last executing test programs:

15.662943346s ago: executing program 4 (id=14):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
getpid()
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, 0x0, 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400})
unlink(&(0x7f0000000000)='./file0\x00')
socket(0x0, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_INTERRUPT(r3, 0xc048aeca, &(0x7f0000000040)=0x2)
syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000980e5b4035120e00eef0000000010902120001000000000904"], 0x0)

11.407309095s ago: executing program 4 (id=21):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6erspan0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="a8000000480000022bbd7000ffdbdf250a001f00", @ANYRES32=r1, @ANYBLOB="82eb927314000100fc0100000000000000000000000000001400010000000000000000000000ffffac14142c080002000000000014000100ff020000000000000000000000000001080002000300000008000200240c418b080002000000000014000100200100000000000000000000000000001400010000000000000000002000fdffac1414bb0800020004000000"], 0xa8}}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x0, 0x8}, 0x48)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
r4 = socket(0x10, 0x0, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000b40)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(r6, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="050800000000000000000e00000008000300", @ANYRES32=r7], 0x1c}}, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/544]}, 0x298)
r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x4d, 0x4, 0x5, 0x832, 0xffffffffffffffff, 0x631a, '\x00', 0x0, r8, 0x5, 0x0, 0x1}, 0x48)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r9, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10)

10.590516582s ago: executing program 4 (id=26):
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}], 0x18}}], 0x1, 0x0)
ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, 0x0)
sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket$alg(0x26, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x0, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)}, 0x90)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x13, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="00001c0000000000b702000000000000850000002a000000bf91000000000000b702000000000000850000008402000000000000006e0000950000005500000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
inotify_init1(0x0)
r2 = socket$inet(0x2, 0x2, 0x0)
socket$igmp(0x2, 0x3, 0x2)
setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@rand_addr=0x64010101, @loopback}, 0xc)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140))
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x1}]})

8.604226225s ago: executing program 4 (id=34):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f00000007c0), 0x10, 0x4d2, &(0x7f0000000800)="$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")
creat(&(0x7f0000000100)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
mount$bind(&(0x7f00000001c0)='.\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x905891, 0x0)
mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x212f4d1, 0x0)
mount$9p_xen(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x24000, 0x0)

8.451439327s ago: executing program 1 (id=36):
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x10}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @multicast1}}]}, {0x49}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0)

8.428918599s ago: executing program 1 (id=37):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ftruncate(0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000))
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8}, {0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x100}], 0xff})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000000100000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400126a"], 0x34}}, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)=0x9, 0x4)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x0, 0x0)
syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000500), &(0x7f0000000140))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x4c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_IE={0xd, 0x2a, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x3d, 0x60}}]}]}, 0x4c}}, 0x0)

8.094382016s ago: executing program 4 (id=38):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6erspan0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="a8000000480000022bbd7000ffdbdf250a001f00", @ANYRES32=r1, @ANYBLOB="82eb927314000100fc0100000000000000000000000000001400010000000000000000000000ffffac14142c080002000000000014000100ff020000000000000000000000000001080002000300000008000200240c418b080002000000000014000100200100000000000000000000000000001400010000000000000000002000fdffac1414bb0800020004000000"], 0xa8}}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x0, 0x8}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
r4 = socket(0x10, 0x0, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000b40)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(r6, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="050800000000000000000e00000008000300", @ANYRES32=r7], 0x1c}}, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/544]}, 0x298)
r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x4d, 0x4, 0x5, 0x832, 0xffffffffffffffff, 0x631a, '\x00', 0x0, r8, 0x5, 0x0, 0x1}, 0x48)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r9, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10)

5.042645606s ago: executing program 2 (id=42):
syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x4006, &(0x7f0000002440)=ANY=[], 0xff, 0xc0c, &(0x7f0000001500)="$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")
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58)
r2 = accept$alg(r1, 0x0, 0x0)
r3 = dup(r2)
write$FUSE_INIT(r3, &(0x7f0000000080)={0x4f}, 0xfffffdef)
setsockopt(r3, 0x1, 0x20, &(0x7f0000000040)="c04bfa0a", 0x4)
read$FUSE(r3, &(0x7f0000002000)={0x2020}, 0xfffffc7c)
socket$netlink(0x10, 0x3, 0xf)
syz_mount_image$fuse(0x0, &(0x7f0000000940)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

4.969476493s ago: executing program 0 (id=43):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000480, &(0x7f0000000100), 0x5, 0x764, &(0x7f0000000f80)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12)
r6 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0)
prlimit64(r0, 0x1, &(0x7f0000000340)={0x5, 0x4000000000}, &(0x7f00000003c0))
write$binfmt_script(r6, &(0x7f0000000080), 0x208e24b)

