last executing test programs:

12.093223194s ago: executing program 3 (id=285):
futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0)

11.688712381s ago: executing program 5 (id=289):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x1000000}]}]}}, &(0x7f0000000540)=""/254, 0x2e, 0xfe, 0x1}, 0x20)
r2 = getpid()
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000002c0))
socket$nl_route(0x10, 0x3, 0x0)
bind(0xffffffffffffffff, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000300010000004500000025000000190011000600", 0x26}], 0x1)
r3 = dup(r0)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="600000000206050000000000fffff0000000000005000100060000000900020073797a320000000005000400000000"], 0x60}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="44000000030601010000000000000000030000060500010007"], 0x44}}, 0x80)

9.480824593s ago: executing program 3 (id=295):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2}}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x5f, &(0x7f0000000100)=""/95}, 0x90)

9.420997707s ago: executing program 1 (id=296):
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a40)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0xfa1}]}}}]}, 0x38}}, 0x0)

9.028580121s ago: executing program 5 (id=298):
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x28, 0x0, 0x0, 0x0, 0x0, {{0x12}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5}]}]}, 0x28}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0d030000000000000000130000004c"], 0x60}}, 0x0)

8.277179105s ago: executing program 1 (id=299):
syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x3000000, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRESDEC, @ANYRES64, @ANYRES8], 0x11, 0x2e1, &(0x7f0000000540)="$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")
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a4243c, &(0x7f0000000680)=ANY=[@ANYRES16, @ANYRES64, @ANYBLOB="12a4095a2aac12f0bfcb206d982e44066381388d27f14002d8d7431d3947f6399c7ff9f5193fc0398653e5a67bbb319f02bf4ac6f6ccd5acbfe1350cc3a6d2d48cf6c089ddf67171ffb3b15988e7b394c5daf3e12ca05e4dbdad7edd45f10cbc296a53a530d4c2d203ee650d5fff3a9b5aae78794fe84327e508172cdd72eeff5af4d6db9379bef20dde8e64b91d31a84ce8a7598bb78cc85108874811fc650f0520a5", @ANYRESOCT, @ANYRESDEC, @ANYRES16, @ANYRESDEC=0x0, @ANYBLOB="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", @ANYRES8, @ANYRES16], 0x0, 0x0, &(0x7f0000000000))
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.events\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f00000008c0), 0xfecc)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x12, r0, 0x0)
creat(0x0, 0x0)

7.968479677s ago: executing program 5 (id=301):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$eJzs3M1rXOUaAPDnnGaafuTeyYUL9+pChBZaKD1Jmk27aty4KxQKbmtITkLISSZkJrUTC7auhdpsFARR1y7dCqX+Ae6koOBeEK1xIW5GzuSjNGam0ybpSPr7wcl53vP1vE/m8GYO5D0BvLReL38kEUMRcTUiqpvb04g42o6ORdzeOG790a2pckmi1br2S1KeFuut6va1ks31yWifEv+PiAeViHPv/z1vvbk6P1kU+fJme6SxsDRSb66en1uYnM1n88Wx8UujF8fHL46OP7WG//VY6+m3Lh2/9+2ba2vffdW4+9rA+SQm2nXHZm09XuaZbPxOKjGxY/viQSTro6TfHQAAoCfl9/wjETHQ/pZajSPtCAAAADhMWoMtAAAA4NBLot89AAAAAA7W1v8BbM3tPah5sJ38/EZEDO+Wf6A9hzjiWFQi4sR68sTMhGTjNNiT23ci4v7Ezvvvi/IOu73Ha4/uaD85R/roHq/Ofrhfjj8Tu40/6fb4E7uMPwNb707Yo87j3+P8RzqMf1d7zPH1p69UOua/E/HqwG75k+38SYf8b/eY/+7aB/c67Wt9HnFm178/yRO5urwfYmJmruj6+oEHf5592K3+E53yJ93rX+qx/nfXf5vvNJaU+c+e6v7575a/vCc+3OxHGhH3Ntdle21HjlML33/Trf7piNbzfP6f9Vj/j18O3uzxUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGhLI2IokjTbjtM0yyJORsR/40Ra1OqNczO1lcXpcl/EcFTSmbkiH42I6kY7Kdtj7fhx+8KO9nhE/OeH4xtJ54o8m6oV0/0uHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG0nI2IokjSLiDQifq+maZZFDPRw7uAL6B8AAACwT4b73QEAAADgwHn+BwAAgMPveZ//k33uBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCoXb1ypVxa649uTZXt6RvNlfnajfPTeX0+W1iZyqZqy0vZbK02W+TZVG3hadcrarWlsUuxcnOkkdcbI/Xm6vWF2spi4/rcwuRsfj2vvJCqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFZD7SVJs4hI23GaZlnEvyJiOCrJzFyRj0bEvyPiYbUyWLbH+t1pAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9l29uTo/WRT5skAgeGHBexHxD+hGl6DfIxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP1Qb67OTxZFvlzvd08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADor/SnJCLK5Uz19NDOvUeTP6rtdUS888m1j25ONhrLY+X2X7e3Nz7e3H6hH/0HAACAl8LlZzl46zl96zkeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgV/Xm6vxkUeTLewsuR3O1lXQ4pt81AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz+evAAAA//8KQsc4")
chdir(&(0x7f0000000240)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x8004587d, &(0x7f0000000140)={0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})

7.869907897s ago: executing program 2 (id=302):
socket$inet(0x2, 0x5, 0x6)

7.341073316s ago: executing program 3 (id=304):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0)
setitimer(0x0, &(0x7f0000000000), 0x0)

7.309844328s ago: executing program 1 (id=305):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socket$inet(0x2, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xa89)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x8c1, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
ptrace$getregset(0x4204, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x0})
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4008031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r1 = fsmount(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$mptcp(0x0, r1)
recvmsg$can_bcm(r1, 0x0, 0x0)
r2 = timerfd_create(0x0, 0x0)
read(r2, &(0x7f0000000140)=""/196, 0xc4)
timerfd_settime(r2, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0)

7.239868167s ago: executing program 0 (id=306):
ptrace(0xffffffffffffffff, 0x1)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000800)={0x2, 0x0, @dev}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000c00)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0x2400c044)
sendto$inet(r0, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9ecda75e2a7d49d5cbcb370c4d789390a328ba42c9c60cf2154d1b659aa709e8980a522cfb72f23ad87fb7019706ccae98cfe7c4fd23e8297b8cabc46ede1ac3da78f1b488c6357e7edfcd417df6660af20a54ecdcb02f689ae15ee655d4b7b1ea733e88ee9f53669388dff487c1c49953f3bc142112bd4b582b29b35d43962ed245c2cd5d5df40a3e0ed6beaf3b641e84b0f0dfa121a9efe05269f9f4a0e9bcbf43c7a90a711f453668c730c3badedca687b71a9c27bab9e724cc4a4918713031596ea6fd01124f973f257ccd9665aee7df4a9d64f079d176abc00000000d7af3e2dd4396f72373fb0a787a6129ca41181f5087fb843212550b58e3707d5a0399de36c2503836cbe2133de4f574e9e05c96788b0de1bd13e390445433d96737b964fa8af2ac4b2f0f9390ca93d8d3d810044d024359e067c4553230ab748947d33f8fc115ce9a49e6571c45a05d786cbd49342c236537dbbeec666b07baab917252113a5b9a77283189b518f356debe42d80cf2d0687b9c64d0253a6a09286fded6e4f8557b8fb4f25ca4fb138af8945c74bbc98748eaaa030be5317646f195e6e085ac6ddb29542e3581961259987241f7e7061526a7afec8962e74215fea43703a4e543ee9d1a3c3f5f2a41977ece8fdadcf89ce331ce59bebae5f53513d0e10485d7ddbda60513bf339602510b3a23ea29a0d5d03a61e34d12942ea4a847c884b27b5344a456d02a55f8929cc567e7c792c01fab7a7b32780a14c361000609b817dd91507b04d875279527946fdb8fb92a512485e234d092c28f1d0a0498731ccc0eb10515d510e8945839307b46512ceca6f495fdd2c6ae5eb2ef3b2a40ebdc7edf0048e3fb5e3d97a9ea5113a6b70d20ad5c43f0df95d88c0f121a1884da21a21f0ba47420f8391a97921cc51871dbb272e43710fe71d5e342c3afd10608a8b02f00e8fbd8d570b6faace86c494ecea8913233391e7b7cec3d571bb3032181ed58e1b513e511f79ee562c8cde9b3b74c2e95dcde7fadb5a666bdc0c1684794620ce8cf0c0aee8e90b3ef6e7160d3f055cb4d1ced32e4edc15e7d102952d3237e6c02c591a95a182bf190c0124abc7f1225332ff1c5e1b94e4e9bf02c1a18bd7bfce20707f7298da322560bc1a4cf298d46f5bf8ff41da21e25aa17f65f9ee43ca890b5ef6a3ccf3efedf3ca60a9acef1352ad0c43e6cf375108cf0974ce89a99adba7e6a3f8949dc573440fafe0e3abdd0066057a2d868e8386080f18a421568d8e7a89536a4173861bd55245c8fcf7dcba18edce36d2e85b9630fbc218db9ebd16abb11ac06fdbf2bc3e6394d4c6e7ae71813d30772d487743a2856348fee09989ce03331e7848770fc91e62191c20fe5f4a73c5dae467dd612bdb63b1e50921d38271305d7412103d5a6214d6d534d1d530b9169f882b6926bbd338f0282a8bd9a44603934e5249e83f1d0947b39f82a7843d2b6f796d8abf7ff3e66cfd4519324d71cebbf6580dffc10d555e479e9acaa12c3c59e3732c181aa4223d0fcdac514e9d7c7963c2634964520286b028f60a4ae612b8e6049315139e884cbffd6836253094ad023329183496cf663366ad4d7f7f5f1bd2db9b0d33f106c041fba4494c7da404d45d8955e5459ca4a62862721ec1fa534fd95e262c5814426816e60000000000000000001aa4fb6f40ec24f42f6949cc28d2a0d4eb61cb1664627582d962523586539445b81e9759321652280ecb", 0xffe3, 0x0, 0x0, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x80801)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000080)={0x0, 0x0, "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"})
ioctl$USBDEVFS_CONNECTINFO(r1, 0x8004550f, &(0x7f0000001980))

7.088656133s ago: executing program 4 (id=307):
syz_open_dev$media(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040))
openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300002095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='percpu_alloc_percpu\x00', r3}, 0x10)
syz_io_uring_setup(0x3667, &(0x7f0000000100)={0x0, 0x0, 0x2}, 0x0, 0x0)

