, 0x1c041)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, <r1=>0x0, <r2=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005f100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {<r3=>0x0}, {}, {}, {}, {}, {}, {}, {<r4=>0x0}, {0x0, <r5=>0x0}, {0x0, <r6=>0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r7=>0x0}, {}, {}, {<r8=>0x0}, {}, {0x0, <r9=>0x0}, {}, {}, {0x0, <r10=>0x0}, {<r11=>0x0}, {0x0, <r12=>0x0}, {}, {<r13=>0x0, <r14=>0x0}, {0x0, <r15=>0x0}, {<r16=>0x0, <r17=>0x0}, {}, {}, {<r18=>0x0}, {0x0, <r19=>0x0}, {}, {}, {}, {<r20=>0x0}, {0x0, <r21=>0x0}, {0x0, <r22=>0x0}, {}, {}, {}, {}, {}, {}, {0x0, <r23=>0x0}, {}, {<r24=>0x0}, {0x0, <r25=>0x0}, {}, {0x0, <r26=>0x0}, {0x0, <r27=>0x0}, {<r28=>0x0}, {0x0, <r29=>0x0}, {}, {}, {<r30=>0x0}, {}, {}, {<r31=>0x0}, {}, {0x0, <r32=>0x0}, {<r33=>0x0}, {}, {}, {<r34=>0x0, <r35=>0x0}, {}, {}, {}, {}, {}, {}, {<r36=>0x0, <r37=>0x0}, {0x0, <r38=>0x0}, {}, {}, {<r39=>0x0}, {<r40=>0x0}, {}, {}, {}, {0x0, <r41=>0x0}, {}, {<r42=>0x0}, {}, {}, {}, {}, {<r43=>0x0}, {0x0, <r44=>0x0}, {}, {0x0, <r45=>0x0}, {0x0, <r46=>0x0}, {0x0, <r47=>0x0}, {<r48=>0x0}, {}, {0x0, <r49=>0x0}, {}, {}, {}, {}, {<r50=>0x0, <r51=>0x0}, {<r52=>0x0}, {}, {}, {0x0, <r53=>0x0}, {<r54=>0x0}, {0x0, <r55=>0x0}, {<r56=>0x0}, {<r57=>0x0}, {}, {}, {}, {<r58=>0x0}, {}, {<r59=>0x0}, {}, {<r60=>0x0}, {}, {}, {}, {<r61=>0x0}, {<r62=>0x0}, {}, {}, {<r63=>0x0}, {}, {}, {}, {}, {}, {0x0, <r64=>0x0}, {}, {0x0, <r65=>0x0}, {}, {}, {<r66=>0x0}, {0x0, <r67=>0x0}, {}, {0x0, <r68=>0x0}, {<r69=>0x0, <r70=>0x0}, {}, {0x0, <r71=>0x0}, {}, {<r72=>0x0}, {}, {}, {}, {<r73=>0x0, <r74=>0x0}, {<r75=>0x0}, {<r76=>0x0}, {0x0, <r77=>0x0}, {}, {}, {<r78=>0x0}, {}, {}, {}, {}, {0x0, <r79=>0x0}, {<r80=>0x0}, {0x0, <r81=>0x0}, {}, {}, {}, {}, {0x0, <r82=>0x0}, {<r83=>0x0, <r84=>0x0}, {0x0, <r85=>0x0}, {<r86=>0x0}, {<r87=>0x0}, {}, {0x0, <r88=>0x0}, {0x0, <r89=>0x0}, {}, {}, {}, {<r90=>0x0}, {}, {}, {}, {<r91=>0x0}, {<r92=>0x0}, {0x0, <r93=>0x0}, {}, {}, {<r94=>0x0}, {}, {}, {0x0, <r95=>0x0}, {0x0, <r96=>0x0}, {}, {<r97=>0x0, <r98=>0x0}, {<r99=>0x0}, {}, {<r100=>0x0}, {0x0, <r101=>0x0}, {}, {}, {0x0, <r102=>0x0}, {<r103=>0x0}, {}, {}, {}, {}, {}, {}, {0x0, <r104=>0x0}, {<r105=>0x0, <r106=>0x0}, {0x0, <r107=>0x0}, {0x0, <r108=>0x0}, {}, {<r109=>0x0, <r110=>0x0}, {}, {}, {}, {}, {}, {}, {0x0, <r111=>0x0}, {}, {}, {}, {}, {}, {<r112=>0x0}, {}, {<r113=>0x0}, {}, {}, {0x0, <r114=>0x0}, {}, {}, {}, {}, {}, {<r115=>0x0, <r116=>0x0}, {}, {0x0, <r117=>0x0}, {0x0, <r118=>0x0}, {0x0, <r119=>0x0}, {}, {}, {<r120=>0x0, r2}], 0x0, "b67d5166ab9c79"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004d100)={0xfffffffffffffff9, [{}, {0x0, r38}, {}, {0x0, r114}, {}, {}, {}, {}, {}, {0x0, r21}, {}, {r11}, {}, {}, {}, {r39}, {}, {0x0, r2}, {}, {r60}, {}, {r94, r64}, {r33}, {r4}, {r72}, {0x0, r106}, {0x0, r85}, {r76, r88}, {}, {}, {0x0, r79}, {0x0, r17}, {}, {}, {0x0, r68}, {}, {}, {r115, r25}, {}, {}, {0x0, r82}, {r18, r47}, {0x0, r111}, {}, {}, {}, {r59}, {}, {r52, r71}, {0x0, r119}, {}, {0x0, r15}, {0x0, r26}, {}, {r73}, {0x0, r106}, {r105, r116}, {0x0, r84}, {}, {}, {}, {}, {}, {}, {}, {r86}, {r13}, {}, {}, {r50}, {0x0, r5}, {}, {0x0, r89}, {}, {r8, r81}, {r112}, {}, {0x0, r46}, {0x0, r96}, {r90}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {r16}, {r40, r110}, {}, {0x0, r41}, {r57}, {}, {}, {}, {}, {}, {0x0, r35}, {r34, r98}, {}, {r43, r19}, {0x0, r12}, {}, {}, {r58}, {0x0, r49}, {r120}, {r61}, {}, {}, {r100}, {r83}, {}, {}, {0x0, r7}, {}, {0x0, r23}, {r16}, {0x0, r77}, {}, {r92, r6}, {}, {0x0, r27}, {0x0, r65}, {r66}, {r28}, {}, {}, {}, {r87}, {}, {r91}, {}, {}, {}, {}, {r3}, {0x0, r29}, {}, {}, {0x0, r53}, {0x0, r10}, {r16}, {r78}, {r54, r37}, {r113}, {0x0, r45}, {}, {}, {}, {r39}, {0x0, r102}, {0x0, r12}, {r99}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r101}, {r59}, {}, {}, {}, {r30}, {}, {r36, r9}, {r42}, {}, {0x0, r44}, {0x0, r67}, {r63}, {}, {r20, r7}, {}, {0x0, r51}, {0x0, r14}, {r43}, {r97, r35}, {r75, r55}, {}, {0x0, r107}, {r24, r49}, {}, {}, {}, {}, {}, {r103, r117}, {}, {}, {}, {0x0, r108}, {}, {}, {r109}, {r31}, {r62}, {}, {r69}, {}, {}, {}, {}, {}, {0x0, r22}, {0x0, r81}, {}, {}, {r13}, {}, {}, {r78}, {}, {r80, r93}, {}, {r56}, {}, {}, {}, {0x0, r70}, {}, {}, {}, {0x0, r37}, {}, {r1}, {}, {}, {0x0, r118}, {0x0, r74}, {0x0, r95}, {}, {}, {}, {0x0, r17}, {}, {}, {0x0, r104}, {}, {0x0, r32}, {r48}], 0x8, "3c1d4c65c79995"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004fd40)={0x8000, [], 0x3, "29641c499fec9a"})
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r121 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1)
ioctl$USBDEVFS_IOCTL(r121, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000})

[  219.358082][ T8232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  219.386851][ T8232] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  219.457702][ T8232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  219.491765][ T8232] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  219.550768][ T9157] 8021q: adding VLAN 0 to HW filter on device batadv0
[  219.649139][ T7598] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  219.658374][ T7598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  219.666614][ T7598] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  219.697805][ T7598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  219.709830][ T7598] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  219.738437][ T7598] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  219.745862][ T7598] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  219.770544][ T9251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  219.829602][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  219.847376][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  219.861681][ T9251] 8021q: adding VLAN 0 to HW filter on device batadv0
[  219.967788][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  219.995137][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  220.047808][ T8073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  220.056555][ T8073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  220.073597][ T9157] device veth0_vlan entered promiscuous mode
[  220.087326][ T8073] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  220.095902][ T8073] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  220.123416][ T9157] device veth1_vlan entered promiscuous mode
[  220.137721][ T8092] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  220.145793][ T8092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  220.155168][ T8092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  220.192278][ T8073] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  220.200760][ T8073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  220.214450][ T8073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  220.225003][ T9251] device veth0_vlan entered promiscuous mode
[  220.236124][ T8092] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  220.250011][ T8092] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  220.278256][ T9157] device veth0_macvtap entered promiscuous mode
[  220.285479][ T7598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  220.296109][ T7598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  220.308470][ T9251] device veth1_vlan entered promiscuous mode
[  220.328550][ T9157] device veth1_macvtap entered promiscuous mode
[  220.337230][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  220.345596][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  220.362093][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  220.385273][ T7598] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  220.415485][ T9157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  220.430772][ T9157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  220.442138][ T9157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  220.457994][ T9157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  220.472093][ T9157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  220.484159][ T9157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  220.502793][ T9157] batman_adv: batadv0: Interface activated: batadv_slave_0
[  220.517923][ T7317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  220.530152][ T7317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  220.542117][ T9157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  220.554271][ T9157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  220.564978][ T9157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  220.585390][ T9157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  220.597541][ T9157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  220.613795][ T9157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  220.627142][ T9157] batman_adv: batadv0: Interface activated: batadv_slave_1
[  220.642512][ T9251] device veth0_macvtap entered promiscuous mode
[  220.651999][ T8092] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  220.669347][ T8092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  220.679119][ T8092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  220.688910][ T8092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  220.698333][ T8092] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  220.719772][ T9251] device veth1_macvtap entered promiscuous mode
[  220.783845][ T9251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  220.802721][ T9251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  220.832657][ T9251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  220.851194][ T9251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  220.864424][ T9251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  220.875530][ T9251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  220.885645][ T9251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  220.898290][ T9251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  220.909196][ T9251] batman_adv: batadv0: Interface activated: batadv_slave_0
[  220.927146][ T8232] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  220.927557][ T8232] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  220.969316][ T8232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  220.991585][ T9251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  221.005197][ T9251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  221.021373][ T9251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  221.032016][ T9251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  221.041926][ T9251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  221.052608][ T9251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  221.057559][ T7317] Bluetooth: hci4: command 0x040f tx timeout
[  221.062940][ T9251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  221.078911][ T9251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  221.091244][ T9251] batman_adv: batadv0: Interface activated: batadv_slave_1
[  221.112725][ T7598] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  221.122768][ T7598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  221.134626][   T10] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  221.137840][ T8092] Bluetooth: hci5: command 0x040f tx timeout
[  221.149573][   T10] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  221.190572][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  221.239321][   T10] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  221.259422][   T10] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  221.300345][ T8232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  221.317735][  T977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  221.326023][  T977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  221.354351][ T8232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  221.415645][   T10] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  221.432912][   T10] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  221.463543][ T8092] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
01:24:28 executing program 2:
epoll_create1(0x0)
syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee9000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0)
io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0)

01:24:28 executing program 0:
syz_emit_ethernet(0x7e, &(0x7f0000000340)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xf1, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local, {[@generic={0x0, 0x2}, @timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0x0, [{@loopback}, {@private}, {@empty}]}, @cipso={0x86, 0x1f, 0x0, [{0x0, 0x2}, {0x0, 0x11, "3cccab0ef9c127d09e876caec97154"}, {0x0, 0x6, '\x00\x00\x00\x00'}]}]}}}}}}}, 0x0)

01:24:28 executing program 4:
socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0)
recvmmsg(r1, &(0x7f0000005d40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004ac0)=""/206, 0xce}}], 0x1, 0x0, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmmsg(r3, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=""/233, 0xe9}}], 0x1, 0x122, 0x0)
sendmsg(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0)
recvmmsg(r3, &(0x7f0000005840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004500)=""/102, 0x66}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/172, 0xac}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000005040)=""/128, 0x80}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000005540)=""/112, 0x70}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000005740)=""/227, 0xe3}}], 0x5, 0x2002, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)

01:24:28 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCX_MFETCH(r0, 0x80089203, 0x0)
syz_open_dev$usbmon(&(0x7f0000000000), 0x60c0, 0x1c041)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, <r1=>0x0, <r2=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005f100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {<r3=>0x0}, {}, {}, {}, {}, {}, {}, {<r4=>0x0}, {0x0, <r5=>0x0}, {0x0, <r6=>0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r7=>0x0}, {}, {}, {<r8=>0x0}, {}, {0x0, <r9=>0x0}, {}, {}, {0x0, <r10=>0x0}, {<r11=>0x0}, {0x0, <r12=>0x0}, {}, {<r13=>0x0, <r14=>0x0}, {0x0, <r15=>0x0}, {<r16=>0x0, <r17=>0x0}, {}, {}, {<r18=>0x0}, {0x0, <r19=>0x0}, {}, {}, {}, {<r20=>0x0}, {0x0, <r21=>0x0}, {0x0, <r22=>0x0}, {}, {}, {}, {}, {}, {}, {0x0, <r23=>0x0}, {}, {<r24=>0x0}, {0x0, <r25=>0x0}, {}, {0x0, <r26=>0x0}, {0x0, <r27=>0x0}, {<r28=>0x0}, {0x0, <r29=>0x0}, {}, {}, {<r30=>0x0}, {}, {}, {<r31=>0x0}, {}, {0x0, <r32=>0x0}, {<r33=>0x0}, {}, {}, {<r34=>0x0, <r35=>0x0}, {}, {}, {}, {}, {}, {}, {<r36=>0x0, <r37=>0x0}, {0x0, <r38=>0x0}, {}, {}, {<r39=>0x0}, {<r40=>0x0}, {}, {}, {}, {0x0, <r41=>0x0}, {}, {<r42=>0x0}, {}, {}, {}, {}, {<r43=>0x0}, {0x0, <r44=>0x0}, {}, {0x0, <r45=>0x0}, {0x0, <r46=>0x0}, {0x0, <r47=>0x0}, {<r48=>0x0}, {}, {0x0, <r49=>0x0}, {}, {}, {}, {}, {<r50=>0x0, <r51=>0x0}, {<r52=>0x0}, {}, {}, {0x0, <r53=>0x0}, {<r54=>0x0}, {0x0, <r55=>0x0}, {<r56=>0x0}, {<r57=>0x0}, {}, {}, {}, {<r58=>0x0}, {}, {<r59=>0x0}, {}, {<r60=>0x0}, {}, {}, {}, {<r61=>0x0}, {<r62=>0x0}, {}, {}, {<r63=>0x0}, {}, {}, {}, {}, {}, {0x0, <r64=>0x0}, {}, {0x0, <r65=>0x0}, {}, {}, {<r66=>0x0}, {0x0, <r67=>0x0}, {}, {0x0, <r68=>0x0}, {<r69=>0x0, <r70=>0x0}, {}, {0x0, <r71=>0x0}, {}, {<r72=>0x0}, {}, {}, {}, {<r73=>0x0, <r74=>0x0}, {<r75=>0x0}, {<r76=>0x0}, {0x0, <r77=>0x0}, {}, {}, {<r78=>0x0}, {}, {}, {}, {}, {0x0, <r79=>0x0}, {<r80=>0x0}, {0x0, <r81=>0x0}, {}, {}, {}, {}, {0x0, <r82=>0x0}, {<r83=>0x0, <r84=>0x0}, {0x0, <r85=>0x0}, {<r86=>0x0}, {<r87=>0x0}, {}, {0x0, <r88=>0x0}, {0x0, <r89=>0x0}, {}, {}, {}, {<r90=>0x0}, {}, {}, {}, {<r91=>0x0}, {<r92=>0x0}, {0x0, <r93=>0x0}, {}, {}, {<r94=>0x0}, {}, {}, {0x0, <r95=>0x0}, {0x0, <r96=>0x0}, {}, {<r97=>0x0, <r98=>0x0}, {<r99=>0x0}, {}, {<r100=>0x0}, {0x0, <r101=>0x0}, {}, {}, {0x0, <r102=>0x0}, {<r103=>0x0}, {}, {}, {}, {}, {}, {}, {0x0, <r104=>0x0}, {<r105=>0x0, <r106=>0x0}, {0x0, <r107=>0x0}, {0x0, <r108=>0x0}, {}, {<r109=>0x0, <r110=>0x0}, {}, {}, {}, {}, {}, {}, {0x0, <r111=>0x0}, {}, {}, {}, {}, {}, {<r112=>0x0}, {}, {<r113=>0x0}, {}, {}, {0x0, <r114=>0x0}, {}, {}, {}, {}, {}, {<r115=>0x0, <r116=>0x0}, {}, {0x0, <r117=>0x0}, {0x0, <r118=>0x0}, {0x0, <r119=>0x0}, {}, {}, {<r120=>0x0, r2}], 0x0, "b67d5166ab9c79"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004d100)={0xfffffffffffffff9, [{}, {0x0, r38}, {}, {0x0, r114}, {}, {}, {}, {}, {}, {0x0, r21}, {}, {r11}, {}, {}, {}, {r39}, {}, {0x0, r2}, {}, {r60}, {}, {r94, r64}, {r33}, {r4}, {r72}, {0x0, r106}, {0x0, r85}, {r76, r88}, {}, {}, {0x0, r79}, {0x0, r17}, {}, {}, {0x0, r68}, {}, {}, {r115, r25}, {}, {}, {0x0, r82}, {r18, r47}, {0x0, r111}, {}, {}, {}, {r59}, {}, {r52, r71}, {0x0, r119}, {}, {0x0, r15}, {0x0, r26}, {}, {r73}, {0x0, r106}, {r105, r116}, {0x0, r84}, {}, {}, {}, {}, {}, {}, {}, {r86}, {r13}, {}, {}, {r50}, {0x0, r5}, {}, {0x0, r89}, {}, {r8, r81}, {r112}, {}, {0x0, r46}, {0x0, r96}, {r90}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {r16}, {r40, r110}, {}, {0x0, r41}, {r57}, {}, {}, {}, {}, {}, {0x0, r35}, {r34, r98}, {}, {r43, r19}, {0x0, r12}, {}, {}, {r58}, {0x0, r49}, {r120}, {r61}, {}, {}, {r100}, {r83}, {}, {}, {0x0, r7}, {}, {0x0, r23}, {r16}, {0x0, r77}, {}, {r92, r6}, {}, {0x0, r27}, {0x0, r65}, {r66}, {r28}, {}, {}, {}, {r87}, {}, {r91}, {}, {}, {}, {}, {r3}, {0x0, r29}, {}, {}, {0x0, r53}, {0x0, r10}, {r16}, {r78}, {r54, r37}, {r113}, {0x0, r45}, {}, {}, {}, {r39}, {0x0, r102}, {0x0, r12}, {r99}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r101}, {r59}, {}, {}, {}, {r30}, {}, {r36, r9}, {r42}, {}, {0x0, r44}, {0x0, r67}, {r63}, {}, {r20, r7}, {}, {0x0, r51}, {0x0, r14}, {r43}, {r97, r35}, {r75, r55}, {}, {0x0, r107}, {r24, r49}, {}, {}, {}, {}, {}, {r103, r117}, {}, {}, {}, {0x0, r108}, {}, {}, {r109}, {r31}, {r62}, {}, {r69}, {}, {}, {}, {}, {}, {0x0, r22}, {0x0, r81}, {}, {}, {r13}, {}, {}, {r78}, {}, {r80, r93}, {}, {r56}, {}, {}, {}, {0x0, r70}, {}, {}, {}, {0x0, r37}, {}, {r1}, {}, {}, {0x0, r118}, {0x0, r74}, {0x0, r95}, {}, {}, {}, {0x0, r17}, {}, {}, {0x0, r104}, {}, {0x0, r32}, {r48}], 0x8, "3c1d4c65c79995"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004fd40)={0x8000, [], 0x3, "29641c499fec9a"})
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r121 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1)
ioctl$USBDEVFS_IOCTL(r121, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000})

