last executing test programs:

2m37.679761304s ago: executing program 4 (id=160):
syz_pidfd_open(0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000, 0x200, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
syz_open_procfs$namespace(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
waitid(0x0, 0x0, 0x0, 0x4, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
mkdirat$cgroup(r3, &(0x7f00000000c0)='syz0\x00', 0x1ff)
r4 = openat$cgroup_devices(r3, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r4, &(0x7f0000000080)={'b', ' *:* ', 'wm\x00'}, 0x9)

2m36.535536895s ago: executing program 4 (id=163):
r0 = syz_open_procfs(0x0, &(0x7f00000023c0)='net/tcp\x00')
r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x200000000003, 0xf0942)
ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x800000001, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = gettid()
rt_tgsigqueueinfo(r3, r3, 0x9, &(0x7f0000000140)={0x39, 0xffffffff, 0x4})
r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000000)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9d85e447511703d", 0x31}, {&(0x7f0000000240)="ca00544d5c3deaafed19faf7015f627bb161f8aa71ede93e77c44220ffc8b961623f0d87cf159b5fb09d03ec5e1630657526cb38c1f8baaef2fc59e1cf30cc5201251191901b66cb929b87975bfd", 0x4e}], 0x3)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[])
socket$nl_generic(0x10, 0x3, 0x10)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x20842, 0x0)
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000002080)=""/139, 0x8b)
read$FUSE(r0, &(0x7f0000002400)={0x2020}, 0x2020)

2m32.554109492s ago: executing program 4 (id=171):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
socket(0x25, 0x2, 0x24)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$usbfs(0x0, 0x76, 0x101301)
ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045503, &(0x7f0000000340)={0x1, 0x1})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_io_uring_setup(0xf3d, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, &(0x7f0000000300)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r5, &(0x7f0000000200)=@IORING_OP_SPLICE={0x1e, 0x10, 0x0, @fd_index=0x9, 0x10, {0x0, r4}, 0x81, 0xe, 0x0, {0x0, r6, r4}})
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0xf0580, 0x0)
r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r7, 0x4605, &(0x7f0000000200)={0x5, 0x2, &(0x7f0000000000)=[0xff, 0x7], &(0x7f0000000080), &(0x7f00000000c0), 0x0})

2m30.881955653s ago: executing program 4 (id=176):
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={0x0, 0x0, 0x18}, 0x18)
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x3e, 0x2, {{0x0, 0x0, 0x0, 0x0, 0xf407}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x1ff, {0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1})
openat$incfs(0xffffffffffffffff, &(0x7f00000000c0)='.pending_reads\x00', 0x40000, 0x0)
msgget$private(0x0, 0x0)
msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x8, 0x0)

2m30.512143516s ago: executing program 4 (id=178):
r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000000))

2m29.824715635s ago: executing program 4 (id=179):
syz_open_dev$dri(0x0, 0x1ff, 0x0)
syz_open_dev$dri(0x0, 0x1ff, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)

2m14.333903291s ago: executing program 32 (id=179):
syz_open_dev$dri(0x0, 0x1ff, 0x0)
syz_open_dev$dri(0x0, 0x1ff, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)

42.870191672s ago: executing program 1 (id=431):
syz_open_procfs$userns(0x0, &(0x7f00000002c0))
r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES64=r1, @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe9e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsopen(0x0, 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0)
r6 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r6, &(0x7f0000000040), 0xc)
r7 = socket$qrtr(0x2a, 0x2, 0x0)
getpeername(r6, 0x0, 0x0)
ioctl$sock_qrtr_TIOCINQ(r6, 0x541b, 0x0)
connect$qrtr(r7, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc)
writev(r7, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1)

41.692925777s ago: executing program 1 (id=435):
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = socket(0x22, 0x1, 0x9)
getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000140), 0x10)
r3 = dup(r1)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000400), 0x82, 0x0)
read$FUSE(r4, &(0x7f0000000440)={0x2020, 0x0, <r5=>0x0}, 0x2034)
write$FUSE_DIRENTPLUS(r4, &(0x7f0000002480)=ANY=[@ANYBLOB="c8000000000000", @ANYRES64=r5], 0xc8)
io_setup(0xfe, &(0x7f0000000380)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x2, 0x960010, 0x0, 0x0, 0x0, r4, &(0x7f00000001c0)="10000040030000000000000000000000b22025285db74192e7576d9062ec6e2fe8ffff3ff248691861d03a71091d334252afb1af5b8f0474c2ed58338226131291198f3d70dcf797ac42d0eeed042c06b56b89f02f92b12ebe4c45948a362a76def2f4955f100a13131f474b140942110257e173cea102775e1b3873ebf98dac6421f6d449544114b8ce29f4b48d1738b5be127afce74b41c9ef761c96f24c9d3c130e1a6c2eb5b3f12eb6a1f5051594545cbb895e65d83c08d2d6cd56", 0xbd, 0x0, 0x0, 0x2}])
r7 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x1}, &(0x7f0000000100)=<r8=>0x0, &(0x7f00000001c0)=<r9=>0x0)
r10 = syz_genetlink_get_family_id$ethtool(0x0, r3)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f00000024c0)={'syztnl0\x00', 0x0, 0x20, 0x10, 0xa1ea, 0xf47, {{0x3b, 0x4, 0x3, 0x1, 0xec, 0x64, 0x0, 0x4, 0x29, 0x0, @rand_addr=0x64010102, @multicast2, {[@cipso={0x86, 0x16, 0x2, [{0x0, 0x10, "97c988f7bd08e8db284b2132b140"}]}, @timestamp_prespec={0x44, 0x44, 0x98, 0x3, 0x7, [{@loopback, 0x9}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x4}, {@empty, 0x6}, {@local, 0x1000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@empty, 0xfffffe01}, {@private=0xa010102, 0x55}, {@local, 0x4}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x34, 0xf, 0x3, 0x3, [{@remote, 0x6}, {@private=0xa010102, 0x6}, {@rand_addr=0x64010102, 0x9}, {@remote, 0x8}, {@multicast2, 0x6}, {@empty, 0x80000001}]}, @rr={0x7, 0xf, 0x54, [@loopback, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0xb, 0x5d, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @timestamp_prespec={0x44, 0x2c, 0x29, 0x3, 0x1, [{@rand_addr=0x64010102, 0x6}, {@remote, 0x1}, {@remote, 0xa}, {@rand_addr=0x64010101, 0x92e1}, {@broadcast, 0x8}]}]}}}}})
getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000000580), &(0x7f00000005c0)=0x14)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'tunl0\x00', &(0x7f0000000600)={'sit0\x00', <r11=>0x0, 0x20, 0x8, 0x0, 0x3, {{0x5, 0x4, 0x2, 0x3f, 0x14, 0x66, 0x0, 0x5, 0x29, 0x0, @local, @multicast2}}}})
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70507000000000000009500"/32], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000006c0)=0x14)
sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000002600)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16=r10, @ANYBLOB="08002cbd7000fddbdf250b000000040001802000018014000200776c616e31000000000000000000000008000100", @ANYRES32=r11, @ANYBLOB="b57d1ad2a1d4f5b8fdb58940d00ae012c7f52c99cd0c96c7e664d10f00000000000000aad0ff4942ff8bb2f8fc9b899177f01b145d90fc380ad2bf"], 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x40080)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
readv(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r7, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
r12 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0)
r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0)
sendfile(r12, r13, 0x0, 0x20000023896)
futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)

39.528126395s ago: executing program 1 (id=441):
syz_emit_ethernet(0x82, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffff00000000000088a80d008100090086dd60dd690b00442f00fc000000000000000000000000000000ff020000000000000000000000000001242081000000000000000800000086dd080088be810000001000000001000000000000"], 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
socket$rxrpc(0x21, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x65c, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, &(0x7f0000003780)=""/4096}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r3)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a"], 0x50}}, 0x0)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r4 = inotify_init1(0x0)
fcntl$setown(r4, 0x8, 0xffffffffffffffff)
fcntl$getownex(r4, 0x10, &(0x7f0000000140)={0x0, <r5=>0x0})
r6 = syz_open_procfs(r5, &(0x7f0000000600)='fd/4\x00')
ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40305839, &(0x7f0000000240)=0x28084)
r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSBRKP(r7, 0x5425, 0x0)

33.598515605s ago: executing program 1 (id=460):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x4400, &(0x7f0000000640), 0x1, 0x75e, &(0x7f0000001100)="$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")
chdir(&(0x7f0000000080)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f00000002c0)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})

31.906718589s ago: executing program 1 (id=465):
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = socket(0x22, 0x1, 0x9)
getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000140), 0x10)
r3 = dup(r1)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000400), 0x82, 0x0)
read$FUSE(r4, &(0x7f0000000440)={0x2020, 0x0, <r5=>0x0}, 0x2034)
write$FUSE_DIRENTPLUS(r4, &(0x7f0000002480)=ANY=[@ANYBLOB="c8000000000000", @ANYRES64=r5], 0xc8)
io_setup(0xfe, &(0x7f0000000380)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x2, 0x960010, 0x0, 0x0, 0x0, r4, &(0x7f00000001c0)="10000040030000000000000000000000b22025285db74192e7576d9062ec6e2fe8ffff3ff248691861d03a71091d334252afb1af5b8f0474c2ed58338226131291198f3d70dcf797ac42d0eeed042c06b56b89f02f92b12ebe4c45948a362a76def2f4955f100a13131f474b140942110257e173cea102775e1b3873ebf98dac6421f6d449544114b8ce29f4b48d1738b5be127afce74b41c9ef761c96f24c9d3c130e1a6c2eb5b3f12eb6a1f5051594545cbb895e65d83c08d2d6cd56", 0xbd, 0x0, 0x0, 0x2}])
r7 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x1}, &(0x7f0000000100)=<r8=>0x0, &(0x7f00000001c0)=<r9=>0x0)
r10 = syz_genetlink_get_family_id$ethtool(0x0, r3)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f00000024c0)={'syztnl0\x00', 0x0, 0x20, 0x10, 0xa1ea, 0xf47, {{0x3b, 0x4, 0x3, 0x1, 0xec, 0x64, 0x0, 0x4, 0x29, 0x0, @rand_addr=0x64010102, @multicast2, {[@cipso={0x86, 0x16, 0x2, [{0x0, 0x10, "97c988f7bd08e8db284b2132b140"}]}, @timestamp_prespec={0x44, 0x44, 0x98, 0x3, 0x7, [{@loopback, 0x9}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x4}, {@empty, 0x6}, {@local, 0x1000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@empty, 0xfffffe01}, {@private=0xa010102, 0x55}, {@local, 0x4}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x34, 0xf, 0x3, 0x3, [{@remote, 0x6}, {@private=0xa010102, 0x6}, {@rand_addr=0x64010102, 0x9}, {@remote, 0x8}, {@multicast2, 0x6}, {@empty, 0x80000001}]}, @rr={0x7, 0xf, 0x54, [@loopback, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0xb, 0x5d, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @timestamp_prespec={0x44, 0x2c, 0x29, 0x3, 0x1, [{@rand_addr=0x64010102, 0x6}, {@remote, 0x1}, {@remote, 0xa}, {@rand_addr=0x64010101, 0x92e1}, {@broadcast, 0x8}]}]}}}}})
getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000000580), &(0x7f00000005c0)=0x14)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'tunl0\x00', &(0x7f0000000600)={'sit0\x00', <r11=>0x0, 0x20, 0x8, 0x0, 0x3, {{0x5, 0x4, 0x2, 0x3f, 0x14, 0x66, 0x0, 0x5, 0x29, 0x0, @local, @multicast2}}}})
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70507000000000000009500"/32], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000006c0)=0x14)
sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000002600)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16=r10, @ANYBLOB="08002cbd7000fddbdf250b000000040001802000018014000200776c616e31000000000000000000000008000100", @ANYRES32=r11, @ANYBLOB="b57d1ad2a1d4f5b8fdb58940d00ae012c7f52c99cd0c96c7e664d10f00000000000000aad0ff4942ff8bb2f8fc9b899177f01b145d90fc380ad2bf"], 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x40080)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
readv(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r7, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
r12 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0)
r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0)
sendfile(r12, r13, 0x0, 0x20000023896)
futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)

29.771742734s ago: executing program 1 (id=470):
syz_emit_ethernet(0x82, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffff00000000000088a80d008100090086dd60dd690b00442f00fc000000000000000000000000000000ff020000000000000000000000000001242081000000000000000800000086dd080088be810000001000000001000000000000"], 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
socket$rxrpc(0x21, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x65c, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, &(0x7f0000003780)=""/4096}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r3)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a"], 0x50}}, 0x0)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r4 = inotify_init1(0x0)
fcntl$setown(r4, 0x8, 0xffffffffffffffff)
fcntl$getownex(r4, 0x10, &(0x7f0000000140)={0x0, <r5=>0x0})
r6 = syz_open_procfs(r5, &(0x7f0000000600)='fd/4\x00')
ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40305839, &(0x7f0000000240)=0x28084)
r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSBRKP(r7, 0x5425, 0x0)

29.507480415s ago: executing program 33 (id=470):
syz_emit_ethernet(0x82, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffff00000000000088a80d008100090086dd60dd690b00442f00fc000000000000000000000000000000ff020000000000000000000000000001242081000000000000000800000086dd080088be810000001000000001000000000000"], 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
socket$rxrpc(0x21, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x65c, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, &(0x7f0000003780)=""/4096}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r3)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a"], 0x50}}, 0x0)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r4 = inotify_init1(0x0)
fcntl$setown(r4, 0x8, 0xffffffffffffffff)
fcntl$getownex(r4, 0x10, &(0x7f0000000140)={0x0, <r5=>0x0})
r6 = syz_open_procfs(r5, &(0x7f0000000600)='fd/4\x00')
ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40305839, &(0x7f0000000240)=0x28084)
r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSBRKP(r7, 0x5425, 0x0)