4.901841048s ago: executing program 4 (id=44):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
pipe2$9p(0x0, 0x4800)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
socket$inet(0x2, 0xa, 0x0)
mkdir(0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect$hid(0x4, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="00ea2eb34e7ea51c9446c55a2d1e0be39af9faf44ad59cb6ad1c94490d970e811439edddc71c9b18946b559ce53bee0a1abe562fc3f3898e5826eda1962cf6e3c4c0ade52151923a70b46eacfc1aaaebcf156e549e884bcabc1333f344f31cd30cd93cb2814e0dbc24a7a107e295e86e09283c825fe177c89c6385f68f2c843cffffffff15539bab6142ceed9265ba989d1a283fc4ffc83f3a7a6c746823e656ad78f3b5a336cdbd83dad59e0debb36b4ea5e658e253f01637cc03f704a08019f95b92fffffffff8dd21552d6967ab1b01e5d52a5793eb179deee4572770a5197127b090287bca2a4eaa1705b42c16968d0201d3ba3cc8000000657ea095f152b1b6a1e6ad8d24ad17f649ccc23d4ecbcdb5620cc48f95f563c2230f859d196e6c4f00b8e3a7b01fcb1d79dcc09b7a854ec8c31dd27ff9b4a2864e1dcaf719d20b56769d51228ecc1915fb8c8b598c11b3c296b05f9c5355fc6f19a7b28f5ae9a0d0804ccc5716cfac0246ddffa2f12077a02a959aa1b74373c38b2bcc90743b80666eae25dea73e127263b8fdbc64fe862b994ca8473d0000000000000000"], 0x2, 0x17d, &(0x7f00000004c0)="$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")
execve(&(0x7f0000000040)='./file2\x00', 0x0, 0x0)

4.901525858s ago: executing program 3 (id=45):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = fsopen(&(0x7f0000000340)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='dE\x00', 0x0, r1)
fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000580)='#]\x00', &(0x7f0000001700)="c5", 0x1)
fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000040), &(0x7f0000000140)="8d", 0x1)
r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000040)='romfs\x00', &(0x7f0000000100)='./file0\x00', r2)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='romfs\x00', &(0x7f00000004c0)='\x19\x00\x00', 0x0)
close(r1)

4.209557965s ago: executing program 1 (id=47):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001480)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c0ef815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaad1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69922050000f5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762e122428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302be7ff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9d3fded31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000bb60bc1f1635caf0ca9eabf804adc94e0a73923976299c7ac285542e5de1dd14183f1bb171eabe19fe98f551e1b635300d8e38f07eda29341535e532a6d64ed36fac9c77827bf85ac369eac8879e515b58a03438561c5e78157649c6d45e7e621b79d724e277f1ee49e5b63e81180626a73510be26082a097de42b016336707866d422a93e01c1cbe0cefd4a89dc24b0d7f549908b8620ffd7d900a0a96a381fdd763b39f0bc0af5faf593c5d39fdf43430e4b7c23b5cf691792248cfb9ec9f882dd19a9f6e9426b4f88fe14487942bb34e585083f7b98900682e2683922a94e2f0baecc00f74071d025220bcdbc7f5575ce72981e918681b5a0b1ee9af749885fd8cefb9e182b326eaebad4616647fe1c8c16e42e123c9651f634e962219f"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = io_uring_setup(0x4822, &(0x7f0000000140))
syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x80402)
close_range(r1, 0xffffffffffffffff, 0x0)

4.207421055s ago: executing program 2 (id=48):
syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2040cc, &(0x7f0000001480)={[{@fat=@fmask={'fmask', 0x3d, 0x9}}, {@dots}, {@dots}, {@fat=@dos1xfloppy}, {@fat=@uid}, {@fat=@allow_utime}, {@dots}, {@nodots}, {@nodots}, {@fat=@nocase}, {}, {@fat=@errors_remount}, {@nodots}, {@nodots}, {@fat=@quiet}, {@nodots}, {@dots}, {@fat=@dmask={'dmask', 0x3d, 0x7}}, {@fat=@umask={'umask', 0x3d, 0x8}}, {@dots}, {@fat=@errors_remount}, {@nodots}, {@nodots}]}, 0xfd, 0x1c9, &(0x7f0000001280)="$eJzs3bFu01AUBuATUxKHqRsSAskSC1MFPEERKhLCEhIoA0wgtSwNQqKLYWkfgwfkAVCnLMiotVtTw5BYig3p9y05zu+be+6Qmyy5eXf34+H+p6MP329/izQdRbIbu7EYxXYkceEkAIBNsijL+FFWhu4FAOjHEp//P3tuCQBYs9dv3r54kud7r7IsjTg9KWbFrHqs8mfP872H2bntZtRpUcxuXOaPsvZ3h7P8Ztyq88fV+OxqPo4H96v8LHv6Mm/lk9hf79IBAAAAAAAAAAAAAAAAAAAAAGAw9yK78NfzfXZ22vm0zqur384Hap3fsxV3turL5nig8riPRQEAAAAAAAAAAAAAAAAAAMB/5ujL18P38/nB56aYRMTVZ1YpRvULdxqeTKvBnWdfuUjO5xr3MpeiryL7N9qYd3sXHIwjYl2NLcqyXOrmZo+YDLIzAQAAAAAAAAAAAAAAAADA9dP86PfPLB2iIQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYQPP//x2K44hY4ubLyaaDLhUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAN9isAAP//+mEx/Q==")
r0 = open(&(0x7f0000007f80)='./bus\x00', 0x145142, 0x0)
ftruncate(r0, 0x4010040bfff)