6.842433916s ago: executing program 5 (id=308):
socket$qrtr(0x2a, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket(0x2, 0x80805, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040))
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xd, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x90)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
unshare(0x8000000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
close(r2)

6.761086222s ago: executing program 2 (id=309):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
setuid(0x0)

6.597032854s ago: executing program 0 (id=310):
r0 = io_uring_setup(0xdac, &(0x7f0000000180))
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r3=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3, 0x25, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x40)
syz_emit_ethernet(0xfdef, &(0x7f0000000200)=ANY=[], 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

5.611872904s ago: executing program 4 (id=311):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x7, 0x3, 0x800, 0xff8d, 0x0, 0xffffffffffffffff, 0x4753e3a8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x3, 0x0, 0x8000, 0x528}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/16, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f00000000c0), 0x12)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0)
sendfile(r4, r4, 0x0, 0x4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
readv(r4, &(0x7f0000000340)=[{&(0x7f0000001740)=""/153, 0x99}], 0x1)

5.357156181s ago: executing program 2 (id=312):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
io_setup(0xa, &(0x7f0000000240)=<r1=>0x0)
connect$can_bcm(r0, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x0, 0x0, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "196c3df741c82283"}}, 0x48}}, 0x0)
io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)="050000000000003f420f000000000000580f02000000003f420f000000000000ffffffff00000000", 0x28}])

5.34932712s ago: executing program 1 (id=313):
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r3 = gettid()
process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x3cb, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)

4.985659383s ago: executing program 3 (id=314):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58)
r4 = accept(r3, 0x0, 0x0)
sendmsg$kcm(r4, 0x0, 0x7)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x1c}]}, &(0x7f0000000000)='GPL\x00'}, 0x80)

4.804144801s ago: executing program 0 (id=315):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5}]}}}]}, 0x3c}}, 0x0)

4.525556628s ago: executing program 4 (id=316):
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x28, 0x0, 0x0, 0x0, 0x0, {{0x12}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5}]}]}, 0x28}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0d030000000000000000130000004c"], 0x60}}, 0x0)

4.213427033s ago: executing program 0 (id=317):
socket$kcm(0x21, 0x2, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(0x0, r0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan1\x00'})
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r2)
sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x0, 0x0, {0x3}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0)
sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x3c, r3, 0x2, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4002}, 0x40000)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x82c1, 0x0)

3.099937339s ago: executing program 3 (id=318):
landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x10, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r1=>0x0})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c00c38b0a"], 0x1c}}, 0x0)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r0, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r1, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

3.02248153s ago: executing program 5 (id=319):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
io_submit(0x0, 0x0, 0x0)
write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x12, 0x4, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000001580)='ns/uts\x00')
write(0xffffffffffffffff, &(0x7f00000002c0)="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", 0x248)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f0000001801000020696c2500000000002020207b1af8ff00000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x8, 0x4, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
write$bt_hci(r5, &(0x7f0000000500)=ANY=[@ANYBLOB="0e00010002"], 0x8)
ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000000))
fsmount(r3, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002240)=@delchain={0x3a8, 0x65, 0x0, 0x0, 0x0, {}, [@filter_kind_options=@f_u32={{0x8}, {0x54, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth0_to_team\x00'}, @TCA_U32_INDEV={0x14, 0x8, 'veth0\x00'}, @TCA_U32_HASH={0x8}, @TCA_U32_CLASSID={0x8}, @TCA_U32_MARK={0x10}, @TCA_U32_FLAGS={0x8}]}}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0x30c, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_ACT={0x224, 0x6, [@m_connmark={0x170, 0x0, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}]}, {0x95, 0x6, "91a991d04aa8cb411880b88050856c4a5b99aafe5cf70a535f4e162db7c30535ebf5e9ab54237bf6d2780785c80bcf9eae2d6d6d65f242d28d9992d8a093d12a497447bc2a6c4f73538dbca11ebb12d1c8ea001eac3246ebaf518402b88e3f2b51ce947977543e069be9c85124bbe592bd2ed79c20d83d312cd1c151c51eed4c8c8bce1d810f14cea570fce0fb771c34fd"}, {0xc}, {0xc}}}, @m_vlan={0xb0, 0x0, 0x0, 0x0, {{0x9}, {0x84, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PARMS={0x1c}, @TCA_VLAN_PARMS={0x1c}, @TCA_VLAN_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}, @TCA_ROUTE4_ACT={0xdc, 0x6, [@m_nat={0x7c, 0x0, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @broadcast, @multicast1}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x3a8}}, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r7)

2.989884819s ago: executing program 2 (id=320):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x34}}, 0x0)

2.946609614s ago: executing program 1 (id=321):
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0xfffffe5d)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan4\x00'})
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="110800000000000020001000000008000300", @ANYRES32], 0x1c}}, 0x0)

2.921909519s ago: executing program 4 (id=322):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
io_setup(0x2007, &(0x7f0000000200)=<r1=>0x0)
r2 = eventfd2(0x0, 0x0)
io_submit(r1, 0x2, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000001c0)="5f18ab32505b5506", 0x8}])
r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r3, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f4)
shutdown(r0, 0x0)

2.390005306s ago: executing program 2 (id=323):
syz_open_dev$media(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040))
openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300002095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='percpu_alloc_percpu\x00', r3}, 0x10)
syz_io_uring_setup(0x3667, &(0x7f0000000100)={0x0, 0x0, 0x2}, 0x0, 0x0)

1.873087784s ago: executing program 1 (id=324):
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ed430000000000001090224000100001c00090400000103000000092100000001220700090581030000000000"], 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[], &(0x7f00000008c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x77, '\x00', 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}, 0x90)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000000c0), 0xfe, 0x4ef, &(0x7f0000000380)="$eJzs3d9rHFsdAPDvTHbvbdpcN1d9uF7w3outJEW7SRrbBh+qguhTQa3vNSbbELLJlmTTNqFoin+AIKKCL/rki+AfIEj/BBEK9l1UFNFWH3yojuzubEzT3SSl+0Oznw+czDkzs/s9J8OcnTMzzAQwsj6IiOmIyLIsuxgRpXx+mqfYa6XGes+ePlhqpCSy7OZfk0jyee3vejOfnss/diYivvbliG8mL8fd2tldW6xWK5t5eaa+njzPst1Lq+uLK5WVysb8/NzVhWsLVxZme9LOyYi4/sU//uC7P/vS9V99+t7vbv15+lutBrYcbEcvtZpebP4v2goRsdmPYENSaLaw5cqQ6wIAwNEax/sfjohPRMTFKMVY82gOAAAAOE2yz03E86R1/Q8AAAA4ndKImIgkLef3+05EmpbLrXt4Pxpn02ptq/6prLR/vmAyiunt1WplNr93YDKKSaM8l99j2y5fPlSej4i3I+L7pfFmubxUqy4P9cwHAAAAjI5zh8b//yi1xv8AAADAKTM57AoAAAAAfWf8DwAAAKef8T8AAACcal+5caORsvb7r5fv7myv1e5eWq5srZXXt5fKS7XNO+WVWm2l+cy+9eO+r1qr3flMbGzfn6lXtuozWzu7t9Zr2xv1W6svvAIbAAAAGKC333/0JImIvc+OpxGRJQeWFSOysYMrFwZfP6B/0ldZ+Q/9qwcweGPDrgAwNA7pYXQVh10BYOiO6we63rzz697XBQAA6I+pjz16Eq3r/83U8Ea+LBlmxYC+y6//J/Z1GD2u/8Pocv0PRlfxqCMAgwI49dIT7Oqvf/0/y16pUgAAQM9NNFOSlvNxwESkabkc8VbztQDF5PZqtTIbER+KiN+Wim82ynPNTyZODwAAAAAAAAAAAAAAAAAAAAAAAADACWVZElkX4/vrAAAAAP/PItI/Jfn7v6ZKFyYOnx94I/lnqTmNiHs/vvnD+4v1+uZcY/7f9ufXf5TPvzzosxcAAABAJ+1xenscDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC99Ozpg6V2GmTcv3whIiY7xS/Emeb0TBQj4uzfkygc+FwSEWM9iL/3MCLe6RQ/aVQrJvNaHI6fRsT4kOOf60F8GGWPGv3P5zvtf2l80Jx23v8KeXpd3fu/dL//G+vS/73V6QvTl2e9+/gXM13jP4x4t9C5/2nHT7rEP3/CNn7j67u73ZZlP42Y6vj7k7wQayYp3JnZ2tm9tLq+uFJZqWzMz89dXbi2cGVhdub2arWS/+0Y43sf/+W/j2r/2S7xJ49p/4UTtv9fj+8//UgrWzy0qBg/ybLp8523/ztd4rd/+z6Zb+5Geaqd32vlD3rv57957/0j2r/cpf3Hbf/pE7b/4le/8/sTrgoADMDWzu7aYrVa2ZSR6VtmPAYYdDGOWqd9EDuA+nw7D/U/sQleOTPETgkAAOiL/x70D7smAAAAAAAAAAAAAAAAAAAAMLqOewxY9OBxYodj7g2nqQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAR/pPAAAA//+e/ctD")
r0 = socket$inet(0x2, 0x4000000000000001, 0xfffffffc)
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c756e695f786c6174653d312c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c757466383d302c73686f72746e616d653d6d697865642c726f6469722c73686f72746e616d653d6d697865642c636865636b3d7374726963742c7368a850a6402cb833f8e92d43d56d2077ac6f72746e616d653d77696e6e742c756e695f786c6174653d302c726f6469722c757466383d312c616c6c6f775f7574696d653d30303030303030303030303030303030303030373335312c6572726f72733d72656d6f756e742d726f2c736d61636b6673666c6f6f723d756e695f789afd74653d312c00"], 0x6, 0x2d0, &(0x7f00000003c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = getpid()
syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000280), 0xc, &(0x7f0000000bc0)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004000)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
unshare(0x22020600)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000500)=ANY=[@ANYRES8=r0], &(0x7f0000000300)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r5, 0x0, 0x0}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x2000c042}, 0x4010)
setsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001000000008000600000000001800018014000200776c616e300000000000000000000000080008"], 0x3c}}, 0x0)

1.660181666s ago: executing program 4 (id=325):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffdef)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x14, 0x4, 0x4, 0x10002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x48)

1.643914443s ago: executing program 0 (id=326):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0)
setitimer(0x0, &(0x7f0000000000), 0x0)

1.440005892s ago: executing program 5 (id=327):
r0 = io_uring_setup(0xdac, &(0x7f0000000180))
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r3=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3, 0x25, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x40)
syz_emit_ethernet(0xfdef, &(0x7f0000000200)=ANY=[], 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