7.031038404s ago: executing program 6 (id=534):
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000"], 0x69)
socket$rxrpc(0x21, 0x2, 0x2)
syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, 0x0, &(0x7f00000001c0))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000440)=@secondary)
keyctl$KEYCTL_MOVE(0x1e, r3, 0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000100)=@t={0x81, 0x3, 0x0, 0x0, @generic})
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x0)

6.146031955s ago: executing program 6 (id=539):
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0)
futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000000), &(0x7f0000048000), 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
exit(0x0)

4.695592512s ago: executing program 5 (id=541):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000080)={0x0, 0x0, 0x80000000}, 0xc)

4.694939432s ago: executing program 6 (id=543):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000080)=0x80000001, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000e00)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x240080a0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r3, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
ioctl$VIDIOC_S_FMT(r4, 0xc0d05640, &(0x7f0000000340)={0x9, @pix_mp={0xe9, 0x82, 0x32315659, 0x7, 0x0, [{}, {}, {0x0, 0x9}, {0x0, 0x320}, {0x0, 0x4}, {0x2, 0xfffffff9}, {0x0, 0x8}, {0x5b1, 0x3}], 0x0, 0x5, 0x8, 0x0, 0x6}})
ioprio_set$uid(0x3, 0x0, 0x0)
r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='c:::\x00', 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000001140)=0x2, 0x4)
sendmmsg$inet(r0, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="3cdf9a0df115c376edfe5a129e71cc04a100846663b0fa4576b19cbb131cc17fb88f775547cd8571ace7c507ed037f2183abffd89ab8b4ca62ca863357b6b48d305c30d5b69887d2472f508896925e0660adb38902b29f791d95c838042f98b9", 0x60}, {&(0x7f0000000180)="eea99986e4f7ccb042247fe67856fc8e253ecb6f4fa3016ef0e762ac2738fb7f6a4346ac99b50fb421267a17645365b35e566b3354639752c01185e7f41e3d5c2672ea3c4624e84cabd527c74c9da01a2e0f5b964a2ad0f5fb9b740dd54086652a1ca05c64aa67ba434e688ef70287442299c908", 0x74}], 0x2}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000340)="49e045d1377f5f3ca1c84a498c94", 0xe}, {&(0x7f0000000380)="f3d064919ec3e096b13d306ef7b6c4ca11bfb2191bfe0e715fbe8337c71b05ba4a5015a3f3f3fe7b3464b5f0a76b4fc0594d7234cc6cae2bb3f49e0e671b3bb10d59e4c31a52ee84f26d336d696a43f49c626fc25ffd24cbd689046473665225ecab", 0x62}, {&(0x7f0000000440)="6d7ddccc0f4bde59f95c2f2f8e9f63bfd3bf597c226526ed889b6b4921b44e21a9e15c477b2fd46764ed28b5ec13f817dcf9926ae2d4ca4f3b90307305c94c2013cb0470c4c074b1e64dfae11d4a1f481e544b515582563e1bf7eff481deb32e35b59ba9320af0386c875d370ee2ac22283c2a5df00312c4708382afc65bb9367bd247df", 0x84}, {&(0x7f0000000500)="82ecd52e29fc43073eadc02b964dae38fd1a4dda4e8845559de2", 0x1a}, {&(0x7f0000000540)="2918e647a78743e1ab60dbe7e59065085e24f575e5b944ec946ab1f1b5b6c23cc289096b1ed2ba487aac4679a98b854e7b9405783efdaec6b9fa25bdce1f4ea4d08967466b4ad46acca659b2c3eb7568ea3ae4b08dea296cf35efde79dc9941a798b72545ac8ff4d25a62349c8b42975811fff007f74749382f452c1163ef2ade0bab7e7ff0e835f685f107593941da36c647c803d8cb574538d2d27263890dd94b3c9c6eab09e06b38b2e773cb328691a2c7bb7004fdbf2e4a58e41e2e75dbe63266050c0f906d5d9f24dc50072560a96ad1f02c3ecb022f9e9e249daea6a49940728d3b84a11", 0xe7}, {&(0x7f0000000640)="6576f33482e91c81", 0x8}, {&(0x7f0000000880)="3fde694efb6b43c17bf92103d75945c4668991b5a8b6b181db8705a39503a922e50e087b2df249cdc1924ef996bc941b10d8ad0fe3b9cebbd95618ae0bfffde89500f4df8b949435b2b1eadf771b73bbbb7df9872cb63cc5658772f49545175e5ab784c5130d46", 0x67}, {&(0x7f00000006c0)="5d5e0d1d45bc6a12144312041aca0360e3b269367b1ce7921eb6ab68f2e1c8eb352d6710e18688e3f497f17a85fa70d1b5ee5c1dd2c8cd3da4cf5e441c925a9db29858329a7458fce81f0c7afcf50f29539eb1528e5915134f63c899164844e88e2b71c76a4f3fcdc105b6c0bf7041f1e74cee", 0x73}, {&(0x7f0000000240)="b01bdc44f479626417868bd6d9cee7c3312817e415ec2b4cf10e19e2f8263018109c498ba0544c50a2ca9391d79cb6bb9b0450ca516679597197b47c4dca1c6e2844bdea6d9c5c0b49fc09333a7fc62839", 0x51}, {&(0x7f0000000780)="9bf4187f3847f98574142f7e6a924765", 0x10}], 0xa}}, {{0x0, 0x0, &(0x7f00000002c0)}}], 0x3, 0x24048844)
recvmsg(r0, &(0x7f0000001000)={0x0, 0x0, 0x0}, 0x2000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f0000000680)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000c40)={0x60, r7, 0x8, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x13}}}}, [@NL80211_ATTR_KEY={0x40, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DEFAULT_TYPES={0x24, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_SEQ={0xe, 0x4, "e4b99e884861a18103a3"}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4080}, 0x80)

4.653469716s ago: executing program 5 (id=544):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0)
ioctl$I2C_PEC(r3, 0x705, 0x8000000000000000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000001280), 0xaa000, 0x0)
r5 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600))
sendmsg$nl_route_sched(r5, 0x0, 0x0)
ioctl$FBIO_WAITFORVSYNC(r4, 0x40044620, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000800000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000e327000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

3.83830705s ago: executing program 6 (id=547):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8)
close(r2)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={<r4=>0x0}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000040)={r4, 0x10000}, 0x8)

3.83604228s ago: executing program 3 (id=548):
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x10b301)
syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000d50000002a00c50095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r1}, 0x11)
socket$netlink(0x10, 0x3, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x1a5982)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x13f}}, 0x20)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r2})
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1)

3.700538816s ago: executing program 6 (id=549):
r0 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)='GZ%', 0x3, 0xfffffffffffffffb)
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r3=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r5 = dup(r4)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
r6 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x2, 0x5}, &(0x7f0000000100)=<r7=>0x0, &(0x7f00000001c0)=<r8=>0x0)
r9 = syz_genetlink_get_family_id$ethtool(0x0, r5)
getsockopt$inet6_mreq(r5, 0x29, 0x15, &(0x7f0000000580), 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'tunl0\x00', &(0x7f0000000600)={'sit0\x00', <r10=>0x0, 0x20, 0x8, 0x0, 0x3, {{0x8, 0x4, 0x2, 0x3f, 0x20, 0x66, 0x0, 0x5, 0x29, 0x0, @local, @multicast2, {[@rr={0x7, 0xb, 0xe6, [@multicast2, @rand_addr=0x64010101]}]}}}}})
getsockname$packet(0xffffffffffffffff, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000006c0)=0x14)
sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="38000000465e325eddfce490aefed81848f484499e557a7156d075a6c6f2ec3ca8d417f9860a1bd69189593d635a2be1f817aa526303f6a0c605912655f7fed0d83c9254add3a7702c57ad3bb6142195557fa6f055db71b8f5186bc263612b35084de2f2dac510af0843a14a27c7a6c7884c6b08b7b85542b395c3712b66f684f46e464242d5da9d77821d1bef2dfe41a003512a34f4c3e5b9b611c86bed6cb40109035488b4822e0d8ec575c6fc73687b5d55bcb46edab6b0e74147260b8cd5d1d5cd2749a07ff4e0e5160c27dc0e3f9f1ced1d7b0956f36d8735fb3aa2373e", @ANYRES16=r9, @ANYBLOB="08002cbd7000fddbdf250b000000040001802000018014000200776c616e31000000000000000000000008000100", @ANYRES32=r10, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x40080)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
readv(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r6, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
r11 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0)
r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r11, r12, 0x0, 0x20000023896)
futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000800)={'filter\x00', 0xb001, 0x4, 0x3d0, 0x1f8, 0x0, 0x1f8, 0x1f8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @private=0xa010100, @multicast2, 0x7, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x10b, 0x0, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420)
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x0, 0x2, 0x2})
keyctl$update(0x2, r0, &(0x7f0000000000)="11868a0fceae284c00000001", 0xc)
syz_usb_connect(0x0, 0x4f, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000a6ff0540cdabeecdb9050000150109023d00020000000009049c00030103510009050a000000ec00000905031301"], 0x0)

3.637888473s ago: executing program 5 (id=550):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000f2ff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./bus\x00')
mkdir(&(0x7f0000000240)='./bus\x00', 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r4, &(0x7f0000000300)=""/104, 0x68)
sendmsg$kcm(r0, 0x0, 0x0)

3.567220761s ago: executing program 2 (id=551):
socket$kcm(0x29, 0x2, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7d2})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x800, 0x8}}]}}]}, 0x48}}, 0x0)

3.516705727s ago: executing program 3 (id=552):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df00000000000000000009f600"})
r1 = syz_open_pts(r0, 0x801)
r2 = dup3(r1, r0, 0x0)
r3 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r3, 0x2ded, 0x0, 0x0, 0x0, 0x0)
write$char_usb(r2, &(0x7f00000002c0)="3f5daa1c3ee0d36eeacdc9b84f8ece587803b2b3128e0c9dc7f4618b3a73f2935ee4e47f489f370260ef7255a95be799d7abb983fab5788d4f6466872525b7728e", 0x41)

3.253285847s ago: executing program 3 (id=553):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendto$inet6(r0, 0x0, 0x0, 0x20048004, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000))

3.13974973s ago: executing program 0 (id=554):
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x6}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94)

3.036741772s ago: executing program 2 (id=555):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f00000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='sched_switch\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = socket$unix(0x1, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x10, 0x0, 0x0)
listen(r2, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r3, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
connect$unix(r2, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
accept(r2, 0x0, 0x0)

3.017464424s ago: executing program 3 (id=556):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = epoll_create(0x689)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000440)={0x8})

2.941932353s ago: executing program 0 (id=557):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000080)=0x80000001, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000e00)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x240080a0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r3, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
ioctl$VIDIOC_S_FMT(r4, 0xc0d05640, &(0x7f0000000340)={0x9, @pix_mp={0xe9, 0x82, 0x32315659, 0x7, 0x0, [{}, {}, {0x0, 0x9}, {0x0, 0x320}, {0x0, 0x4}, {0x2, 0xfffffff9}, {0x0, 0x8}, {0x5b1, 0x3}], 0x0, 0x5, 0x8, 0x0, 0x6}})
ioprio_set$uid(0x3, 0x0, 0x0)
r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='c:::\x00', 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000001140)=0x2, 0x4)
sendmmsg$inet(r0, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="3cdf9a0df115c376edfe5a129e71cc04a100846663b0fa4576b19cbb131cc17fb88f775547cd8571ace7c507ed037f2183abffd89ab8b4ca62ca863357b6b48d305c30d5b69887d2472f508896925e0660adb38902b29f791d95c838042f98b9", 0x60}, {&(0x7f0000000180)="eea99986e4f7ccb042247fe67856fc8e253ecb6f4fa3016ef0e762ac2738fb7f6a4346ac99b50fb421267a17645365b35e566b3354639752c01185e7f41e3d5c2672ea3c4624e84cabd527c74c9da01a2e0f5b964a2ad0f5fb9b740dd54086652a1ca05c64aa67ba434e688ef70287442299c908", 0x74}], 0x2}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000340)="49e045d1377f5f3ca1c84a498c94", 0xe}, {&(0x7f0000000380)="f3d064919ec3e096b13d306ef7b6c4ca11bfb2191bfe0e715fbe8337c71b05ba4a5015a3f3f3fe7b3464b5f0a76b4fc0594d7234cc6cae2bb3f49e0e671b3bb10d59e4c31a52ee84f26d336d696a43f49c626fc25ffd24cbd689046473665225ecab", 0x62}, {&(0x7f0000000440)="6d7ddccc0f4bde59f95c2f2f8e9f63bfd3bf597c226526ed889b6b4921b44e21a9e15c477b2fd46764ed28b5ec13f817dcf9926ae2d4ca4f3b90307305c94c2013cb0470c4c074b1e64dfae11d4a1f481e544b515582563e1bf7eff481deb32e35b59ba9320af0386c875d370ee2ac22283c2a5df00312c4708382afc65bb9367bd247df", 0x84}, {&(0x7f0000000500)="82ecd52e29fc43073eadc02b964dae38fd1a4dda4e8845559de2", 0x1a}, {&(0x7f0000000540)="2918e647a78743e1ab60dbe7e59065085e24f575e5b944ec946ab1f1b5b6c23cc289096b1ed2ba487aac4679a98b854e7b9405783efdaec6b9fa25bdce1f4ea4d08967466b4ad46acca659b2c3eb7568ea3ae4b08dea296cf35efde79dc9941a798b72545ac8ff4d25a62349c8b42975811fff007f74749382f452c1163ef2ade0bab7e7ff0e835f685f107593941da36c647c803d8cb574538d2d27263890dd94b3c9c6eab09e06b38b2e773cb328691a2c7bb7004fdbf2e4a58e41e2e75dbe63266050c0f906d5d9f24dc50072560a96ad1f02c3ecb022f9e9e249daea6a49940728d3b84a11", 0xe7}, {&(0x7f0000000640)="6576f33482e91c81", 0x8}, {&(0x7f0000000880)="3fde694efb6b43c17bf92103d75945c4668991b5a8b6b181db8705a39503a922e50e087b2df249cdc1924ef996bc941b10d8ad0fe3b9cebbd95618ae0bfffde89500f4df8b949435b2b1eadf771b73bbbb7df9872cb63cc5658772f49545175e5ab784c5130d46", 0x67}, {&(0x7f00000006c0)="5d5e0d1d45bc6a12144312041aca0360e3b269367b1ce7921eb6ab68f2e1c8eb352d6710e18688e3f497f17a85fa70d1b5ee5c1dd2c8cd3da4cf5e441c925a9db29858329a7458fce81f0c7afcf50f29539eb1528e5915134f63c899164844e88e2b71c76a4f3fcdc105b6c0bf7041f1e74cee", 0x73}, {&(0x7f0000000240)="b01bdc44f479626417868bd6d9cee7c3312817e415ec2b4cf10e19e2f8263018109c498ba0544c50a2ca9391d79cb6bb9b0450ca516679597197b47c4dca1c6e2844bdea6d9c5c0b49fc09333a7fc62839", 0x51}, {&(0x7f0000000780)="9bf4187f3847f98574142f7e6a924765", 0x10}], 0xa}}, {{0x0, 0x0, &(0x7f00000002c0)}}], 0x3, 0x24048844)
recvmsg(r0, &(0x7f0000001000)={0x0, 0x0, 0x0}, 0x2000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f0000000680)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000c40)={0x60, r7, 0x8, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x13}}}}, [@NL80211_ATTR_KEY={0x40, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DEFAULT_TYPES={0x24, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_SEQ={0xe, 0x4, "e4b99e884861a18103a3"}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4080}, 0x80)