4.207011605s ago: executing program 3 (id=50):
pipe2$9p(&(0x7f0000000240), 0x4000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd12bf000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0x8000000010, 0x0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@dev}}, [@migrate={0x10c}]}, 0x15c}}, 0x0)

3.078068718s ago: executing program 2 (id=51):
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0)
syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000002380)='./file0/file0\x00', 0x3a0cc12, &(0x7f0000001040)=ANY=[@ANYBLOB='unhide,session=0x0000000000000013,map=normal,map=off,cruft,mode=0x0000000000000079,check=strict,hide=0x000000005c3cc578,nocompress,norock,,\x00'/155], 0xff, 0x9c8, &(0x7f00000017c0)="$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")

3.04478057s ago: executing program 3 (id=52):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.u'}, 0x15)
pipe2$9p(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180"], 0x15)
r2 = dup(r1)
write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x30)
write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="7f450700000053c407cd"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}})
chdir(&(0x7f0000000200)='./file0\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)

2.946538798s ago: executing program 0 (id=53):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000200000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$kcm(0xa, 0x2, 0x3a)
sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000040), 0x60}, 0x0)

2.793902271s ago: executing program 1 (id=54):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd1, 0x0, 0x0)

2.642896863s ago: executing program 1 (id=55):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6erspan0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="a8000000480000022bbd7000ffdbdf250a001f00", @ANYRES32=r1, @ANYBLOB="82eb927314000100fc0100000000000000000000000000001400010000000000000000000000ffffac14142c080002000000000014000100ff020000000000000000000000000001080002000300000008000200240c418b080002000000000014000100200100000000000000000000000000001400010000000000000000002000fdffac1414bb0800020004000000"], 0xa8}}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x0, 0x8}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
r4 = socket(0x10, 0x0, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000b40)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(r6, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="050800000000000000000e00000008000300", @ANYRES32=r7], 0x1c}}, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff01000000110000000000000000006eff369df4880000145b41fe6900000079616d3000000000000000000000000079616d3000000000000000000000000076657468315f742f5f626f6e640000000180c20000000000000000000180c20000000000000000000000b0000000670100009001000073746174697374696300000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000646e61740000000000000000ff0300000000000000000000000000000000000010000000000000000180c20000000000ffffffff000000006e666c6f670000000000000000007124653b48a2601bf5ce1a222a243bb900000000000000000000000000000000000050000000121b6eb2e833e7a394a873495fdd3844d4f0fffbf04a000000007e4b000022d4e27ebdf3b9dc569e338e2c551c2fc4a19597ba4c501c8b1f16fb7809c40aee86f4fe16383d2afb577ed2bb6dd99f024b3f54ba00000000415544495400"/544]}, 0x298)
r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x4d, 0x4, 0x5, 0x832, 0xffffffffffffffff, 0x631a, '\x00', 0x0, r8, 0x5, 0x0, 0x1}, 0x48)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r9, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10)

2.629278934s ago: executing program 3 (id=56):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
get_robust_list(0x0, &(0x7f00000002c0)=&(0x7f0000000280)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000240)}, &(0x7f0000000500)=0x18)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
time(0x0)