419.31394ms ago: executing program 2 (id=328):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x7, 0x3, 0x800, 0xff8d, 0x0, 0xffffffffffffffff, 0x4753e3a8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x3, 0x0, 0x8000, 0x528}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/16, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f00000000c0), 0x12)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0)
sendfile(r4, r4, 0x0, 0x4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
readv(r4, &(0x7f0000000340)=[{&(0x7f0000001740)=""/153, 0x99}], 0x1)

371.857446ms ago: executing program 0 (id=329):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
chdir(0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
socket$kcm(0x11, 0x3, 0x0)
close(0xffffffffffffffff)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[<r3=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000300)={0x0, 0x0, r3, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000600)={r4, 0x0, 0x0, 0x0, 0x0, [<r5=>0x0, <r6=>0x0]})
ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f00000001c0)={r4, 0xae, 0x3, 0x34325241, 0x3, [r5, 0x0, 0x0, r6], [0x2b8, 0x0, 0x0, 0x400], [], [0x0, 0x0, 0x2, 0x3ff]})
ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000100)={0x28, 0x2, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3})
socket$nl_route(0x10, 0x3, 0x0)
r7 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r8=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r7, 0xab00, r8)
r9 = fsopen(&(0x7f0000000000)='btrfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f00000001c0)='smackfstransmute', &(0x7f0000000040)='u+\x1d\x00\x00.\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000600)='smackfstransmute', &(0x7f0000000700)='{\x00', 0x0)
r10 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0)
ioctl$NBD_SET_FLAGS(r10, 0xab0a, 0x1000001000104)
ioctl$NBD_SET_SOCK(r10, 0xab00, r8)
ioctl$NBD_DO_IT(r7, 0xab03)
ioctl$NBD_CLEAR_SOCK(r10, 0xab04)

478.06µs ago: executing program 3 (id=330):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58)
r4 = accept(r3, 0x0, 0x0)
sendmsg$kcm(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}, 0x7)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x1c}]}, &(0x7f0000000000)='GPL\x00'}, 0x80)