2.905521517s ago: executing program 3 (id=558):
syz_open_dev$ndb(0x0, 0x0, 0x88001)
syz_open_dev$ndb(0x0, 0x0, 0x0)
epoll_create1(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x414000002)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)

2.692980511s ago: executing program 5 (id=559):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x48}, 0x1, 0x0, 0x0, 0x4400c054}, 0x800)

2.055949664s ago: executing program 0 (id=560):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0)
ioctl$I2C_PEC(r3, 0x705, 0x8000000000000000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000001280), 0xaa000, 0x0)
r5 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600))
sendmsg$nl_route_sched(r5, 0x0, 0x0)
ioctl$FBIO_WAITFORVSYNC(r4, 0x40044620, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000800000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000e327000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

1.847827448s ago: executing program 3 (id=561):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket(0x200000000000011, 0x2, 0x407ff8)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10)
bind$packet(r1, 0x0, 0x0)
bind$packet(r1, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp\x00')
read(r6, &(0x7f0000001a00)=""/177, 0xb1)
r7 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r7, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f00000001c0)={0x0, 0x3d, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0xb78}}, 0x0)
close(r7)

1.464643582s ago: executing program 0 (id=562):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x17, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x2f, 0x0, @val=@perf_event={0x4}}, 0x18)

1.269266494s ago: executing program 2 (id=563):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000003a000b0000000000000000000400000004000000100001800c001000040005"], 0x28}}, 0x0)
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000000))
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000080))
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x0, 0x10000000}}}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)

1.263811285s ago: executing program 0 (id=564):
syz_pidfd_open(0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000, 0x200, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
waitid(0x0, 0x0, 0x0, 0x4, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
mkdirat$cgroup(r3, &(0x7f00000000c0)='syz0\x00', 0x1ff)
r4 = openat$cgroup_devices(r3, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r4, &(0x7f0000000080)={'b', ' *:* ', 'wm\x00'}, 0x9)

1.204172111s ago: executing program 5 (id=565):
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000200)={[{@journal_dev}, {@nouid32}]}, 0xfe, 0x269, &(0x7f0000000780)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0)
pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000700)="a9", 0x1}], 0x1, 0x7fff, 0x80, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r1, 0xffffffffffffffff, 0x0)

896.689517ms ago: executing program 2 (id=566):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)='Nyz', 0x3}], 0x1}, 0x44000)
sendmsg$802154_dgram(r0, &(0x7f0000000000)={&(0x7f0000000040), 0x14, &(0x7f0000000100)={0x0}, 0x7, 0x0, 0x0, 0x8004}, 0x40040)
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000180))

793.343619ms ago: executing program 2 (id=567):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/15], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vxcan1\x00', <r2=>0x0})
bind$can_j1939(r0, &(0x7f0000000300)={0x1d, r2, 0x0, {}, 0x2}, 0x18)
sendmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x18, &(0x7f0000000100)={&(0x7f00000000c0)="d45dac54b098953bd2", 0x9}}, 0x0)
dup3(r1, r0, 0x0)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'vxcan1\x00'})

404.458944ms ago: executing program 2 (id=568):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x8000c0, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], 0x1, 0x4430, &(0x7f0000000240)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)

316.777884ms ago: executing program 0 (id=569):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$inet_sctp(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4040060}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
bind$ax25(r4, &(0x7f0000000140)={{0x3, @default, 0x1}, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0)
r6 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
bind$ax25(r6, 0x0, 0x0)
close_range(r5, 0xffffffffffffffff, 0x0)
r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b36, 0x0)

72.623262ms ago: executing program 5 (id=570):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000080)=0x80000001, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000e00)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x240080a0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r3, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
ioctl$VIDIOC_S_FMT(r4, 0xc0d05640, &(0x7f0000000340)={0x9, @pix_mp={0xe9, 0x82, 0x32315659, 0x7, 0x0, [{}, {}, {0x0, 0x9}, {0x0, 0x320}, {0x0, 0x4}, {0x2, 0xfffffff9}, {0x0, 0x8}, {0x5b1, 0x3}], 0x0, 0x5, 0x8, 0x0, 0x6}})
ioprio_set$uid(0x3, 0x0, 0x0)
r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='c:::\x00', 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000001140)=0x2, 0x4)
sendmmsg$inet(r0, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="3cdf9a0df115c376edfe5a129e71cc04a100846663b0fa4576b19cbb131cc17fb88f775547cd8571ace7c507ed037f2183abffd89ab8b4ca62ca863357b6b48d305c30d5b69887d2472f508896925e0660adb38902b29f791d95c838042f98b9", 0x60}, {&(0x7f0000000180)="eea99986e4f7ccb042247fe67856fc8e253ecb6f4fa3016ef0e762ac2738fb7f6a4346ac99b50fb421267a17645365b35e566b3354639752c01185e7f41e3d5c2672ea3c4624e84cabd527c74c9da01a2e0f5b964a2ad0f5fb9b740dd54086652a1ca05c64aa67ba434e688ef70287442299c908", 0x74}], 0x2}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000340)="49e045d1377f5f3ca1c84a498c94", 0xe}, {&(0x7f0000000380)="f3d064919ec3e096b13d306ef7b6c4ca11bfb2191bfe0e715fbe8337c71b05ba4a5015a3f3f3fe7b3464b5f0a76b4fc0594d7234cc6cae2bb3f49e0e671b3bb10d59e4c31a52ee84f26d336d696a43f49c626fc25ffd24cbd689046473665225ecab", 0x62}, {&(0x7f0000000440)="6d7ddccc0f4bde59f95c2f2f8e9f63bfd3bf597c226526ed889b6b4921b44e21a9e15c477b2fd46764ed28b5ec13f817dcf9926ae2d4ca4f3b90307305c94c2013cb0470c4c074b1e64dfae11d4a1f481e544b515582563e1bf7eff481deb32e35b59ba9320af0386c875d370ee2ac22283c2a5df00312c4708382afc65bb9367bd247df", 0x84}, {&(0x7f0000000500)="82ecd52e29fc43073eadc02b964dae38fd1a4dda4e8845559de2", 0x1a}, {&(0x7f0000000540)="2918e647a78743e1ab60dbe7e59065085e24f575e5b944ec946ab1f1b5b6c23cc289096b1ed2ba487aac4679a98b854e7b9405783efdaec6b9fa25bdce1f4ea4d08967466b4ad46acca659b2c3eb7568ea3ae4b08dea296cf35efde79dc9941a798b72545ac8ff4d25a62349c8b42975811fff007f74749382f452c1163ef2ade0bab7e7ff0e835f685f107593941da36c647c803d8cb574538d2d27263890dd94b3c9c6eab09e06b38b2e773cb328691a2c7bb7004fdbf2e4a58e41e2e75dbe63266050c0f906d5d9f24dc50072560a96ad1f02c3ecb022f9e9e249daea6a49940728d3b84a11", 0xe7}, {&(0x7f0000000640)="6576f33482e91c81", 0x8}, {&(0x7f0000000880)="3fde694efb6b43c17bf92103d75945c4668991b5a8b6b181db8705a39503a922e50e087b2df249cdc1924ef996bc941b10d8ad0fe3b9cebbd95618ae0bfffde89500f4df8b949435b2b1eadf771b73bbbb7df9872cb63cc5658772f49545175e5ab784c5130d46", 0x67}, {&(0x7f00000006c0)="5d5e0d1d45bc6a12144312041aca0360e3b269367b1ce7921eb6ab68f2e1c8eb352d6710e18688e3f497f17a85fa70d1b5ee5c1dd2c8cd3da4cf5e441c925a9db29858329a7458fce81f0c7afcf50f29539eb1528e5915134f63c899164844e88e2b71c76a4f3fcdc105b6c0bf7041f1e74cee", 0x73}, {&(0x7f0000000240)="b01bdc44f479626417868bd6d9cee7c3312817e415ec2b4cf10e19e2f8263018109c498ba0544c50a2ca9391d79cb6bb9b0450ca516679597197b47c4dca1c6e2844bdea6d9c5c0b49fc09333a7fc62839", 0x51}, {&(0x7f0000000780)="9bf4187f3847f98574142f7e6a924765", 0x10}], 0xa}}, {{0x0, 0x0, &(0x7f00000002c0)}}], 0x3, 0x24048844)
recvmsg(r0, &(0x7f0000001000)={0x0, 0x0, 0x0}, 0x2000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f0000000680)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000c40)={0x60, r7, 0x8, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x13}}}}, [@NL80211_ATTR_KEY={0x40, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DEFAULT_TYPES={0x24, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_SEQ={0xe, 0x4, "e4b99e884861a18103a3"}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4080}, 0x80)