2.545643541s ago: executing program 0 (id=57):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061198c00"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0x98, &(0x7f00000000c0)=""/152}, 0x90)
socket$igmp6(0xa, 0x3, 0x2)
pipe2(&(0x7f0000000000), 0x0)
syz_emit_ethernet(0x46, &(0x7f00000001c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @rand_addr=0x64010102, {[@noop, @timestamp_addr={0x44, 0xc, 0xa, 0x2, 0x0, [{@multicast1}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x80, 0xea}, [@NDA_LLADDR={0xa, 0x2, @local}]}, 0x28}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x4)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = syz_clone(0x100000, &(0x7f0000000400)="bac80ff8573c5a9d4ca3cf0ee43c6ca92fcdc6379645c097a62beff25015e09ad9b665a91f096750ab837e10b6f1d84916448ed84180398515792756994efd565ce43459183273b5f9284e455b8a099e0bc3c2fa9610137634250e244671bb36774ac0d587f025eaa77bac3d4e4c27bf58e530ccb785c3f948e8b7d5ddbd32080172413edeca909784cbad89a42a5f698b2ea0d7ac42a995fc7e1dd2f0573074ca071acfe868a1d094e6a105afec6c6ab7cccbae90d138d90314bf35396b3decc2da547cc3e1fff0c44228b5b336437ba4bf4dc7f13f6fbb662ee87cb380f3ffd1534c0455c4d98a0c5d6c28a37b063a19c12d343107ad7eb4f0a778042077a8c782abd0071e80b3780cb414821847d57e707e68cd6f3a39a0d60f0bcfcea1a7d4313a318d89a354507676bef09754172d5fa916699c35bdca0d72e2848837fe3656bfd9a478e98739f98f361cab4a8ebb1d3fced46765ee1633463ab992677c5423406ad437bef0266e5aae56f2af0ebbdffb05f27a5cc622d239d5b9bebdb0245b84e646d41cbe70b50973507920906cc9ca69d0030c06c9ba71f99014bdb950272c899ec5a45e256216a152afef9e1e3928c1bfddbecbc9924ed6c609673028f62755887008c6c8af0c622fb7303d49414ce4f1318d252dff1cb90cbfcbf1fc4e94f2108dab12adfd6cfedea41d309b2d677fd6e533fa1f8b68792b6027a7eafe615ef379c71168902cee0850d6ddeef322bcb34e61379bb0e90ec3244edbd6b52e7620fe1ff74c1c9299c2ab4e1dcf6cf6abef03be5306b866ca3df27a9ab483d208aad4da2fb32ca56a6fabae6969fdbe591e7592c3ded03e37ab6b6e0556ca16970a2e04b292e6412b76263b964a1b5ad7b095cf651c1660abc3368d89c420891a0f5acb0849a0e2f0c69207d4f5b234c567805a3138980ca3c14ecf7d74a022e39c44b8062e18ffcc8499b3c87c1222c299b13cd88333865d130de566e8df0eafb1e4c7654676cf9d22edc9c01658c2dedb4c6951ae7f84ea2061c032b08b7f2bae82c811f0da88c1e36c2857209c254135b923a790cbcf5c550e18e837b6fd50e877b6c8e1c191186597cade74b6acf1302c52ca2627c5655a463d99b7426fe69db33f2579c3659d45079ff29a247d20b68fba862635984519b5aa1f701b704c6fc88ecbb173e00945432d945ce1b7030f58528e1f5ba4a98be75376ec15cec5779e280ad093e5c050f241ec76d532e3064468a588a1f211f918cd0fc8844ce76054e91fdb93d45142184ebae86e36f2b645189615bc836678fe903d2bb48cd83e5107932ac7cf294e0cdc8b9ab46ff64b0133cf397552b95feb1607ebbd7cf6fa58a26247dee2dd4fc31ca045e3e4012a0eabea37804b895be09ded1b9a3f09b2f70bda06b8f2d56341f12cfb7bf4502ebb8892cc61d418d5a025787f4c25c407d9184809a76d210b44ac37215f77bc2ea643805a2f975721cdc8f2d59b0b356139f21a79338af51c8a8487da042761172bd86c25967d725c11f99b402f168dae61a26783923376e937e5464dd89b4632a2c2ae571aec0b696ceb1893bd40aa7dd769bb1f4b4aacfa62c4416a0fd18114d9d6c3bab9a2a8e49ece17a2a54b53e1263cb4c11b3bb4bc48359c7bbf303beb1fa7f0d7415d1143bdb2023dbb76e1c69174cbc2bb27f3112767f93be90daa4ed015e66468ff7a94bd123255b04b7a2550b3c5b67ba0c9df9a82612246942d8bc9bdbe78a88aa513dd4ce0c0cefef45cf517f48b1970121b62b593a05060a7890c284372135bb42333be66cd1d5f9094e7c2b7aacc2e58b28969a28aa10fbf7543b29b7c9004802ff1aa9517300e29a1f60c8af629cdb944eb8ddf4b987ae681cb8aa199fe1dab56dcbd34135a30d5e4df3dc946ae5761de8468193866704b46d108323253ee8885021f1dfc4a2983bee96ba36fe93252a3344b5fce3faf70d6cfa190e2e4b1a4f337fc7c84d9f56e3453fe50872056e7b08491683b1fc501e39cac62e95a6054696767a