0s ago: executing program 4 (id=331):
socket$qrtr(0x2a, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket(0x2, 0x80805, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040))
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xd, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x90)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
unshare(0x8000000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
close(r2)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.157' (ED25519) to the list of known hosts.
[  101.836483][ T1164] cfg80211: failed to load regulatory.db
[  104.587243][ T5215] cgroup: Unknown subsys name 'net'
[  104.773097][ T5215] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[  106.900423][ T5215] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[  111.621032][ T5251] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  111.630151][ T5251] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  111.633508][ T5239] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  111.638115][ T5251] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  111.652414][ T5251] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  111.657124][ T5250] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  111.669520][ T5251] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  111.669980][ T5239] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  111.677107][ T5251] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  111.690873][ T5239] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  111.693527][ T5251] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  111.698412][ T5250] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  111.705807][ T5251] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  111.712511][ T5239] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  111.723156][ T5251] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  111.728174][ T5250] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  111.734772][ T5251] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  111.741278][ T5250] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  111.750232][ T5254] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  111.754832][ T5250] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  111.760992][ T5254] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  111.775855][ T5252] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  111.783612][ T5252] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  111.793590][ T5249] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  111.794376][ T5254] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  111.802061][ T5249] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  111.815549][ T4614] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  111.823183][ T4614] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  111.826691][ T5249] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  111.831682][ T5254] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  111.841467][ T5236] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  111.845510][ T5254] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  111.859723][ T5236] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  111.865707][ T5254] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  111.876012][ T5236] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  111.894415][ T5236] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  113.216139][ T5228] chnl_net:caif_netlink_parms(): no params data found
[  113.341128][ T5230] chnl_net:caif_netlink_parms(): no params data found
[  113.457576][ T5229] chnl_net:caif_netlink_parms(): no params data found
[  113.595518][ T5231] chnl_net:caif_netlink_parms(): no params data found
[  113.676646][ T5228] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.686090][ T5228] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.693881][ T5228] bridge_slave_0: entered allmulticast mode
[  113.702759][ T5228] bridge_slave_0: entered promiscuous mode
[  113.763930][ T5234] chnl_net:caif_netlink_parms(): no params data found
[  113.833886][ T5244] Bluetooth: hci1: command tx timeout
[  113.841308][ T5228] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.848702][ T5228] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.856366][ T5228] bridge_slave_1: entered allmulticast mode
[  113.865463][ T5228] bridge_slave_1: entered promiscuous mode
[  113.896311][ T5232] chnl_net:caif_netlink_parms(): no params data found
[  113.923154][ T5244] Bluetooth: hci3: command tx timeout
[  113.923200][ T5247] Bluetooth: hci0: command tx timeout
[  113.993032][ T5247] Bluetooth: hci5: command tx timeout
[  114.003214][ T5247] Bluetooth: hci4: command tx timeout
[  114.004154][ T5244] Bluetooth: hci2: command tx timeout
[  114.052717][ T5230] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.061422][ T5230] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.069070][ T5230] bridge_slave_0: entered allmulticast mode
[  114.077296][ T5230] bridge_slave_0: entered promiscuous mode
[  114.101374][ T5230] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.109612][ T5230] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.117475][ T5230] bridge_slave_1: entered allmulticast mode
[  114.125773][ T5230] bridge_slave_1: entered promiscuous mode
[  114.196772][ T5228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  114.227215][ T5228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  114.329470][ T5229] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.342754][ T5229] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.350127][ T5229] bridge_slave_0: entered allmulticast mode
[  114.359768][ T5229] bridge_slave_0: entered promiscuous mode
[  114.477466][ T5230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  114.488432][ T5229] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.497950][ T5229] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.505930][ T5229] bridge_slave_1: entered allmulticast mode
[  114.514674][ T5229] bridge_slave_1: entered promiscuous mode
[  114.570966][ T5228] team0: Port device team_slave_0 added
[  114.585848][ T5228] team0: Port device team_slave_1 added
[  114.616410][ T5230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  114.673396][ T5231] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.680759][ T5231] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.689212][ T5231] bridge_slave_0: entered allmulticast mode
[  114.698069][ T5231] bridge_slave_0: entered promiscuous mode
[  114.804775][ T5230] team0: Port device team_slave_0 added
[  114.834535][ T5231] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.841785][ T5231] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.849262][ T5231] bridge_slave_1: entered allmulticast mode
[  114.857939][ T5231] bridge_slave_1: entered promiscuous mode
[  114.961064][ T5230] team0: Port device team_slave_1 added
[  114.995438][ T5229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  115.031257][ T5232] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.039610][ T5232] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.047144][ T5232] bridge_slave_0: entered allmulticast mode
[  115.056006][ T5232] bridge_slave_0: entered promiscuous mode
[  115.067213][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_0
[  115.074836][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  115.101208][ T5228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  115.163274][ T5229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  115.174474][ T5230] batman_adv: batadv0: Adding interface: batadv_slave_0
[  115.181435][ T5230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  115.208030][ T5230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  115.241206][ T5231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  115.252106][ T5232] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.259926][ T5232] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.267848][ T5232] bridge_slave_1: entered allmulticast mode
[  115.276297][ T5232] bridge_slave_1: entered promiscuous mode
[  115.308262][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_1
[  115.315988][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  115.342337][ T5228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  115.367689][ T5234] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.375565][ T5234] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.382836][ T5234] bridge_slave_0: entered allmulticast mode
[  115.391405][ T5234] bridge_slave_0: entered promiscuous mode
[  115.448245][ T5230] batman_adv: batadv0: Adding interface: batadv_slave_1
[  115.456164][ T5230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  115.482169][ T5230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  115.508572][ T5231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  115.572526][ T5232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  115.586882][ T5234] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.594649][ T5234] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.601863][ T5234] bridge_slave_1: entered allmulticast mode
[  115.610404][ T5234] bridge_slave_1: entered promiscuous mode
[  115.626439][ T5229] team0: Port device team_slave_0 added
[  115.665166][ T5231] team0: Port device team_slave_0 added
[  115.677262][ T5232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  115.788007][ T5229] team0: Port device team_slave_1 added
[  115.823840][ T5231] team0: Port device team_slave_1 added
[  115.860021][ T5232] team0: Port device team_slave_0 added
[  115.894946][ T5234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  115.910715][ T5234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  115.923782][ T5244] Bluetooth: hci1: command tx timeout
[  115.950663][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_0
[  115.957766][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  115.984447][ T5229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  115.996075][ T5244] Bluetooth: hci0: command tx timeout
[  116.001610][ T5244] Bluetooth: hci3: command tx timeout
[  116.055806][ T5232] team0: Port device team_slave_1 added
[  116.072981][ T5244] Bluetooth: hci2: command tx timeout
[  116.073085][ T5247] Bluetooth: hci4: command tx timeout
[  116.078403][ T5244] Bluetooth: hci5: command tx timeout
[  116.125567][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_1
[  116.132535][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  116.160864][ T5229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  116.207660][ T5228] hsr_slave_0: entered promiscuous mode
[  116.215816][ T5228] hsr_slave_1: entered promiscuous mode
[  116.258299][ T5230] hsr_slave_0: entered promiscuous mode
[  116.266011][ T5230] hsr_slave_1: entered promiscuous mode
[  116.272650][ T5230] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  116.281046][ T5230] Cannot create hsr debugfs directory
[  116.317517][ T5234] team0: Port device team_slave_0 added
[  116.337083][ T5231] batman_adv: batadv0: Adding interface: batadv_slave_0
[  116.345515][ T5231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  116.371616][ T5231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  116.386029][ T5231] batman_adv: batadv0: Adding interface: batadv_slave_1
[  116.393146][ T5231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  116.419232][ T5231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  116.502424][ T5232] batman_adv: batadv0: Adding interface: batadv_slave_0
[  116.509534][ T5232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  116.536484][ T5232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  116.552061][ T5232] batman_adv: batadv0: Adding interface: batadv_slave_1
[  116.559585][ T5232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  116.586403][ T5232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  116.601031][ T5234] team0: Port device team_slave_1 added
[  116.811933][ T5234] batman_adv: batadv0: Adding interface: batadv_slave_0
[  116.819761][ T5234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  116.848000][ T5234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  116.893678][ T5229] hsr_slave_0: entered promiscuous mode
[  116.901207][ T5229] hsr_slave_1: entered promiscuous mode
[  116.908580][ T5229] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  116.916924][ T5229] Cannot create hsr debugfs directory
[  116.992317][ T5234] batman_adv: batadv0: Adding interface: batadv_slave_1
[  116.999658][ T5234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  117.027145][ T5234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  117.196422][ T5231] hsr_slave_0: entered promiscuous mode
[  117.206140][ T5231] hsr_slave_1: entered promiscuous mode
[  117.214432][ T5231] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  117.222100][ T5231] Cannot create hsr debugfs directory
[  117.320449][ T5232] hsr_slave_0: entered promiscuous mode
[  117.328491][ T5232] hsr_slave_1: entered promiscuous mode
[  117.335659][ T5232] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  117.343290][ T5232] Cannot create hsr debugfs directory
[  117.447134][ T5234] hsr_slave_0: entered promiscuous mode
[  117.455315][ T5234] hsr_slave_1: entered promiscuous mode
[  117.462142][ T5234] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  117.470281][ T5234] Cannot create hsr debugfs directory
[  117.993201][ T5244] Bluetooth: hci1: command tx timeout
[  118.073142][ T5244] Bluetooth: hci3: command tx timeout
[  118.083467][ T5244] Bluetooth: hci0: command tx timeout
[  118.153015][ T5236] Bluetooth: hci4: command tx timeout
[  118.153071][ T5247] Bluetooth: hci2: command tx timeout
[  118.158546][ T5244] Bluetooth: hci5: command tx timeout