0s ago: executing program 6 (id=571):
syz_open_dev$ndb(0x0, 0x0, 0x88001)
syz_open_dev$ndb(0x0, 0x0, 0x0)
epoll_create1(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x414000002)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.161' (ED25519) to the list of known hosts.
[   60.282143][ T4154] cgroup: Unknown subsys name 'net'
[   60.391805][ T4154] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   61.863121][ T4154] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k FS
[   63.887553][ T4175] chnl_net:caif_netlink_parms(): no params data found
[   63.918837][ T4164] chnl_net:caif_netlink_parms(): no params data found
[   63.928339][ T4165] chnl_net:caif_netlink_parms(): no params data found
[   63.968728][ T4166] chnl_net:caif_netlink_parms(): no params data found
[   64.037700][ T4167] chnl_net:caif_netlink_parms(): no params data found
[   64.131686][ T4175] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.138953][ T4175] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.151940][ T4175] device bridge_slave_0 entered promiscuous mode
[   64.160408][ T4164] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.167522][ T4164] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.175783][ T4164] device bridge_slave_0 entered promiscuous mode
[   64.204010][ T4175] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.211576][ T4175] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.219459][ T4175] device bridge_slave_1 entered promiscuous mode
[   64.227601][ T4164] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.234935][ T4164] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.243296][ T4164] device bridge_slave_1 entered promiscuous mode
[   64.250247][ T4165] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.257450][ T4165] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.265658][ T4165] device bridge_slave_0 entered promiscuous mode
[   64.299174][ T4165] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.306485][ T4165] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.314542][ T4165] device bridge_slave_1 entered promiscuous mode
[   64.369141][ T4166] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.376687][ T4166] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.384812][ T4166] device bridge_slave_0 entered promiscuous mode
[   64.395571][ T4175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.414379][ T4164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.427254][ T4165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.437210][ T4166] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.444528][ T4166] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.452615][ T4166] device bridge_slave_1 entered promiscuous mode
[   64.461474][ T4175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.473013][ T4164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.489431][ T4167] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.496695][ T4167] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.504598][ T4167] device bridge_slave_0 entered promiscuous mode
[   64.514246][ T4165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.555600][ T4175] team0: Port device team_slave_0 added
[   64.561741][ T4167] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.568972][ T4167] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.577672][ T4167] device bridge_slave_1 entered promiscuous mode
[   64.612332][ T4175] team0: Port device team_slave_1 added
[   64.620998][ T4164] team0: Port device team_slave_0 added
[   64.636961][ T4165] team0: Port device team_slave_0 added
[   64.645325][ T4165] team0: Port device team_slave_1 added
[   64.653808][ T4166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.665471][ T4164] team0: Port device team_slave_1 added
[   64.695509][ T4166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.730490][ T4167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.768550][ T4175] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.775707][ T4175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.801923][ T4175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.816181][ T4167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.834730][ T4165] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.842024][ T4165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.868165][ T4165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.881656][ T4166] team0: Port device team_slave_0 added
[   64.888104][ T4165] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.895429][ T4165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.921859][ T4165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.934293][ T4164] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.941353][ T4164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.969101][ T4164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.982833][ T4175] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.990246][ T4175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.017644][ T4175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.038943][ T4166] team0: Port device team_slave_1 added
[   65.049458][ T4164] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.057027][ T4164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.084152][ T4164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.128590][ T4166] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.135688][ T4166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.162640][ T4166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.175642][ T4166] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.182777][ T4166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.208716][ T4166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.227819][ T4167] team0: Port device team_slave_0 added
[   65.256479][ T4167] team0: Port device team_slave_1 added
[   65.317461][ T4165] device hsr_slave_0 entered promiscuous mode
[   65.325544][ T4165] device hsr_slave_1 entered promiscuous mode
[   65.345274][ T4164] device hsr_slave_0 entered promiscuous mode
[   65.352845][ T4164] device hsr_slave_1 entered promiscuous mode
[   65.360130][ T4164] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   65.368707][ T4164] Cannot create hsr debugfs directory
[   65.382314][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.389334][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.415909][ T4167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.428639][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.436217][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.463775][ T4168] Bluetooth: hci0: command 0x0409 tx timeout
[   65.468002][ T4167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.471468][ T4168] Bluetooth: hci2: command 0x0409 tx timeout
[   65.490108][ T4175] device hsr_slave_0 entered promiscuous mode
[   65.497137][ T4175] device hsr_slave_1 entered promiscuous mode
[   65.504282][ T4175] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   65.511894][ T4175] Cannot create hsr debugfs directory
[   65.522069][ T4166] device hsr_slave_0 entered promiscuous mode
[   65.530709][ T1109] Bluetooth: hci4: command 0x0409 tx timeout
[   65.533908][   T23] Bluetooth: hci1: command 0x0409 tx timeout
[   65.536786][ T1109] Bluetooth: hci3: command 0x0409 tx timeout
[   65.547121][ T4166] device hsr_slave_1 entered promiscuous mode
[   65.556441][ T4166] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   65.564175][ T4166] Cannot create hsr debugfs directory
[   65.673449][ T4167] device hsr_slave_0 entered promiscuous mode
[   65.681619][ T4167] device hsr_slave_1 entered promiscuous mode
[   65.689275][ T4167] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   65.697642][ T4167] Cannot create hsr debugfs directory
[   65.998752][ T4165] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   66.013416][ T4165] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   66.025353][ T4165] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   66.036275][ T4165] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   66.100771][ T4175] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   66.124255][ T4175] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   66.137824][ T4175] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   66.158024][ T4175] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   66.185967][ T4164] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   66.218739][ T4164] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   66.238627][ T4164] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   66.248382][ T4164] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   66.328924][ T4166] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   66.348143][ T4165] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.375241][ T4166] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   66.385085][ T4166] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   66.399122][ T4166] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   66.433556][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   66.443492][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   66.463800][ T4165] 8021q: adding VLAN 0 to HW filter on device team0
[   66.474166][ T4167] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   66.488463][ T4167] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   66.513755][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   66.523371][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   66.533360][  T155] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.540660][  T155] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.557644][ T4167] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   66.581118][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   66.591343][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   66.601208][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   66.610155][  T155] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.617578][  T155] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.626863][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   66.642937][ T4167] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   66.669320][ T4175] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.681626][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   66.692353][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   66.702143][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   66.713167][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   66.742630][ T4164] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.754670][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   66.763665][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   66.790885][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   66.802179][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   66.812666][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   66.821221][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   66.829959][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   66.838938][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   66.851450][ T4175] 8021q: adding VLAN 0 to HW filter on device team0
[   66.864998][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   66.873949][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   66.910066][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   66.927592][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   66.938409][ T4208] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.945603][ T4208] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.962853][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   66.999598][ T4164] 8021q: adding VLAN 0 to HW filter on device team0
[   67.019199][ T4166] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.031890][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   67.047066][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   67.058185][ T4208] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.065461][ T4208] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.076755][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   67.086034][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   67.115184][ T4175] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   67.126094][ T4175] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   67.149163][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   67.158608][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   67.167499][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   67.176822][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   67.186152][ T4208] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.193450][ T4208] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.202480][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   67.212362][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   67.221563][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   67.230209][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   67.239756][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   67.248837][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   67.257826][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   67.266261][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   67.274634][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   67.308568][ T4166] 8021q: adding VLAN 0 to HW filter on device team0
[   67.335318][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   67.354995][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   67.368421][ T4208] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.375608][ T4208] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.385189][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   67.394326][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   67.403114][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   67.413685][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   67.422588][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   67.431299][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   67.461315][ T4165] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.468622][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   67.479807][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   67.490534][ T4208] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.497766][ T4208] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.506700][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   67.517043][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   67.526957][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   67.530635][ T4210] Bluetooth: hci2: command 0x041b tx timeout
[   67.536845][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   67.549902][ T4208] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.557044][ T4208] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.566293][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   67.566832][ T4210] Bluetooth: hci0: command 0x041b tx timeout
[   67.575576][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   67.590200][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   67.605868][ T4164] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   67.611049][ T4210] Bluetooth: hci1: command 0x041b tx timeout
[   67.617345][ T4211] Bluetooth: hci3: command 0x041b tx timeout
[   67.629253][ T4164] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   67.629776][ T4210] Bluetooth: hci4: command 0x041b tx timeout
[   67.656622][ T4167] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.690618][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   67.698978][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   67.717429][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   67.729081][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   67.739570][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   67.749344][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   67.759274][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   67.770156][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   67.778874][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   67.801621][ T4167] 8021q: adding VLAN 0 to HW filter on device team0
[   67.819929][ T4175] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.829216][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   67.845793][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   67.858779][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   67.890774][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   67.904126][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   67.912981][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   67.924081][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   67.933630][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   67.942818][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   67.951684][ T4208] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.958760][ T4208] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.966859][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   67.975979][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   67.986538][ T4208] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.994589][ T4208] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.004572][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   68.013591][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   68.047312][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   68.060156][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   68.075682][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   68.087697][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   68.096803][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   68.104442][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   68.113701][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   68.145439][ T4164] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.154730][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   68.167949][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   68.177817][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   68.187309][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   68.196648][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   68.205896][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   68.217022][ T4165] device veth0_vlan entered promiscuous mode
[   68.233787][ T4166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   68.250758][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   68.259633][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   68.282900][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   68.292334][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   68.306500][ T4165] device veth1_vlan entered promiscuous mode
[   68.347064][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   68.356638][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   68.367403][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   68.380094][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   68.393028][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   68.402084][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   68.411604][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   68.421616][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   68.432699][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   68.467591][ T4167] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   68.481937][ T4167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   68.493353][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   68.503466][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   68.513591][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   68.569782][ T4165] device veth0_macvtap entered promiscuous mode