6b8ec0c9f037aeb5963b74ba35571510ee3f4bf8639191f93276664b3da659d530f09af854876dbe5794a284f6dd5a98807889452be8df53c67a88c9ae1ada94ae66f2ef48175e898514cf9cdbe6197354ff7c0b539748c2cb10e7fe910aca0e0482c289ef991a0520a413caac1ffbe581a3c13aa92c7b7fc2cfd858d44c99055600798091718a6f97a5e6d54434b91f079fb3238384ce0430a41b32899e2d9a9798ba12ddd8da591598cd381ec4809b8af07aa5e916d71092b1bc72d0204fde7665d2b77255e1a12d99f75facd313a417c7407572a0169c5d30640541f6b2620fbda7511a9c9ea1bc36ddacd2f77bed781ab3b0c9a0dbf24e60592b2f8a91fd29751ad7363850330f41cd14a8b4fadb57f53333f42c62842744fc3b50f4089e4cb239f3c5da3d43edf72135f159fa70762e08bc35f1f3a959f1cf30dee3bed4c2d53dc7678fb41b758a25c49e2174a250a16aa1a142966bfdaaf5e3d8a7063d5f0c6d88646ad404ee8d801911078a6dbca56d6766f0e7705ba09bbd167d332140966b639fa468d6d77cdc76528c62ab29bf43523d2d4d61fa204048131902c52bf78f08f2e4f416b5d7b54cf8b4f7679f9da332b3a05d018a4b541f7b4aaaed7d50e983f4653241cd55a7379b66ba78789751da1bbd8fa96a3de20a4eb78c651728b9ea94d368b60efa0c0853fac4a72b976c0f7dc346a8319e01930aaecacd231b1811febd7d706d23e66713761c25739089df3456bb83683e3a5564cab6ca900a8d6f128ad6a982ba6a166e95aa058247b94760bff33b72390160796111c2be1574fbf165e6fc2b6f603a3917fa4286cf355bf12255d2b11b8f7c6b04abe021216b5ae94ff82ca772552b3aedc7e47caaf4c12a0664168b54c8bdcf6aeccb5e479dc1fed4af4f14fe35929a7105c3a9d9db875c6f083f4150467a813d1111022c9e9b699ba6d286c9bd1c2e3c9c57c497f2e2903ba7cf279dc64647b2b2fbea521782cbcdb57da59e15f02f77303c913e9b92b07fd5050195be8b84247c0078f217e35b961d274f5113264f07d68404da4c4d6f52e7a96a2a3c95a681855c4fd5aa39d8482c5c410ed620579b4a45bd9dc10138c5de10221996c6875344928b56480c3525f7e92d6f8de728786ece81e080001f392733d9f6cfac1d2107b9c329a8c3e3ff51af724fd5e467e55e89dd61d64e9cdd68256c749a9fc4cb1523b7a1967b84516565248e20282155dff3e554555f775bd42f61a3ada62f338c14a6b69ecaab674a520dac9aca17c9db62e956f3d3b3e27e0930d42f14764945d8a8d7914317108a7db97724d49c05df71c26cce4fde0ff7a47d8cad95c32479eb642220675d7440964ca7b6e74dc2206f9147c98e83a33e012e415b2c6d629880c30ca22b371956bc71ee1c1107f6dfa5cfbc445500990817479f99263f41dcf27b83d34f2263699d711f67254a9df924f9e3086dda3549a6a7a52e417b0288b7a6a721c5666b07ab65d951323d41cbcd29dd2053b9b4cf62170f79dcaea4ed85f74bcb14e377ff263de60f23a6d1d823412f3916872aa7933d83d2e09322a271a4f583c50c0a4dc54952ebae05d0f088b44180cac24fd4cd936ed394f2e8107ffe72c367ea5df556d9dbca1c4bd9491e6c5ffdff7a9ea2bc9b1f0d043b298c99886e52f5499aee9968911e682c708bcc97de3392657ce33b9948e38fe937e5f0933dc7b78fd63c9f16d2a7e8839b18e68668e35a6dc18acbfb156576422a8d7eb73f19b85322e2430f53d3e59d7336326aae940e9a4f58980cc8589d4e2907d1c25e47bde0b77b9ed104bbc752cba9919a7e66637ada22913b4755bee7fd99d3870175c42b8fb2ff44bd955dc8bb3f19f64249e2454b6019412454d566a94234cf31c07be9d6dc1eb32a35b8e47538f25043892a77db2159406a7ba5b53c3e1808fb59015eb376f8a213a43a8bdd78601f75f6bc9aea1a7feee01962f15a637beefc4dc5f0ba39023d21460c0d61b6a2508e72d2a10191df5da987d73d43830c480513d1fedc3e150c710374f999b36a0b5ebcefc2a1b05b1df320d3234194437e2e49b7f3cad217b9c97114d5b92bdb54f88d4f0363f5ae32c488c72c1fafbfad25238eb1b823986885df7d402d9d76d5ab02cdaad12c23273e685a3ed34bdf19fbf1ab1f14bd021f21ace4a31daaca4e909e25bde86be91b8e9a7efbdcb70db3bad5b3d7cb606f38f22ea371086d2b2b409009776990d140afd9f2b0513c0226987d710b9bf7e1f", 0xbe8, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280))
ioprio_set$pid(0x1, r5, 0x4004)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000018c0), 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call]}, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000003ec0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
creat(0x0, 0x0)