01:24:28 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}}, @IFLA_GRE_TTL={0x5}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}]}}}]}, 0x58}}, 0x0)

01:24:28 executing program 5:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
unshare(0x48020200)
mkdir(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
mount(0x0, &(0x7f00000018c0)='./file0\x00', &(0x7f0000000380)='hugetlbfs\x00', 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0)
renameat(r2, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f0000000000)='./file0\x00')
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000140)={0x5e, @rand_addr=0x64010100, 0x4e21, 0x0, 'nq\x00', 0x0, 0x5}, 0x2c)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x804800, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xd3, 0x0, &(0x7f0000000bc0)="f233adf444ba8c37f3ef45e2b78934f1279e3fc4be5b8609716762db10fb08c381cec523810131e0d5a2ca3590d381d2a5b5f4d17d60b28dfc47b219397a29a072b840ea9a4dae47c4bde6799ab8a1b0b8857062a686026edf3e3bbccb403679ff3fb59b0d8f7a8b06e840dc6be586f0d14615bf63a3d5174104ff09c8006823bab9f028f883ac1f2bc2b3b4340aedee796ad70a8ecfa48d5db7d9e6369e021db95d4f433e4b3ce51fa4d0341f04e006cf6eca060d69cd61fdfcb6a717438028eba77c3de156d0aec4537fc3ffff3f91cdd625"})

01:24:28 executing program 0:
syz_emit_ethernet(0x7e, &(0x7f0000000340)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xf1, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local, {[@generic={0x0, 0x2}, @timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0x0, [{@loopback}, {@private}, {@empty}]}, @cipso={0x86, 0x1f, 0x0, [{0x0, 0x2}, {0x0, 0x11, "3cccab0ef9c127d09e876caec97154"}, {0x0, 0x6, '\x00\x00\x00\x00'}]}]}}}}}}}, 0x0)

01:24:28 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x3}}]})

01:24:28 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCX_MFETCH(r0, 0x80089203, 0x0)
syz_open_dev$usbmon(&(0x7f0000000000), 0x60c0, 0x1c041)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, <r1=>0x0, <r2=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005f100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {<r3=>0x0}, {}, {}, {}, {}, {}, {}, {<r4=>0x0}, {0x0, <r5=>0x0}, {0x0, <r6=>0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r7=>0x0}, {}, {}, {<r8=>0x0}, {}, {0x0, <r9=>0x0}, {}, {}, {0x0, <r10=>0x0}, {<r11=>0x0}, {0x0, <r12=>0x0}, {}, {<r13=>0x0, <r14=>0x0}, {0x0, <r15=>0x0}, {<r16=>0x0, <r17=>0x0}, {}, {}, {<r18=>0x0}, {0x0, <r19=>0x0}, {}, {}, {}, {<r20=>0x0}, {0x0, <r21=>0x0}, {0x0, <r22=>0x0}, {}, {}, {}, {}, {}, {}, {0x0, <r23=>0x0}, {}, {<r24=>0x0}, {0x0, <r25=>0x0}, {}, {0x0, <r26=>0x0}, {0x0, <r27=>0x0}, {<r28=>0x0}, {0x0, <r29=>0x0}, {}, {}, {<r30=>0x0}, {}, {}, {<r31=>0x0}, {}, {0x0, <r32=>0x0}, {<r33=>0x0}, {}, {}, {<r34=>0x0, <r35=>0x0}, {}, {}, {}, {}, {}, {}, {<r36=>0x0, <r37=>0x0}, {0x0, <r38=>0x0}, {}, {}, {<r39=>0x0}, {<r40=>0x0}, {}, {}, {}, {0x0, <r41=>0x0}, {}, {<r42=>0x0}, {}, {}, {}, {}, {<r43=>0x0}, {0x0, <r44=>0x0}, {}, {0x0, <r45=>0x0}, {0x0, <r46=>0x0}, {0x0, <r47=>0x0}, {<r48=>0x0}, {}, {0x0, <r49=>0x0}, {}, {}, {}, {}, {<r50=>0x0, <r51=>0x0}, {<r52=>0x0}, {}, {}, {0x0, <r53=>0x0}, {<r54=>0x0}, {0x0, <r55=>0x0}, {<r56=>0x0}, {<r57=>0x0}, {}, {}, {}, {<r58=>0x0}, {}, {<r59=>0x0}, {}, {<r60=>0x0}, {}, {}, {}, {<r61=>0x0}, {<r62=>0x0}, {}, {}, {<r63=>0x0}, {}, {}, {}, {}, {}, {0x0, <r64=>0x0}, {}, {0x0, <r65=>0x0}, {}, {}, {<r66=>0x0}, {0x0, <r67=>0x0}, {}, {0x0, <r68=>0x0}, {<r69=>0x0, <r70=>0x0}, {}, {0x0, <r71=>0x0}, {}, {<r72=>0x0}, {}, {}, {}, {<r73=>0x0, <r74=>0x0}, {<r75=>0x0}, {<r76=>0x0}, {0x0, <r77=>0x0}, {}, {}, {<r78=>0x0}, {}, {}, {}, {}, {0x0, <r79=>0x0}, {<r80=>0x0}, {0x0, <r81=>0x0}, {}, {}, {}, {}, {0x0, <r82=>0x0}, {<r83=>0x0, <r84=>0x0}, {0x0, <r85=>0x0}, {<r86=>0x0}, {<r87=>0x0}, {}, {0x0, <r88=>0x0}, {0x0, <r89=>0x0}, {}, {}, {}, {<r90=>0x0}, {}, {}, {}, {<r91=>0x0}, {<r92=>0x0}, {0x0, <r93=>0x0}, {}, {}, {<r94=>0x0}, {}, {}, {0x0, <r95=>0x0}, {0x0, <r96=>0x0}, {}, {<r97=>0x0, <r98=>0x0}, {<r99=>0x0}, {}, {<r100=>0x0}, {0x0, <r101=>0x0}, {}, {}, {0x0, <r102=>0x0}, {<r103=>0x0}, {}, {}, {}, {}, {}, {}, {0x0, <r104=>0x0}, {<r105=>0x0, <r106=>0x0}, {0x0, <r107=>0x0}, {0x0, <r108=>0x0}, {}, {<r109=>0x0, <r110=>0x0}, {}, {}, {}, {}, {}, {}, {0x0, <r111=>0x0}, {}, {}, {}, {}, {}, {<r112=>0x0}, {}, {<r113=>0x0}, {}, {}, {0x0, <r114=>0x0}, {}, {}, {}, {}, {}, {<r115=>0x0, <r116=>0x0}, {}, {0x0, <r117=>0x0}, {0x0, <r118=>0x0}, {0x0, <r119=>0x0}, {}, {}, {<r120=>0x0, r2}], 0x0, "b67d5166ab9c79"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004d100)={0xfffffffffffffff9, [{}, {0x0, r38}, {}, {0x0, r114}, {}, {}, {}, {}, {}, {0x0, r21}, {}, {r11}, {}, {}, {}, {r39}, {}, {0x0, r2}, {}, {r60}, {}, {r94, r64}, {r33}, {r4}, {r72}, {0x0, r106}, {0x0, r85}, {r76, r88}, {}, {}, {0x0, r79}, {0x0, r17}, {}, {}, {0x0, r68}, {}, {}, {r115, r25}, {}, {}, {0x0, r82}, {r18, r47}, {0x0, r111}, {}, {}, {}, {r59}, {}, {r52, r71}, {0x0, r119}, {}, {0x0, r15}, {0x0, r26}, {}, {r73}, {0x0, r106}, {r105, r116}, {0x0, r84}, {}, {}, {}, {}, {}, {}, {}, {r86}, {r13}, {}, {}, {r50}, {0x0, r5}, {}, {0x0, r89}, {}, {r8, r81}, {r112}, {}, {0x0, r46}, {0x0, r96}, {r90}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {r16}, {r40, r110}, {}, {0x0, r41}, {r57}, {}, {}, {}, {}, {}, {0x0, r35}, {r34, r98}, {}, {r43, r19}, {0x0, r12}, {}, {}, {r58}, {0x0, r49}, {r120}, {r61}, {}, {}, {r100}, {r83}, {}, {}, {0x0, r7}, {}, {0x0, r23}, {r16}, {0x0, r77}, {}, {r92, r6}, {}, {0x0, r27}, {0x0, r65}, {r66}, {r28}, {}, {}, {}, {r87}, {}, {r91}, {}, {}, {}, {}, {r3}, {0x0, r29}, {}, {}, {0x0, r53}, {0x0, r10}, {r16}, {r78}, {r54, r37}, {r113}, {0x0, r45}, {}, {}, {}, {r39}, {0x0, r102}, {0x0, r12}, {r99}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r101}, {r59}, {}, {}, {}, {r30}, {}, {r36, r9}, {r42}, {}, {0x0, r44}, {0x0, r67}, {r63}, {}, {r20, r7}, {}, {0x0, r51}, {0x0, r14}, {r43}, {r97, r35}, {r75, r55}, {}, {0x0, r107}, {r24, r49}, {}, {}, {}, {}, {}, {r103, r117}, {}, {}, {}, {0x0, r108}, {}, {}, {r109}, {r31}, {r62}, {}, {r69}, {}, {}, {}, {}, {}, {0x0, r22}, {0x0, r81}, {}, {}, {r13}, {}, {}, {r78}, {}, {r80, r93}, {}, {r56}, {}, {}, {}, {0x0, r70}, {}, {}, {}, {0x0, r37}, {}, {r1}, {}, {}, {0x0, r118}, {0x0, r74}, {0x0, r95}, {}, {}, {}, {0x0, r17}, {}, {}, {0x0, r104}, {}, {0x0, r32}, {r48}], 0x8, "3c1d4c65c79995"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004fd40)={0x8000, [], 0x3, "29641c499fec9a"})
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r121 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1)
ioctl$USBDEVFS_IOCTL(r121, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000})

01:24:29 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000240)={0x18, &(0x7f0000000040)={0x0, 0x0, 0xf, {0xf, 0x0, "afe1b580dc8b0421b49222ffb0"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000080))

[  222.516091][T10314] loop3: detected capacity change from 0 to 4
[  222.592408][T10314] EXT4-fs (loop3): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31
01:24:29 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000040)=0x5, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000100)={0x1, 'vlan0\x00'}, 0x18)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'veth0_to_batadv\x00'}, 0x18)
getsockname$inet(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x4ea00)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'veth1_to_bond\x00', 0x0})
socket$inet_udp(0x2, 0x2, 0x0)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0)
ppoll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x8}, {}, {r2, 0xa485}], 0x3, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240)={[0x1]}, 0x8)

[  222.739279][T10314] loop3: detected capacity change from 0 to 4
01:24:29 executing program 2:
epoll_create1(0x0)
syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee9000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0)
io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0)

[  222.781512][T10314] EXT4-fs (loop3): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31
01:24:29 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x3}}]})

[  222.978416][ T8137] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  223.040464][T10334] loop3: detected capacity change from 0 to 4
[  223.064640][T10334] EXT4-fs (loop3): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31
[  223.128140][ T8204] Bluetooth: hci4: command 0x0419 tx timeout
[  223.217212][ T8092] Bluetooth: hci5: command 0x0419 tx timeout
01:24:29 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x3}}]})