[   68.584100][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   68.593445][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   68.611236][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   68.620230][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   68.635175][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   68.643808][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   68.652807][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   68.663230][ T4175] device veth0_vlan entered promiscuous mode
[   68.673051][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   68.681391][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   68.691741][ T4165] device veth1_macvtap entered promiscuous mode
[   68.719391][ T4166] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.728776][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   68.740401][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   68.749358][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   68.762180][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   68.771261][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   68.793888][ T4164] device veth0_vlan entered promiscuous mode
[   68.807961][ T4175] device veth1_vlan entered promiscuous mode
[   68.834061][ T4165] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.845709][ T4164] device veth1_vlan entered promiscuous mode
[   68.865135][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   68.874247][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   68.883183][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   68.893326][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   68.902071][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   68.911312][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   68.923499][ T4165] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.939327][ T4167] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.958692][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   68.967714][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   68.982080][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   68.989626][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   69.003386][ T4165] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.012582][ T4165] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.021737][ T4165] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.031590][ T4165] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.061818][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   69.072174][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   69.082815][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   69.092909][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   69.120003][ T4175] device veth0_macvtap entered promiscuous mode
[   69.129192][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   69.138948][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   69.149426][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   69.169050][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   69.178872][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   69.212185][ T4175] device veth1_macvtap entered promiscuous mode
[   69.230529][ T4164] device veth0_macvtap entered promiscuous mode
[   69.248170][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   69.256539][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   69.265308][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   69.275296][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   69.284383][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   69.307734][ T4164] device veth1_macvtap entered promiscuous mode
[   69.331501][ T4166] device veth0_vlan entered promiscuous mode
[   69.376582][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   69.385422][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   69.395800][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   69.405089][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   69.413896][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   69.424665][ T4164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.435716][ T4164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.447543][ T4164] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.458818][ T4164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.474045][ T4164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.485958][ T4164] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.501323][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.512046][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.522425][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.533329][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.545658][ T4175] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.553447][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   69.563176][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   69.572132][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   69.581160][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   69.590000][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   69.598906][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   69.613334][ T4166] device veth1_vlan entered promiscuous mode
[   69.621823][ T4211] Bluetooth: hci0: command 0x040f tx timeout
[   69.627976][ T4211] Bluetooth: hci2: command 0x040f tx timeout
[   69.628470][ T4167] device veth0_vlan entered promiscuous mode
[   69.645373][  T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.656090][  T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.661646][ T4164] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.675528][ T4164] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.684390][ T4164] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.693777][ T4212] Bluetooth: hci4: command 0x040f tx timeout
[   69.696031][ T4164] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.700021][ T4212] Bluetooth: hci1: command 0x040f tx timeout
[   69.716158][ T4212] Bluetooth: hci3: command 0x040f tx timeout
[   69.724944][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.735615][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.745937][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.756858][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.768504][ T4175] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.784930][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   69.793893][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   69.802635][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   69.811482][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   69.820874][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   69.859603][ T4175] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.868539][ T4175] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.877929][ T4175] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.888027][ T4175] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.912433][ T4167] device veth1_vlan entered promiscuous mode
[   69.949354][ T4208] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.974454][ T4208] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.996363][ T4166] device veth0_macvtap entered promiscuous mode
[   70.013442][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   70.022000][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   70.030152][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   70.038475][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   70.047886][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   70.057770][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   70.085575][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   70.101400][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   70.113240][ T4167] device veth0_macvtap entered promiscuous mode
[   70.150119][ T4167] device veth1_macvtap entered promiscuous mode
[   70.162743][ T4166] device veth1_macvtap entered promiscuous mode
[   70.195649][ T4208] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.204323][ T4208] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.221670][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.229658][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.249170][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.262450][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.272659][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.283562][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.294078][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.305368][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.317298][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.326703][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   70.336441][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   70.344739][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   70.353382][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   70.362463][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   70.403754][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.429515][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.440702][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.452941][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.463368][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.474544][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.492163][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.548380][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.567339][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.595491][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.606415][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.623496][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.634198][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.644593][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.660706][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.675127][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.685937][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.698056][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.708874][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   70.719196][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   70.728268][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   71.016793][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   71.093628][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   71.481379][ T1427] ieee802154 phy0 wpan0: encryption failed: -22
[   71.488024][ T1427] ieee802154 phy1 wpan1: encryption failed: -22
[   71.522043][ T4166] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.538912][ T4166] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.548149][ T4166] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.557323][ T4166] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.570742][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.582282][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.592805][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.604281][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.614976][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.625734][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.635829][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.646741][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.659225][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.677391][ T4208] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.706279][ T4212] Bluetooth: hci2: command 0x0419 tx timeout
[   71.712555][ T4208] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.727083][ T4212] Bluetooth: hci0: command 0x0419 tx timeout
[   71.779462][ T4212] Bluetooth: hci3: command 0x0419 tx timeout
[   71.821376][ T4212] Bluetooth: hci1: command 0x0419 tx timeout
[   71.828338][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   71.864544][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   71.871445][ T4212] Bluetooth: hci4: command 0x0419 tx timeout
[   71.886313][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   71.970449][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!!
[   72.015852][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!!
[   72.025762][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!!
[   72.035059][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!!
[   72.044066][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!!
[   72.053072][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[   72.062127][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[   72.090727][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!!
[   72.091147][ T4255] raw_sendmsg: syz.1.6 forgot to set AF_INET. Fix it!
[   72.099703][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!!
[   72.109412][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!!
[   72.115425][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!!
[   72.528526][ T4167] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.565608][ T4167] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.615495][ T4167] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.645991][ T4167] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.819346][ T4259] futex_wake_op: syz.1.7 tries to shift op by -1; fix this program
[   73.644932][ T4248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.364364][ T4248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.380532][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.389736][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   75.447838][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.499546][ T4248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.522105][ T4248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.624993][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   75.637718][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   75.732746][ T1106] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   76.112308][ T1106] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   76.158673][ T1106] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[   76.214295][ T1106] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   76.225515][ T1106] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   76.282240][ T4273] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   76.529848][ T4211] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   76.578878][ T1106] usb 2-1: USB disconnect, device number 2
[   77.602024][ T4248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.646869][ T4248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.665768][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   81.206003][ T4327] futex_wake_op: syz.3.18 tries to shift op by -1; fix this program
[   81.643507][    T7] cfg80211: failed to load regulatory.db
[   82.926576][    T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   82.941577][ T4241] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   83.426866][ T4241] usb 2-1: Using ep0 maxpacket: 32
[   83.742290][ T4241] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   83.791045][ T4241] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   83.801184][ T4241] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[   83.814387][ T4241] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[   83.824468][ T4241] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.835092][ T4241] usb 2-1: config 0 descriptor??
[   83.960705][    T7] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   83.982975][    T7] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[   83.994013][    T7] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   84.003152][    T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.095605][ T4332] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   84.110550][ T4241] usb 2-1: can't set config #0, error -71
[   84.117895][ T4241] usb 2-1: USB disconnect, device number 3
[   87.338143][ T4212] usb 1-1: USB disconnect, device number 2
[   87.853566][ T4376] netlink: 40 bytes leftover after parsing attributes in process `syz.4.31'.
[   87.890750][ T4376] Zero length message leads to an empty skb
[   97.380304][    C1] sched: RT throttling activated
[   97.398651][ T4429] netlink: 40 bytes leftover after parsing attributes in process `syz.1.45'.
[   99.110392][ T4211] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[   99.550949][ T4211] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10
[   99.563509][ T4211] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  100.553524][ T4211] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9
[  100.563563][ T4211] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.583049][ T4211] usb 3-1: Product: syz
[  100.587715][ T4211] usb 3-1: Manufacturer: syz
[  100.593380][ T4211] usb 3-1: SerialNumber: syz
[  100.636517][ T4211] usb 3-1: config 0 descriptor??
[  100.830840][ T4211] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input5
[  102.008584][ T4211] input: failed to attach handler mousedev to device input5, error: -5
[  102.118829][ T4474] netlink: 40 bytes leftover after parsing attributes in process `syz.0.57'.
[  104.508954][ T4211] usb 3-1: USB disconnect, device number 2
[  104.576333][ T4492] loop1: detected capacity change from 0 to 512
[  104.703924][ T4492] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities
[  109.635975][ T4529] futex_wake_op: syz.2.70 tries to shift op by -1; fix this program
[  110.150590][ T4211] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  112.756630][ T4211] usb 3-1: unable to read config index 0 descriptor/start: -71
[  112.764303][ T4211] usb 3-1: can't read configurations, error -71
[  117.751369][ T4577] netlink: 40 bytes leftover after parsing attributes in process `syz.1.86'.
[  118.117403][ T4588] futex_wake_op: syz.1.88 tries to shift op by -1; fix this program
[  120.530545][   T23] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  121.500342][   T23] usb 3-1: Using ep0 maxpacket: 32
[  122.060658][   T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  122.092151][   T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  122.136043][   T23] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  122.189391][   T23] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  122.231550][   T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.341931][   T23] usb 3-1: config 0 descriptor??
[  122.748676][ T4619] netlink: 24 bytes leftover after parsing attributes in process `syz.1.97'.
[  123.265399][ T4624] netlink: 40 bytes leftover after parsing attributes in process `syz.4.98'.
[  125.700620][   T23] usbhid 3-1:0.0: can't add hid device: -71
[  125.733428][   T23] usbhid: probe of 3-1:0.0 failed with error -71
[  125.982866][   T23] usb 3-1: USB disconnect, device number 5
[  128.061301][ T4659] netlink: 40 bytes leftover after parsing attributes in process `syz.2.110'.
[  133.050106][ T1427] ieee802154 phy0 wpan0: encryption failed: -22
[  133.059347][ T1427] ieee802154 phy1 wpan1: encryption failed: -22
[  133.251905][ T4699] netlink: 40 bytes leftover after parsing attributes in process `syz.2.121'.
[  136.680367][ T4729] futex_wake_op: syz.0.129 tries to shift op by -1; fix this program
[  137.282646][ T4734] loop7: detected capacity change from 0 to 16384