[  118.446030][ T5228] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  118.472025][ T5228] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  118.501772][ T5228] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  118.533160][ T5228] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  118.616190][ T5230] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  118.636906][ T5230] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  118.660950][ T5230] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  118.679789][ T5230] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  118.784265][ T5231] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  118.808034][ T5231] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  118.823498][ T5231] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  118.862082][ T5231] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  119.036635][ T5229] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  119.079119][ T5229] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  119.096452][ T5229] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  119.128056][ T5229] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  119.416486][ T5234] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  119.482346][ T5234] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  119.500485][ T5234] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  119.514615][ T5234] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  119.758784][ T5228] 8021q: adding VLAN 0 to HW filter on device bond0
[  119.792304][ T5230] 8021q: adding VLAN 0 to HW filter on device bond0
[  119.855560][ T5232] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  119.878605][ T5232] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  119.907608][ T5231] 8021q: adding VLAN 0 to HW filter on device bond0
[  119.937301][ T5232] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  119.975722][ T5232] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  120.016970][ T5230] 8021q: adding VLAN 0 to HW filter on device team0
[  120.045723][ T5228] 8021q: adding VLAN 0 to HW filter on device team0
[  120.069273][ T5231] 8021q: adding VLAN 0 to HW filter on device team0
[  120.077148][ T5244] Bluetooth: hci1: command tx timeout
[  120.098570][ T5238] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.106490][ T5238] bridge0: port 1(bridge_slave_0) entered forwarding state
[  120.129102][ T5229] 8021q: adding VLAN 0 to HW filter on device bond0
[  120.162977][ T5244] Bluetooth: hci0: command tx timeout
[  120.163745][ T5247] Bluetooth: hci3: command tx timeout
[  120.199395][ T5297] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.206625][ T5297] bridge0: port 1(bridge_slave_0) entered forwarding state
[  120.227137][ T5297] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.234412][ T5297] bridge0: port 2(bridge_slave_1) entered forwarding state
[  120.234608][ T5244] Bluetooth: hci4: command tx timeout
[  120.247305][ T5247] Bluetooth: hci5: command tx timeout
[  120.248712][ T5297] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.252713][ T5247] Bluetooth: hci2: command tx timeout
[  120.259897][ T5297] bridge0: port 1(bridge_slave_0) entered forwarding state
[  120.334991][ T5238] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.342254][ T5238] bridge0: port 2(bridge_slave_1) entered forwarding state
[  120.356259][ T5238] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.363484][ T5238] bridge0: port 2(bridge_slave_1) entered forwarding state
[  120.539711][ T5229] 8021q: adding VLAN 0 to HW filter on device team0
[  120.647686][ T5238] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.654954][ T5238] bridge0: port 1(bridge_slave_0) entered forwarding state
[  120.849168][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.856515][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  120.901443][ T5231] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  121.139335][ T5234] 8021q: adding VLAN 0 to HW filter on device bond0
[  121.346108][ T5234] 8021q: adding VLAN 0 to HW filter on device team0
[  121.420337][ T5232] 8021q: adding VLAN 0 to HW filter on device bond0
[  121.451685][ T5296] bridge0: port 1(bridge_slave_0) entered blocking state
[  121.458993][ T5296] bridge0: port 1(bridge_slave_0) entered forwarding state
[  121.564594][   T25] bridge0: port 2(bridge_slave_1) entered blocking state
[  121.571869][   T25] bridge0: port 2(bridge_slave_1) entered forwarding state
[  121.635981][ T5230] 8021q: adding VLAN 0 to HW filter on device batadv0
[  121.780668][ T5232] 8021q: adding VLAN 0 to HW filter on device team0
[  121.840830][ T5286] bridge0: port 1(bridge_slave_0) entered blocking state
[  121.848123][ T5286] bridge0: port 1(bridge_slave_0) entered forwarding state
[  121.947934][ T5296] bridge0: port 2(bridge_slave_1) entered blocking state
[  121.955245][ T5296] bridge0: port 2(bridge_slave_1) entered forwarding state
[  122.027680][ T5228] 8021q: adding VLAN 0 to HW filter on device batadv0
[  122.102318][ T5231] 8021q: adding VLAN 0 to HW filter on device batadv0
[  122.496202][ T5231] veth0_vlan: entered promiscuous mode
[  122.573817][ T5228] veth0_vlan: entered promiscuous mode
[  122.590559][ T5229] 8021q: adding VLAN 0 to HW filter on device batadv0
[  122.616217][ T5231] veth1_vlan: entered promiscuous mode
[  122.677439][ T5228] veth1_vlan: entered promiscuous mode
[  122.887709][ T5234] 8021q: adding VLAN 0 to HW filter on device batadv0
[  122.921158][ T5231] veth0_macvtap: entered promiscuous mode
[  122.995868][ T5230] veth0_vlan: entered promiscuous mode
[  123.028420][ T5231] veth1_macvtap: entered promiscuous mode
[  123.148872][ T5228] veth0_macvtap: entered promiscuous mode
[  123.176537][ T5231] batman_adv: batadv0: Interface activated: batadv_slave_0
[  123.184957][ T5229] veth0_vlan: entered promiscuous mode
[  123.204249][ T5231] batman_adv: batadv0: Interface activated: batadv_slave_1
[  123.227498][ T5230] veth1_vlan: entered promiscuous mode
[  123.266019][ T5228] veth1_macvtap: entered promiscuous mode
[  123.309128][ T5231] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  123.318695][ T5231] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  123.327677][ T5231] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  123.336747][ T5231] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  123.378456][ T5229] veth1_vlan: entered promiscuous mode
[  123.435105][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  123.448117][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  123.462655][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_0
[  123.477638][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  123.488430][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  123.502645][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_1
[  123.549286][ T5228] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  123.558758][ T5228] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  123.569752][ T5228] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  123.578783][ T5228] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  123.647432][ T5232] 8021q: adding VLAN 0 to HW filter on device batadv0
[  123.814151][ T5234] veth0_vlan: entered promiscuous mode
[  123.879358][ T5230] veth0_macvtap: entered promiscuous mode
[  123.957934][ T5230] veth1_macvtap: entered promiscuous mode
[  123.987589][ T5234] veth1_vlan: entered promiscuous mode
[  124.037639][ T5229] veth0_macvtap: entered promiscuous mode
[  124.141373][ T5229] veth1_macvtap: entered promiscuous mode
[  124.225639][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.261615][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.336600][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  124.349435][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.371224][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  124.383326][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.406325][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_0
[  124.436500][ T5234] veth0_macvtap: entered promiscuous mode
[  124.463366][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.465620][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  124.471180][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.488830][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.499679][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  124.517157][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.529931][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_1
[  124.545500][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  124.556575][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.568971][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  124.579729][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.589589][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  124.600043][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.612424][ T5230] batman_adv: batadv0: Interface activated: batadv_slave_0
[  124.673417][ T2476] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.678852][ T5229] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  124.681495][ T2476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.699753][ T5229] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  124.709394][ T5229] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  124.719800][ T5229] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  124.737125][ T5234] veth1_macvtap: entered promiscuous mode
[  124.867794][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.877475][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  124.891397][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.902528][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.913116][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  124.923680][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.933669][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  124.944276][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.960702][ T5230] batman_adv: batadv0: Interface activated: batadv_slave_1
[  125.002402][ T5230] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  125.026132][ T5230] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  125.035777][ T5230] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  125.046164][ T5230] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  125.289797][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  125.323264][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.334640][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  125.346236][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.371164][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  125.382263][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.392070][ T5340] loop2: detected capacity change from 0 to 256
[  125.420829][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  125.432336][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.477697][ T5234] batman_adv: batadv0: Interface activated: batadv_slave_0
[  125.480158][ T5340] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  125.518347][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  125.548875][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.569409][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  125.592525][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.644996][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  125.656823][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.668357][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  125.696449][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.725677][ T5234] batman_adv: batadv0: Interface activated: batadv_slave_1
[  125.882477][ T5232] veth0_vlan: entered promiscuous mode
[  125.961576][ T5234] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  126.004658][ T5234] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  126.047444][ T5234] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  126.060584][ T5234] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  126.170120][ T2476] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.207979][ T2476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.386046][ T5232] veth1_vlan: entered promiscuous mode
[  126.462279][ T5355] loop0: detected capacity change from 0 to 512
[  126.522103][ T5355] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.11: corrupted in-inode xattr: invalid ea_ino
[  126.557450][ T5355] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.11: couldn't read orphan inode 15 (err -117)
[  126.585867][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.599698][ T5355] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  126.638197][ T5355] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.643512][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.947358][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.981363][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.164806][ T2476] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.172690][ T2476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.209448][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.243076][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  127.433743][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  127.446433][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  127.548884][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  127.651141][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  127.675241][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  127.753665][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  127.834778][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  127.856048][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  127.958503][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  127.992061][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.298695][ T5232] veth0_macvtap: entered promiscuous mode
[  128.332402][ T1059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.419161][ T1059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.423570][ T5232] veth1_macvtap: entered promiscuous mode
[  128.591986][ T5376] loop0: detected capacity change from 0 to 256