[  223.277548][T10342] IPVS: sync thread started: state = MASTER, mcast_ifn = vlan0, syncid = 0, id = 0
[  223.301435][T10325] IPVS: stopping master sync thread 10342 ...
[  223.367575][ T8137] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  223.404627][ T8137] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  223.498017][ T8137] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  223.545145][T10352] loop3: detected capacity change from 0 to 4
[  223.579963][ T8137] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  223.590033][ T8907] device hsr_slave_0 left promiscuous mode
[  223.596348][T10352] EXT4-fs (loop3): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31
[  223.624530][ T8137] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  223.656057][ T8137] usb 1-1: config 0 descriptor??
[  223.684323][ T8907] device hsr_slave_1 left promiscuous mode
[  223.710010][ T8907] device bridge_slave_1 left promiscuous mode
[  223.732551][ T8907] bridge0: port 2(bridge_slave_1) entered disabled state
[  223.748266][ T8907] device bridge_slave_0 left promiscuous mode
[  223.754541][ T8907] bridge0: port 1(bridge_slave_0) entered disabled state
[  223.781717][T10301] IPVS: set_ctl: invalid protocol: 94 100.1.1.0:20001
[  223.792054][ T8907] device veth1_macvtap left promiscuous mode
[  223.802040][ T8907] device veth0_macvtap left promiscuous mode
[  223.811474][ T8907] device veth1_vlan left promiscuous mode
[  223.823376][ T8907] device veth0_vlan left promiscuous mode
[  223.836002][T10301] overlayfs: missing 'lowerdir'
[  223.898243][T10301] binder: 10293:10301 ioctl 40046205 0 returned -22
[  224.142046][ T8137] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x2
[  224.184434][ T8137] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving
[  224.265808][ T8137] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  224.332822][ T8907] team0 (unregistering): Port device team_slave_1 removed
[  224.405042][T10377] IPVS: set_ctl: invalid protocol: 94 100.1.1.0:20001
[  224.424004][ T8907] team0 (unregistering): Port device team_slave_0 removed
[  224.440584][ T7317] usb 1-1: USB disconnect, device number 2
[  224.450685][T10378] overlayfs: missing 'lowerdir'
[  224.490061][T10382] binder: 10293:10382 ioctl 40046205 0 returned -22
[  224.536336][ T8907] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  224.554513][ T8907] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  224.662189][ T8907] bond0 (unregistering): Released all slaves
[  225.217072][ T8232] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  225.577439][ T8232] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  225.594084][ T8232] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  225.605651][ T8232] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  225.625514][ T8232] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  225.643439][ T8232] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  225.655919][ T8232] usb 1-1: config 0 descriptor??
[  225.967203][ T8232] usbhid 1-1:0.0: can't add hid device: -71
[  225.974366][ T8232] usbhid: probe of 1-1:0.0 failed with error -71
[  225.983815][ T8232] usb 1-1: USB disconnect, device number 3
[  239.220416][T10450] chnl_net:caif_netlink_parms(): no params data found
[  239.276707][T10450] bridge0: port 1(bridge_slave_0) entered blocking state
[  239.286493][T10450] bridge0: port 1(bridge_slave_0) entered disabled state
[  239.295308][T10450] device bridge_slave_0 entered promiscuous mode
[  239.304609][T10450] bridge0: port 2(bridge_slave_1) entered blocking state
[  239.313819][T10450] bridge0: port 2(bridge_slave_1) entered disabled state
[  239.321881][T10450] device bridge_slave_1 entered promiscuous mode
[  239.345539][T10450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  239.357517][T10450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  239.384608][T10450] team0: Port device team_slave_0 added
[  239.394724][T10450] team0: Port device team_slave_1 added
[  239.417990][T10450] batman_adv: batadv0: Adding interface: batadv_slave_0
[  239.425030][T10450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  239.451986][T10450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  239.465070][T10450] batman_adv: batadv0: Adding interface: batadv_slave_1
[  239.472402][T10450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  239.499592][T10450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  239.535111][T10450] device hsr_slave_0 entered promiscuous mode
[  239.542086][T10450] device hsr_slave_1 entered promiscuous mode
[  239.549564][T10450] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  239.557105][T10450] Cannot create hsr debugfs directory
[  239.640266][T10450] bridge0: port 2(bridge_slave_1) entered blocking state
[  239.647770][T10450] bridge0: port 2(bridge_slave_1) entered forwarding state
[  239.655462][T10450] bridge0: port 1(bridge_slave_0) entered blocking state
[  239.663299][T10450] bridge0: port 1(bridge_slave_0) entered forwarding state
[  239.713405][T10450] 8021q: adding VLAN 0 to HW filter on device bond0
[  239.729547][ T7317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  239.738179][ T7317] bridge0: port 1(bridge_slave_0) entered disabled state
[  239.746614][ T7317] bridge0: port 2(bridge_slave_1) entered disabled state
[  239.755653][ T7317] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  239.769572][T10450] 8021q: adding VLAN 0 to HW filter on device team0
[  239.788633][ T7317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  239.797948][ T7317] bridge0: port 1(bridge_slave_0) entered blocking state
[  239.805076][ T7317] bridge0: port 1(bridge_slave_0) entered forwarding state
[  239.815008][ T7317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  239.823812][ T7317] bridge0: port 2(bridge_slave_1) entered blocking state
[  239.831015][ T7317] bridge0: port 2(bridge_slave_1) entered forwarding state
[  239.848381][ T7317] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  239.857865][ T7317] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  239.877886][ T7317] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  239.886476][ T7317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  239.895357][ T7317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  239.905319][T10450] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  239.925989][ T8232] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  239.933784][ T8232] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  239.952783][T10450] 8021q: adding VLAN 0 to HW filter on device batadv0
[  240.014598][ T1142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  240.036413][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  240.045133][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  240.053347][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  240.063948][T10450] device veth0_vlan entered promiscuous mode
[  240.079840][T10450] device veth1_vlan entered promiscuous mode
[  240.106254][ T1142] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  240.114316][ T1142] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  240.122816][ T1142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  240.134604][T10450] device veth0_macvtap entered promiscuous mode
[  240.146529][T10450] device veth1_macvtap entered promiscuous mode
[  240.166535][T10450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  240.179625][T10450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.189571][T10450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  240.200056][T10450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.210586][T10450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  240.221405][T10450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.231579][T10450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  240.242055][T10450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.252191][T10450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  240.262979][T10450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.275098][T10450] batman_adv: batadv0: Interface activated: batadv_slave_0
[  240.284113][ T8232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  240.294103][ T8232] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  240.305222][T10450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  240.316861][T10450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.328096][T10450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  240.338614][T10450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.349570][T10450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  240.360308][T10450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.370601][T10450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  240.381617][T10450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.392646][T10450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  240.403158][T10450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.415413][T10450] batman_adv: batadv0: Interface activated: batadv_slave_1
[  240.423691][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  240.432319][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  240.512534][   T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  240.534262][   T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  240.561191][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  240.579297][   T10] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  240.589075][   T10] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  240.601145][ T1142] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
01:24:47 executing program 4:
socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0)
recvmmsg(r1, &(0x7f0000005d40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004ac0)=""/206, 0xce}}], 0x1, 0x0, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmmsg(r3, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=""/233, 0xe9}}], 0x1, 0x122, 0x0)
sendmsg(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0)
recvmmsg(r3, &(0x7f0000005840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004500)=""/102, 0x66}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/172, 0xac}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000005040)=""/128, 0x80}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000005540)=""/112, 0x70}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000005740)=""/227, 0xe3}}], 0x5, 0x2002, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)

01:24:47 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000040)=0x5, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000100)={0x1, 'vlan0\x00'}, 0x18)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'veth0_to_batadv\x00'}, 0x18)
getsockname$inet(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x4ea00)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'veth1_to_bond\x00', 0x0})
socket$inet_udp(0x2, 0x2, 0x0)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0)
ppoll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x8}, {}, {r2, 0xa485}], 0x3, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240)={[0x1]}, 0x8)

01:24:47 executing program 2:
epoll_create1(0x0)
syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee9000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0)
io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0)

01:24:47 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x3}}]})

01:24:47 executing program 5:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
unshare(0x48020200)
mkdir(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
mount(0x0, &(0x7f00000018c0)='./file0\x00', &(0x7f0000000380)='hugetlbfs\x00', 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0)
renameat(r2, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f0000000000)='./file0\x00')
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000140)={0x5e, @rand_addr=0x64010100, 0x4e21, 0x0, 'nq\x00', 0x0, 0x5}, 0x2c)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x804800, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xd3, 0x0, &(0x7f0000000bc0)="f233adf444ba8c37f3ef45e2b78934f1279e3fc4be5b8609716762db10fb08c381cec523810131e0d5a2ca3590d381d2a5b5f4d17d60b28dfc47b219397a29a072b840ea9a4dae47c4bde6799ab8a1b0b8857062a686026edf3e3bbccb403679ff3fb59b0d8f7a8b06e840dc6be586f0d14615bf63a3d5174104ff09c8006823bab9f028f883ac1f2bc2b3b4340aedee796ad70a8ecfa48d5db7d9e6369e021db95d4f433e4b3ce51fa4d0341f04e006cf6eca060d69cd61fdfcb6a717438028eba77c3de156d0aec4537fc3ffff3f91cdd625"})

01:24:47 executing program 0:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
unshare(0x48020200)
mkdir(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
mount(0x0, &(0x7f00000018c0)='./file0\x00', &(0x7f0000000380)='hugetlbfs\x00', 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0)
renameat(r2, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f0000000000)='./file0\x00')
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000140)={0x5e, @rand_addr=0x64010100, 0x4e21, 0x0, 'nq\x00', 0x0, 0x5}, 0x2c)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x804800, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xd3, 0x0, &(0x7f0000000bc0)="f233adf444ba8c37f3ef45e2b78934f1279e3fc4be5b8609716762db10fb08c381cec523810131e0d5a2ca3590d381d2a5b5f4d17d60b28dfc47b219397a29a072b840ea9a4dae47c4bde6799ab8a1b0b8857062a686026edf3e3bbccb403679ff3fb59b0d8f7a8b06e840dc6be586f0d14615bf63a3d5174104ff09c8006823bab9f028f883ac1f2bc2b3b4340aedee796ad70a8ecfa48d5db7d9e6369e021db95d4f433e4b3ce51fa4d0341f04e006cf6eca060d69cd61fdfcb6a717438028eba77c3de156d0aec4537fc3ffff3f91cdd625"})

[  240.765806][T10804] loop3: detected capacity change from 0 to 4
[  240.775102][T10808] IPVS: sync thread started: state = MASTER, mcast_ifn = vlan0, syncid = 0, id = 0
[  240.776264][T10803] IPVS: stopping master sync thread 10808 ...
[  240.797358][T10804] EXT4-fs (loop3): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31
01:24:47 executing program 4:
socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0)
recvmmsg(r1, &(0x7f0000005d40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004ac0)=""/206, 0xce}}], 0x1, 0x0, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmmsg(r3, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=""/233, 0xe9}}], 0x1, 0x122, 0x0)
sendmsg(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0)
recvmmsg(r3, &(0x7f0000005840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004500)=""/102, 0x66}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/172, 0xac}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000005040)=""/128, 0x80}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000005540)=""/112, 0x70}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000005740)=""/227, 0xe3}}], 0x5, 0x2002, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)

01:24:47 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000040)=0x5, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000100)={0x1, 'vlan0\x00'}, 0x18)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'veth0_to_batadv\x00'}, 0x18)
getsockname$inet(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x4ea00)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'veth1_to_bond\x00', 0x0})
socket$inet_udp(0x2, 0x2, 0x0)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0)
ppoll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x8}, {}, {r2, 0xa485}], 0x3, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240)={[0x1]}, 0x8)

01:24:47 executing program 3:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000600)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000400)='L', 0x1)
tee(r2, r1, 0x3, 0x0)
read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3)

[  241.137445][ T8073] Bluetooth: hci2: command 0x0409 tx timeout
01:24:47 executing program 3:
ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0)
sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="ca008b75c417bcf4", @ANYRES16=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x20040042}, 0x84)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
chdir(&(0x7f0000000280)='./file0\x00')
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x20)
ftruncate(r0, 0x208200)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0)
read(r2, &(0x7f0000000180)=""/19, 0x11fffffc7)
move_pages(0xffffffffffffffff, 0x2, &(0x7f0000000000)=[&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil], &(0x7f0000000100), 0x0, 0x4)

01:24:47 executing program 4:
socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0)
recvmmsg(r1, &(0x7f0000005d40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004ac0)=""/206, 0xce}}], 0x1, 0x0, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmmsg(r3, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=""/233, 0xe9}}], 0x1, 0x122, 0x0)
sendmsg(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0)
recvmmsg(r3, &(0x7f0000005840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004500)=""/102, 0x66}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/172, 0xac}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000005040)=""/128, 0x80}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000005540)=""/112, 0x70}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000005740)=""/227, 0xe3}}], 0x5, 0x2002, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)

01:24:48 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x15, 0xa, 0x301, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}]}, 0x1c}}, 0x0)

[  241.549365][T10861] IPVS: sync thread started: state = MASTER, mcast_ifn = vlan0, syncid = 0, id = 0
01:24:48 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000040)=0x5, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000100)={0x1, 'vlan0\x00'}, 0x18)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'veth0_to_batadv\x00'}, 0x18)
getsockname$inet(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x4ea00)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'veth1_to_bond\x00', 0x0})
socket$inet_udp(0x2, 0x2, 0x0)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0)
ppoll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x8}, {}, {r2, 0xa485}], 0x3, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240)={[0x1]}, 0x8)

01:24:48 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @link_local}]}}}]}, 0x40}}, 0x0)

01:24:48 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x15, 0xa, 0x301, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}]}, 0x1c}}, 0x0)

[  241.843947][T10880] IPVS: stopping master sync thread 10861 ...
01:24:48 executing program 1:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xd, 0xa1, 0xb5, 0x8, 0x8dd, 0x986, 0xe2a1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x29, 0x1c, 0xef}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001140)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="00800100000064"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000300)={0x0, 0x0, 0x2, "0533"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000d80)={0x84, &(0x7f0000000980)={0x0, 0x0, 0x1, '<'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[  242.307420][ T8232] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  242.547348][ T8232] usb 2-1: Using ep0 maxpacket: 8
[  242.580380][T10805] IPVS: set_ctl: invalid protocol: 94 100.1.1.0:20001
[  242.590705][T10805] overlayfs: missing 'lowerdir'
[  242.646503][T10802] IPVS: set_ctl: invalid protocol: 94 100.1.1.0:20001
[  242.660815][T10802] overlayfs: missing 'lowerdir'
[  242.672398][ T8232] usb 2-1: New USB device found, idVendor=08dd, idProduct=0986, bcdDevice=e2.a1
[  242.683384][ T8232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  242.700524][ T8232] usb 2-1: config 0 descriptor??
[  243.045123][T10805] binder: 10800:10805 ioctl 40046205 0 returned -22
[  243.053124][T10802] binder: 10798:10802 ioctl 40046205 0 returned -22
01:24:49 executing program 5:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
unshare(0x48020200)
mkdir(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
mount(0x0, &(0x7f00000018c0)='./file0\x00', &(0x7f0000000380)='hugetlbfs\x00', 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0)
renameat(r2, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f0000000000)='./file0\x00')
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000140)={0x5e, @rand_addr=0x64010100, 0x4e21, 0x0, 'nq\x00', 0x0, 0x5}, 0x2c)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x804800, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xd3, 0x0, &(0x7f0000000bc0)="f233adf444ba8c37f3ef45e2b78934f1279e3fc4be5b8609716762db10fb08c381cec523810131e0d5a2ca3590d381d2a5b5f4d17d60b28dfc47b219397a29a072b840ea9a4dae47c4bde6799ab8a1b0b8857062a686026edf3e3bbccb403679ff3fb59b0d8f7a8b06e840dc6be586f0d14615bf63a3d5174104ff09c8006823bab9f028f883ac1f2bc2b3b4340aedee796ad70a8ecfa48d5db7d9e6369e021db95d4f433e4b3ce51fa4d0341f04e006cf6eca060d69cd61fdfcb6a717438028eba77c3de156d0aec4537fc3ffff3f91cdd625"})

[  243.207372][ T8137] Bluetooth: hci2: command 0x041b tx timeout
01:24:49 executing program 0:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
unshare(0x48020200)
mkdir(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
mount(0x0, &(0x7f00000018c0)='./file0\x00', &(0x7f0000000380)='hugetlbfs\x00', 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0)
renameat(r2, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f0000000000)='./file0\x00')
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000140)={0x5e, @rand_addr=0x64010100, 0x4e21, 0x0, 'nq\x00', 0x0, 0x5}, 0x2c)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x804800, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xd3, 0x0, &(0x7f0000000bc0)="f233adf444ba8c37f3ef45e2b78934f1279e3fc4be5b8609716762db10fb08c381cec523810131e0d5a2ca3590d381d2a5b5f4d17d60b28dfc47b219397a29a072b840ea9a4dae47c4bde6799ab8a1b0b8857062a686026edf3e3bbccb403679ff3fb59b0d8f7a8b06e840dc6be586f0d14615bf63a3d5174104ff09c8006823bab9f028f883ac1f2bc2b3b4340aedee796ad70a8ecfa48d5db7d9e6369e021db95d4f433e4b3ce51fa4d0341f04e006cf6eca060d69cd61fdfcb6a717438028eba77c3de156d0aec4537fc3ffff3f91cdd625"})

01:24:49 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x15, 0xa, 0x301, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}]}, 0x1c}}, 0x0)

01:24:49 executing program 4:
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x301, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, @perf_bp={0x0, 0xd}, 0x0, 0x200000000, 0x0, 0x1, 0x3ff, 0x0, 0x38}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
mount(0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)='SEG6\x00')
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='bridge0\x00', 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @rand_addr=0xe4010100}, 0x10)
sendmmsg(r0, &(0x7f00000038c0), 0x4000000000000a8, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

01:24:49 executing program 3:
ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0)
sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="ca008b75c417bcf4", @ANYRES16=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x20040042}, 0x84)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
chdir(&(0x7f0000000280)='./file0\x00')
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x20)
ftruncate(r0, 0x208200)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0)
read(r2, &(0x7f0000000180)=""/19, 0x11fffffc7)
move_pages(0xffffffffffffffff, 0x2, &(0x7f0000000000)=[&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil], &(0x7f0000000100), 0x0, 0x4)

01:24:50 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x15, 0xa, 0x301, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}]}, 0x1c}}, 0x0)

01:24:50 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000000)=0xc9ab)
close(r0)

[  244.053150][T10913] IPVS: set_ctl: invalid protocol: 94 100.1.1.0:20001
[  244.123311][T10913] overlayfs: missing 'lowerdir'
01:24:50 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000000)=0xc9ab)
close(r0)

01:24:50 executing program 4:
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x301, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, @perf_bp={0x0, 0xd}, 0x0, 0x200000000, 0x0, 0x1, 0x3ff, 0x0, 0x38}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
mount(0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)='SEG6\x00')
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='bridge0\x00', 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @rand_addr=0xe4010100}, 0x10)
sendmmsg(r0, &(0x7f00000038c0), 0x4000000000000a8, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

01:24:51 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000000)=0xc9ab)
close(r0)

[  244.517894][ T8232] pegasus 2-1:0.0: can't reset MAC
[  244.523487][ T8232] pegasus: probe of 2-1:0.0 failed with error -5
[  244.582446][ T8232] usb 2-1: USB disconnect, device number 2
01:24:51 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000000)=0xc9ab)
close(r0)

[  245.280058][T10905] binder: 10904:10905 ioctl 40046205 0 returned -22
[  245.291550][ T8137] Bluetooth: hci2: command 0x040f tx timeout
[  245.297896][ T7317] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  245.360770][T10914] IPVS: set_ctl: invalid protocol: 94 100.1.1.0:20001
[  245.380232][T10914] overlayfs: missing 'lowerdir'
[  245.439809][T10914] binder: 10911:10914 ioctl 40046205 0 returned -22
[  245.559575][ T7317] usb 2-1: Using ep0 maxpacket: 8
[  245.680480][ T7317] usb 2-1: New USB device found, idVendor=08dd, idProduct=0986, bcdDevice=e2.a1
[  245.700477][ T7317] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  245.729012][ T7317] usb 2-1: config 0 descriptor??
01:24:52 executing program 1:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xd, 0xa1, 0xb5, 0x8, 0x8dd, 0x986, 0xe2a1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x29, 0x1c, 0xef}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001140)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="00800100000064"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000300)={0x0, 0x0, 0x2, "0533"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000d80)={0x84, &(0x7f0000000980)={0x0, 0x0, 0x1, '<'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:24:52 executing program 4:
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x301, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, @perf_bp={0x0, 0xd}, 0x0, 0x200000000, 0x0, 0x1, 0x3ff, 0x0, 0x38}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
mount(0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)='SEG6\x00')
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='bridge0\x00', 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @rand_addr=0xe4010100}, 0x10)
sendmmsg(r0, &(0x7f00000038c0), 0x4000000000000a8, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