[  137.413445][ T4734] loop7: detected capacity change from 16384 to 16383
[  137.453347][   T26] audit: type=1326 audit(1729852097.808:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4731 comm="syz.1.130" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5fa4c44719 code=0x0
[  138.274933][ T4740] netlink: 40 bytes leftover after parsing attributes in process `syz.4.132'.
[  141.607950][   T21] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  144.893314][ T4794] netlink: 40 bytes leftover after parsing attributes in process `syz.1.145'.
[  145.119330][ T4800] kAFS: unable to lookup cell '/'
[  146.716479][ T4816] atomic_op ffff888074fbb198 conn xmit_atomic 0000000000000000
[  146.727512][ T4816] mmap: syz.0.153 (4816) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  146.918455][    C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 2. Sending cookies.  Check SNMP counters.
[  147.426331][ T4827] ptrace attach of "./syz-executor exec"[4166] was attempted by "./syz-executor exec"[4827]
[  147.481403][ T4827] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  148.130889][ T1109] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  148.450658][ T1109] usb 4-1: device descriptor read/64, error -71
[  148.740707][ T1109] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  148.980584][ T1109] usb 4-1: device descriptor read/64, error -71
[  149.120556][ T1109] usb usb4-port1: attempt power cycle
[  150.328393][ T1109] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  151.511408][ T1109] usb 4-1: device descriptor read/8, error -71
[  152.802524][ T1109] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  153.350483][ T1109] usb 4-1: device descriptor read/8, error -71
[  153.556377][ T4877] futex_wake_op: syz.2.170 tries to shift op by -1; fix this program
[  153.985801][ T1109] usb usb4-port1: unable to enumerate USB device
[  155.012093][ T4892] netlink: 12 bytes leftover after parsing attributes in process `syz.4.176'.
[  155.034635][ T4894] ubi0: attaching mtd0
[  155.060205][ T4894] ubi0: scanning is finished
[  155.065935][ T4894] ubi0: empty MTD device detected
[  155.189006][   T21] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  155.204270][ T1109] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  155.454796][ T4894] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  155.462639][ T4894] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  155.469926][ T4894] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  155.477655][ T4894] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  155.600811][   T21] usb 3-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b
[  155.624218][   T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.887797][   T21] usb 3-1: config 0 descriptor??
[  156.210831][ T4894] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  156.217643][ T4894] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  156.227119][   T21] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input6
[  156.244844][ T1109] usb 4-1: Using ep0 maxpacket: 32
[  156.269207][ T4894] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 72343927
[  156.305850][ T4894] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  156.459262][   T21] usb 3-1: USB disconnect, device number 6
[  156.483965][ T4903] ubi0: background thread "ubi_bgt0d" started, PID 4903
[  157.392052][ T1109] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  157.417062][ T1109] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.426919][ T1109] usb 4-1: Product: syz
[  157.432852][ T1109] usb 4-1: Manufacturer: syz
[  157.459802][ T4914] bridge0: port 3(syz_tun) entered blocking state
[  157.466896][ T4914] bridge0: port 3(syz_tun) entered disabled state
[  157.496033][ T4914] device syz_tun entered promiscuous mode
[  157.515969][ T4914] bridge0: port 3(syz_tun) entered blocking state
[  157.522943][ T4914] bridge0: port 3(syz_tun) entered forwarding state
[  157.523435][ T1109] usb 4-1: SerialNumber: syz
[  157.566754][ T4916] loop3: detected capacity change from 0 to 512
[  157.619437][ T1109] usb 4-1: config 0 descriptor??
[  157.645162][ T1109] usb 4-1: can't set config #0, error -71
[  157.667233][ T1109] usb 4-1: USB disconnect, device number 6
[  157.700794][ T4916] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities
[  161.393598][ T4939] netlink: 4 bytes leftover after parsing attributes in process `syz.3.187'.
[  165.990494][ T4959] futex_wake_op: syz.0.192 tries to shift op by -1; fix this program
[  167.726095][ T4986] loop3: detected capacity change from 0 to 512
[  168.003462][ T4986] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities
[  168.180492][ T4996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.201'.
[  169.843626][ T5010] block nbd3: shutting down sockets
[  170.887728][ T5020] futex_wake_op: syz.0.206 tries to shift op by -1; fix this program
[  171.640304][ T1109] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  173.780370][ T1109] usb 1-1: unable to read config index 0 descriptor/all
[  173.787427][ T1109] usb 1-1: can't read configurations, error -71
[  176.244420][ T2301] Bluetooth: hci5: command 0x0409 tx timeout
[  176.294482][ T5030] chnl_net:caif_netlink_parms(): no params data found
[  177.873047][ T5083] futex_wake_op: syz.0.223 tries to shift op by -1; fix this program
[  178.330426][ T4212] Bluetooth: hci5: command 0x041b tx timeout
[  178.564808][ T5030] bridge0: port 1(bridge_slave_0) entered blocking state
[  178.576388][ T5030] bridge0: port 1(bridge_slave_0) entered disabled state
[  178.584869][ T4209] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  178.622251][ T5030] device bridge_slave_0 entered promiscuous mode
[  178.659991][ T5030] bridge0: port 2(bridge_slave_1) entered blocking state
[  178.677737][ T5030] bridge0: port 2(bridge_slave_1) entered disabled state
[  178.697808][ T5030] device bridge_slave_1 entered promiscuous mode
[  178.829803][ T5030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  178.865642][ T5030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  178.929155][ T5030] team0: Port device team_slave_0 added
[  178.938469][ T5030] team0: Port device team_slave_1 added
[  178.967257][ T5030] batman_adv: batadv0: Adding interface: batadv_slave_0
[  178.975966][ T4209] usb 1-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b
[  178.990548][ T5030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  179.024112][ T4209] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.071277][ T4209] usb 1-1: config 0 descriptor??
[  179.098546][ T5030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  179.129932][ T4209] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input7
[  179.194923][ T5030] batman_adv: batadv0: Adding interface: batadv_slave_1
[  179.295277][ T5030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  179.363567][ T4212] usb 1-1: USB disconnect, device number 5
[  179.413827][ T5030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  180.384152][ T5030] device hsr_slave_0 entered promiscuous mode
[  180.410394][ T4212] Bluetooth: hci5: command 0x040f tx timeout
[  180.428762][ T5030] device hsr_slave_1 entered promiscuous mode
[  180.443494][ T5030] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  180.459822][ T5030] Cannot create hsr debugfs directory
[  181.650725][ T5030] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  181.691591][ T5030] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  181.734215][ T5030] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  181.768317][ T5030] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  182.111052][ T5030] 8021q: adding VLAN 0 to HW filter on device bond0
[  182.178732][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  182.286733][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  182.323939][ T5030] 8021q: adding VLAN 0 to HW filter on device team0
[  182.381567][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  182.400825][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  182.441507][ T4305] bridge0: port 1(bridge_slave_0) entered blocking state
[  182.448616][ T4305] bridge0: port 1(bridge_slave_0) entered forwarding state
[  182.487773][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  182.496268][ T4211] Bluetooth: hci5: command 0x0419 tx timeout
[  182.521580][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  182.571757][ T4305] bridge0: port 2(bridge_slave_1) entered blocking state
[  182.578900][ T4305] bridge0: port 2(bridge_slave_1) entered forwarding state
[  182.639720][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  182.742268][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  182.777792][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  182.802814][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  182.831931][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  182.871305][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  182.891039][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  182.924724][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  182.952131][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  183.005213][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  183.088453][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  183.109495][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  183.161304][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  183.451931][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  183.464572][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  183.500287][ T5030] 8021q: adding VLAN 0 to HW filter on device batadv0
[  185.292479][ T5154] futex_wake_op: syz.1.243 tries to shift op by -1; fix this program
[  185.953798][ T5157] loop3: detected capacity change from 0 to 32768
[  185.960699][ T5157] =======================================================
[  185.960699][ T5157] WARNING: The mand mount option has been deprecated and
[  185.960699][ T5157]          and is ignored by this kernel. Remove the mand
[  185.960699][ T5157]          option from the mount to silence this warning.
[  185.960699][ T5157] =======================================================
[  186.074590][ T5157] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  186.250802][ T4955] Bluetooth: hci3: command 0x0406 tx timeout
[  186.257856][ T4955] Bluetooth: hci4: command 0x0406 tx timeout
[  186.300733][ T4955] Bluetooth: hci2: command 0x0406 tx timeout
[  186.327193][ T4955] Bluetooth: hci0: command 0x0406 tx timeout
[  186.334660][ T4955] Bluetooth: hci1: command 0x0406 tx timeout
[  186.343064][ T4166] ocfs2: Unmounting device (7,3) on (node local)
[  186.361340][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  186.371110][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  186.382092][ T4210] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  186.430406][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  186.448776][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  186.473961][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  186.511244][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  186.552605][ T5030] device veth0_vlan entered promiscuous mode
[  186.614117][ T5030] device veth1_vlan entered promiscuous mode
[  186.696683][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  186.721604][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  186.750668][ T4210] usb 2-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b
[  186.770008][ T4210] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.781982][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  186.807431][ T4210] usb 2-1: config 0 descriptor??
[  186.830915][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  186.872301][ T5030] device veth0_macvtap entered promiscuous mode
[  186.874393][ T4210] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input8
[  186.913137][ T5030] device veth1_macvtap entered promiscuous mode
[  187.043613][ T5030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  187.111055][ T5030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  187.122223][ T5167] loop3: detected capacity change from 0 to 512
[  187.144603][ T5030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  187.192708][ T5030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  187.222734][ T5167] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  187.232462][ T5167] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2
[  187.240701][ T5167] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.247: bad orphan inode 13
[  187.252914][ T5030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  187.252965][ T5167] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="data_err=ignore,noload,data_err=ignore,grpjquota="errors=continue,max_dir_size_kb=0x00000000000001ff,nobarrier,,errors=continue. Quota mode: writeback.
[  187.297457][ T5030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  187.374602][ T5030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  187.395475][ T5030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  187.413169][ T5030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  187.444683][ T5030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  187.498600][ T1109] usb 2-1: USB disconnect, device number 4
[  187.534714][ T5030] batman_adv: batadv0: Interface activated: batadv_slave_0
[  187.558324][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  187.569567][ T4292] udevd[4292]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory
[  187.605867][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  187.643956][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  187.697866][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  187.740082][ T5030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  187.776157][ T5030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  187.810893][ T5030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  187.842688][ T5030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  187.880282][ T5030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  187.910330][ T5030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  187.940714][ T5030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  187.980282][ T5030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  188.020271][ T5030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  188.078275][ T5030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  188.113690][ T5030] batman_adv: batadv0: Interface activated: batadv_slave_1
[  188.150558][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  188.190964][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  188.252098][ T5030] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  188.283407][ T5030] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  188.315449][ T5030] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  188.345090][ T5030] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  188.654220][ T4308] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  188.676550][ T4308] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  188.736786][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  188.759925][ T4308] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  188.777200][ T4308] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  188.811160][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  188.998328][ T5174] dccp_close: ABORT with 32 bytes unread
[  191.654702][ T5219] loop3: detected capacity change from 0 to 64
[  191.677495][ T5220] futex_wake_op: syz.2.259 tries to shift op by -1; fix this program
[  193.259832][ T4213] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  194.435502][ T4212] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  194.460963][ T1427] ieee802154 phy0 wpan0: encryption failed: -22
[  194.467295][ T1427] ieee802154 phy1 wpan1: encryption failed: -22
[  194.712475][ T5245] loop5: detected capacity change from 0 to 32768
[  194.765437][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  194.800655][ T4212] usb 4-1: config 0 has an invalid interface number: 156 but max is 1
[  194.808872][ T4212] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  194.818783][ T5247] loop2: detected capacity change from 0 to 4096
[  194.829118][ T5245] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  194.903141][ T4212] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  194.919376][ T5247] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512)
[  194.961971][ T4213] usb 3-1: device not accepting address 7, error -71
[  194.978811][ T4212] usb 4-1: config 0 has no interface number 0
[  195.024289][ T4212] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  195.085086][ T4212] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  195.147754][ T4212] usb 4-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  196.577416][ T5030] ocfs2: Unmounting device (7,5) on (node local)
[  196.650520][ T4212] usb 4-1: string descriptor 0 read error: -71
[  196.658183][ T4212] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[  196.718672][ T4212] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=21
[  196.891743][ T5261] loop1: detected capacity change from 0 to 512
[  196.922270][ T4212] usb 4-1: config 0 descriptor??
[  198.176525][ T5261] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities
[  198.393212][ T4212] usb 4-1: can't set config #0, error -71
[  198.400198][ T4212] usb 4-1: USB disconnect, device number 7
[  198.470089][  T155] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.460627][  T155] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.868728][  T155] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.705225][  T155] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.106191][ T5319] loop5: detected capacity change from 0 to 32768
[  202.232792][ T5319] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  202.458404][ T5319] syz.5.287 (5319) used greatest stack depth: 18592 bytes left
[  203.477887][ T5030] ocfs2: Unmounting device (7,5) on (node local)
[  207.348807][ T5369] loop1: detected capacity change from 0 to 1024
[  207.465775][ T5372] loop3: detected capacity change from 0 to 256
[  207.519236][ T5378] loop0: detected capacity change from 0 to 512
[  207.615801][ T5369] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option
[  207.626599][ T5378] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities
[  207.630616][ T5372] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  207.927514][ T5369] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,minixdf,nodiscard,errors=remount-ro,norecovery,bsdgroups,stripe=0x0000000000000005,noinit_itable,nomblk_io_submit,auto_da_alloc=0x0000000000000080,nogrpid,. Quota mode: none.
[  208.796072][   T26] audit: type=1804 audit(1729852169.148:3): pid=5369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.297" name="/newroot/73/file1/bus/file0" dev="loop1" ino=19 res=1 errno=0
[  210.060593][ T4955] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  210.490381][ T4955] usb 6-1: Using ep0 maxpacket: 32
[  210.740595][ T4955] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  210.776634][ T4955] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  210.837908][ T4955] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  210.887430][ T4955] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  210.905972][ T4955] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  210.944594][ T4955] usb 6-1: config 0 descriptor??
[  214.611041][ T4955] usbhid 6-1:0.0: can't add hid device: -71
[  214.618098][ T4955] usbhid: probe of 6-1:0.0 failed with error -71