2.405045303s ago: executing program 2 (id=58):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ftruncate(0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000))
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8}, {0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x100}], 0xff})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000000100000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400126a"], 0x34}}, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)=0x9, 0x4)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x0, 0x0)
syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000500), &(0x7f0000000140))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x4c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_IE={0xd, 0x2a, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x3d, 0x60}}]}]}, 0x4c}}, 0x0)

1.730640058s ago: executing program 1 (id=59):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
pipe2$9p(0x0, 0x4800)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
socket$inet(0x2, 0xa, 0x0)
mkdir(0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect$hid(0x4, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x2, 0x17d, &(0x7f00000004c0)="$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")
execve(&(0x7f0000000040)='./file2\x00', 0x0, 0x0)

1.730498928s ago: executing program 3 (id=60):
syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x4006, &(0x7f0000002440)=ANY=[], 0xff, 0xc0c, &(0x7f0000001500)="$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")
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58)
r2 = accept$alg(r1, 0x0, 0x0)
r3 = dup(r2)
write$FUSE_INIT(r3, &(0x7f0000000080)={0x4f}, 0xfffffdef)
setsockopt(r3, 0x1, 0x20, &(0x7f0000000040)="c04bfa0a", 0x4)
read$FUSE(r3, &(0x7f0000002000)={0x2020}, 0xfffffc7c)
socket$netlink(0x10, 0x3, 0xf)
syz_mount_image$fuse(0x0, &(0x7f0000000940)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

1.661836363s ago: executing program 0 (id=61):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@dev}}, [@migrate={0x10c}]}, 0x15c}}, 0x0)

1.454621051s ago: executing program 0 (id=62):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f00000001c0)={[{@quota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x4c1, &(0x7f0000000680)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61)