[  246.012145][ T7317] pegasus: probe of 2-1:0.0 failed with error -71
[  246.064693][ T7317] usb 2-1: USB disconnect, device number 3
01:24:52 executing program 0:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
unshare(0x48020200)
mkdir(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
mount(0x0, &(0x7f00000018c0)='./file0\x00', &(0x7f0000000380)='hugetlbfs\x00', 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0)
renameat(r2, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f0000000000)='./file0\x00')
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000140)={0x5e, @rand_addr=0x64010100, 0x4e21, 0x0, 'nq\x00', 0x0, 0x5}, 0x2c)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x804800, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xd3, 0x0, &(0x7f0000000bc0)="f233adf444ba8c37f3ef45e2b78934f1279e3fc4be5b8609716762db10fb08c381cec523810131e0d5a2ca3590d381d2a5b5f4d17d60b28dfc47b219397a29a072b840ea9a4dae47c4bde6799ab8a1b0b8857062a686026edf3e3bbccb403679ff3fb59b0d8f7a8b06e840dc6be586f0d14615bf63a3d5174104ff09c8006823bab9f028f883ac1f2bc2b3b4340aedee796ad70a8ecfa48d5db7d9e6369e021db95d4f433e4b3ce51fa4d0341f04e006cf6eca060d69cd61fdfcb6a717438028eba77c3de156d0aec4537fc3ffff3f91cdd625"})

01:24:52 executing program 2:
syz_mount_image$ntfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f0000002740)={[{@show_sys_files_no}, {@uid={'uid', 0x3d, 0xee01}}, {@case_sensitive_no}, {@errors_continue}, {@case_sensitive_yes}, {@mft_zone_multiplier}, {@disable_sparse_no}, {@show_sys_files_yes}, {@mft_zone_multiplier}, {@uid={'uid', 0x3d, 0xee01}}]})

01:24:52 executing program 4:
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x301, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, @perf_bp={0x0, 0xd}, 0x0, 0x200000000, 0x0, 0x1, 0x3ff, 0x0, 0x38}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
mount(0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)='SEG6\x00')
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='bridge0\x00', 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @rand_addr=0xe4010100}, 0x10)
sendmmsg(r0, &(0x7f00000038c0), 0x4000000000000a8, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

[  246.391109][T11011] ntfs: (device loop2): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1.
[  246.402603][T11011] ntfs: (device loop2): ntfs_fill_super(): Unable to determine device size.
[  246.436902][T11011] ntfs: (device loop2): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1.
[  246.462008][T11011] ntfs: (device loop2): ntfs_fill_super(): Unable to determine device size.
[  246.517455][ T7317] usb 2-1: new high-speed USB device number 4 using dummy_hcd
01:24:53 executing program 3:
ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0)
sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="ca008b75c417bcf4", @ANYRES16=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x20040042}, 0x84)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
chdir(&(0x7f0000000280)='./file0\x00')
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x20)
ftruncate(r0, 0x208200)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0)
read(r2, &(0x7f0000000180)=""/19, 0x11fffffc7)
move_pages(0xffffffffffffffff, 0x2, &(0x7f0000000000)=[&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil], &(0x7f0000000100), 0x0, 0x4)

01:24:53 executing program 5:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
unshare(0x48020200)
mkdir(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
mount(0x0, &(0x7f00000018c0)='./file0\x00', &(0x7f0000000380)='hugetlbfs\x00', 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0)
renameat(r2, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f0000000000)='./file0\x00')
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000140)={0x5e, @rand_addr=0x64010100, 0x4e21, 0x0, 'nq\x00', 0x0, 0x5}, 0x2c)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x804800, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xd3, 0x0, &(0x7f0000000bc0)="f233adf444ba8c37f3ef45e2b78934f1279e3fc4be5b8609716762db10fb08c381cec523810131e0d5a2ca3590d381d2a5b5f4d17d60b28dfc47b219397a29a072b840ea9a4dae47c4bde6799ab8a1b0b8857062a686026edf3e3bbccb403679ff3fb59b0d8f7a8b06e840dc6be586f0d14615bf63a3d5174104ff09c8006823bab9f028f883ac1f2bc2b3b4340aedee796ad70a8ecfa48d5db7d9e6369e021db95d4f433e4b3ce51fa4d0341f04e006cf6eca060d69cd61fdfcb6a717438028eba77c3de156d0aec4537fc3ffff3f91cdd625"})

01:24:53 executing program 2:
syz_mount_image$ntfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f0000002740)={[{@show_sys_files_no}, {@uid={'uid', 0x3d, 0xee01}}, {@case_sensitive_no}, {@errors_continue}, {@case_sensitive_yes}, {@mft_zone_multiplier}, {@disable_sparse_no}, {@show_sys_files_yes}, {@mft_zone_multiplier}, {@uid={'uid', 0x3d, 0xee01}}]})

[  246.778599][ T7317] usb 2-1: Using ep0 maxpacket: 8
[  246.874345][T11037] ntfs: (device loop2): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1.
[  246.899052][ T7317] usb 2-1: New USB device found, idVendor=08dd, idProduct=0986, bcdDevice=e2.a1
[  246.914094][T11037] ntfs: (device loop2): ntfs_fill_super(): Unable to determine device size.
[  246.929984][ T7317] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.046519][ T7317] usb 2-1: config 0 descriptor??
01:24:53 executing program 2:
syz_mount_image$ntfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f0000002740)={[{@show_sys_files_no}, {@uid={'uid', 0x3d, 0xee01}}, {@case_sensitive_no}, {@errors_continue}, {@case_sensitive_yes}, {@mft_zone_multiplier}, {@disable_sparse_no}, {@show_sys_files_yes}, {@mft_zone_multiplier}, {@uid={'uid', 0x3d, 0xee01}}]})

[  247.155481][T11023] IPVS: set_ctl: invalid protocol: 94 100.1.1.0:20001
01:24:53 executing program 4:
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, 0x3, &(0x7f0000000340)=[{&(0x7f0000000140)="140fe1398221c50f6a38e09b76b55d259dda24f6f92aed0cee3ee9f880255c2ba68fce6e2c5fd348bcb70abf67e54685a8dd73c8eed8f889d7dfe3df0f4cdae90bbf56dde2d2492171baae41e4596626adced30a7df4e1dfcb0995cd824739d92a91d8b84d88ae6a7673cb7d7b7ee6ed9512b27a183a3272d221e92373cfaca18666e61cdfc36ecb587c3d48e60b72bf0ebfe579f6e28f1c4775995eb465694df36882368a2d281d866a24ec40aa82629f59c92d4a44d323480aa4a060d9f94f0c68d215fd63645af6c424e80a46dba817753da64e35fb8b5723", 0xda, 0x1}, {&(0x7f0000000280)="26ae4c1c428dc2d50bd34446487cadb9a2475a06db1d8efd426a42bd", 0x1c}, {&(0x7f0000000300)="ffd1e519ecdff8d2f6bb06ebec06257704b43785049dd93c009cc0a197e3fb903e40b66f1c4d2bb4a048f3", 0x2b, 0xfb57}], 0x1102000, &(0x7f0000001a40)=ANY=[@ANYBLOB="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"])
poll(0x0, 0x0, 0x1ff)
syz_open_dev$sndpcmp(&(0x7f0000002180), 0x0, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000003c0)=0x4)

[  247.330228][T11063] ntfs: (device loop2): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1.
[  247.356282][T11063] ntfs: (device loop2): ntfs_fill_super(): Unable to determine device size.
[  247.367952][ T8232] Bluetooth: hci2: command 0x0419 tx timeout
01:24:54 executing program 2:
syz_mount_image$ntfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f0000002740)={[{@show_sys_files_no}, {@uid={'uid', 0x3d, 0xee01}}, {@case_sensitive_no}, {@errors_continue}, {@case_sensitive_yes}, {@mft_zone_multiplier}, {@disable_sparse_no}, {@show_sys_files_yes}, {@mft_zone_multiplier}, {@uid={'uid', 0x3d, 0xee01}}]})

[  247.510367][T11070] loop4: detected capacity change from 0 to 251
[  247.546508][T11042] IPVS: set_ctl: invalid protocol: 94 100.1.1.0:20001
[  247.603153][T11093] ntfs: (device loop2): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1.
[  247.638787][T11093] ntfs: (device loop2): ntfs_fill_super(): Unable to determine device size.
[  247.665502][T11086] loop4: detected capacity change from 0 to 251
[  247.690521][T11042] overlayfs: missing 'lowerdir'
01:24:54 executing program 4:
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, 0x3, &(0x7f0000000340)=[{&(0x7f0000000140)="140fe1398221c50f6a38e09b76b55d259dda24f6f92aed0cee3ee9f880255c2ba68fce6e2c5fd348bcb70abf67e54685a8dd73c8eed8f889d7dfe3df0f4cdae90bbf56dde2d2492171baae41e4596626adced30a7df4e1dfcb0995cd824739d92a91d8b84d88ae6a7673cb7d7b7ee6ed9512b27a183a3272d221e92373cfaca18666e61cdfc36ecb587c3d48e60b72bf0ebfe579f6e28f1c4775995eb465694df36882368a2d281d866a24ec40aa82629f59c92d4a44d323480aa4a060d9f94f0c68d215fd63645af6c424e80a46dba817753da64e35fb8b5723", 0xda, 0x1}, {&(0x7f0000000280)="26ae4c1c428dc2d50bd34446487cadb9a2475a06db1d8efd426a42bd", 0x1c}, {&(0x7f0000000300)="ffd1e519ecdff8d2f6bb06ebec06257704b43785049dd93c009cc0a197e3fb903e40b66f1c4d2bb4a048f3", 0x2b, 0xfb57}], 0x1102000, &(0x7f0000001a40)=ANY=[@ANYBLOB="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"])
poll(0x0, 0x0, 0x1ff)
syz_open_dev$sndpcmp(&(0x7f0000002180), 0x0, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000003c0)=0x4)

[  247.894716][T11113] loop4: detected capacity change from 0 to 251
[  247.975053][T11021] overlayfs: missing 'lowerdir'
[  248.463081][T11021] binder: 11015:11021 ioctl 40046205 0 returned -22
[  248.887578][ T7317] pegasus 2-1:0.0: can't reset MAC
[  248.892913][ T7317] pegasus: probe of 2-1:0.0 failed with error -5
[  248.920139][ T7317] usb 2-1: USB disconnect, device number 4
01:24:55 executing program 2:
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, 0x3, &(0x7f0000000340)=[{&(0x7f0000000140)="140fe1398221c50f6a38e09b76b55d259dda24f6f92aed0cee3ee9f880255c2ba68fce6e2c5fd348bcb70abf67e54685a8dd73c8eed8f889d7dfe3df0f4cdae90bbf56dde2d2492171baae41e4596626adced30a7df4e1dfcb0995cd824739d92a91d8b84d88ae6a7673cb7d7b7ee6ed9512b27a183a3272d221e92373cfaca18666e61cdfc36ecb587c3d48e60b72bf0ebfe579f6e28f1c4775995eb465694df36882368a2d281d866a24ec40aa82629f59c92d4a44d323480aa4a060d9f94f0c68d215fd63645af6c424e80a46dba817753da64e35fb8b5723", 0xda, 0x1}, {&(0x7f0000000280)="26ae4c1c428dc2d50bd34446487cadb9a2475a06db1d8efd426a42bd", 0x1c}, {&(0x7f0000000300)="ffd1e519ecdff8d2f6bb06ebec06257704b43785049dd93c009cc0a197e3fb903e40b66f1c4d2bb4a048f3", 0x2b, 0xfb57}], 0x1102000, &(0x7f0000001a40)=ANY=[@ANYBLOB="3030303030303030303030303030303030303030302c7574830f5d152c666d61736b3d3030303030303030303030303030303030303030303030380006088100e6820657f37c74cd118d1b65929de3040ebaaf5be08c39929a730ae2110599145105000000d8fa52ce14fc26563d6da682810f0c20ffff0000a66055193237400fca927485897fd6aa3aaac39766c39842288efe2a73a2c997674466280317abeb6c34b9e173c0d9686ecc6918ef1c765fc08612d623030957a5635b5e79fcb5014e16763736937835e03bd8f3a4a839f354382f989eaf9d2528d9f4005a0cf9347da40169d72e0c2bc46aaf5ee7f12f0baaeb6fc070f858ae6eac0ff29275965a5871cc8120535e0000bf63068cc8054cb75c0c47a93b5dd33afb87f757a38a5b75195709ca5739d72f65262948cbb202c81dd9d1eae31d62b8e784b74f9e6b95ca6720cc76ca810f5ddc3eb6272e8774a7b1ab81a021cfc92a140aa0a332da0b5ced4065810fbd6a862cb40c00000000dc85640ce7d722c45e93c939eb55000000000000000000000040000000342748b3aa0381b379147659b5d98aac1c9cbdbeb10aae14c06f9ec6f8213b414064000000000000009660b4383c807f8de7ab73606e48b0f7153cf2d6714830b98ea2b58a41bfc99644ccc822e4bd968644e69ce597c20ed3baf0be76cc7ddbc078e5848e35655b294897822a4bc134ee5bf6311a70b0007f03c9a73cba9e200c3d53f55454ac56f5f90f40cf2e6a865eebe08b6ec6eab3d1796b0c73e3e0b8714b66db9895f37f16abc568a6167e5b0f5baae750e4c6b11f4cdc2a8c48c0083fad5b0764e423ec848b415fae7162e4a9fc992774f6762a8bfec96a746a8499280dc66aef388b9a9842d37cda65edb8162bc554909640"])
poll(0x0, 0x0, 0x1ff)
syz_open_dev$sndpcmp(&(0x7f0000002180), 0x0, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000003c0)=0x4)

01:24:55 executing program 1:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xd, 0xa1, 0xb5, 0x8, 0x8dd, 0x986, 0xe2a1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x29, 0x1c, 0xef}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001140)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="00800100000064"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000300)={0x0, 0x0, 0x2, "0533"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000d80)={0x84, &(0x7f0000000980)={0x0, 0x0, 0x1, '<'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[  249.563181][T11135] loop2: detected capacity change from 0 to 251
[  249.716192][T11035] binder: 11030:11035 ioctl 40046205 0 returned -22
[  249.817382][ T8232] usb 2-1: new high-speed USB device number 5 using dummy_hcd
01:24:56 executing program 3:
ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0)
sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="ca008b75c417bcf4", @ANYRES16=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x20040042}, 0x84)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
chdir(&(0x7f0000000280)='./file0\x00')
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x20)
ftruncate(r0, 0x208200)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0)
read(r2, &(0x7f0000000180)=""/19, 0x11fffffc7)
move_pages(0xffffffffffffffff, 0x2, &(0x7f0000000000)=[&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil], &(0x7f0000000100), 0x0, 0x4)

01:24:56 executing program 4:
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, 0x3, &(0x7f0000000340)=[{&(0x7f0000000140)="140fe1398221c50f6a38e09b76b55d259dda24f6f92aed0cee3ee9f880255c2ba68fce6e2c5fd348bcb70abf67e54685a8dd73c8eed8f889d7dfe3df0f4cdae90bbf56dde2d2492171baae41e4596626adced30a7df4e1dfcb0995cd824739d92a91d8b84d88ae6a7673cb7d7b7ee6ed9512b27a183a3272d221e92373cfaca18666e61cdfc36ecb587c3d48e60b72bf0ebfe579f6e28f1c4775995eb465694df36882368a2d281d866a24ec40aa82629f59c92d4a44d323480aa4a060d9f94f0c68d215fd63645af6c424e80a46dba817753da64e35fb8b5723", 0xda, 0x1}, {&(0x7f0000000280)="26ae4c1c428dc2d50bd34446487cadb9a2475a06db1d8efd426a42bd", 0x1c}, {&(0x7f0000000300)="ffd1e519ecdff8d2f6bb06ebec06257704b43785049dd93c009cc0a197e3fb903e40b66f1c4d2bb4a048f3", 0x2b, 0xfb57}], 0x1102000, &(0x7f0000001a40)=ANY=[@ANYBLOB="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"])
poll(0x0, 0x0, 0x1ff)
syz_open_dev$sndpcmp(&(0x7f0000002180), 0x0, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000003c0)=0x4)