[  214.682427][ T4955] usb 6-1: USB disconnect, device number 2
[  216.654900][ T5454] loop1: detected capacity change from 0 to 512
[  217.947563][ T5454] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  218.098034][ T5486] atomic_op ffff88807a72b998 conn xmit_atomic 0000000000000000
[  221.713724][ T5501] loop5: detected capacity change from 0 to 512
[  221.805910][ T5501] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities
[  225.004624][ T5528] loop2: detected capacity change from 0 to 256
[  225.238946][ T5528] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d)
[  225.530416][ T5538] atomic_op ffff88807800c998 conn xmit_atomic 0000000000000000
[  225.596975][ T5532] loop5: detected capacity change from 0 to 2048
[  226.014224][ T5540] netlink: 4 bytes leftover after parsing attributes in process `syz.1.334'.
[  226.593871][  T155] device hsr_slave_0 left promiscuous mode
[  226.992123][ T5532] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  227.024237][  T155] device hsr_slave_1 left promiscuous mode
[  227.116386][  T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  227.350738][  T155] batman_adv: batadv0: Removing interface: batadv_slave_0
[  227.380666][   T26] audit: type=1800 audit(1729852187.728:4): pid=5532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.332" name="bus" dev="loop5" ino=18 res=0 errno=0
[  227.411778][  T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  227.460126][  T155] batman_adv: batadv0: Removing interface: batadv_slave_1
[  227.564879][  T155] device bridge_slave_1 left promiscuous mode
[  227.663514][  T155] bridge0: port 2(bridge_slave_1) entered disabled state
[  227.953799][  T155] device bridge_slave_0 left promiscuous mode
[  228.280869][ T4168] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  228.347040][  T155] bridge0: port 1(bridge_slave_0) entered disabled state
[  228.640384][ T4168] usb 4-1: Using ep0 maxpacket: 32
[  228.699082][ T5570] loop0: detected capacity change from 0 to 512
[  228.759677][  T155] device veth1_macvtap left promiscuous mode
[  228.767916][  T155] device veth0_macvtap left promiscuous mode
[  228.775234][  T155] device veth1_vlan left promiscuous mode
[  228.781372][  T155] device veth0_vlan left promiscuous mode
[  228.935862][ T4168] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  228.956958][ T5570] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities
[  228.960289][ T4168] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  228.984692][ T4168] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  229.600004][ T4168] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  229.620954][ T4168] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  229.650576][ T4168] usb 4-1: config 0 descriptor??
[  229.760500][ T4168] usb 4-1: can't set config #0, error -71
[  229.767608][ T4168] usb 4-1: USB disconnect, device number 8
[  230.677853][ T5580] loop1: detected capacity change from 0 to 32768
[  231.747913][  T155] team0 (unregistering): Port device team_slave_1 removed
[  231.796982][  T155] team0 (unregistering): Port device team_slave_0 removed
[  231.829793][  T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  231.871506][  T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  232.111732][  T155] bond0 (unregistering): Released all slaves
[  234.473951][ T5630] loop1: detected capacity change from 0 to 512
[  234.555547][ T5630] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities
[  234.806293][    T7] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  238.231606][ T5677] dccp_invalid_packet: P.type (RESET) not Data || [Data]Ack, while P.X == 0
[  238.611638][ T5675] loop1: detected capacity change from 0 to 4096
[  238.614335][ T5690] loop2: detected capacity change from 0 to 64
[  238.871033][ T5675] ntfs3: Unknown parameter 'hide_dot_files'
[  238.968016][ T5699] netlink: 4 bytes leftover after parsing attributes in process `syz.3.373'.
[  240.039167][ T5715] loop1: detected capacity change from 0 to 512
[  241.007269][ T5725] futex_wake_op: syz.2.375 tries to shift op by -1; fix this program
[  241.190683][ T5715] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities
[  241.229043][ T5728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.379'.
[  241.310504][    T7] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  244.820391][    T7] usb 3-1: device not accepting address 10, error -71
[  244.880340][ T4209] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  245.130445][ T4209] usb 6-1: Using ep0 maxpacket: 32
[  245.260516][ T4209] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  245.396842][ T4209] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  245.407123][ T4209] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  245.421026][ T4209] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  245.430106][ T4209] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  245.491312][ T4209] usb 6-1: config 0 descriptor??
[  245.530527][ T4209] usb 6-1: can't set config #0, error -71
[  245.544425][ T4209] usb 6-1: USB disconnect, device number 3
[  245.575419][ T5761] loop3: detected capacity change from 0 to 256
[  246.301394][ T5778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.387'.
[  248.436386][ T5793] loop5: detected capacity change from 0 to 512
[  248.854042][ T5793] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities
[  248.858333][ T5800] futex_wake_op: syz.3.393 tries to shift op by -1; fix this program
[  249.871670][ T1106] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  250.318050][ T5812] loop2: detected capacity change from 0 to 1024
[  250.380622][ T1106] usb 4-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b
[  250.648244][ T1106] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  250.703485][ T1106] usb 4-1: config 0 descriptor??
[  250.753884][ T1106] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input9
[  250.775404][ T5824] netlink: 32 bytes leftover after parsing attributes in process `syz.0.399'.
[  250.890369][ T1109] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  250.954670][ T1106] usb 4-1: USB disconnect, device number 10
[  251.168130][ T5146] hfsplus: b-tree write err: -5, ino 4
[  251.190369][ T1109] usb 6-1: Using ep0 maxpacket: 32
[  251.237446][ T5834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.400'.
[  251.970743][ T1109] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  251.990269][ T1109] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  252.000165][ T1109] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  252.014297][ T1109] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  252.169223][ T1109] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.179699][ T1109] usb 6-1: config 0 descriptor??
[  253.881951][ T5857] overlayfs: failed to resolve './file1': -2
[  254.533664][ T5863] loop3: detected capacity change from 0 to 512
[  254.600446][ T1109] usbhid 6-1:0.0: can't add hid device: -71
[  254.606495][ T1109] usbhid: probe of 6-1:0.0 failed with error -71
[  254.621760][ T1109] usb 6-1: USB disconnect, device number 4
[  255.003032][ T5863] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities
[  256.077040][ T5891] netlink: 4 bytes leftover after parsing attributes in process `syz.1.412'.
[  256.424121][ T1427] ieee802154 phy0 wpan0: encryption failed: -22
[  256.430494][ T1427] ieee802154 phy1 wpan1: encryption failed: -22
[  256.590551][ T4247] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  257.097876][ T5904] futex_wake_op: syz.1.416 tries to shift op by -1; fix this program
[  257.957670][ T4247] usb 3-1: unable to read config index 0 descriptor/all
[  258.171183][    T7] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  258.694148][ T4247] usb 3-1: can't read configurations, error -71
[  259.841173][ T5927] loop2: detected capacity change from 0 to 256
[  259.880467][    T7] usb 2-1: device descriptor read/all, error -71
[  259.977122][ T5927] FAT-fs (loop2): Directory bread(block 64) failed
[  259.990421][ T5927] FAT-fs (loop2): Directory bread(block 65) failed
[  260.012157][ T5927] FAT-fs (loop2): Directory bread(block 66) failed
[  260.061122][ T5934] atomic_op ffff88801a584998 conn xmit_atomic 0000000000000000
[  260.118204][ T5927] FAT-fs (loop2): Directory bread(block 67) failed
[  260.210635][ T5927] FAT-fs (loop2): Directory bread(block 68) failed
[  260.308093][ T5927] FAT-fs (loop2): Directory bread(block 69) failed
[  260.415669][ T5927] FAT-fs (loop2): Directory bread(block 70) failed
[  260.488384][ T5927] FAT-fs (loop2): Directory bread(block 71) failed
[  260.849539][ T5927] FAT-fs (loop2): Directory bread(block 72) failed
[  260.930375][ T5927] FAT-fs (loop2): Directory bread(block 73) failed
[  260.939932][ T5940] loop1: detected capacity change from 0 to 512
[  261.031176][ T1109] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  261.147052][ T5945] netlink: 4 bytes leftover after parsing attributes in process `syz.3.425'.
[  261.293077][ T5940] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities
[  261.351164][ T1109] usb 6-1: Using ep0 maxpacket: 32
[  261.595143][ T1109] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  261.774071][ T1109] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  261.814926][ T1109] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  261.918963][ T1109] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  261.976290][ T1109] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  262.220016][ T1109] usb 6-1: config 0 descriptor??
[  264.020556][ T1109] usbhid 6-1:0.0: can't add hid device: -71
[  264.028211][ T1109] usbhid: probe of 6-1:0.0 failed with error -71
[  264.161961][ T1109] usb 6-1: USB disconnect, device number 5
[  264.638717][ T5983] futex_wake_op: syz.2.433 tries to shift op by -1; fix this program
[  264.700450][   T13] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  264.930340][ T4768] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  265.600810][ T6004] netlink: 4 bytes leftover after parsing attributes in process `syz.0.437'.
[  266.210538][   T13] usb 4-1: unable to read config index 0 descriptor/all
[  266.235655][   T13] usb 4-1: can't read configurations, error -71
[  266.240725][ T4768] usb 3-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b
[  266.265274][ T4768] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  266.327996][ T4768] usb 3-1: config 0 descriptor??
[  266.413535][ T4768] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input10
[  266.575196][ T6018] loop3: detected capacity change from 0 to 1764
[  266.582357][ T6016] loop0: detected capacity change from 0 to 32768
[  266.620542][ T4768] usb 3-1: USB disconnect, device number 14
[  266.650666][ T6016] (syz.0.442,6016,0):ocfs2_initialize_super:2155 ERROR: couldn't mount RDWR because of unsupported optional features (10).
[  266.663714][ T6016] (syz.0.442,6016,0):ocfs2_fill_super:1177 ERROR: status = -22
[  269.060393][ T6055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.449'.
[  271.764236][ T6087] futex_wake_op: syz.5.456 tries to shift op by -1; fix this program
[  272.123188][    T7] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  272.350987][ T6104] loop1: detected capacity change from 0 to 2048
[  272.674031][    T7] usb 6-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b
[  272.687476][ T6109] netlink: 4 bytes leftover after parsing attributes in process `syz.3.461'.
[  272.991088][    T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  273.129872][    T7] usb 6-1: config 0 descriptor??
[  273.313943][    T7] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input11
[  273.334802][ T6104] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  273.350395][ T6104] ext4 filesystem being mounted at /103/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  273.550381][ T1109] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  273.627265][   T13] usb 6-1: USB disconnect, device number 6
[  273.674071][ T6118] loop2: detected capacity change from 0 to 2048
[  273.746157][ T6104] overlayfs: failed to set xattr on upper
[  273.752303][ T6104] overlayfs: ...falling back to index=off,metacopy=off.
[  273.774422][ T6118] EXT4-fs (loop2): Ignoring removed bh option
[  273.784361][ T6104] fs-verity: sha512 using implementation "sha512-avx2"
[  273.820828][ T6104] fs-verity (loop1, inode 13): ext4_end_enable_verity() failed with err -28
[  273.829567][ T6118] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,bh,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none.
[  273.854924][ T4165] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /103/bus: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0
[  273.908102][ T6118] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  273.932268][ T6118] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28
[  273.949348][ T6118] EXT4-fs (loop2): This should not happen!! Data will be lost
[  273.949348][ T6118] 
[  273.959234][ T6118] EXT4-fs (loop2): Total free blocks count 0
[  273.962895][ T4165] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #16: comm syz-executor: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0)
[  273.973883][ T6118] EXT4-fs (loop2): Free/Dirty block details
[  273.984731][ T1109] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  274.000548][ T4165] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #16: comm syz-executor: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0)
[  274.001181][ T1109] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  274.025460][ T6118] EXT4-fs (loop2): free_blocks=2415919104
[  274.028814][ T1109] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  274.043677][ T1109] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  274.045415][ T6118] EXT4-fs (loop2): dirty_blocks=32
[  274.068415][ T6118] EXT4-fs (loop2): Block reservation details
[  274.074852][ T6118] EXT4-fs (loop2): i_reserved_data_blocks=2
[  274.075067][ T6112] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  274.223939][ T4165] bridge0: port 3(syz_tun) entered disabled state
[  274.515200][ T6127] overlayfs: failed to resolve './file0': -2
[  275.068144][ T4165] device syz_tun left promiscuous mode
[  275.079657][ T4165] bridge0: port 3(syz_tun) entered disabled state
[  275.650225][    C1] hrtimer: interrupt took 54805 ns
[  275.708621][  T155] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.931094][  T155] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  276.099660][  T155] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  276.325157][  T155] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  276.546221][    T7] usb 1-1: USB disconnect, device number 6
[  277.468331][ T6174] loop3: detected capacity change from 0 to 512
[  277.638199][ T6178] futex_wake_op: syz.0.477 tries to shift op by -1; fix this program
[  277.743997][ T6174] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities
[  279.341089][ T1106] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  279.414275][ T6175] chnl_net:caif_netlink_parms(): no params data found
[  279.610433][ T4955] Bluetooth: hci1: command 0x0409 tx timeout
[  279.695077][ T6175] bridge0: port 1(bridge_slave_0) entered blocking state
[  279.710464][ T1106] usb 1-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b
[  279.724618][ T1106] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  279.736777][ T6175] bridge0: port 1(bridge_slave_0) entered disabled state
[  279.746861][ T1106] usb 1-1: config 0 descriptor??
[  279.787438][ T6175] device bridge_slave_0 entered promiscuous mode
[  279.793846][ T1106] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input12
[  279.881986][ T6175] bridge0: port 2(bridge_slave_1) entered blocking state
[  279.891426][ T6175] bridge0: port 2(bridge_slave_1) entered disabled state
[  279.908518][ T6175] device bridge_slave_1 entered promiscuous mode
[  280.022161][ T4955] usb 1-1: USB disconnect, device number 7
[  280.061410][ T6175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  280.083920][ T6175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  280.289738][ T6175] team0: Port device team_slave_0 added
[  280.386525][ T6175] team0: Port device team_slave_1 added
[  280.572194][ T6175] batman_adv: batadv0: Adding interface: batadv_slave_0
[  280.604220][ T6175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  280.761600][ T6221] loop0: detected capacity change from 0 to 512
[  280.783772][ T6175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  280.849080][  T155] device hsr_slave_0 left promiscuous mode
[  280.856852][  T155] device hsr_slave_1 left promiscuous mode
[  280.891626][  T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  280.911627][ T6221] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,,errors=continue. Quota mode: writeback.
[  280.913867][  T155] batman_adv: batadv0: Removing interface: batadv_slave_0
[  280.940658][ T6221] ext4 filesystem being mounted at /89/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  280.999316][  T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  281.028039][  T155] batman_adv: batadv0: Removing interface: batadv_slave_1
[  281.084409][  T155] device bridge_slave_1 left promiscuous mode
[  281.144904][  T155] bridge0: port 2(bridge_slave_1) entered disabled state
[  281.204966][  T155] device bridge_slave_0 left promiscuous mode
[  281.266378][  T155] bridge0: port 1(bridge_slave_0) entered disabled state
[  281.384068][  T155] device veth1_macvtap left promiscuous mode
[  281.397314][  T155] device veth0_macvtap left promiscuous mode
[  281.442313][  T155] device veth1_vlan left promiscuous mode
[  281.530666][  T155] device veth0_vlan left promiscuous mode
[  281.690400][ T4168] Bluetooth: hci1: command 0x041b tx timeout
[  281.761536][ T4768] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  282.141471][ T6244] loop5: detected capacity change from 0 to 2048
[  282.280600][ T4768] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  282.395094][ T4768] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  282.661059][ T4768] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  282.822508][ T6249] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  282.839908][ T4768] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  282.988619][  T155] team0 (unregistering): Port device team_slave_1 removed
[  283.040734][ T6241] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  283.152728][  T155] team0 (unregistering): Port device team_slave_0 removed
[  283.202643][  T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  283.252520][  T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  283.259310][ T6244] syz.5.485 (6244) used greatest stack depth: 18400 bytes left
[  283.401896][  T155] bond0 (unregistering): Released all slaves
[  283.528782][ T6175] batman_adv: batadv0: Adding interface: batadv_slave_1
[  283.546418][ T6175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  283.581529][ T6175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  283.771064][ T4955] Bluetooth: hci1: command 0x040f tx timeout
[  283.973925][ T6175] device hsr_slave_0 entered promiscuous mode
[  283.995695][ T6175] device hsr_slave_1 entered promiscuous mode
[  284.404747][ T4211] usb 1-1: USB disconnect, device number 8
[  284.537944][ T6175] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  284.632598][ T6175] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  284.690784][ T6175] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  284.859091][ T6175] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  285.492315][ T6288] loop0: detected capacity change from 0 to 64