346.020851ms ago: executing program 2 (id=63):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x9)
process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000008640)=[{0x0}], 0x1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
mbind(&(0x7f0000425000/0x1000)=nil, 0x1000, 0x4000, 0x0, 0x1, 0x0)
r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc}, 0x48)
socket$nl_route(0x10, 0x3, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
socket(0x40000000015, 0x805, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200408c4, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r1, &(0x7f0000001780)='%U', 0x2, 0x24000015, 0x0, 0x0)
sendto$inet(r1, &(0x7f00000003c0)="9e83179addc94debd3d7ba6c5dae0ddeccc12e68d4ab72a8aee5e391ac3391b2a5a41c6634dabeaed843dc98d70ec1b8a41aba514dcac14d841c7691cbb434e289f5ffb0d057cf7ce4686f22d6c37dd40f5a93a628d6870c2adfe0bdb54e1a7e400a44a20b2d5383f806b91b904057bdb59bebf6e08ea77091c619bcf9c8d1431f4ff0a9d21af9d7e1ea0d9304622aedb2c70e8987ed8e85fd30726f6bfe4f647a337eb8c0cb855522097db900a26a3fc93b7ff1467554e3781223335ee41ff5c67e494365e2bf8fcef8bd3f8f95b420e4e88c564dd10f158d84bbf07058107b22d52be31efc872e1b2ac0bfde09c5c1e9b06d05157650a16ceaea3297957c2ebf81ece5b55d9b2c6460774a2d0e4fa3753143ab371637588277e9488478e3469313c560f17e62a1ccec003545e75cbacfb588bdd225927514ca5b9c03c61bb0ef0f793ca1fd4c22921d8d8d78f83afdd4105452fdadb36b47800de35c22c6215c5559e142f76cdd874b42f4257000d3354cb0515aedac59881d3ae5e9de7a286c409889a4e999ac5b0b31137b5914be4c5edc4581a20255158ce511b413a862183c17c55769acea79c7874239fca61cf619040ff188b73c58df9254bb6c9fea5ed6b4a0049fbd3787c09443d8f61e073d0a56947d57da8efe9f2394601fe868f3790d49814cb9de926508bda23967305c74355bec5f19d970f3ae84b92ab33f8ea68ef9ad27907d2b1d0d634250439f383463060dc738da925e4918194154d432055ff1971dc454f404859b1b6f518548af898a3cd10fd316f23af4980cc15ccdecedefd07c0c83c3e080ec8c66a922b32682f0c9818fa1a968f4f81ffdb1d981ebaa321c4a98864202ed6a92690193e28abd2e8cb49f1ac36adcee27b723a57752b3e52b189b859d64b512f3ab961e422791e65365371ec8d29cfdc8b03c9db34c0fac9d511ee7bd85aebbd532e7b7bcace3409cde76d6ca5a853d91537be7263bbb103d440caf4212fa23951229548549cd952eac0f4ffea07c8e0ca93a3d562db428af762ebb790c3227f68a0d9a300203943610d2b70e05d474bcf19de164da2df52772b53ce2eeacae27236a7d7a0d97d46f010b098f4e516c476245091d8177c9e8cc5707d3509ed9adce6239bdbe5cacc3a63252d8aff5f5f42cea735b7493a786c3002afed6b219fe5dceaa0c3bf10265211d786dad131782089569a4a00c384e64aef30121b322076ea0260ac496e24854a21bfe2b4a71e375b094a6a8eaafacef556c06c3a022d58371f25b000f850bbe8eaf4ff801b8d80f5b862ebc6333e49f88c93b556014f503ae10ad089f0c5a50bc6667cb690bde9b54430d168d253808bcfe210c4eaaad9127b133d78c15fdea9e94cc7df8e4010f3b96941dd2717ec7586b5b30b4f8e72068879c337336cab2cb44485e1de73b9fed25d748c85afee2fa4c7e96470e70620d94fb68ea1f7edeae0d1b7543681bc60dc8532fad9c742d3992ca24922963666983147416f521c35b55a6f6e4fef9963756b2ca08ddf97d85c5b7e16c972f5b5d47e890cf80079f9d711eac5b6b44b19d5c519b349e29f59e49967b105668c5a8cd9e08a619ff863f41514b3acc635b43d22c6ab62eff0da8971f84c666e034fbf94430322680bcc36b5f41b8382e96df3fde48efe00117425290cfe48d1f82310eadb0ad2cb5734132322f4e7f11a6dc30fb573abb57f3d7fe685435fb75df2f36cecb441ad9d8228069fefa7561d0379e03e6bdb82e996f3bf9828feb8f982d7ebd250425d7b5e5203ef72d7ca923bd1cd3abe01187e99989caf719f3192257aad2bb88643975b8c4a603d4d862ec4a34d0b67927638a8df1201698d87b441a921121c4dc48847c373247b29ed39da3c0b1c99cc56b507ed461d81edb8806316759b55f3eeecc3494ca8c552988cd3dc1221685f7f2bcdc805fca5b828eae2f176ae870a49f35fe2e97e7e858b8aecfc54e16d28fe6568e1291ef24e89ac694009188177ad531608046147abb92cba8566ed8d8b8ea80e7c242125bb696fc41ec7ad04b54011f90b0ffa3e76796b4ebd6afb9e8fb9163664353e55155eeb2cce7f59139820ffa0ed52ab3c619712574d6deb87af1092f4529430920cff9d3c3929e126cc877bd49bf34fb3a67faeb1f5c3a2159e8c5607f21769e0b238058336a2472b83a62444f00543302f78e6e6664c05fe0c16cf673dad1f4ae826a899d7e0c5dcc7711021f5a6e18fb9ae7b6dbaeb0e49343a3a0efd767e6409abe3b2440f425ff67773795c6337fc0597a762c08b021105d21e818b22a129bc68c9561382a0c3504d5a0caf8f5a23377499c7783471885e4d1d9c7c9532a114bbe2231e439650bf35241ac340976ed1d7ed11d47ca996611f75af71862b3aca916ef1291e73e58df5888f1056f9e7da06734599287af6e754a9f68272b10fa502d3e8189de55d2e882d0a4b88e8db1b5b13184f951abc03990b8912e5af019a74d6c1fb90611dffaadcd9ba46bfb424e66d912a2db8ef26ee0b90fd98f18885aea2cfacc0ce74d0e5b0692b151c41e1dca5c882fc15e2e102d3942b8558a2f77d7bea4342f0579ba998e76dcd8cb6a1053a127a065c915fb10813e19dcfe048b32153498d4b40a6af989c12dcf9563e9be7c57f8ecd536875011c15fbe4c72da7cd121fec339854ad3d9adbeb6ffebfdb2d6ca31efa334998f6391ea0f8e7aaebc632f89a40cf4cd684e10d91005c9e4e962e3e2add62a7744d0160e0d27517624af3976fd2ad754dd2beec1a4b7dc347654b134a76d354a9b350851d0cb210c4f974bc37bf7530eaa49ce000f1469b2fefc04d09fb0e5b93e10e235a7b3764c7c463215816926