[  128.662032][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  128.700590][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  128.770113][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  128.821285][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  128.860208][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  128.927746][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.004634][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  129.050007][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.072094][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  129.100353][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.124043][ T5232] batman_adv: batadv0: Interface activated: batadv_slave_0
[  129.204093][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  129.246742][ T5385] block nbd1: Device being setup by another task
[  129.263473][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.336618][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  129.379589][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.429490][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  129.522834][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.564836][ T5247] block nbd1: Receive control failed (result -32)
[  129.626312][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  129.684099][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.722838][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  129.786907][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.829808][ T5232] batman_adv: batadv0: Interface activated: batadv_slave_1
[  129.897476][ T5379] block nbd1: shutting down sockets
[  129.938027][ T5232] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  129.952708][ T5232] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  129.965597][ T5232] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  130.027064][ T5232] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  130.960333][ T2476] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  131.069009][ T2476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  131.411701][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  131.462317][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  131.716413][ T5300] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  131.963492][ T5300] usb 2-1: Using ep0 maxpacket: 16
[  132.025742][ T5300] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  132.083040][ T5300] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  132.123561][ T5300] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40
[  132.192910][ T5300] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.277044][ T5300] usb 2-1: config 0 descriptor??
[  132.828232][ T5300] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x1
[  132.889903][ T5300] cp2112 0003:10C4:EA90.0001: item fetching failed at offset 3/5
[  132.935406][ T5300] cp2112 0003:10C4:EA90.0001: parse failed
[  132.941529][ T5300] cp2112 0003:10C4:EA90.0001: probe with driver cp2112 failed with error -22
[  133.059201][ T5300] usb 2-1: USB disconnect, device number 2
[  133.091050][ T5415] loop5: detected capacity change from 0 to 1024
[  133.192405][ T5415] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (24866!=20869)
[  133.273483][ T5415] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  133.363501][ T5415] EXT4-fs (loop5): invalid journal inode
[  135.320497][ T5433] netlink: 8 bytes leftover after parsing attributes in process `syz.5.34'.
[  135.388528][ T5435] Bluetooth: hci6: Frame reassembly failed (-84)
[  135.471015][ T2476] Bluetooth: hci6: Frame reassembly failed (-84)
[  135.483335][ T2476] Bluetooth: hci6: Frame reassembly failed (-84)
[  135.600740][ T5441] input: syz0 as /devices/virtual/input/input5
[  136.042994][    C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies.
[  136.265004][ T5332] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  136.414260][ T5458] loop4: detected capacity change from 0 to 256
[  136.442991][ T5332] usb 2-1: device descriptor read/64, error -71
[  136.725009][ T5332] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  136.964416][ T5332] usb 2-1: device descriptor read/64, error -71
[  137.514477][ T5247] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  138.460473][ T5332] usb usb2-port1: attempt power cycle
[  140.685462][ T5492] loop4: detected capacity change from 0 to 8
[  142.053676][ T5495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.51'.
[  142.512293][ T5506] process 'syz.4.52' launched './file0' with NULL argv: empty string added
[  142.818695][ T1266] ieee802154 phy0 wpan0: encryption failed: -22
[  142.826429][ T1266] ieee802154 phy1 wpan1: encryption failed: -22
[  144.008100][ T5515] loop2: detected capacity change from 0 to 64
[  144.496548][ T5514] Bluetooth: hci6: Frame reassembly failed (-84)
[  144.520630][  T960] Bluetooth: hci6: Frame reassembly failed (-84)
[  145.250209][ T5530] loop2: detected capacity change from 0 to 512
[  145.412430][ T5530] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  145.429521][ T5530] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  145.486619][ T5535] loop5: detected capacity change from 0 to 2048
[  145.496634][ T5535] =======================================================
[  145.496634][ T5535] WARNING: The mand mount option has been deprecated and
[  145.496634][ T5535]          and is ignored by this kernel. Remove the mand
[  145.496634][ T5535]          option from the mount to silence this warning.
[  145.496634][ T5535] =======================================================
[  145.535692][ T5535] EXT4-fs: Ignoring removed nomblk_io_submit option
[  145.542555][ T5535] EXT4-fs: Ignoring removed nobh option
[  145.591310][ T5530] EXT4-fs error (device loop2): ext4_add_entry:2435: inode #2: comm syz.2.62: Directory hole found for htree leaf block 0
[  145.694428][ T5535] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  146.174844][ T5231] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.905276][ T5244] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  146.910798][ T5247] Bluetooth: hci6: command 0x1003 tx timeout
[  147.117596][ T5232] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.216908][ T5244] block nbd3: Receive control failed (result -32)
[  147.216908][ T5236] block nbd3: Receive control failed (result -32)
[  147.301888][ T5551] loop2: detected capacity change from 0 to 256
[  147.330859][ T5539] block nbd3: shutting down sockets
[  147.356569][ T5551] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  147.407542][ T5552] netlink: 12 bytes leftover after parsing attributes in process `syz.0.69'.
[  147.704712][ T5561] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  147.901113][ T5563] loop3: detected capacity change from 0 to 1024
[  148.196865][ T5569] cgroup: Unknown subsys name 'rlimit'
[  148.265094][ T5571] loop5: detected capacity change from 0 to 16
[  148.293925][ T5571] erofs: (device loop5): mounted with root inode @ nid 36.
[  149.341279][ T5577] loop4: detected capacity change from 0 to 64
[  149.432289][  T960] hfsplus: b-tree write err: -5, ino 3
[  149.712471][ T5583] loop5: detected capacity change from 0 to 1024
[  149.727447][ T5583] EXT4-fs: Ignoring removed bh option
[  149.791166][ T5583] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  150.084403][   T29] audit: type=1804 audit(1722174099.119:2): pid=5583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.75" name="/newroot/10/file1/bus" dev="loop5" ino=18 res=1 errno=0
[  150.092304][ T5591] loop1: detected capacity change from 0 to 1024
[  150.490674][ T5232] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.573489][ T5601] loop2: detected capacity change from 0 to 128
[  150.943352][ T5606] Invalid option length (457) for dns_resolver key
[  151.669766][ T5617] block nbd1: shutting down sockets
[  151.875661][ T5629] loop5: detected capacity change from 0 to 16
[  151.978814][ T5629] erofs: (device loop5): mounted with root inode @ nid 36.
[  153.916521][ T5639] loop4: detected capacity change from 0 to 64
[  156.331802][ T5673] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  156.739870][ T5682] loop2: detected capacity change from 0 to 16
[  157.622696][ T5682] erofs: (device loop2): mounted with root inode @ nid 36.
[  157.742796][    C1] sched: RT throttling activated
[  158.131425][ T5677] loop5: detected capacity change from 0 to 1024
[  159.242987][ T5677] hfsplus: bad catalog entry type
[  159.713545][  T994] hfsplus: b-tree write err: -5, ino 4
[  160.618526][ T5709] loop0: detected capacity change from 0 to 64
[  161.201959][ T5712] loop3: detected capacity change from 0 to 2048
[  161.410987][ T5723] netlink: 'syz.2.117': attribute type 29 has an invalid length.
[  161.449148][ T5723] netlink: 'syz.2.117': attribute type 29 has an invalid length.
[  161.507238][ T5726] netlink: 'syz.2.117': attribute type 29 has an invalid length.
[  161.529040][ T4676] Alternate GPT is invalid, using primary GPT.
[  161.563234][ T4676]  loop3: p1 p2 p3
[  161.684288][ T5725] loop0: detected capacity change from 0 to 2048
[  161.702483][ T5725] EXT4-fs: Ignoring removed nomblk_io_submit option
[  161.722407][ T5725] EXT4-fs: Ignoring removed nobh option
[  161.734268][ T5732] loop4: detected capacity change from 0 to 16
[  163.767285][ T5732] erofs: (device loop4): mounted with root inode @ nid 36.
[  164.178327][ T5725] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  164.352277][ T5295] udevd[5295]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  164.381277][ T5437] udevd[5437]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  164.440365][ T5438] udevd[5438]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  164.775668][    C0] eth0: bad gso: type: 1, size: 1408
[  165.882018][ T5749] loop4: detected capacity change from 0 to 1024
[  166.002733][ T5228] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.106259][ T5749] hfsplus: bad catalog entry type
[  167.444986][ T5769] loop2: detected capacity change from 0 to 64
[  167.829308][ T2476] hfsplus: b-tree write err: -5, ino 4
[  168.164989][ T5775] syz.2.130 uses obsolete (PF_INET,SOCK_PACKET)
[  169.379230][ T5796] loop1: detected capacity change from 0 to 2048
[  169.974231][ T5809] loop2: detected capacity change from 0 to 64
[  170.753169][ T5796] Alternate GPT is invalid, using primary GPT.
[  170.790126][ T5796]  loop1: p1 p2 p3
[  171.177380][ T5806] loop0: detected capacity change from 0 to 4096
[  171.267435][ T5806] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512).
[  171.680070][ T5817] loop3: detected capacity change from 0 to 1024
[  172.720479][ T5806] ntfs3: loop0: Failed to read $UpCase (-4).
[  173.138500][ T5817] hfsplus: bad catalog entry type
[  173.791139][ T1059] hfsplus: b-tree write err: -5, ino 4
[  174.023153][ T5843] block nbd1: shutting down sockets
[  174.326390][ T5848] loop0: detected capacity change from 0 to 1024
[  175.614461][ T5848] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  176.193126][ T5848] EXT4-fs error (device loop0): __ext4_remount:6491: comm syz.0.157: Abort forced by user
[  176.438361][ T5848] EXT4-fs (loop0): Remounting filesystem read-only
[  176.861066][ T5867] loop3: detected capacity change from 0 to 256
[  176.939311][ T5867] exfat: Deprecated parameter 'utf8'
[  176.991777][ T5867] exfat: Deprecated parameter 'utf8'
[  177.051329][ T5867] exfat: Deprecated parameter 'utf8'
[  177.138860][ T5867] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d)
[  177.249492][ T5228] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  177.912550][ T5881] netlink: 120 bytes leftover after parsing attributes in process `syz.5.166'.
[  178.326049][ T5893] loop3: detected capacity change from 0 to 16
[  178.345833][ T5406] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  178.422163][ T5893] erofs: (device loop3): mounted with root inode @ nid 36.
[  179.028864][ T5406] usb 2-1: unable to get BOS descriptor or descriptor too short
[  179.178135][ T5406] usb 2-1: config 0 has no interfaces?
[  179.258225][ T5406] usb 2-1: New USB device found, idVendor=07da, idProduct=104d, bcdDevice=e5.48
[  179.374631][ T5406] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  179.411686][ T5406] usb 2-1: Product: syz
[  179.434003][ T5406] usb 2-1: SerialNumber: syz
[  179.481036][ T5406] usb 2-1: config 0 descriptor??
[  179.762086][ T5406] usb 2-1: USB disconnect, device number 6
[  180.352369][ T5912] Bluetooth: hci6: Frame reassembly failed (-84)
[  181.317745][ T5914] loop2: detected capacity change from 0 to 64
[  182.051490][ T5923] netlink: 8 bytes leftover after parsing attributes in process `syz.4.176'.
[  182.087552][ T5923] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  182.453168][ T5236] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  183.934238][ T5939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.185'.
[  185.532700][ T5956] 9pnet_fd: Insufficient options for proto=fd
[  185.882683][ T5953] loop1: detected capacity change from 0 to 4096
[  185.965741][   T46] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  186.113022][ T5953] NILFS (loop1): invalid segment: Checksum error in segment payload
[  186.167742][ T5953] NILFS (loop1): trying rollback from an earlier position
[  186.220781][   T46] usb 1-1: unable to get BOS descriptor or descriptor too short
[  186.300861][   T46] usb 1-1: config 0 has no interfaces?
[  186.449558][ T5953] NILFS (loop1): recovery complete
[  186.533461][ T5969] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  186.686811][   T46] usb 1-1: New USB device found, idVendor=07da, idProduct=104d, bcdDevice=e5.48
[  186.704040][   T46] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  186.712071][   T46] usb 1-1: Product: syz
[  186.716501][   T46] usb 1-1: SerialNumber: syz
[  187.107020][ T5974] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  187.838387][   T46] usb 1-1: config 0 descriptor??
[  188.613517][   T46] usb 1-1: USB disconnect, device number 2
[  192.233890][ T6020] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  193.804387][ T6025] loop4: detected capacity change from 0 to 4096