01:24:56 executing program 2:
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, 0x3, &(0x7f0000000340)=[{&(0x7f0000000140)="140fe1398221c50f6a38e09b76b55d259dda24f6f92aed0cee3ee9f880255c2ba68fce6e2c5fd348bcb70abf67e54685a8dd73c8eed8f889d7dfe3df0f4cdae90bbf56dde2d2492171baae41e4596626adced30a7df4e1dfcb0995cd824739d92a91d8b84d88ae6a7673cb7d7b7ee6ed9512b27a183a3272d221e92373cfaca18666e61cdfc36ecb587c3d48e60b72bf0ebfe579f6e28f1c4775995eb465694df36882368a2d281d866a24ec40aa82629f59c92d4a44d323480aa4a060d9f94f0c68d215fd63645af6c424e80a46dba817753da64e35fb8b5723", 0xda, 0x1}, {&(0x7f0000000280)="26ae4c1c428dc2d50bd34446487cadb9a2475a06db1d8efd426a42bd", 0x1c}, {&(0x7f0000000300)="ffd1e519ecdff8d2f6bb06ebec06257704b43785049dd93c009cc0a197e3fb903e40b66f1c4d2bb4a048f3", 0x2b, 0xfb57}], 0x1102000, &(0x7f0000001a40)=ANY=[@ANYBLOB="3030303030303030303030303030303030303030302c7574830f5d152c666d61736b3d3030303030303030303030303030303030303030303030380006088100e6820657f37c74cd118d1b65929de3040ebaaf5be08c39929a730ae2110599145105000000d8fa52ce14fc26563d6da682810f0c20ffff0000a66055193237400fca927485897fd6aa3aaac39766c39842288efe2a73a2c997674466280317abeb6c34b9e173c0d9686ecc6918ef1c765fc08612d623030957a5635b5e79fcb5014e16763736937835e03bd8f3a4a839f354382f989eaf9d2528d9f4005a0cf9347da40169d72e0c2bc46aaf5ee7f12f0baaeb6fc070f858ae6eac0ff29275965a5871cc8120535e0000bf63068cc8054cb75c0c47a93b5dd33afb87f757a38a5b75195709ca5739d72f65262948cbb202c81dd9d1eae31d62b8e784b74f9e6b95ca6720cc76ca810f5ddc3eb6272e8774a7b1ab81a021cfc92a140aa0a332da0b5ced4065810fbd6a862cb40c00000000dc85640ce7d722c45e93c939eb55000000000000000000000040000000342748b3aa0381b379147659b5d98aac1c9cbdbeb10aae14c06f9ec6f8213b414064000000000000009660b4383c807f8de7ab73606e48b0f7153cf2d6714830b98ea2b58a41bfc99644ccc822e4bd968644e69ce597c20ed3baf0be76cc7ddbc078e5848e35655b294897822a4bc134ee5bf6311a70b0007f03c9a73cba9e200c3d53f55454ac56f5f90f40cf2e6a865eebe08b6ec6eab3d1796b0c73e3e0b8714b66db9895f37f16abc568a6167e5b0f5baae750e4c6b11f4cdc2a8c48c0083fad5b0764e423ec848b415fae7162e4a9fc992774f6762a8bfec96a746a8499280dc66aef388b9a9842d37cda65edb8162bc554909640"])
poll(0x0, 0x0, 0x1ff)
syz_open_dev$sndpcmp(&(0x7f0000002180), 0x0, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000003c0)=0x4)

[  250.061546][ T8232] usb 2-1: Using ep0 maxpacket: 8
01:24:56 executing program 0:
sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, 0x0, 0x10, 0x0, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x730}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1ff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40084}, 0x4001)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa4080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
msgctl$IPC_SET(0x0, 0x1, 0x0)
msgrcv(0x0, 0x0, 0xd6, 0x0, 0x1800)
rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0)
r0 = msgget(0x3, 0x200)
msgsnd(r0, &(0x7f0000000480)={0x0, "2c9a25c100d5e7ddbfba4c307384db975a5f6dbadbc11091e90a737b9fe1e6ba251a434e02573db48b155949324329c6b6377e65c00110704c02757ce222a728b1a7c88a257147f32f56b383e0d82871002b9a28649065fb06bb5fc0362e196689985163379df9d687b109d333343d6618d720071569112426a5ae22b117644c56674e353683788c9ec0248e56800b14deb9c11a2a290131ea2fb1320d4cdf4f7e42314b08ce48f8e847a43a4954549b2faf4ce023541eff41bf60a26a72a64c3547312f4a"}, 0xcd, 0x800)
r1 = msgget$private(0x0, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{}, 0x0, 0x0, 0x0, 0x7})
msgsnd(r1, &(0x7f0000000340), 0x0, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)=0x8)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f0000000240)=<r3=>0x0)
io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}])
r4 = msgget(0x2, 0xc0)
msgctl$MSG_STAT_ANY(r4, 0xd, &(0x7f00000009c0)=""/238)
syz_mount_image$omfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x3ff, 0x4, &(0x7f00000003c0)=[{&(0x7f0000000180)="5155c16882eefc010074d5849035ef7c0c74ae504c3f64db1dea75151791fb4a1156db731bad251087cd4d0b87ed3b8c19947a68bc0fc01eca02cc5914f1ef750a0fb4512614e0", 0x47, 0xfb}, {&(0x7f0000000580)="f9cd13f8b364f4c50bb87c923a43a1b4d020faf0319a903abcc87769b1a9021085e3990c0b2959889c74d8008f0a4c32aa0b61294e2250df5b91f83db32d17705098e60f6b9ac8be33b1c5a3c5dd0d64ed593348d0ec89239299db36f1faf322f2847f63df26d20c165f2185b72f5b527806c1971d33dc3a2b5c71f538381a2aeb99a56839cfeaf34ce9a0f5a87ec83c0285b14985dd4edd5727e99be08dc1f197cdeaf780fac92ab272a87bbc9fe82e64f631128d66dd933d5fd93817559c3576338e79ea8c453f9b08537cde", 0xcd}, {0x0, 0x0, 0x8}, {&(0x7f0000000680)="2fbdee7d3dd3dbb1800e1fe083512ce8465e469dd6be17b3deff5203f1e61e8bb7055cf0674da43811a33d20cb3608c201c95d87ac34b5dfadbbdd7fd2590d179f6075e2ddfb79b1acb740b4f87cf401eaf918c0a2399026a37b3262493c40505ad2b7f22a93af7b22a0104f3554f63831f449f5eea8190e109792b55e4e2b89f2cd34ad6bd0d3ad3bddd537da02f8dad7e18a28b1e969e77380807f351ad010995b15e9c1f2dbf83ae1ed188204ee71fd3b2b779ffdc5e0680a49f6dc1ddd496df5e334b0190ffacf44ddae8b9b685c5f35", 0xd2, 0x1}], 0x820a0, &(0x7f0000000840)={[{'^)'}, {}, {'/dev/nullb0\x00'}, {'/dev/nullb0\x00'}, {':}[%:'}, {'/\n\x87\xc3O\xee\x88\xe8Rj6\xe6Wn\xe0X\x91\xd4\xea\xe0`4\x8b\x94N\xb0\xe2\x1a2\xfe\x1c\x13\xf2\xd5\xaa\xce\xa1\x86\xfa+\xa2\x91\x98\xc8\x16\xd8b+\x90 \xf0X\xb3J\xc3\"\"\xc2\xde\xf1T\xacb\xb29\x9cS\x1a\xe3e@o\xe2H,\xd5.\xa4;\x02\x7fO\xa7\xbd\xd5]\xa8\x7f\xbb\x80\xbaB\x0e\xd9\xc2zmM\xde\xd5\xa5j\x95M\xc0r\tyA\xec\xc1\xa7\xa8\xb8C\xa5\xcc\xfa\x7fS\xc4\xa9e9\x89\x11\xb1\v\xdam*\xca\x86y\xc9\xc1Y\xb7\xd8\xbcH\xe4=\x85\xa6\x93\xb3\x19\x11\xb8~\x05\a\xa0\x86'}, {'\\})-'}], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@dont_appraise}, {@uid_lt={'uid<', 0xffffffffffffffff}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@fsmagic={'fsmagic', 0x3d, 0x100}}, {@subj_role={'subj_role', 0x3d, '#\\\xf4{-'}}]})

[  250.180934][ T8232] usb 2-1: New USB device found, idVendor=08dd, idProduct=0986, bcdDevice=e2.a1
[  250.213589][T11152] loop2: detected capacity change from 0 to 251
[  250.219428][T11151] loop4: detected capacity change from 0 to 251
[  250.220558][ T8232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  250.268590][ T8232] usb 2-1: config 0 descriptor??
01:24:56 executing program 2:
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, 0x3, &(0x7f0000000340)=[{&(0x7f0000000140)="140fe1398221c50f6a38e09b76b55d259dda24f6f92aed0cee3ee9f880255c2ba68fce6e2c5fd348bcb70abf67e54685a8dd73c8eed8f889d7dfe3df0f4cdae90bbf56dde2d2492171baae41e4596626adced30a7df4e1dfcb0995cd824739d92a91d8b84d88ae6a7673cb7d7b7ee6ed9512b27a183a3272d221e92373cfaca18666e61cdfc36ecb587c3d48e60b72bf0ebfe579f6e28f1c4775995eb465694df36882368a2d281d866a24ec40aa82629f59c92d4a44d323480aa4a060d9f94f0c68d215fd63645af6c424e80a46dba817753da64e35fb8b5723", 0xda, 0x1}, {&(0x7f0000000280)="26ae4c1c428dc2d50bd34446487cadb9a2475a06db1d8efd426a42bd", 0x1c}, {&(0x7f0000000300)="ffd1e519ecdff8d2f6bb06ebec06257704b43785049dd93c009cc0a197e3fb903e40b66f1c4d2bb4a048f3", 0x2b, 0xfb57}], 0x1102000, &(0x7f0000001a40)=ANY=[@ANYBLOB="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"])
poll(0x0, 0x0, 0x1ff)
syz_open_dev$sndpcmp(&(0x7f0000002180), 0x0, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000003c0)=0x4)

01:24:56 executing program 4:
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, 0x3, &(0x7f0000000340)=[{&(0x7f0000000140)="140fe1398221c50f6a38e09b76b55d259dda24f6f92aed0cee3ee9f880255c2ba68fce6e2c5fd348bcb70abf67e54685a8dd73c8eed8f889d7dfe3df0f4cdae90bbf56dde2d2492171baae41e4596626adced30a7df4e1dfcb0995cd824739d92a91d8b84d88ae6a7673cb7d7b7ee6ed9512b27a183a3272d221e92373cfaca18666e61cdfc36ecb587c3d48e60b72bf0ebfe579f6e28f1c4775995eb465694df36882368a2d281d866a24ec40aa82629f59c92d4a44d323480aa4a060d9f94f0c68d215fd63645af6c424e80a46dba817753da64e35fb8b5723", 0xda, 0x1}, {&(0x7f0000000280)="26ae4c1c428dc2d50bd34446487cadb9a2475a06db1d8efd426a42bd", 0x1c}, {&(0x7f0000000300)="ffd1e519ecdff8d2f6bb06ebec06257704b43785049dd93c009cc0a197e3fb903e40b66f1c4d2bb4a048f3", 0x2b, 0xfb57}], 0x1102000, &(0x7f0000001a40)=ANY=[@ANYBLOB="3030303030303030303030303030303030303030302c7574830f5d152c666d61736b3d3030303030303030303030303030303030303030303030380006088100e6820657f37c74cd118d1b65929de3040ebaaf5be08c39929a730ae2110599145105000000d8fa52ce14fc26563d6da682810f0c20ffff0000a66055193237400fca927485897fd6aa3aaac39766c39842288efe2a73a2c997674466280317abeb6c34b9e173c0d9686ecc6918ef1c765fc08612d623030957a5635b5e79fcb5014e16763736937835e03bd8f3a4a839f354382f989eaf9d2528d9f4005a0cf9347da40169d72e0c2bc46aaf5ee7f12f0baaeb6fc070f858ae6eac0ff29275965a5871cc8120535e0000bf63068cc8054cb75c0c47a93b5dd33afb87f757a38a5b75195709ca5739d72f65262948cbb202c81dd9d1eae31d62b8e784b74f9e6b95ca6720cc76ca810f5ddc3eb6272e8774a7b1ab81a021cfc92a140aa0a332da0b5ced4065810fbd6a862cb40c00000000dc85640ce7d722c45e93c939eb55000000000000000000000040000000342748b3aa0381b379147659b5d98aac1c9cbdbeb10aae14c06f9ec6f8213b414064000000000000009660b4383c807f8de7ab73606e48b0f7153cf2d6714830b98ea2b58a41bfc99644ccc822e4bd968644e69ce597c20ed3baf0be76cc7ddbc078e5848e35655b294897822a4bc134ee5bf6311a70b0007f03c9a73cba9e200c3d53f55454ac56f5f90f40cf2e6a865eebe08b6ec6eab3d1796b0c73e3e0b8714b66db9895f37f16abc568a6167e5b0f5baae750e4c6b11f4cdc2a8c48c0083fad5b0764e423ec848b415fae7162e4a9fc992774f6762a8bfec96a746a8499280dc66aef388b9a9842d37cda65edb8162bc554909640"])
poll(0x0, 0x0, 0x1ff)
syz_open_dev$sndpcmp(&(0x7f0000002180), 0x0, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000003c0)=0x4)

01:24:56 executing program 5:
mknod(&(0x7f0000000040)='./file0\x00', 0x1040, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r0 = io_uring_setup(0x5f49, &(0x7f0000000180))
r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
dup2(r1, r0)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0)

[  250.472785][T11169] loop0: detected capacity change from 0 to 1
[  250.585956][T11175] loop2: detected capacity change from 0 to 251
01:24:57 executing program 2:
r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r1=>0x0)
syz_io_uring_setup(0xef8, &(0x7f0000000080), &(0x7f0000003000/0x4000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000000180)=<r2=>0x0, &(0x7f00000001c0))
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
syz_io_uring_submit(r2, r1, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x3b7aa37bbbef430c, 0x0, r3, 0x0, 0x0}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0)

[  250.634265][T11174] loop4: detected capacity change from 0 to 251
[  250.660533][T11169] loop0: detected capacity change from 0 to 1
01:24:57 executing program 4:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x0)
r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000c80)=ANY=[@ANYBLOB="12010000b24b4a10e60405007701000000010902240001010000000904000002ccb8280009050b02000000000009058a02"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000100)={0x0, 0x0, 0x2, "a059"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000840)={0x44, &(0x7f00000005c0)={0x0, 0x0, 0x2, "0792"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)

01:24:57 executing program 0:
sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, 0x0, 0x10, 0x0, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x730}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1ff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40084}, 0x4001)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa4080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
msgctl$IPC_SET(0x0, 0x1, 0x0)
msgrcv(0x0, 0x0, 0xd6, 0x0, 0x1800)
rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0)
r0 = msgget(0x3, 0x200)
msgsnd(r0, &(0x7f0000000480)={0x0, "2c9a25c100d5e7ddbfba4c307384db975a5f6dbadbc11091e90a737b9fe1e6ba251a434e02573db48b155949324329c6b6377e65c00110704c02757ce222a728b1a7c88a257147f32f56b383e0d82871002b9a28649065fb06bb5fc0362e196689985163379df9d687b109d333343d6618d720071569112426a5ae22b117644c56674e353683788c9ec0248e56800b14deb9c11a2a290131ea2fb1320d4cdf4f7e42314b08ce48f8e847a43a4954549b2faf4ce023541eff41bf60a26a72a64c3547312f4a"}, 0xcd, 0x800)
r1 = msgget$private(0x0, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{}, 0x0, 0x0, 0x0, 0x7})
msgsnd(r1, &(0x7f0000000340), 0x0, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)=0x8)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f0000000240)=<r3=>0x0)
io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}])
r4 = msgget(0x2, 0xc0)
msgctl$MSG_STAT_ANY(r4, 0xd, &(0x7f00000009c0)=""/238)
syz_mount_image$omfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x3ff, 0x4, &(0x7f00000003c0)=[{&(0x7f0000000180)="5155c16882eefc010074d5849035ef7c0c74ae504c3f64db1dea75151791fb4a1156db731bad251087cd4d0b87ed3b8c19947a68bc0fc01eca02cc5914f1ef750a0fb4512614e0", 0x47, 0xfb}, {&(0x7f0000000580)="f9cd13f8b364f4c50bb87c923a43a1b4d020faf0319a903abcc87769b1a9021085e3990c0b2959889c74d8008f0a4c32aa0b61294e2250df5b91f83db32d17705098e60f6b9ac8be33b1c5a3c5dd0d64ed593348d0ec89239299db36f1faf322f2847f63df26d20c165f2185b72f5b527806c1971d33dc3a2b5c71f538381a2aeb99a56839cfeaf34ce9a0f5a87ec83c0285b14985dd4edd5727e99be08dc1f197cdeaf780fac92ab272a87bbc9fe82e64f631128d66dd933d5fd93817559c3576338e79ea8c453f9b08537cde", 0xcd}, {0x0, 0x0, 0x8}, {&(0x7f0000000680)="2fbdee7d3dd3dbb1800e1fe083512ce8465e469dd6be17b3deff5203f1e61e8bb7055cf0674da43811a33d20cb3608c201c95d87ac34b5dfadbbdd7fd2590d179f6075e2ddfb79b1acb740b4f87cf401eaf918c0a2399026a37b3262493c40505ad2b7f22a93af7b22a0104f3554f63831f449f5eea8190e109792b55e4e2b89f2cd34ad6bd0d3ad3bddd537da02f8dad7e18a28b1e969e77380807f351ad010995b15e9c1f2dbf83ae1ed188204ee71fd3b2b779ffdc5e0680a49f6dc1ddd496df5e334b0190ffacf44ddae8b9b685c5f35", 0xd2, 0x1}], 0x820a0, &(0x7f0000000840)={[{'^)'}, {}, {'/dev/nullb0\x00'}, {'/dev/nullb0\x00'}, {':}[%:'}, {'/\n\x87\xc3O\xee\x88\xe8Rj6\xe6Wn\xe0X\x91\xd4\xea\xe0`4\x8b\x94N\xb0\xe2\x1a2\xfe\x1c\x13\xf2\xd5\xaa\xce\xa1\x86\xfa+\xa2\x91\x98\xc8\x16\xd8b+\x90 \xf0X\xb3J\xc3\"\"\xc2\xde\xf1T\xacb\xb29\x9cS\x1a\xe3e@o\xe2H,\xd5.\xa4;\x02\x7fO\xa7\xbd\xd5]\xa8\x7f\xbb\x80\xbaB\x0e\xd9\xc2zmM\xde\xd5\xa5j\x95M\xc0r\tyA\xec\xc1\xa7\xa8\xb8C\xa5\xcc\xfa\x7fS\xc4\xa9e9\x89\x11\xb1\v\xdam*\xca\x86y\xc9\xc1Y\xb7\xd8\xbcH\xe4=\x85\xa6\x93\xb3\x19\x11\xb8~\x05\a\xa0\x86'}, {'\\})-'}], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@dont_appraise}, {@uid_lt={'uid<', 0xffffffffffffffff}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@fsmagic={'fsmagic', 0x3d, 0x100}}, {@subj_role={'subj_role', 0x3d, '#\\\xf4{-'}}]})