[  285.850329][ T4247] Bluetooth: hci1: command 0x0419 tx timeout
[  285.937686][ T6175] 8021q: adding VLAN 0 to HW filter on device bond0
[  286.221357][ T6175] 8021q: adding VLAN 0 to HW filter on device team0
[  286.255614][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  286.276715][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  286.331882][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  286.349064][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  286.376193][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[  286.383360][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[  286.420726][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  286.446615][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  286.477741][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[  286.484919][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[  286.547908][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  286.576037][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  286.605874][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  286.644570][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  286.671653][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  286.693298][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  286.714569][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  286.744057][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  286.769408][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  286.793333][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  286.813471][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  286.903646][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  286.968483][ T6175] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  287.566849][ T4971] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  287.587560][ T4971] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  287.607248][ T6175] 8021q: adding VLAN 0 to HW filter on device batadv0
[  287.706939][ T6332] loop2: detected capacity change from 0 to 4096
[  288.362049][ T6346] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  289.723780][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  289.764324][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  289.989616][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  290.030518][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  290.058091][ T6175] device veth0_vlan entered promiscuous mode
[  290.069202][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  290.097450][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  290.156227][ T6175] device veth1_vlan entered promiscuous mode
[  290.346748][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  290.374634][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  290.406653][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  290.463814][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  290.547063][ T6175] device veth0_macvtap entered promiscuous mode
[  290.637591][ T6175] device veth1_macvtap entered promiscuous mode
[  290.731657][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  290.747623][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  291.046858][ T6175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  291.079004][ T6175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.091590][ T6175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  291.107292][ T6175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.122305][ T6175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  291.139927][ T6175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.166199][ T6175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  291.187081][ T6175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.228363][ T6175] batman_adv: batadv0: Interface activated: batadv_slave_0
[  291.292504][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  291.315754][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  291.362093][ T6175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  291.387702][ T6175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.446316][ T6175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  291.647418][ T6175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.671502][ T6175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  293.369995][ T6175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.413460][ T6175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  293.439951][ T6175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.472396][ T6175] batman_adv: batadv0: Interface activated: batadv_slave_1
[  293.610852][ T4971] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  293.709209][ T4971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  293.813021][ T6175] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  293.945624][ T6175] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  293.957770][ T6175] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  293.989256][ T6175] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  295.506134][ T4305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  295.560214][ T6435] loop2: detected capacity change from 0 to 32768
[  295.629427][ T4305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  295.656383][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  295.879462][ T6435] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  295.938063][ T4164] ocfs2: Unmounting device (7,2) on (node local)
[  296.038941][ T4248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  296.069804][ T4248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  296.158200][ T4971] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  297.452782][ T6471] loop5: detected capacity change from 0 to 128
[  297.562407][ T6474] loop3: detected capacity change from 0 to 64
[  297.655290][ T6471] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  297.768232][ T6471] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  298.730414][ T4247] Bluetooth: hci5: command 0x0406 tx timeout
[  301.099559][ T6529] loop0: detected capacity change from 0 to 128
[  301.269755][ T6529] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  301.390989][ T6529] ext4 filesystem being mounted at /99/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  301.422940][    C0] vkms_vblank_simulate: vblank timer overrun
[  302.660501][ T4768] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  303.080400][ T4768] usb 7-1: config 0 has an invalid interface number: 156 but max is 1
[  303.095322][ T4768] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  303.168180][ T4768] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2
[  303.225123][ T4768] usb 7-1: config 0 has no interface number 0
[  303.270087][ T4768] usb 7-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  303.335070][ T4768] usb 7-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  303.385524][ T4768] usb 7-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  303.560742][ T4768] usb 7-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[  303.891196][ T4768] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=21
[  303.906910][ T4768] usb 7-1: SerialNumber: syz
[  303.928020][ T4768] usb 7-1: config 0 descriptor??
[  304.297306][ T4768] gspca_main: spca561-2.14.0 probing abcd:cdee
[  304.693538][ T6610] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  304.799229][ T6613] loop5: detected capacity change from 0 to 128
[  304.880381][ T4768] spca561: probe of 7-1:0.156 failed with error -22
[  304.889041][ T4768] usb 7-1: MIDIStreaming interface descriptor not found
[  304.926622][ T6613] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_dev=0x0000000000000000,nouid32,,errors=continue. Quota mode: none.
[  305.030594][ T6613] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  305.606223][ T6628] loop2: detected capacity change from 0 to 32768
[  305.628879][ T4209] usb 7-1: USB disconnect, device number 2
[  305.788628][ T6628] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  305.817234][ T6628] 
[  305.819602][ T6628] ======================================================
[  305.826625][ T6628] WARNING: possible circular locking dependency detected
[  305.833658][ T6628] 5.15.169-syzkaller #0 Not tainted
[  305.838861][ T6628] ------------------------------------------------------
[  305.845883][ T6628] syz.2.568/6628 is trying to acquire lock:
[  305.851786][ T6628] ffff888061ad8660 (&oi->ip_alloc_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xb2/0x330
[  305.862529][ T6628] 
[  305.862529][ T6628] but task is already holding lock:
[  305.869899][ T6628] ffff888061ad86f8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa1/0x330
[  305.880559][ T6628] 
[  305.880559][ T6628] which lock already depends on the new lock.
[  305.880559][ T6628] 
[  305.890978][ T6628] 
[  305.890978][ T6628] the existing dependency chain (in reverse order) is:
[  305.900019][ T6628] 
[  305.900019][ T6628] -> #4 (&oi->ip_xattr_sem){++++}-{3:3}:
[  305.907876][ T6628]        lock_acquire+0x1db/0x4f0
[  305.912928][ T6628]        down_read+0x45/0x2e0
[  305.917634][ T6628]        ocfs2_init_acl+0x398/0x930
[  305.922863][ T6628]        ocfs2_mknod+0x1e8f/0x2cd0
[  305.928087][ T6628]        ocfs2_mkdir+0x194/0x430
[  305.933048][ T6628]        vfs_mkdir+0x3b6/0x590
[  305.937834][ T6628]        do_mkdirat+0x260/0x520
[  305.942702][ T6628]        __x64_sys_mkdir+0x6a/0x80
[  305.947831][ T6628]        do_syscall_64+0x3b/0xb0
[  305.952871][ T6628]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  305.959304][ T6628] 
[  305.959304][ T6628] -> #3 (jbd2_handle){++++}-{0:0}:
[  305.966625][ T6628]        lock_acquire+0x1db/0x4f0
[  305.971668][ T6628]        start_this_handle+0x12e1/0x1570
[  305.977323][ T6628]        jbd2__journal_start+0x2d1/0x5c0
[  305.982983][ T6628]        jbd2_journal_start+0x25/0x30
[  305.988383][ T6628]        ocfs2_start_trans+0x3c2/0x6f0
[  305.993853][ T6628]        ocfs2_shutdown_local_alloc+0x214/0xa90
[  306.000113][ T6628]        ocfs2_dismount_volume+0x1db/0x8b0
[  306.005939][ T6628]        generic_shutdown_super+0x130/0x310
[  306.011853][ T6628]        kill_block_super+0x7a/0xe0
[  306.017066][ T6628]        deactivate_locked_super+0xa0/0x110
[  306.022977][ T6628]        cleanup_mnt+0x44e/0x500
[  306.027936][ T6628]        task_work_run+0x129/0x1a0
[  306.033063][ T6628]        exit_to_user_mode_loop+0x106/0x130
[  306.038972][ T6628]        exit_to_user_mode_prepare+0xb1/0x140
[  306.045058][ T6628]        syscall_exit_to_user_mode+0x5d/0x240
[  306.051143][ T6628]        do_syscall_64+0x47/0xb0
[  306.056098][ T6628]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  306.062534][ T6628] 
[  306.062534][ T6628] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}:
[  306.071072][ T6628]        lock_acquire+0x1db/0x4f0
[  306.076111][ T6628]        down_read+0x45/0x2e0
[  306.080800][ T6628]        ocfs2_start_trans+0x3b7/0x6f0
[  306.086278][ T6628]        ocfs2_shutdown_local_alloc+0x214/0xa90
[  306.092631][ T6628]        ocfs2_dismount_volume+0x1db/0x8b0
[  306.098461][ T6628]        generic_shutdown_super+0x130/0x310
[  306.104372][ T6628]        kill_block_super+0x7a/0xe0
[  306.109583][ T6628]        deactivate_locked_super+0xa0/0x110
[  306.115498][ T6628]        cleanup_mnt+0x44e/0x500
[  306.120451][ T6628]        task_work_run+0x129/0x1a0
[  306.125583][ T6628]        exit_to_user_mode_loop+0x106/0x130
[  306.131492][ T6628]        exit_to_user_mode_prepare+0xb1/0x140
[  306.137582][ T6628]        syscall_exit_to_user_mode+0x5d/0x240
[  306.143666][ T6628]        do_syscall_64+0x47/0xb0
[  306.148617][ T6628]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  306.155051][ T6628] 
[  306.155051][ T6628] -> #1 (sb_internal#2){.+.+}-{0:0}:
[  306.162545][ T6628]        lock_acquire+0x1db/0x4f0
[  306.167587][ T6628]        ocfs2_start_trans+0x2b2/0x6f0
[  306.173060][ T6628]        ocfs2_write_begin_nolock+0x2242/0x4d20
[  306.179325][ T6628]        ocfs2_write_begin+0x1fd/0x390
[  306.184817][ T6628]        generic_perform_write+0x2bf/0x5b0
[  306.190650][ T6628]        __generic_file_write_iter+0x243/0x4f0
[  306.196829][ T6628]        ocfs2_file_write_iter+0x17d5/0x1fa0
[  306.202834][ T6628]        vfs_write+0xacd/0xe50
[  306.207624][ T6628]        ksys_write+0x1a2/0x2c0
[  306.212499][ T6628]        do_syscall_64+0x3b/0xb0
[  306.217458][ T6628]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  306.223898][ T6628] 
[  306.223898][ T6628] -> #0 (&oi->ip_alloc_sem){++++}-{3:3}:
[  306.231748][ T6628]        validate_chain+0x1649/0x5930
[  306.237149][ T6628]        __lock_acquire+0x1295/0x1ff0
[  306.242544][ T6628]        lock_acquire+0x1db/0x4f0
[  306.247588][ T6628]        down_write+0x38/0x60
[  306.248111][ T4290] udevd[4290]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  306.252277][ T6628]        ocfs2_try_remove_refcount_tree+0xb2/0x330
[  306.252304][ T6628]        ocfs2_truncate_file+0xe3c/0x14f0
[  306.252325][ T6628]        ocfs2_setattr+0x165e/0x1c70
[  306.252345][ T6628]        notify_change+0xc6d/0xf50
[  306.252364][ T6628]        do_truncate+0x21c/0x300
[  306.252380][ T6628]        path_openat+0x28a3/0x2f20
[  306.252397][ T6628]        do_filp_open+0x21c/0x460
[  306.252412][ T6628]        do_sys_openat2+0x13b/0x4f0
[  306.252430][ T6628]        __x64_sys_openat+0x243/0x290
[  306.252448][ T6628]        do_syscall_64+0x3b/0xb0
[  306.252466][ T6628]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  306.252490][ T6628] 
[  306.252490][ T6628] other info that might help us debug this:
[  306.252490][ T6628] 
[  306.252498][ T6628] Chain exists of:
[  306.252498][ T6628]   &oi->ip_alloc_sem --> jbd2_handle --> &oi->ip_xattr_sem
[  306.252498][ T6628] 
[  306.252537][ T6628]  Possible unsafe locking scenario:
[  306.252537][ T6628] 
[  306.252542][ T6628]        CPU0                    CPU1
[  306.252547][ T6628]        ----                    ----
[  306.252552][ T6628]   lock(&oi->ip_xattr_sem);
[  306.252566][ T6628]                                lock(jbd2_handle);
[  306.252580][ T6628]                                lock(&oi->ip_xattr_sem);
[  306.252596][ T6628]   lock(&oi->ip_alloc_sem);
[  306.252608][ T6628] 
[  306.252608][ T6628]  *** DEADLOCK ***
[  306.252608][ T6628] 
[  306.252613][ T6628] 3 locks held by syz.2.568/6628:
[  306.252625][ T6628]  #0: ffff88807aa5a460 (sb_writers#17){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80
[  306.252683][ T6628]  #1: ffff888061ad89c8 (&sb->s_type->i_mutex_key#23){+.+.}-{3:3}, at: do_truncate+0x208/0x300
[  306.425349][ T6628]  #2: ffff888061ad86f8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa1/0x330
[  306.436441][ T6628] 
[  306.436441][ T6628] stack backtrace:
[  306.442340][ T6628] CPU: 0 PID: 6628 Comm: syz.2.568 Not tainted 5.15.169-syzkaller #0
[  306.450425][ T6628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  306.460520][ T6628] Call Trace:
[  306.463826][ T6628]  <TASK>
[  306.466772][ T6628]  dump_stack_lvl+0x1e3/0x2d0
[  306.471472][ T6628]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  306.477131][ T6628]  ? print_circular_bug+0x12b/0x1a0
[  306.482362][ T6628]  check_noncircular+0x2f8/0x3b0
[  306.487332][ T6628]  ? add_chain_block+0x850/0x850
[  306.492297][ T6628]  ? lockdep_lock+0x11f/0x2a0
[  306.497004][ T6628]  validate_chain+0x1649/0x5930
[  306.501890][ T6628]  ? stack_trace_save+0x113/0x1c0
[  306.506938][ T6628]  ? reacquire_held_locks+0x660/0x660
[  306.512343][ T6628]  ? stack_trace_snprint+0xe0/0xe0
[  306.517487][ T6628]  ? lockdep_unlock+0x166/0x300
[  306.522367][ T6628]  ? mark_lock+0x98/0x340
[  306.526721][ T6628]  __lock_acquire+0x1295/0x1ff0
[  306.531602][ T6628]  lock_acquire+0x1db/0x4f0
[  306.536127][ T6628]  ? ocfs2_try_remove_refcount_tree+0xb2/0x330
[  306.542312][ T6628]  ? read_lock_is_recursive+0x10/0x10
[  306.547709][ T6628]  ? __might_sleep+0xc0/0xc0
[  306.552322][ T6628]  ? rwsem_write_trylock+0x166/0x210
[  306.557636][ T6628]  ? clear_nonspinnable+0x60/0x60
[  306.562691][ T6628]  down_write+0x38/0x60
[  306.566870][ T6628]  ? ocfs2_try_remove_refcount_tree+0xb2/0x330
[  306.573046][ T6628]  ocfs2_try_remove_refcount_tree+0xb2/0x330
[  306.579053][ T6628]  ? ocfs2_remove_refcount_tree+0x1000/0x1000
[  306.585148][ T6628]  ? ocfs2_truncate_file+0xa07/0x14f0
[  306.590552][ T6628]  ocfs2_truncate_file+0xe3c/0x14f0
[  306.595785][ T6628]  ? ocfs2_inode_lock_tracker+0x455/0x750
[  306.601531][ T6628]  ? ocfs2_simple_size_update+0x4d0/0x4d0
[  306.607271][ T6628]  ? do_raw_spin_unlock+0x137/0x8b0
[  306.612498][ T6628]  ? memset+0x1f/0x40
[  306.616509][ T6628]  ? _raw_spin_unlock+0x24/0x40
[  306.621383][ T6628]  ? ocfs2_inode_lock_tracker+0x455/0x750
[  306.627132][ T6628]  ? ocfs2_inode_lock_atime+0x5a0/0x5a0
[  306.632699][ T6628]  ? ocfs2_rw_lock+0x13a/0x250
[  306.637491][ T6628]  ? ocfs2_create_new_inode_locks+0x6d0/0x6d0
[  306.643582][ T6628]  ? jbd2_journal_begin_ordered_truncate+0xbc/0x150
[  306.650194][ T6628]  ocfs2_setattr+0x165e/0x1c70
[  306.654989][ T6628]  ? ocfs2_extend_allocation+0x1ba0/0x1ba0
[  306.660828][ T6628]  ? seqcount_lockdep_reader_access+0x1d3/0x220
[  306.667106][ T6628]  ? ktime_get_coarse_real_ts64+0x107/0x120
[  306.673029][ T6628]  ? current_time+0x1ba/0x300
[  306.677729][ T6628]  ? atime_needs_update+0x7b0/0x7b0
[  306.682955][ T6628]  ? evm_inode_setattr+0xf7/0x5b0
[  306.688006][ T6628]  ? rwsem_write_trylock+0x166/0x210
[  306.693326][ T6628]  ? bpf_lsm_inode_setattr+0x5/0x10
[  306.698549][ T6628]  ? security_inode_setattr+0xce/0x120
[  306.704045][ T6628]  ? ocfs2_extend_allocation+0x1ba0/0x1ba0
[  306.709880][ T6628]  notify_change+0xc6d/0xf50
[  306.714502][ T6628]  do_truncate+0x21c/0x300
[  306.718960][ T6628]  ? rcu_lock_release+0x20/0x20
[  306.723830][ T6628]  ? ima_bprm_check+0x2b0/0x2b0
[  306.728708][ T6628]  ? bpf_lsm_path_truncate+0x5/0x10
[  306.733933][ T6628]  path_openat+0x28a3/0x2f20
[  306.738556][ T6628]  ? do_filp_open+0x460/0x460
[  306.743262][ T6628]  do_filp_open+0x21c/0x460
[  306.747786][ T6628]  ? vfs_tmpfile+0x2e0/0x2e0
[  306.752406][ T6628]  ? _raw_spin_unlock+0x24/0x40
[  306.757279][ T6628]  ? alloc_fd+0x598/0x630
[  306.761637][ T6628]  do_sys_openat2+0x13b/0x4f0
[  306.766335][ T6628]  ? do_sys_open+0x220/0x220
[  306.770948][ T6628]  __x64_sys_openat+0x243/0x290
[  306.775818][ T6628]  ? __ia32_sys_open+0x270/0x270
[  306.780776][ T6628]  ? syscall_enter_from_user_mode+0x2e/0x240
[  306.786776][ T6628]  ? lockdep_hardirqs_on+0x94/0x130
[  306.791993][ T6628]  ? syscall_enter_from_user_mode+0x2e/0x240
[  306.798002][ T6628]  do_syscall_64+0x3b/0xb0
[  306.802443][ T6628]  ? clear_bhb_loop+0x15/0x70
[  306.807144][ T6628]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  306.813060][ T6628] RIP: 0033:0x7f07ab2ed719
[  306.817486][ T6628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  306.837117][ T6628] RSP: 002b:00007f07a9765038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  306.845553][ T6628] RAX: ffffffffffffffda RBX: 00007f07ab4a4f80 RCX: 00007f07ab2ed719
[  306.853551][ T6628] RDX: 0000000000007a05 RSI: 0000000020000340 RDI: ffffffffffffff9c
[  306.861544][ T6628] RBP: 00007f07ab3602be R08: 0000000000000000 R09: 0000000000000000
[  306.869536][ T6628] R10: 0000000000001700 R11: 0000000000000246 R12: 0000000000000000
[  306.877526][ T6628] R13: 0000000000000000 R14: 00007f07ab4a4f80 R15: 00007fff70185888
[  306.885527][ T6628]  </TASK>
[  307.437893][ T4164] ocfs2: Unmounting device (7,2) on (node local)