[  193.893016][ T1164] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  193.913160][ T6025] NILFS (loop4): invalid segment: Checksum error in segment payload
[  193.941355][ T6025] NILFS (loop4): trying rollback from an earlier position
[  194.121848][ T6025] NILFS (loop4): recovery complete
[  194.129183][ T1164] usb 2-1: unable to get BOS descriptor or descriptor too short
[  194.156523][ T6036] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  194.187155][ T1164] usb 2-1: config 0 has no interfaces?
[  194.235053][ T1164] usb 2-1: New USB device found, idVendor=07da, idProduct=104d, bcdDevice=e5.48
[  194.279419][ T1164] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  194.317219][ T1164] usb 2-1: Product: syz
[  194.338825][ T1164] usb 2-1: SerialNumber: syz
[  194.369596][ T1164] usb 2-1: config 0 descriptor??
[  195.020421][   T25] usb 2-1: USB disconnect, device number 7
[  198.036618][ T6073] netlink: 36 bytes leftover after parsing attributes in process `syz.5.227'.
[  198.276568][ T6071] loop3: detected capacity change from 0 to 2048
[  198.637976][ T6071] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  198.908954][ T6071] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  199.151061][ T6095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.236'.
[  199.633139][ T6100] netlink: 16 bytes leftover after parsing attributes in process `syz.2.237'.
[  199.683290][ T6100] netlink: 12 bytes leftover after parsing attributes in process `syz.2.237'.
[  200.223013][ T5234] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.187629][ T6136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.250'.
[  203.254753][ T6146] 9pnet_fd: Insufficient options for proto=fd
[  204.994618][ T1266] ieee802154 phy0 wpan0: encryption failed: -22
[  205.001007][ T1266] ieee802154 phy1 wpan1: encryption failed: -22
[  205.482528][ T6173] loop0: detected capacity change from 0 to 1024
[  205.517279][ T6173] EXT4-fs: Ignoring removed orlov option
[  205.556807][ T6173] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  205.604344][ T6173] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  205.649379][ T6173] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869)
[  206.433003][ T6173] EXT4-fs (loop0): invalid journal inode
[  206.438798][ T6173] EXT4-fs (loop0): can't get journal size
[  206.445413][ T6184] netlink: 4 bytes leftover after parsing attributes in process `syz.5.266'.
[  206.473790][ T6184] netlink: 12 bytes leftover after parsing attributes in process `syz.5.266'.
[  206.645577][ T6173] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  206.962232][ T5296] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  207.892369][ T5228] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.899935][ T5296] usb 3-1: unable to get BOS descriptor or descriptor too short
[  207.913271][ T6203] 9pnet_fd: Insufficient options for proto=fd
[  207.931225][ T5296] usb 3-1: config 0 has no interfaces?
[  207.962695][ T5296] usb 3-1: New USB device found, idVendor=07da, idProduct=104d, bcdDevice=e5.48
[  207.989956][ T5296] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  208.089727][ T5296] usb 3-1: Product: syz
[  208.132501][ T5296] usb 3-1: SerialNumber: syz
[  208.194499][ T5296] usb 3-1: config 0 descriptor??
[  210.026142][ T6220] loop4: detected capacity change from 0 to 256
[  210.119012][ T6220] exfat: Deprecated parameter 'utf8'
[  210.173977][    T8] usb 3-1: USB disconnect, device number 2
[  210.218802][ T6220] exfat: Deprecated parameter 'utf8'
[  210.302980][ T6220] exfat: Deprecated parameter 'utf8'
[  210.433121][ T6224] loop0: detected capacity change from 0 to 2048
[  210.451717][ T6220] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d)
[  210.704328][ T6224] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  210.823099][ T6224] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  211.447008][ T6224] fs-verity: sha512 using implementation "sha512-avx2"
[  211.476837][ T6239] loop5: detected capacity change from 0 to 512
[  211.537676][ T6239] EXT4-fs: Ignoring removed oldalloc option
[  211.595247][ T6239] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  211.868596][ T5228] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  212.393391][ T6253] netlink: 48 bytes leftover after parsing attributes in process `syz.5.289'.
[  212.515543][ T6258] netlink: 40 bytes leftover after parsing attributes in process `syz.5.289'.
[  213.944190][ T6268] loop0: detected capacity change from 0 to 128
[  214.023515][ T6268] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  214.216381][ T6268] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  214.385712][   T29] audit: type=1800 audit(1722174165.431:3): pid=6268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.292" name="bus" dev="loop0" ino=12 res=0 errno=0
[  214.483069][   T29] audit: type=1804 audit(1722174165.471:4): pid=6272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.292" name="/newroot/50/file0/bus" dev="loop0" ino=12 res=1 errno=0
[  214.756130][ T5228] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  215.776696][ T6289] loop1: detected capacity change from 0 to 64
[  216.210003][ T6293] loop5: detected capacity change from 0 to 2048
[  216.385326][ T6293] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  216.506341][ T6293] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  216.885019][ T5232] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.861446][ T1164] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  223.165912][ T1164] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  223.335873][ T1164] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  223.458317][ T1164] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  223.565981][ T1164] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  223.634002][ T1164] usb 2-1: config 0 descriptor??
[  223.663492][    C0] ==================================================================
[  223.671577][    C0] BUG: KASAN: stack-out-of-bounds in xdp_do_check_flushed+0x41c/0x4e0
[  223.679775][    C0] Read of size 4 at addr ffffc900196d7a50 by task syz.5.327/6384
[  223.687516][    C0] 
[  223.689848][    C0] CPU: 0 UID: 0 PID: 6384 Comm: syz.5.327 Not tainted 6.10.0-syzkaller-12881-g6342649c33d2 #0
[  223.700294][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  223.710371][    C0] Call Trace:
[  223.713667][    C0]  <IRQ>
[  223.716525][    C0]  dump_stack_lvl+0x116/0x1f0
[  223.721239][    C0]  print_report+0xc3/0x620
[  223.725697][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  223.731364][    C0]  ? __virt_addr_valid+0x5e/0x590
[  223.736425][    C0]  kasan_report+0xd9/0x110
[  223.740972][    C0]  ? xdp_do_check_flushed+0x41c/0x4e0
[  223.746377][    C0]  ? xdp_do_check_flushed+0x41c/0x4e0
[  223.751789][    C0]  xdp_do_check_flushed+0x41c/0x4e0
[  223.757021][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  223.762692][    C0]  __napi_poll.constprop.0+0xd1/0x550
[  223.768113][    C0]  net_rx_action+0xa92/0x1010
[  223.772843][    C0]  ? __pfx_net_rx_action+0x10/0x10
[  223.777992][    C0]  ? __pfx_mark_lock+0x10/0x10
[  223.782799][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  223.788471][    C0]  ? sched_clock+0x38/0x60
[  223.792920][    C0]  ? sched_clock_cpu+0x6d/0x4d0
[  223.797816][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  223.803478][    C0]  ? mark_held_locks+0x9f/0xe0
[  223.808286][    C0]  handle_softirqs+0x219/0x8f0
[  223.813082][    C0]  ? handle_edge_irq+0x40f/0xd10
[  223.818057][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  223.823415][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  223.829099][    C0]  irq_exit_rcu+0xbb/0x120
[  223.833539][    C0]  common_interrupt+0xb0/0xd0
[  223.838239][    C0]  </IRQ>
[  223.841170][    C0]  <TASK>
[  223.844105][    C0]  asm_common_interrupt+0x26/0x40
[  223.849158][    C0] RIP: 0010:finish_task_switch.isra.0+0x220/0xcc0
[  223.855660][    C0] Code: a9 0a 00 00 44 8b 0d 67 46 b7 0e 45 85 c9 0f 85 c0 01 00 00 48 89 df e8 ae f8 ff ff e8 c9 cd 36 00 fb 65 48 8b 1d 10 86 a7 7e <48> 8d bb f8 15 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1
[  223.875283][    C0] RSP: 0018:ffffc900196d6fb8 EFLAGS: 00000202
[  223.881362][    C0] RAX: 0000000000000879 RBX: ffff8880218ada00 RCX: 1ffffffff28ca35a
[  223.889345][    C0] RDX: 0000000000000000 RSI: ffffffff8b4cd740 RDI: ffffffff8bb0b8c0
[  223.897329][    C0] RBP: ffffc900196d7000 R08: 0000000000000001 R09: fffffbfff28c76df
[  223.905407][    C0] R10: ffffffff9463b6ff R11: 0000000000000000 R12: ffff8880b923fb98
[  223.913421][    C0] R13: ffff888018b55a00 R14: 0000000000000000 R15: ffff8880b923ee00
[  223.921432][    C0]  ? finish_task_switch.isra.0+0x217/0xcc0
[  223.927279][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  223.932940][    C0]  ? __switch_to+0x749/0x1180
[  223.937646][    C0]  __schedule+0xe3f/0x5490
[  223.942096][    C0]  ? __pfx_mark_lock+0x10/0x10
[  223.946901][    C0]  ? mark_lock+0xb5/0xc60
[  223.951269][    C0]  ? __pfx___schedule+0x10/0x10
[  223.956160][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  223.961822][    C0]  ? mark_held_locks+0x9f/0xe0
[  223.966624][    C0]  ? irqentry_exit+0x3b/0x90
[  223.971249][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  223.976931][    C0]  ? lockdep_hardirqs_on+0x7c/0x110
[  223.982181][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  223.987851][    C0]  ? preempt_schedule_thunk+0x1a/0x30
[  223.993246][    C0]  preempt_schedule_common+0x44/0xc0
[  223.998574][    C0]  preempt_schedule_thunk+0x1a/0x30
[  224.003796][    C0]  ? unwind_next_frame+0x11ff/0x23a0
[  224.009190][    C0]  ? unwind_next_frame+0x1c8b/0x23a0
[  224.014532][    C0]  unwind_next_frame+0x1c90/0x23a0
[  224.019668][    C0]  ? syscall_exit_to_user_mode+0x150/0x2a0
[  224.025515][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  224.031699][    C0]  arch_stack_walk+0x100/0x170
[  224.036492][    C0]  ? do_syscall_64+0xda/0x250
[  224.041215][    C0]  stack_trace_save+0x95/0xd0
[  224.045921][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  224.051326][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  224.056990][    C0]  save_stack+0x162/0x1f0
[  224.061355][    C0]  ? __pfx_save_stack+0x10/0x10
[  224.066247][    C0]  ? __pfx_lock_acquire+0x10/0x10
[  224.071313][    C0]  ? free_unref_folios+0x9e9/0x1390
[  224.076550][    C0]  ? folios_put_refs+0x560/0x760
[  224.081529][    C0]  ? free_pages_and_swap_cache+0x36d/0x510
[  224.087359][    C0]  ? __tlb_batch_free_encoded_pages+0xf9/0x290
[  224.093538][    C0]  ? tlb_finish_mmu+0x168/0x7b0
[  224.098410][    C0]  ? exit_mmap+0x3d1/0xb20
[  224.102839][    C0]  ? __mmput+0x12a/0x480
[  224.107101][    C0]  ? mmput+0x62/0x70
[  224.111013][    C0]  ? do_exit+0x9bf/0x2bb0
[  224.115382][    C0]  ? do_group_exit+0xd3/0x2a0
[  224.120092][    C0]  ? get_signal+0x25fd/0x2770
[  224.124791][    C0]  ? arch_do_signal_or_restart+0x90/0x7e0
[  224.130537][    C0]  ? syscall_exit_to_user_mode+0x150/0x2a0
[  224.136409][    C0]  __reset_page_owner+0x8d/0x400
[  224.141389][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  224.147153][    C0]  free_unref_folios+0x9e9/0x1390
[  224.152220][    C0]  ? __entry_text_end+0x1020c5/0x1020c9
[  224.157804][    C0]  folios_put_refs+0x560/0x760
[  224.162614][    C0]  ? __pfx_folios_put_refs+0x10/0x10
[  224.167943][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  224.173604][    C0]  ? lru_add_drain_cpu+0x454/0x860
[  224.178761][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  224.184427][    C0]  free_pages_and_swap_cache+0x36d/0x510
[  224.190098][    C0]  ? __pfx_free_pages_and_swap_cache+0x10/0x10
[  224.196292][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  224.201951][    C0]  ? native_tlb_remove_table+0x2e/0x50
[  224.207466][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  224.213130][    C0]  ? __pfx___might_resched+0x10/0x10
[  224.218455][    C0]  __tlb_batch_free_encoded_pages+0xf9/0x290
[  224.224474][    C0]  tlb_finish_mmu+0x168/0x7b0
[  224.229181][    C0]  exit_mmap+0x3d1/0xb20
[  224.233447][    C0]  ? __pfx_exit_mmap+0x10/0x10
[  224.238254][    C0]  __mmput+0x12a/0x480
[  224.242343][    C0]  mmput+0x62/0x70
[  224.246267][    C0]  do_exit+0x9bf/0x2bb0
[  224.250552][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  224.256217][    C0]  ? get_signal+0x8f2/0x2770
[  224.260829][    C0]  ? __pfx_do_exit+0x10/0x10
[  224.265451][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  224.271111][    C0]  ? do_raw_spin_lock+0x12d/0x2c0
[  224.276162][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  224.281590][    C0]  do_group_exit+0xd3/0x2a0
[  224.286159][    C0]  get_signal+0x25fd/0x2770
[  224.290713][    C0]  ? kasan_quarantine_put+0x10a/0x240
[  224.296141][    C0]  ? lockdep_hardirqs_on+0x7c/0x110
[  224.301381][    C0]  ? __pfx_get_signal+0x10/0x10
[  224.306254][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  224.311921][    C0]  arch_do_signal_or_restart+0x90/0x7e0
[  224.317505][    C0]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  224.323723][    C0]  syscall_exit_to_user_mode+0x150/0x2a0
[  224.329401][    C0]  do_syscall_64+0xda/0x250
[  224.333947][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  224.339865][    C0] RIP: 0033:0x7fc1f5977299
[  224.344292][    C0] Code: Unable to access opcode bytes at 0x7fc1f597726f.
[  224.351318][    C0] RSP: 002b:00007fc1f67b7048 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  224.359754][    C0] RAX: 0000000000000000 RBX: 00007fc1f5b06058 RCX: 00007fc1f5977299
[  224.367739][    C0] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000004
[  224.375724][    C0] RBP: 00007fc1f59e48e6 R08: 0000000000000000 R09: 0000000000000000
[  224.383742][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  224.391722][    C0] R13: 000000000000006e R14: 00007fc1f5b06058 R15: 00007ffc69899428
[  224.399744][    C0]  </TASK>
[  224.402775][    C0] 