01:24:57 executing program 5:
mknod(&(0x7f0000000040)='./file0\x00', 0x1040, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r0 = io_uring_setup(0x5f49, &(0x7f0000000180))
r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
dup2(r1, r0)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0)

[  251.087476][ T8092] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  251.124103][T11207] loop0: detected capacity change from 0 to 1
[  251.347430][ T8092] usb 5-1: Using ep0 maxpacket: 16
[  251.468139][ T8092] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  251.482992][ T8092] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  251.510825][ T8092] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  251.543485][ T8092] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0
[  251.564677][ T8092] usb 5-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.77
[  251.585396][ T8092] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  251.648324][ T8092] ums-sddr09 5-1:1.0: USB Mass Storage device detected
[  252.067457][ T8232] pegasus 2-1:0.0: can't reset MAC
[  252.078654][ T8232] pegasus: probe of 2-1:0.0 failed with error -5
[  252.124354][ T8232] usb 2-1: USB disconnect, device number 5
[  252.502269][ T8092] scsi host1: usb-storage 5-1:1.0
01:24:59 executing program 1:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xd, 0xa1, 0xb5, 0x8, 0x8dd, 0x986, 0xe2a1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x29, 0x1c, 0xef}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001140)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="00800100000064"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000300)={0x0, 0x0, 0x2, "0533"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000d80)={0x84, &(0x7f0000000980)={0x0, 0x0, 0x1, '<'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:24:59 executing program 2:
r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r1=>0x0)
syz_io_uring_setup(0xef8, &(0x7f0000000080), &(0x7f0000003000/0x4000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000000180)=<r2=>0x0, &(0x7f00000001c0))
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
syz_io_uring_submit(r2, r1, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x3b7aa37bbbef430c, 0x0, r3, 0x0, 0x0}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0)

01:24:59 executing program 3:
sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, 0x0, 0x10, 0x0, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x730}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1ff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40084}, 0x4001)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa4080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
msgctl$IPC_SET(0x0, 0x1, 0x0)
msgrcv(0x0, 0x0, 0xd6, 0x0, 0x1800)
rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0)
r0 = msgget(0x3, 0x200)
msgsnd(r0, &(0x7f0000000480)={0x0, "2c9a25c100d5e7ddbfba4c307384db975a5f6dbadbc11091e90a737b9fe1e6ba251a434e02573db48b155949324329c6b6377e65c00110704c02757ce222a728b1a7c88a257147f32f56b383e0d82871002b9a28649065fb06bb5fc0362e196689985163379df9d687b109d333343d6618d720071569112426a5ae22b117644c56674e353683788c9ec0248e56800b14deb9c11a2a290131ea2fb1320d4cdf4f7e42314b08ce48f8e847a43a4954549b2faf4ce023541eff41bf60a26a72a64c3547312f4a"}, 0xcd, 0x800)
r1 = msgget$private(0x0, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{}, 0x0, 0x0, 0x0, 0x7})
msgsnd(r1, &(0x7f0000000340), 0x0, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)=0x8)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f0000000240)=<r3=>0x0)
io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}])
r4 = msgget(0x2, 0xc0)
msgctl$MSG_STAT_ANY(r4, 0xd, &(0x7f00000009c0)=""/238)
syz_mount_image$omfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x3ff, 0x4, &(0x7f00000003c0)=[{&(0x7f0000000180)="5155c16882eefc010074d5849035ef7c0c74ae504c3f64db1dea75151791fb4a1156db731bad251087cd4d0b87ed3b8c19947a68bc0fc01eca02cc5914f1ef750a0fb4512614e0", 0x47, 0xfb}, {&(0x7f0000000580)="f9cd13f8b364f4c50bb87c923a43a1b4d020faf0319a903abcc87769b1a9021085e3990c0b2959889c74d8008f0a4c32aa0b61294e2250df5b91f83db32d17705098e60f6b9ac8be33b1c5a3c5dd0d64ed593348d0ec89239299db36f1faf322f2847f63df26d20c165f2185b72f5b527806c1971d33dc3a2b5c71f538381a2aeb99a56839cfeaf34ce9a0f5a87ec83c0285b14985dd4edd5727e99be08dc1f197cdeaf780fac92ab272a87bbc9fe82e64f631128d66dd933d5fd93817559c3576338e79ea8c453f9b08537cde", 0xcd}, {0x0, 0x0, 0x8}, {&(0x7f0000000680)="2fbdee7d3dd3dbb1800e1fe083512ce8465e469dd6be17b3deff5203f1e61e8bb7055cf0674da43811a33d20cb3608c201c95d87ac34b5dfadbbdd7fd2590d179f6075e2ddfb79b1acb740b4f87cf401eaf918c0a2399026a37b3262493c40505ad2b7f22a93af7b22a0104f3554f63831f449f5eea8190e109792b55e4e2b89f2cd34ad6bd0d3ad3bddd537da02f8dad7e18a28b1e969e77380807f351ad010995b15e9c1f2dbf83ae1ed188204ee71fd3b2b779ffdc5e0680a49f6dc1ddd496df5e334b0190ffacf44ddae8b9b685c5f35", 0xd2, 0x1}], 0x820a0, &(0x7f0000000840)={[{'^)'}, {}, {'/dev/nullb0\x00'}, {'/dev/nullb0\x00'}, {':}[%:'}, {'/\n\x87\xc3O\xee\x88\xe8Rj6\xe6Wn\xe0X\x91\xd4\xea\xe0`4\x8b\x94N\xb0\xe2\x1a2\xfe\x1c\x13\xf2\xd5\xaa\xce\xa1\x86\xfa+\xa2\x91\x98\xc8\x16\xd8b+\x90 \xf0X\xb3J\xc3\"\"\xc2\xde\xf1T\xacb\xb29\x9cS\x1a\xe3e@o\xe2H,\xd5.\xa4;\x02\x7fO\xa7\xbd\xd5]\xa8\x7f\xbb\x80\xbaB\x0e\xd9\xc2zmM\xde\xd5\xa5j\x95M\xc0r\tyA\xec\xc1\xa7\xa8\xb8C\xa5\xcc\xfa\x7fS\xc4\xa9e9\x89\x11\xb1\v\xdam*\xca\x86y\xc9\xc1Y\xb7\xd8\xbcH\xe4=\x85\xa6\x93\xb3\x19\x11\xb8~\x05\a\xa0\x86'}, {'\\})-'}], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@dont_appraise}, {@uid_lt={'uid<', 0xffffffffffffffff}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@fsmagic={'fsmagic', 0x3d, 0x100}}, {@subj_role={'subj_role', 0x3d, '#\\\xf4{-'}}]})

01:24:59 executing program 5:
mknod(&(0x7f0000000040)='./file0\x00', 0x1040, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r0 = io_uring_setup(0x5f49, &(0x7f0000000180))
r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
dup2(r1, r0)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0)

01:24:59 executing program 0:
sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, 0x0, 0x10, 0x0, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x730}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1ff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40084}, 0x4001)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa4080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
msgctl$IPC_SET(0x0, 0x1, 0x0)
msgrcv(0x0, 0x0, 0xd6, 0x0, 0x1800)
rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0)
r0 = msgget(0x3, 0x200)
msgsnd(r0, &(0x7f0000000480)={0x0, "2c9a25c100d5e7ddbfba4c307384db975a5f6dbadbc11091e90a737b9fe1e6ba251a434e02573db48b155949324329c6b6377e65c00110704c02757ce222a728b1a7c88a257147f32f56b383e0d82871002b9a28649065fb06bb5fc0362e196689985163379df9d687b109d333343d6618d720071569112426a5ae22b117644c56674e353683788c9ec0248e56800b14deb9c11a2a290131ea2fb1320d4cdf4f7e42314b08ce48f8e847a43a4954549b2faf4ce023541eff41bf60a26a72a64c3547312f4a"}, 0xcd, 0x800)
r1 = msgget$private(0x0, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{}, 0x0, 0x0, 0x0, 0x7})
msgsnd(r1, &(0x7f0000000340), 0x0, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)=0x8)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f0000000240)=<r3=>0x0)
io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}])
r4 = msgget(0x2, 0xc0)
msgctl$MSG_STAT_ANY(r4, 0xd, &(0x7f00000009c0)=""/238)
syz_mount_image$omfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x3ff, 0x4, &(0x7f00000003c0)=[{&(0x7f0000000180)="5155c16882eefc010074d5849035ef7c0c74ae504c3f64db1dea75151791fb4a1156db731bad251087cd4d0b87ed3b8c19947a68bc0fc01eca02cc5914f1ef750a0fb4512614e0", 0x47, 0xfb}, {&(0x7f0000000580)="f9cd13f8b364f4c50bb87c923a43a1b4d020faf0319a903abcc87769b1a9021085e3990c0b2959889c74d8008f0a4c32aa0b61294e2250df5b91f83db32d17705098e60f6b9ac8be33b1c5a3c5dd0d64ed593348d0ec89239299db36f1faf322f2847f63df26d20c165f2185b72f5b527806c1971d33dc3a2b5c71f538381a2aeb99a56839cfeaf34ce9a0f5a87ec83c0285b14985dd4edd5727e99be08dc1f197cdeaf780fac92ab272a87bbc9fe82e64f631128d66dd933d5fd93817559c3576338e79ea8c453f9b08537cde", 0xcd}, {0x0, 0x0, 0x8}, {&(0x7f0000000680)="2fbdee7d3dd3dbb1800e1fe083512ce8465e469dd6be17b3deff5203f1e61e8bb7055cf0674da43811a33d20cb3608c201c95d87ac34b5dfadbbdd7fd2590d179f6075e2ddfb79b1acb740b4f87cf401eaf918c0a2399026a37b3262493c40505ad2b7f22a93af7b22a0104f3554f63831f449f5eea8190e109792b55e4e2b89f2cd34ad6bd0d3ad3bddd537da02f8dad7e18a28b1e969e77380807f351ad010995b15e9c1f2dbf83ae1ed188204ee71fd3b2b779ffdc5e0680a49f6dc1ddd496df5e334b0190ffacf44ddae8b9b685c5f35", 0xd2, 0x1}], 0x820a0, &(0x7f0000000840)={[{'^)'}, {}, {'/dev/nullb0\x00'}, {'/dev/nullb0\x00'}, {':}[%:'}, {'/\n\x87\xc3O\xee\x88\xe8Rj6\xe6Wn\xe0X\x91\xd4\xea\xe0`4\x8b\x94N\xb0\xe2\x1a2\xfe\x1c\x13\xf2\xd5\xaa\xce\xa1\x86\xfa+\xa2\x91\x98\xc8\x16\xd8b+\x90 \xf0X\xb3J\xc3\"\"\xc2\xde\xf1T\xacb\xb29\x9cS\x1a\xe3e@o\xe2H,\xd5.\xa4;\x02\x7fO\xa7\xbd\xd5]\xa8\x7f\xbb\x80\xbaB\x0e\xd9\xc2zmM\xde\xd5\xa5j\x95M\xc0r\tyA\xec\xc1\xa7\xa8\xb8C\xa5\xcc\xfa\x7fS\xc4\xa9e9\x89\x11\xb1\v\xdam*\xca\x86y\xc9\xc1Y\xb7\xd8\xbcH\xe4=\x85\xa6\x93\xb3\x19\x11\xb8~\x05\a\xa0\x86'}, {'\\})-'}], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@dont_appraise}, {@uid_lt={'uid<', 0xffffffffffffffff}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@fsmagic={'fsmagic', 0x3d, 0x100}}, {@subj_role={'subj_role', 0x3d, '#\\\xf4{-'}}]})

[  252.701057][ T8092] usb 5-1: USB disconnect, device number 2
[  252.788131][T11253] loop3: detected capacity change from 0 to 1
[  252.812346][T11267] loop0: detected capacity change from 0 to 1
01:24:59 executing program 5:
mknod(&(0x7f0000000040)='./file0\x00', 0x1040, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r0 = io_uring_setup(0x5f49, &(0x7f0000000180))
r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
dup2(r1, r0)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0)

01:24:59 executing program 2:
r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r1=>0x0)
syz_io_uring_setup(0xef8, &(0x7f0000000080), &(0x7f0000003000/0x4000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000000180)=<r2=>0x0, &(0x7f00000001c0))
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
syz_io_uring_submit(r2, r1, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x3b7aa37bbbef430c, 0x0, r3, 0x0, 0x0}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0)

01:24:59 executing program 3:
sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, 0x0, 0x10, 0x0, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x730}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1ff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40084}, 0x4001)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa4080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
msgctl$IPC_SET(0x0, 0x1, 0x0)
msgrcv(0x0, 0x0, 0xd6, 0x0, 0x1800)
rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0)
r0 = msgget(0x3, 0x200)
msgsnd(r0, &(0x7f0000000480)={0x0, "2c9a25c100d5e7ddbfba4c307384db975a5f6dbadbc11091e90a737b9fe1e6ba251a434e02573db48b155949324329c6b6377e65c00110704c02757ce222a728b1a7c88a257147f32f56b383e0d82871002b9a28649065fb06bb5fc0362e196689985163379df9d687b109d333343d6618d720071569112426a5ae22b117644c56674e353683788c9ec0248e56800b14deb9c11a2a290131ea2fb1320d4cdf4f7e42314b08ce48f8e847a43a4954549b2faf4ce023541eff41bf60a26a72a64c3547312f4a"}, 0xcd, 0x800)
r1 = msgget$private(0x0, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{}, 0x0, 0x0, 0x0, 0x7})
msgsnd(r1, &(0x7f0000000340), 0x0, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)=0x8)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f0000000240)=<r3=>0x0)
io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}])
r4 = msgget(0x2, 0xc0)
msgctl$MSG_STAT_ANY(r4, 0xd, &(0x7f00000009c0)=""/238)
syz_mount_image$omfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x3ff, 0x4, &(0x7f00000003c0)=[{&(0x7f0000000180)="5155c16882eefc010074d5849035ef7c0c74ae504c3f64db1dea75151791fb4a1156db731bad251087cd4d0b87ed3b8c19947a68bc0fc01eca02cc5914f1ef750a0fb4512614e0", 0x47, 0xfb}, {&(0x7f0000000580)="f9cd13f8b364f4c50bb87c923a43a1b4d020faf0319a903abcc87769b1a9021085e3990c0b2959889c74d8008f0a4c32aa0b61294e2250df5b91f83db32d17705098e60f6b9ac8be33b1c5a3c5dd0d64ed593348d0ec89239299db36f1faf322f2847f63df26d20c165f2185b72f5b527806c1971d33dc3a2b5c71f538381a2aeb99a56839cfeaf34ce9a0f5a87ec83c0285b14985dd4edd5727e99be08dc1f197cdeaf780fac92ab272a87bbc9fe82e64f631128d66dd933d5fd93817559c3576338e79ea8c453f9b08537cde", 0xcd}, {0x0, 0x0, 0x8}, {&(0x7f0000000680)="2fbdee7d3dd3dbb1800e1fe083512ce8465e469dd6be17b3deff5203f1e61e8bb7055cf0674da43811a33d20cb3608c201c95d87ac34b5dfadbbdd7fd2590d179f6075e2ddfb79b1acb740b4f87cf401eaf918c0a2399026a37b3262493c40505ad2b7f22a93af7b22a0104f3554f63831f449f5eea8190e109792b55e4e2b89f2cd34ad6bd0d3ad3bddd537da02f8dad7e18a28b1e969e77380807f351ad010995b15e9c1f2dbf83ae1ed188204ee71fd3b2b779ffdc5e0680a49f6dc1ddd496df5e334b0190ffacf44ddae8b9b685c5f35", 0xd2, 0x1}], 0x820a0, &(0x7f0000000840)={[{'^)'}, {}, {'/dev/nullb0\x00'}, {'/dev/nullb0\x00'}, {':}[%:'}, {'/\n\x87\xc3O\xee\x88\xe8Rj6\xe6Wn\xe0X\x91\xd4\xea\xe0`4\x8b\x94N\xb0\xe2\x1a2\xfe\x1c\x13\xf2\xd5\xaa\xce\xa1\x86\xfa+\xa2\x91\x98\xc8\x16\xd8b+\x90 \xf0X\xb3J\xc3\"\"\xc2\xde\xf1T\xacb\xb29\x9cS\x1a\xe3e@o\xe2H,\xd5.\xa4;\x02\x7fO\xa7\xbd\xd5]\xa8\x7f\xbb\x80\xbaB\x0e\xd9\xc2zmM\xde\xd5\xa5j\x95M\xc0r\tyA\xec\xc1\xa7\xa8\xb8C\xa5\xcc\xfa\x7fS\xc4\xa9e9\x89\x11\xb1\v\xdam*\xca\x86y\xc9\xc1Y\xb7\xd8\xbcH\xe4=\x85\xa6\x93\xb3\x19\x11\xb8~\x05\a\xa0\x86'}, {'\\})-'}], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@dont_appraise}, {@uid_lt={'uid<', 0xffffffffffffffff}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@fsmagic={'fsmagic', 0x3d, 0x100}}, {@subj_role={'subj_role', 0x3d, '#\\\xf4{-'}}]})