[  224.405102][    C0] The buggy address belongs to stack of task syz.5.327/6384
[  224.412383][    C0]  and is located at offset 24 in frame:
[  224.418102][    C0]  exit_mmap+0x0/0xb20
[  224.422199][    C0] 
[  224.424525][    C0] This frame has 2 objects:
[  224.429025][    C0]  [32, 96) 'vmi'
[  224.429047][    C0]  [128, 256) 'tlb'
[  224.432680][    C0] 
[  224.438793][    C0] The buggy address belongs to the virtual mapping at
[  224.438793][    C0]  [ffffc900196d0000, ffffc900196d9000) created by:
[  224.438793][    C0]  kernel_clone+0xfd/0x980
[  224.456489][    C0] 
[  224.458817][    C0] The buggy address belongs to the physical page:
[  224.465225][    C0] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880250298c0 pfn:0x25029
[  224.475306][    C0] memcg:ffff88804bbcb802
[  224.479555][    C0] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  224.486701][    C0] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  224.495306][    C0] raw: ffff8880250298c0 0000000000000000 00000001ffffffff ffff88804bbcb802
[  224.503898][    C0] page dumped because: kasan: bad access detected
[  224.510314][    C0] page_owner tracks the page as allocated
[  224.516027][    C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102dc2(GFP_HIGHUSER|__GFP_NOWARN|__GFP_ZERO), pid 6360, tgid 6360 (syz.2.320), ts 220957193477, free_ts 220900406567
[  224.534286][    C0]  post_alloc_hook+0x2d1/0x350
[  224.539089][    C0]  get_page_from_freelist+0x1351/0x2e50
[  224.544669][    C0]  __alloc_pages_noprof+0x22b/0x2460
[  224.550015][    C0]  alloc_pages_mpol_noprof+0x275/0x610
[  224.555509][    C0]  __vmalloc_node_range_noprof+0xa6a/0x1520
[  224.561453][    C0]  copy_process+0x2f3b/0x8de0
[  224.566158][    C0]  kernel_clone+0xfd/0x980
[  224.570600][    C0]  __do_sys_clone3+0x1f5/0x270
[  224.575419][    C0]  do_syscall_64+0xcd/0x250
[  224.579962][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  224.585883][    C0] page last free pid 5929 tgid 5929 stack trace:
[  224.592244][    C0]  free_unref_folios+0x9e9/0x1390
[  224.597314][    C0]  folios_put_refs+0x560/0x760
[  224.602117][    C0]  free_pages_and_swap_cache+0x36d/0x510
[  224.607796][    C0]  __tlb_batch_free_encoded_pages+0xf9/0x290
[  224.613801][    C0]  tlb_finish_mmu+0x168/0x7b0
[  224.618499][    C0]  exit_mmap+0x3d1/0xb20
[  224.622755][    C0]  __mmput+0x12a/0x480
[  224.626856][    C0]  mmput+0x62/0x70
[  224.630597][    C0]  do_exit+0x9bf/0x2bb0
[  224.634790][    C0]  do_group_exit+0xd3/0x2a0
[  224.639325][    C0]  get_signal+0x25fd/0x2770
[  224.643850][    C0]  arch_do_signal_or_restart+0x90/0x7e0
[  224.649423][    C0]  irqentry_exit_to_user_mode+0x13f/0x280
[  224.655356][    C0]  asm_exc_page_fault+0x26/0x30
[  224.660232][    C0] 
[  224.662554][    C0] Memory state around the buggy address:
[  224.668188][    C0]  ffffc900196d7900: f3 f3 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  224.676260][    C0]  ffffc900196d7980: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  224.684329][    C0] >ffffc900196d7a00: 00 00 00 00 00 00 00 f1 f1 f1 f1 00 00 00 00 00
[  224.692389][    C0]                                                  ^
[  224.699066][    C0]  ffffc900196d7a80: 00 00 00 f2 f2 f2 f2 00 00 00 00 00 00 00 00 00
[  224.707133][    C0]  ffffc900196d7b00: 00 00 00 00 00 00 00 f3 f3 f3 f3 00 00 00 00 00
[  224.715201][    C0] ==================================================================
[  224.723377][    C0] Disabling lock debugging due to kernel taint
[  224.729594][    C0] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN NOPTI
[  224.742383][    C0] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  224.750817][    C0] CPU: 0 UID: 0 PID: 6384 Comm: syz.5.327 Tainted: G    B              6.10.0-syzkaller-12881-g6342649c33d2 #0
[  224.762574][    C0] Tainted: [B]=BAD_PAGE
[  224.766732][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  224.776803][    C0] RIP: 0010:bq_flush_to_queue+0x4a/0x530
[  224.782474][    C0] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 dc 04 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b 75 50 4c 89 f2 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e d6 03 00 00 41 8b 06 89 44 24
[  224.802195][    C0] RSP: 0018:ffffc90000007c10 EFLAGS: 00010256
[  224.808286][    C0] RAX: dffffc0000000000 RBX: ffff88802043d6d8 RCX: ffffffff88f9ef99
[  224.816279][    C0] RDX: 0000000000000000 RSI: ffffffff81b17416 RDI: ffff88802043d5d0
[  224.824272][    C0] RBP: ffff88802043d580 R08: 0000000000000005 R09: 0000000000000000
[  224.832262][    C0] R10: 0000000000000010 R11: 6e696c6261736944 R12: dffffc0000000000
[  224.840342][    C0] R13: ffff88802043d580 R14: 0000000000000000 R15: ffffc900196d7a78
[  224.848340][    C0] FS:  0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000
[  224.857309][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  224.863915][    C0] CR2: 00007f091ded2ef8 CR3: 0000000060fde000 CR4: 0000000000350ef0
[  224.871907][    C0] Call Trace:
[  224.875196][    C0]  <IRQ>
[  224.878053][    C0]  ? show_regs+0x8c/0xa0
[  224.882346][    C0]  ? die_addr+0x4f/0xd0
[  224.886560][    C0]  ? exc_general_protection+0x155/0x230
[  224.892151][    C0]  ? asm_exc_general_protection+0x26/0x30
[  224.897910][    C0]  ? xdp_do_check_flushed+0xf9/0x4e0
[  224.903233][    C0]  ? bq_flush_to_queue+0x16/0x530
[  224.908284][    C0]  ? bq_flush_to_queue+0x4a/0x530
[  224.913342][    C0]  ? xdp_do_check_flushed+0x41c/0x4e0
[  224.918757][    C0]  ? xdp_do_check_flushed+0x41c/0x4e0
[  224.924173][    C0]  __cpu_map_flush+0x7b/0x110
[  224.928879][    C0]  xdp_do_check_flushed+0x163/0x4e0
[  224.934114][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  224.939789][    C0]  __napi_poll.constprop.0+0xd1/0x550
[  224.945217][    C0]  net_rx_action+0xa92/0x1010
[  224.949958][    C0]  ? __pfx_net_rx_action+0x10/0x10
[  224.955119][    C0]  ? __pfx_mark_lock+0x10/0x10
[  224.959934][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  224.965610][    C0]  ? sched_clock+0x38/0x60
[  224.970074][    C0]  ? sched_clock_cpu+0x6d/0x4d0
[  224.974987][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  224.980661][    C0]  ? mark_held_locks+0x9f/0xe0
[  224.985487][    C0]  handle_softirqs+0x219/0x8f0
[  224.990291][    C0]  ? handle_edge_irq+0x40f/0xd10
[  224.995282][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  225.000603][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  225.006280][    C0]  irq_exit_rcu+0xbb/0x120
[  225.010730][    C0]  common_interrupt+0xb0/0xd0
[  225.015452][    C0]  </IRQ>
[  225.018395][    C0]  <TASK>
[  225.021346][    C0]  asm_common_interrupt+0x26/0x40
[  225.026414][    C0] RIP: 0010:finish_task_switch.isra.0+0x220/0xcc0
[  225.032892][    C0] Code: a9 0a 00 00 44 8b 0d 67 46 b7 0e 45 85 c9 0f 85 c0 01 00 00 48 89 df e8 ae f8 ff ff e8 c9 cd 36 00 fb 65 48 8b 1d 10 86 a7 7e <48> 8d bb f8 15 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1
[  225.052527][    C0] RSP: 0018:ffffc900196d6fb8 EFLAGS: 00000202
[  225.058617][    C0] RAX: 0000000000000879 RBX: ffff8880218ada00 RCX: 1ffffffff28ca35a
[  225.066607][    C0] RDX: 0000000000000000 RSI: ffffffff8b4cd740 RDI: ffffffff8bb0b8c0
[  225.074599][    C0] RBP: ffffc900196d7000 R08: 0000000000000001 R09: fffffbfff28c76df
[  225.082677][    C0] R10: ffffffff9463b6ff R11: 0000000000000000 R12: ffff8880b923fb98
[  225.090666][    C0] R13: ffff888018b55a00 R14: 0000000000000000 R15: ffff8880b923ee00
[  225.098680][    C0]  ? finish_task_switch.isra.0+0x217/0xcc0
[  225.104543][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  225.110217][    C0]  ? __switch_to+0x749/0x1180
[  225.114936][    C0]  __schedule+0xe3f/0x5490
[  225.119398][    C0]  ? __pfx_mark_lock+0x10/0x10
[  225.124223][    C0]  ? mark_lock+0xb5/0xc60
[  225.128608][    C0]  ? __pfx___schedule+0x10/0x10
[  225.133515][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  225.139189][    C0]  ? mark_held_locks+0x9f/0xe0
[  225.144002][    C0]  ? irqentry_exit+0x3b/0x90
[  225.148643][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  225.154318][    C0]  ? lockdep_hardirqs_on+0x7c/0x110
[  225.159566][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  225.165242][    C0]  ? preempt_schedule_thunk+0x1a/0x30
[  225.170644][    C0]  preempt_schedule_common+0x44/0xc0
[  225.175983][    C0]  preempt_schedule_thunk+0x1a/0x30
[  225.181218][    C0]  ? unwind_next_frame+0x11ff/0x23a0
[  225.186531][    C0]  ? unwind_next_frame+0x1c8b/0x23a0
[  225.191844][    C0]  unwind_next_frame+0x1c90/0x23a0
[  225.196988][    C0]  ? syscall_exit_to_user_mode+0x150/0x2a0
[  225.202846][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  225.209042][    C0]  arch_stack_walk+0x100/0x170
[  225.213846][    C0]  ? do_syscall_64+0xda/0x250
[  225.218579][    C0]  stack_trace_save+0x95/0xd0
[  225.223299][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  225.228716][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  225.234391][    C0]  save_stack+0x162/0x1f0
[  225.238773][    C0]  ? __pfx_save_stack+0x10/0x10
[  225.243675][    C0]  ? __pfx_lock_acquire+0x10/0x10
[  225.248747][    C0]  ? free_unref_folios+0x9e9/0x1390
[  225.253991][    C0]  ? folios_put_refs+0x560/0x760
[  225.258977][    C0]  ? free_pages_and_swap_cache+0x36d/0x510
[  225.264907][    C0]  ? __tlb_batch_free_encoded_pages+0xf9/0x290
[  225.271180][    C0]  ? tlb_finish_mmu+0x168/0x7b0
[  225.276322][    C0]  ? exit_mmap+0x3d1/0xb20
[  225.280762][    C0]  ? __mmput+0x12a/0x480
[  225.285036][    C0]  ? mmput+0x62/0x70
[  225.288958][    C0]  ? do_exit+0x9bf/0x2bb0
[  225.293328][    C0]  ? do_group_exit+0xd3/0x2a0
[  225.298046][    C0]  ? get_signal+0x25fd/0x2770
[  225.302841][    C0]  ? arch_do_signal_or_restart+0x90/0x7e0
[  225.308601][    C0]  ? syscall_exit_to_user_mode+0x150/0x2a0
[  225.314476][    C0]  __reset_page_owner+0x8d/0x400
[  225.319470][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  225.325150][    C0]  free_unref_folios+0x9e9/0x1390
[  225.330225][    C0]  ? __entry_text_end+0x1020c5/0x1020c9
[  225.335818][    C0]  folios_put_refs+0x560/0x760
[  225.340658][    C0]  ? __pfx_folios_put_refs+0x10/0x10
[  225.345997][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  225.351670][    C0]  ? lru_add_drain_cpu+0x454/0x860
[  225.356854][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  225.362548][    C0]  free_pages_and_swap_cache+0x36d/0x510
[  225.368225][    C0]  ? __pfx_free_pages_and_swap_cache+0x10/0x10
[  225.374435][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  225.380112][    C0]  ? native_tlb_remove_table+0x2e/0x50
[  225.385638][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  225.391321][    C0]  ? __pfx___might_resched+0x10/0x10
[  225.396645][    C0]  __tlb_batch_free_encoded_pages+0xf9/0x290
[  225.402702][    C0]  tlb_finish_mmu+0x168/0x7b0
[  225.407426][    C0]  exit_mmap+0x3d1/0xb20
[  225.411703][    C0]  ? __pfx_exit_mmap+0x10/0x10
[  225.416525][    C0]  __mmput+0x12a/0x480
[  225.420631][    C0]  mmput+0x62/0x70
[  225.424390][    C0]  do_exit+0x9bf/0x2bb0
[  225.428591][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  225.434269][    C0]  ? get_signal+0x8f2/0x2770
[  225.438893][    C0]  ? __pfx_do_exit+0x10/0x10
[  225.443528][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  225.449200][    C0]  ? do_raw_spin_lock+0x12d/0x2c0
[  225.454257][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  225.459663][    C0]  do_group_exit+0xd3/0x2a0
[  225.464225][    C0]  get_signal+0x25fd/0x2770
[  225.468767][    C0]  ? kasan_quarantine_put+0x10a/0x240
[  225.474182][    C0]  ? lockdep_hardirqs_on+0x7c/0x110
[  225.479433][    C0]  ? __pfx_get_signal+0x10/0x10
[  225.484316][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  225.490005][    C0]  arch_do_signal_or_restart+0x90/0x7e0
[  225.495594][    C0]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  225.501811][    C0]  syscall_exit_to_user_mode+0x150/0x2a0
[  225.507499][    C0]  do_syscall_64+0xda/0x250
[  225.512058][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.517986][    C0] RIP: 0033:0x7fc1f5977299
[  225.522420][    C0] Code: Unable to access opcode bytes at 0x7fc1f597726f.
[  225.529447][    C0] RSP: 002b:00007fc1f67b7048 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  225.537889][    C0] RAX: 0000000000000000 RBX: 00007fc1f5b06058 RCX: 00007fc1f5977299
[  225.545879][    C0] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000004
[  225.553870][    C0] RBP: 00007fc1f59e48e6 R08: 0000000000000000 R09: 0000000000000000
[  225.561862][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  225.569853][    C0] R13: 000000000000006e R14: 00007fc1f5b06058 R15: 00007ffc69899428
[  225.577947][    C0]  </TASK>
[  225.580976][    C0] Modules linked in:
[  225.584966][    C0] ---[ end trace 0000000000000000 ]---
[  225.590454][    C0] RIP: 0010:bq_flush_to_queue+0x4a/0x530
[  225.596162][    C0] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 dc 04 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b 75 50 4c 89 f2 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e d6 03 00 00 41 8b 06 89 44 24
[  225.615843][    C0] RSP: 0018:ffffc90000007c10 EFLAGS: 00010256
[  225.621953][    C0] RAX: dffffc0000000000 RBX: ffff88802043d6d8 RCX: ffffffff88f9ef99
[  225.629988][    C0] RDX: 0000000000000000 RSI: ffffffff81b17416 RDI: ffff88802043d5d0
[  225.638029][    C0] RBP: ffff88802043d580 R08: 0000000000000005 R09: 0000000000000000
[  225.646236][    C0] R10: 0000000000000010 R11: 6e696c6261736944 R12: dffffc0000000000
[  225.654273][    C0] R13: ffff88802043d580 R14: 0000000000000000 R15: ffffc900196d7a78
[  225.662294][    C0] FS:  0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000
[  225.671293][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  225.678029][    C0] CR2: 00007f091ded2ef8 CR3: 0000000060fde000 CR4: 0000000000350ef0
[  225.686069][    C0] Kernel panic - not syncing: Fatal exception in interrupt
[  225.693530][    C0] Kernel Offset: disabled
[  225.697848][    C0] Rebooting in 86400 seconds..