[  253.097445][ T7598] usb 2-1: new high-speed USB device number 6 using dummy_hcd
01:24:59 executing program 0:
sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, 0x0, 0x10, 0x0, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x730}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1ff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40084}, 0x4001)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa4080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
msgctl$IPC_SET(0x0, 0x1, 0x0)
msgrcv(0x0, 0x0, 0xd6, 0x0, 0x1800)
rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0)
r0 = msgget(0x3, 0x200)
msgsnd(r0, &(0x7f0000000480)={0x0, "2c9a25c100d5e7ddbfba4c307384db975a5f6dbadbc11091e90a737b9fe1e6ba251a434e02573db48b155949324329c6b6377e65c00110704c02757ce222a728b1a7c88a257147f32f56b383e0d82871002b9a28649065fb06bb5fc0362e196689985163379df9d687b109d333343d6618d720071569112426a5ae22b117644c56674e353683788c9ec0248e56800b14deb9c11a2a290131ea2fb1320d4cdf4f7e42314b08ce48f8e847a43a4954549b2faf4ce023541eff41bf60a26a72a64c3547312f4a"}, 0xcd, 0x800)
r1 = msgget$private(0x0, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{}, 0x0, 0x0, 0x0, 0x7})
msgsnd(r1, &(0x7f0000000340), 0x0, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)=0x8)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f0000000240)=<r3=>0x0)
io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}])
r4 = msgget(0x2, 0xc0)
msgctl$MSG_STAT_ANY(r4, 0xd, &(0x7f00000009c0)=""/238)
syz_mount_image$omfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x3ff, 0x4, &(0x7f00000003c0)=[{&(0x7f0000000180)="5155c16882eefc010074d5849035ef7c0c74ae504c3f64db1dea75151791fb4a1156db731bad251087cd4d0b87ed3b8c19947a68bc0fc01eca02cc5914f1ef750a0fb4512614e0", 0x47, 0xfb}, {&(0x7f0000000580)="f9cd13f8b364f4c50bb87c923a43a1b4d020faf0319a903abcc87769b1a9021085e3990c0b2959889c74d8008f0a4c32aa0b61294e2250df5b91f83db32d17705098e60f6b9ac8be33b1c5a3c5dd0d64ed593348d0ec89239299db36f1faf322f2847f63df26d20c165f2185b72f5b527806c1971d33dc3a2b5c71f538381a2aeb99a56839cfeaf34ce9a0f5a87ec83c0285b14985dd4edd5727e99be08dc1f197cdeaf780fac92ab272a87bbc9fe82e64f631128d66dd933d5fd93817559c3576338e79ea8c453f9b08537cde", 0xcd}, {0x0, 0x0, 0x8}, {&(0x7f0000000680)="2fbdee7d3dd3dbb1800e1fe083512ce8465e469dd6be17b3deff5203f1e61e8bb7055cf0674da43811a33d20cb3608c201c95d87ac34b5dfadbbdd7fd2590d179f6075e2ddfb79b1acb740b4f87cf401eaf918c0a2399026a37b3262493c40505ad2b7f22a93af7b22a0104f3554f63831f449f5eea8190e109792b55e4e2b89f2cd34ad6bd0d3ad3bddd537da02f8dad7e18a28b1e969e77380807f351ad010995b15e9c1f2dbf83ae1ed188204ee71fd3b2b779ffdc5e0680a49f6dc1ddd496df5e334b0190ffacf44ddae8b9b685c5f35", 0xd2, 0x1}], 0x820a0, &(0x7f0000000840)={[{'^)'}, {}, {'/dev/nullb0\x00'}, {'/dev/nullb0\x00'}, {':}[%:'}, {'/\n\x87\xc3O\xee\x88\xe8Rj6\xe6Wn\xe0X\x91\xd4\xea\xe0`4\x8b\x94N\xb0\xe2\x1a2\xfe\x1c\x13\xf2\xd5\xaa\xce\xa1\x86\xfa+\xa2\x91\x98\xc8\x16\xd8b+\x90 \xf0X\xb3J\xc3\"\"\xc2\xde\xf1T\xacb\xb29\x9cS\x1a\xe3e@o\xe2H,\xd5.\xa4;\x02\x7fO\xa7\xbd\xd5]\xa8\x7f\xbb\x80\xbaB\x0e\xd9\xc2zmM\xde\xd5\xa5j\x95M\xc0r\tyA\xec\xc1\xa7\xa8\xb8C\xa5\xcc\xfa\x7fS\xc4\xa9e9\x89\x11\xb1\v\xdam*\xca\x86y\xc9\xc1Y\xb7\xd8\xbcH\xe4=\x85\xa6\x93\xb3\x19\x11\xb8~\x05\a\xa0\x86'}, {'\\})-'}], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@dont_appraise}, {@uid_lt={'uid<', 0xffffffffffffffff}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@fsmagic={'fsmagic', 0x3d, 0x100}}, {@subj_role={'subj_role', 0x3d, '#\\\xf4{-'}}]})

[  253.337434][ T7598] usb 2-1: Using ep0 maxpacket: 8
[  253.352125][T11295] loop3: detected capacity change from 0 to 1
[  253.366680][T11293] loop0: detected capacity change from 0 to 1
[  253.467927][ T7598] usb 2-1: New USB device found, idVendor=08dd, idProduct=0986, bcdDevice=e2.a1
[  253.487023][ T7598] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  253.513574][ T8092] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  253.520415][ T7598] usb 2-1: config 0 descriptor??
[  253.797446][ T8092] usb 5-1: Using ep0 maxpacket: 16
01:25:00 executing program 4:
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x6, 0x1}]}}, &(0x7f0000000340)=""/142, 0x26, 0x8e, 0x8}, 0x20)
syz_mount_image$sysv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

01:25:00 executing program 2:
r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r1=>0x0)
syz_io_uring_setup(0xef8, &(0x7f0000000080), &(0x7f0000003000/0x4000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000000180)=<r2=>0x0, &(0x7f00000001c0))
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
syz_io_uring_submit(r2, r1, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x3b7aa37bbbef430c, 0x0, r3, 0x0, 0x0}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0)

01:25:00 executing program 5:
mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc001, 0x0, 0x0, 0x0)

[  253.987489][ T8092] usb 5-1: unable to read config index 0 descriptor/start: -71
[  253.995346][ T8092] usb 5-1: can't read configurations, error -71
[  254.099517][T11324] BPF:[1] ENUM (anon) 
[  254.104027][T11325] BPF:[1] ENUM (anon) 
[  254.108420][T11325] BPF:size=0 vlen=0
[  254.112356][T11325] BPF: 
[  254.115178][T11325] BPF:Invalid btf_info kind_flag
[  254.126600][T11325] BPF:
[  254.126600][T11325] 
[  254.129302][T11324] BPF:size=0 vlen=0
[  254.159905][T11324] BPF: 
[  254.175559][T11324] BPF:Invalid btf_info kind_flag
[  254.219411][T11324] BPF:
[  254.219411][T11324] 
[  254.888563][ T1225] ieee802154 phy0 wpan0: encryption failed: -22
[  254.895928][ T1225] ieee802154 phy1 wpan1: encryption failed: -22
[  255.337418][ T7598] pegasus 2-1:0.0: can't reset MAC
[  255.343372][ T7598] pegasus: probe of 2-1:0.0 failed with error -5
[  255.352429][ T7598] usb 2-1: USB disconnect, device number 6
01:25:02 executing program 3:
sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, 0x0, 0x10, 0x0, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x730}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1ff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40084}, 0x4001)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa4080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
msgctl$IPC_SET(0x0, 0x1, 0x0)
msgrcv(0x0, 0x0, 0xd6, 0x0, 0x1800)
rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0)
r0 = msgget(0x3, 0x200)
msgsnd(r0, &(0x7f0000000480)={0x0, "2c9a25c100d5e7ddbfba4c307384db975a5f6dbadbc11091e90a737b9fe1e6ba251a434e02573db48b155949324329c6b6377e65c00110704c02757ce222a728b1a7c88a257147f32f56b383e0d82871002b9a28649065fb06bb5fc0362e196689985163379df9d687b109d333343d6618d720071569112426a5ae22b117644c56674e353683788c9ec0248e56800b14deb9c11a2a290131ea2fb1320d4cdf4f7e42314b08ce48f8e847a43a4954549b2faf4ce023541eff41bf60a26a72a64c3547312f4a"}, 0xcd, 0x800)
r1 = msgget$private(0x0, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{}, 0x0, 0x0, 0x0, 0x7})
msgsnd(r1, &(0x7f0000000340), 0x0, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)=0x8)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f0000000240)=<r3=>0x0)
io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}])
r4 = msgget(0x2, 0xc0)
msgctl$MSG_STAT_ANY(r4, 0xd, &(0x7f00000009c0)=""/238)
syz_mount_image$omfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x3ff, 0x4, &(0x7f00000003c0)=[{&(0x7f0000000180)="5155c16882eefc010074d5849035ef7c0c74ae504c3f64db1dea75151791fb4a1156db731bad251087cd4d0b87ed3b8c19947a68bc0fc01eca02cc5914f1ef750a0fb4512614e0", 0x47, 0xfb}, {&(0x7f0000000580)="f9cd13f8b364f4c50bb87c923a43a1b4d020faf0319a903abcc87769b1a9021085e3990c0b2959889c74d8008f0a4c32aa0b61294e2250df5b91f83db32d17705098e60f6b9ac8be33b1c5a3c5dd0d64ed593348d0ec89239299db36f1faf322f2847f63df26d20c165f2185b72f5b527806c1971d33dc3a2b5c71f538381a2aeb99a56839cfeaf34ce9a0f5a87ec83c0285b14985dd4edd5727e99be08dc1f197cdeaf780fac92ab272a87bbc9fe82e64f631128d66dd933d5fd93817559c3576338e79ea8c453f9b08537cde", 0xcd}, {0x0, 0x0, 0x8}, {&(0x7f0000000680)="2fbdee7d3dd3dbb1800e1fe083512ce8465e469dd6be17b3deff5203f1e61e8bb7055cf0674da43811a33d20cb3608c201c95d87ac34b5dfadbbdd7fd2590d179f6075e2ddfb79b1acb740b4f87cf401eaf918c0a2399026a37b3262493c40505ad2b7f22a93af7b22a0104f3554f63831f449f5eea8190e109792b55e4e2b89f2cd34ad6bd0d3ad3bddd537da02f8dad7e18a28b1e969e77380807f351ad010995b15e9c1f2dbf83ae1ed188204ee71fd3b2b779ffdc5e0680a49f6dc1ddd496df5e334b0190ffacf44ddae8b9b685c5f35", 0xd2, 0x1}], 0x820a0, &(0x7f0000000840)={[{'^)'}, {}, {'/dev/nullb0\x00'}, {'/dev/nullb0\x00'}, {':}[%:'}, {'/\n\x87\xc3O\xee\x88\xe8Rj6\xe6Wn\xe0X\x91\xd4\xea\xe0`4\x8b\x94N\xb0\xe2\x1a2\xfe\x1c\x13\xf2\xd5\xaa\xce\xa1\x86\xfa+\xa2\x91\x98\xc8\x16\xd8b+\x90 \xf0X\xb3J\xc3\"\"\xc2\xde\xf1T\xacb\xb29\x9cS\x1a\xe3e@o\xe2H,\xd5.\xa4;\x02\x7fO\xa7\xbd\xd5]\xa8\x7f\xbb\x80\xbaB\x0e\xd9\xc2zmM\xde\xd5\xa5j\x95M\xc0r\tyA\xec\xc1\xa7\xa8\xb8C\xa5\xcc\xfa\x7fS\xc4\xa9e9\x89\x11\xb1\v\xdam*\xca\x86y\xc9\xc1Y\xb7\xd8\xbcH\xe4=\x85\xa6\x93\xb3\x19\x11\xb8~\x05\a\xa0\x86'}, {'\\})-'}], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@dont_appraise}, {@uid_lt={'uid<', 0xffffffffffffffff}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@fsmagic={'fsmagic', 0x3d, 0x100}}, {@subj_role={'subj_role', 0x3d, '#\\\xf4{-'}}]})

01:25:02 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = timerfd_create(0x0, 0x0)
pwrite64(r1, 0x0, 0x0, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/handlers\x00', 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0))
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000600)=0x14)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x0)

01:25:02 executing program 5:
msgctl$IPC_STAT(0x0, 0x4, 0x0)

01:25:02 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan1\x00', <r2=>0x0})
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x38, r0, 0x807, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}]}, 0x38}}, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)

01:25:02 executing program 2:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe000000008500000018000000b7000000000000009500000000000000e3a333a0daf2f73451c0e17a606fec68cb7d67514fe60077d4dd90123d27e7cf43548ee85857ad4a77cb56e0fcb3dfd4e70ebec677d6ac14c2c794f72cbf5fe31789e70227bfd8115efd90c8c48258f8dbe82e16cf0000000000000000000000000000000000000000400000000000790ae2fd45d54b107c8c8a14195e32f13799d6707432ff48bc085760314166443ce72c74f3db890e1ff15a10d91f27e9a232fe2238fff867ba8fd41b29caad2a986e0e244bd11747ffda1a869db7e632df4de8572344b419c45c2170fe873692d8255170c16822bdffd3135480dae93c7e33bdef00000000d8fd8c79a5d0967ab7e43686b4d1e03e326beea7905ef7de375ef8bc8143df20d13c37db269971210fab7071cc3094078a044777aab9d86cf50afefd7b72a0950d389bc9cb43aa607b7269561dd50b22bd2491331818a10f2ac8c3249582a20d4e04fd1ab7883f656b84137d5f7a6edba86a7b9a4c2f3b3a8abf93b280ea53ce01dcc2d30f4310e8281b0cdc017f9759060ea88a2f6597e966a85c9a74ca196700218f919746bb4b84c16fd56ee450e411d75ab7613b644ba7580b2a0942394ed1737517eed1c892422f54d5a2e1cf1a60fe2dcc1a465aa8d54cb4000053c3f01ea714a7bd4fad615ff6e2991589bbdd1ae0d1bce65c620c4a2527a82afe16e019a5e0b5ec1b1b8aafba090000c363040100cc4a8cbd3246e962b773a75b28a51cd09cbcb3577fea6f1e9fe8cd2b532c084cbd051b4aeaf0e7813354f14a453b093948d49bca31a7170419bb1d32f256ff3010e69b2f0482c63ab78a74dec8b19ca76e7fdf29766d96e4c2f57ba917f0abd5253e87fbe5b86a4b9151c316df3925d86899ab3e2036f4866e277d82829165922f8aeb4ea2b9db2dbb6a6b157d4019545e00028d09608ef2e186fd216ce84d913813e1be50f5b6b98d5dab8d5fe3dc100d8b6cf41c29b550f45d68a627db8335fd97bd633694ebb6173d9474c50c0360daa387ba5da3e092463a4c08f2c686ca2ab5f8c62353b8f2c81700000000297c8161e5c939855271fe95df690f658da38153646e660e9ba212986cd3628a500d14d378d4af508f428ecb0e85322f9fd317b29ec23b193b1ded2824dc90eeea4c56a676609d2f9e6b925cc413cde5414869387f23a309fe29c7e63101fec34b22aae77bd5df5f6181f5b4639119fc54ae000000e7907e2eedfd728963537e45e01cd99203cc1f28fb06e5f5a6c96ef934e82bd6a6a9ab90ff58236b0e8761103c9373ce2835660790ced474fb0b7038d1c42bf77349a38f48ee2708b47f87ad46bde74931e580c7f2e977024569f9db4b405cdf995635ad26a769bc800363a25f46c214f331a252d61356e7f483431c7ebc1cba294b00b65531ef732fabf01d1cee6045d5bc111389ce5295c55d70a0a958e8ed53341f031fd05271552571474afeafc91f9fc0e2294147530c8a14428a63363ebde70f44e399d091f4420de839a72daa634c3e4a9ec2636348f7c6dd2a19682f6e2f1b93720d9001dd8b763bd8debb5eb3aaf45b9d15b69139e0a7130f0ed8eec7e9390e8fc193"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48)

01:25:02 executing program 1:
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x20000009}, 0x0)
sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x1}]}}]}, 0x3c}}, 0x0)
bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14)
sendto$inet6(r0, &(0x7f0000000080)="0304d6025c0060004003032cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff)

01:25:02 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x140})
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0)

[  256.002172][T11349] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
01:25:02 executing program 4:
unshare(0x2c020400)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/bpf', 0x0, 0x0)
getdents(r0, &(0x7f00000001c0)=""/173, 0x1c)

01:25:02 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x1d, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000000000004000000000002000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001000018000000c28500002b0200000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e37313332313635343500"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000f2a953140c764271ad9be301789147cf010040000c00000000000000d1f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000500400000000000000000000000000000003100000000000000", 0x40, 0x540}, {&(0x7f0000010300)="03000000040000000500000019000f0003000400"/32, 0x20, 0x800}, {&(0x7f0000010400)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000d1f4655fd1f4655fd1f4655f00"/2080, 0x820, 0xc00}, {&(0x7f0000010d00)="ed41000000040000d1f4655fd1f4655fd1f4655f00000000000004002000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x1500}, {&(0x7f0000010e00)="20000000e85575eae85575ea00000000d1f4655f00"/32, 0x20, 0x1580}, {&(0x7f0000010f00)="8081000000300404d1f4655fd1f4655fd1f4655f00000000000001002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000d1f4655f00"/160, 0xa0, 0x1a00}, {&(0x7f0000011000)="c0410000002c0000d1f4655fd1f4655fd1f4655f00000000000002002000000000000800000000000af301000400000000000000000000000b00000020000000", 0x40, 0x1e00}, {&(0x7f0000011100)="20000000000000000000000000000000d1f4655f000000000000000000000000000002ea00"/64, 0x40, 0x1e80}, {&(0x7f0000011200)="ed4100003c000000d1f4655fd1f4655fd1f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c6531000000000000000000000000000000000000000000000000000000d908479700000000000000000000000000000000000000000000000020000000e85575eae85575eae85575ead1f4655fe85575ea0000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x1f00}, {&(0x7f0000011300)="ed8100001a040000d1f4655fd1f4655fd1f4655f00000000000001002000000000000800010000000af30100040000000000000000000000020000005000000000000000000000000000000000000000000000000000000000000000000000000000000090dc20e700000000000000000000000000000000000000000000000020000000e85575eae85575eae85575ead1f4655fe85575ea0000000000000000", 0xa0, 0x2000}, {&(0x7f0000011400)="ffa1000026000000d1f4655fd1f4655fd1f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3731333231363534352f66696c65302f66696c65300000000000000000000000000000000000000000000009d0860300000000000000000000000000000000000000000000000020000000e85575eae85575eae85575ead1f4655fe85575ea0000000000000000", 0xa0, 0x2100}, {&(0x7f0000011500)="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", 0x1a0, 0x2200}, {&(0x7f0000011700)="ed81000064000000d1f4655fd1f4655fd1f4655f000000000000010000000000000000100100000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616cf3954fe900000000000000000000000000000000000000000000000020000000e85575eae85575eae85575ead1f4655fe85575ea0000000000000000000002ea040734000000000028000000000000006461746100000000000000000000000000000000000000000000000000000000000000006c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273", 0x100, 0x2400}, {&(0x7f0000011800)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009403090166696c652e636f6c64000000", 0x80, 0x4000}, {&(0x7f0000011900)="0b0000000c0001022e000000020000000c0002022e2e000000000000e8030000", 0x20, 0x8000}, {&(0x7f0000011a00)="00000000000400"/32, 0x20, 0x8400}, {&(0x7f0000011b00)="00000000000400"/32, 0x20, 0x8800}, {&(0x7f0000011c00)="00000000000400"/32, 0x20, 0x8c00}, {&(0x7f0000011d00)="00000000000400"/32, 0x20, 0x9000}, {&(0x7f0000011e00)="00000000000400"/32, 0x20, 0x9400}, {&(0x7f0000011f00)="00000000000400"/32, 0x20, 0x9800}, {&(0x7f0000012000)="00000000000400"/32, 0x20, 0x9c00}, {&(0x7f0000012100)="00000000000400"/32, 0x20, 0xa000}, {&(0x7f0000012200)="00000000000400"/32, 0x20, 0xa400}, {&(0x7f0000012300)="00000000000400"/32, 0x20, 0xa800}, {&(0x7f0000012400)="504d4d00504d4dffd1f4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7033310075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x10000}, {&(0x7f0000012500)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x14000}], 0x0, &(0x7f0000012a00))

[  256.111404][T11352] loop3: detected capacity change from 0 to 1
01:25:02 executing program 1:
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x20000009}, 0x0)
sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x1}]}}]}, 0x3c}}, 0x0)
bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14)
sendto$inet6(r0, &(0x7f0000000080)="0304d6025c0060004003032cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff)

01:25:02 executing program 4:
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x20000009}, 0x0)
sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x1}]}}]}, 0x3c}}, 0x0)
bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14)
sendto$inet6(r0, &(0x7f0000000080)="0304d6025c0060004003032cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff)

[  256.253582][T11349] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  256.275020][T11370] loop2: detected capacity change from 0 to 1024
[  256.325429][T11351] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present!
[  256.379597][T11379] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  256.423368][T11390] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[  256.424410][T11370] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
01:25:03 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x20000009}, 0x0)
sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x1}]}}]}, 0x3c}}, 0x0)
bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14)
sendto$inet6(r0, &(0x7f0000000080)="0304d6025c0060004003032cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff)

01:25:03 executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r1 = openat$tcp_mem(0xffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
sendfile(r1, r0, &(0x7f0000000200)=0x3, 0x3)

01:25:03 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = timerfd_create(0x0, 0x0)
pwrite64(r1, 0x0, 0x0, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/handlers\x00', 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0))
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000600)=0x14)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x0)

01:25:03 executing program 1:
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x20000009}, 0x0)
sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x1}]}}]}, 0x3c}}, 0x0)
bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14)
sendto$inet6(r0, &(0x7f0000000080)="0304d6025c0060004003032cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff)

01:25:03 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x140})
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0)

01:25:03 executing program 4:
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x20000009}, 0x0)
sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x1}]}}]}, 0x3c}}, 0x0)
bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14)
sendto$inet6(r0, &(0x7f0000000080)="0304d6025c0060004003032cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff)

[  256.794608][T11409] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[  256.831377][T11412] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  256.869842][T11413] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
01:25:03 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = timerfd_create(0x0, 0x0)
pwrite64(r1, 0x0, 0x0, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/handlers\x00', 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0))
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000600)=0x14)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x0)

01:25:03 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x20000009}, 0x0)
sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x1}]}}]}, 0x3c}}, 0x0)
bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14)
sendto$inet6(r0, &(0x7f0000000080)="0304d6025c0060004003032cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff)

01:25:03 executing program 1:
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x20000009}, 0x0)
sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x1}]}}]}, 0x3c}}, 0x0)
bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14)
sendto$inet6(r0, &(0x7f0000000080)="0304d6025c0060004003032cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff)

01:25:03 executing program 4:
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x20000009}, 0x0)
sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x1}]}}]}, 0x3c}}, 0x0)
bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14)
sendto$inet6(r0, &(0x7f0000000080)="0304d6025c0060004003032cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff)

01:25:03 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = timerfd_create(0x0, 0x0)
pwrite64(r1, 0x0, 0x0, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/handlers\x00', 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0))
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000600)=0x14)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x0)

01:25:03 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x140})
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0)

[  257.158281][T11423] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
01:25:03 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x20000009}, 0x0)
sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x1}]}}]}, 0x3c}}, 0x0)
bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14)
sendto$inet6(r0, &(0x7f0000000080)="0304d6025c0060004003032cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff)

[  257.239729][T11429] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[  257.352529][T11433] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
01:25:03 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = timerfd_create(0x0, 0x0)
pwrite64(r1, 0x0, 0x0, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/handlers\x00', 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0))
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000600)=0x14)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x0)

01:25:03 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = timerfd_create(0x0, 0x0)
pwrite64(r1, 0x0, 0x0, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/handlers\x00', 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0))
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000600)=0x14)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x0)

[  257.528584][T11442] ------------[ cut here ]------------
[  257.535388][T11442] kernel BUG at net/core/dev.c:3246!
[  257.541090][T11442] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  257.547155][T11442] CPU: 0 PID: 11442 Comm: syz-executor.2 Not tainted 5.16.0-rc2-syzkaller #0
[  257.555920][T11442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  257.565979][T11442] RIP: 0010:skb_checksum_help+0x4b4/0x5b0
[  257.571737][T11442] Code: fa 45 89 ec e9 59 ff ff ff e8 68 e5 4d fa 48 89 ef 41 bc ea ff ff ff e8 2a f9 ff ff eb c7 e8 53 e5 4d fa 0f 0b e8 4c e5 4d fa <0f> 0b 4c 89 f7 e8 82 a6 94 fa e9 79 fb ff ff e8 88 a6 94 fa e9 28
[  257.591615][T11442] RSP: 0018:ffffc90004217040 EFLAGS: 00010216
[  257.598469][T11442] RAX: 0000000000009548 RBX: 00000000000003d2 RCX: ffffc9001166c000
[  257.606441][T11442] RDX: 0000000000040000 RSI: ffffffff8729b574 RDI: 0000000000000003
[  257.614414][T11442] RBP: ffff88806d57e500 R08: 00000000000003d4 R09: 0000000000000000
[  257.622472][T11442] R10: ffffffff8729b440 R11: 0000000000000000 R12: 00000000000000e0
[  257.630527][T11442] R13: 00000000000003d4 R14: ffff88806d57e580 R15: 00000000000003d2
[  257.638583][T11442] FS:  00007f4f09072700(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000
[  257.647602][T11442] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  257.654183][T11442] CR2: 0000001b2e72a000 CR3: 0000000072a02000 CR4: 0000000000350ef0
[  257.662152][T11442] Call Trace:
[  257.665425][T11442]  <TASK>
[  257.668353][T11442]  skb_csum_hwoffload_help+0x126/0x1e0
[  257.673819][T11442]  validate_xmit_skb+0xbd5/0xee0
[  257.678847][T11442]  __dev_queue_xmit+0x8d4/0x3630
[  257.683784][T11442]  ? lockdep_hardirqs_on_prepare+0x400/0x400
[  257.689770][T11442]  ? netdev_core_pick_tx+0x2e0/0x2e0
[  257.695056][T11442]  ? irqentry_enter+0x28/0x50
[  257.699732][T11442]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[  257.705887][T11442]  ? lockdep_hardirqs_on+0x79/0x100
[  257.711344][T11442]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[  257.717501][T11442]  ? ip_finish_output2+0xa29/0x2160
[  257.722708][T11442]  ? ip_finish_output2+0xa33/0x2160
[  257.727908][T11442]  ip_finish_output2+0x14cb/0x2160
[  257.733107][T11442]  ? ip_fragment.constprop.0+0x240/0x240
[  257.738742][T11442]  ? ip_frag_next+0x9a0/0x9a0
[  257.743505][T11442]  __ip_finish_output+0x396/0x640
[  257.748531][T11442]  ip_finish_output+0x32/0x200
[  257.753294][T11442]  ip_output+0x196/0x310
[  257.757538][T11442]  ip_local_out+0xaf/0x1a0
[  257.761956][T11442]  iptunnel_xmit+0x628/0xa50
[  257.766552][T11442]  geneve_xmit+0x10e2/0x3540
[  257.771148][T11442]  ? geneve_init_net+0x300/0x300
[  257.776434][T11442]  ? find_held_lock+0x2d/0x110
[  257.781199][T11442]  ? dev_queue_xmit_nit+0x7c2/0xa90
[  257.786398][T11442]  ? lock_downgrade+0x6e0/0x6e0
[  257.791252][T11442]  ? dev_hard_start_xmit+0x64e/0x920
[  257.796627][T11442]  dev_hard_start_xmit+0x1eb/0x920
[  257.801745][T11442]  sch_direct_xmit+0x19f/0xbc0
[  257.806509][T11442]  ? lockdep_hardirqs_on+0x79/0x100
[  257.811708][T11442]  ? dev_watchdog+0xd50/0xd50
[  257.816386][T11442]  __qdisc_run+0x4bc/0x1700
[  257.820888][T11442]  __dev_queue_xmit+0x2091/0x3630
[  257.825918][T11442]  ? netdev_core_pick_tx+0x2e0/0x2e0
[  257.831377][T11442]  ? virtio_net_hdr_to_skb.constprop.0+0x330/0x1110
[  257.837977][T11442]  ? virtio_net_hdr_to_skb.constprop.0+0x358/0x1110
[  257.844572][T11442]  ? __sanitizer_cov_trace_pc+0x43/0x60
[  257.850119][T11442]  ? __sanitizer_cov_trace_const_cmp1+0x22/0x80
[  257.856364][T11442]  ? __sanitizer_cov_trace_cmp4+0x1c/0x70
[  257.862084][T11442]  ? virtio_net_hdr_to_skb.constprop.0+0xf3/0x1110
[  257.868590][T11442]  ? __sanitizer_cov_trace_const_cmp2+0x22/0x80
[  257.874835][T11442]  ? packet_parse_headers+0x11d/0x490
[  257.880204][T11442]  ? packet_poll+0x600/0x600
[  257.884794][T11442]  ? packet_sendmsg+0x394a/0x52a0
[  257.889818][T11442]  ? packet_sendmsg+0x1af7/0x52a0
[  257.894845][T11442]  packet_sendmsg+0x220b/0x52a0
[  257.899701][T11442]  ? aa_sk_perm+0x30f/0xaa0
[  257.904204][T11442]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[  257.910361][T11442]  ? packet_sendmsg_spkt+0x13e0/0x13e0
[  257.915819][T11442]  ? aa_af_perm+0x230/0x230
[  257.920325][T11442]  ? __sys_sendto+0x1fa/0x320
[  257.925180][T11442]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  257.931424][T11442]  ? packet_sendmsg_spkt+0x13e0/0x13e0
[  257.937057][T11442]  sock_sendmsg+0xcf/0x120
[  257.941477][T11442]  __sys_sendto+0x21c/0x320
[  257.945981][T11442]  ? __ia32_sys_getpeername+0xb0/0xb0
[  257.951367][T11442]  ? lockdep_hardirqs_on_prepare+0x400/0x400
[  257.957353][T11442]  ? find_held_lock+0x2d/0x110
[  257.962122][T11442]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[  257.968280][T11442]  ? lockdep_hardirqs_on+0x79/0x100
[  257.973505][T11442]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[  257.979664][T11442]  ? trace_hardirqs_on+0x38/0x1c0
[  257.984696][T11442]  __x64_sys_sendto+0xdd/0x1b0
[  257.989462][T11442]  ? lockdep_hardirqs_on+0x79/0x100
[  257.994662][T11442]  ? syscall_enter_from_user_mode+0x21/0x70
[  258.000731][T11442]  do_syscall_64+0x35/0xb0
[  258.005172][T11442]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  258.011243][T11442] RIP: 0033:0x7f4f0bafcae9
[  258.015652][T11442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  258.035346][T11442] RSP: 002b:00007f4f09072188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  258.043784][T11442] RAX: ffffffffffffffda RBX: 00007f4f0bc0ff60 RCX: 00007f4f0bafcae9
[  258.051838][T11442] RDX: 0000000000003287 RSI: 0000000020000080 RDI: 0000000000000004
[  258.059803][T11442] RBP: 00007f4f0bb56f6d R08: 0000000000000000 R09: 00000000000002ff
[  258.067772][T11442] R10: 0000000004000002 R11: 0000000000000246 R12: 0000000000000000
[  258.075740][T11442] R13: 00007ffcbc3c954f R14: 00007f4f09072300 R15: 0000000000022000
[  258.083715][T11442]  </TASK>
[  258.086730][T11442] Modules linked in:
[  258.090666][T11442] ---[ end trace fa1b789865aee204 ]---
[  258.096176][T11442] RIP: 0010:skb_checksum_help+0x4b4/0x5b0
[  258.102005][T11442] Code: fa 45 89 ec e9 59 ff ff ff e8 68 e5 4d fa 48 89 ef 41 bc ea ff ff ff e8 2a f9 ff ff eb c7 e8 53 e5 4d fa 0f 0b e8 4c e5 4d fa <0f> 0b 4c 89 f7 e8 82 a6 94 fa e9 79 fb ff ff e8 88 a6 94 fa e9 28
[  258.121735][T11442] RSP: 0018:ffffc90004217040 EFLAGS: 00010216
[  258.127889][T11442] RAX: 0000000000009548 RBX: 00000000000003d2 RCX: ffffc9001166c000
[  258.135959][T11442] RDX: 0000000000040000 RSI: ffffffff8729b574 RDI: 0000000000000003
[  258.144026][T11442] RBP: ffff88806d57e500 R08: 00000000000003d4 R09: 0000000000000000
[  258.152098][T11442] R10: ffffffff8729b440 R11: 0000000000000000 R12: 00000000000000e0
[  258.160157][T11442] R13: 00000000000003d4 R14: ffff88806d57e580 R15: 00000000000003d2
[  258.168208][T11442] FS:  00007f4f09072700(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000
[  258.177217][T11442] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  258.184059][T11442] CR2: 0000001b2e72a000 CR3: 0000000072a02000 CR4: 0000000000350ef0
[  258.192295][T11442] Kernel panic - not syncing: Fatal exception in interrupt
[  258.200365][T11442] Kernel Offset: disabled
[  258.205171][T11442] Rebooting in 86400 seconds..