956af039d743d4acac72f6c38d91dec9ca7b948fdeb7c6b1d94ba8c68d7227e3f38e71690f7d767f1f0ed502a985f4e2df71c249e597a21a0ccf97437dc1fbe13e0a3c0f6c6b1ca3a09d4b9483edaaf683eadeb8bae6f89b64e41733c6b3d2928cb9594072141766fe7652716fb92e9dcfca79aa37ccdab8e342f2e67c6aa40f98cba0121593c0440148e335e15ea4faf24147b47eb3658255864f55d68ebc1a469baebd00030a2862649712e06d374f986e582578e050a0881f0ea3d708ad3da2afd9974a8dcd81cbed51b8ea970e88f83cf5de19d4407d68cad88cdb41dc710aeb652dfef303426aa9c61a93dc00dc25e77212212b205f28d530e13e35aba437fbeb44ebab95d0f41e998dfdaee77a1eef61089b8bef7dc39c8587aacceabe22526d99fe7c3566190da43b4d3de19c2d93f698952077c7ac5e905ee1ff58dd64af157ad8734858cb3e53909529813471f69c6a695d84c3f10cbd049a94cda5a350858323b62847023df6b90f55a6407246c932cf8b9d71502b701e7d56073cf89d5c2afbfbeaf88340cb21a8db99b43dd20e5867a0c2371bbfec1865e7d75f9381b7238c4a1e75d6f7aeefbaa0a4b72bc7dac799fe07965b779930e69577a149212f85f50d443a5e0477068fad3e348eb47039559600a7fe9d0e4f7c231d595bd2eab49419c03d303f94097b7f7575006d7d503c8c6eb1fecdd84fbe9fd0ce4573f86b2227f404488bb9138e146022e80812f95213fd0cf5a4580f8b27863b5749de23ad526823f3174dba2e1801345a575bbe6aca9d41b5b05868b64590f0477762f7a7a9892ac5a96260fe92e4111b75924b228be995d411716911fe50179f622f74ad3d093136e7d04a96795e972138e0633ae9680192aa03842b36389acee3afd8b0460bbc7f252e1aa47239e6adba2042c19e15f7c71a8449e3a3bdd7bf79e17ac4834463d56753700510dd5a497239720985e58259ed2a75a38c32317184084ddcb064050dade908e91432476cc2cc6652cfc6277c50eaf47134bcd7002fc686cd16db02efe1d3f0ad201d109aa2866968f99b15c37f946a983799bb11af2a7d5347b5d11695dfb8bcf6ef693c9d98704c73c87c24562e911b3c5203d1c1a05c871f94c8f9465c42a799af7f784d27f7f8edd0d1edcba328fb0a890b20c08459b26d0c07eb7ccbec44b722b6d7b98a8422c709b1fff58aa196a9361c0d07b97df7b75cdeb36e9f6e17f8786e07016acaff9dbbcdcdbc6e7b17803880e98ed2dfdf6f50820e37e651c10dd2662ec57b45f8270db81a0f830f19fd4f9e96c335f9b50af7e0361baa197364d82ecd5be44bd84847356f926cee04d3b581abcef55d2831cce8bf50a639ca49cda4773ab7d8d87922b4317dcc675ff1512b1ec9edc8623cc84968477292cf0ae9f9a90e882e26904ef6c1dcf939d78580b19152c613b3866f710c726f4f0a3defc583eb77c47c5ade1049afc5c64e3498388a6c238e7e90ad26809c5dbd3e5971e1b841fbf6f287c793660796d965c4f20a516302bc10b82b001082d51ea771808a799d10c1e6211f0ad5c3cb8a8b15856729d025adac16cc513cb80819b5f6cb1e241f000b91f4c451820b7d2a959e34d0b7e525181d67c1afe41a769d9318b592d7444d3ca97db10633679f9c9752fd1ade90bc23ee8251d3617d7082a2fd0f6b13280f57849f9fcbf2a784bc18c37c7791fccf9289e2797e1d40dd0268636ad6b98c32304690335e93c3d5d27002e39c882713671fe336a1d9609771da99d8ffe63e0baf6677348f63ec9155368ce1a8738b894cb26bf3235d154dff49b4e0c923cbc4d0989908c95e37e712db3c6e604a8b385375e060ebbe32b7afdb807c04fb57d2755d44b829776b90cef1fa3171107ec8c80ccd89b77439f843f983d48cadd8cc6ab6acceef80a5ec6e56412d9139a41b64099cf235a0b57c88807a7ec205c24071207493f0a86b49245608fa9de0c57b882b25bdbe98df4e24c3441dac1ddfdd1d06ed38af7b874372a71c24d5525c9effa9b5859c82fe53e454b908d5d36814dfebf83451c9ec1e062bd8191c73cda5060fe07d533991159cb490318379fbc7ce2f44af473a8cbbf482a0e354658b6c119f97134196791596e042691161046c0b8f2c9b51b15d6fb16e29376ec31b37c1b95e586aab0e0604ba0ebbaf0457d76195f9a063b5ca0452d2fe368c981928ed026581c8190571b15ca9e1e69b026411cd979492688b9916a12dab9acde81f34b2268e2071eafe60d8daf4db7f98adee585ac44b946e72cfc97a3566de73ec80f0251ddb61f0f4f7ab4507b07db06897bee7ac3ce5657ccabd18b3092e2850bf02cd9b138c0628877dc7eab2dfdcbb6e0ff2b923c62eb8b4e9b54f6f0f1f9ceed631ee493150a6ebe428a69d73631e8521c9c05a604e88def9da2031a5f815c1f5b74a710ad206d4fdf7f73e3b74d936fbd332005fb7bbab3ae860e9699e14e436f0f39361b1294f0c3833bb98b2c8158f519d46a83516ace9dd5d47a11e275b8ee100fdce21df11ae7d954b96d272bc6159294b1230ca1ec737864cabd3e960440f77bea392cc6cb53dd5ef18ca496f7e35c4158befd8e1b43f456a0eae6a83f403396ef200fc73b0792c92d8d99786ace7b6f20d024034edba83686708e55f594b7e2261e16ebb84a9435831a3448519f8ee7c134803d0341aa6513cb603de781fd36b6e9c15574b391cae61019eae03baf7137e1dd41982af38fb31a7a4c73c99aa2d5dbe72b238bd42fd48dc89529aa4206fee1dbffd2c11b9e0418ec7282114fe6010ddd60859789c25f3e66a353588a8f2dc54f65cddf794d703b6fc055cb992cae0addb7ef058957ec947bb1ad26f9f6e1ba523d16b300d861837b272cb14ed2044fc196a65", 0x1000, 0x0, 0x0, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/120, 0x78, 0x0, 0x0}, &(0x7f0000000080)=0x40)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f00000000c0), 0xfffffff4)

304.456175ms ago: executing program 3 (id=64):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd1, 0x0, 0x0)

105.912411ms ago: executing program 0 (id=65):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10)
r4 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000980)=@ethtool_dump={0x3f, 0xfffe000, 0xd56c, 0x33, "8cbb515b58cf2b28fdc53e716a6cdd1292c6fc6ca4b19eb67bbf1240be085ca0a34851106c43f660ebf818bb66be2e1c91ee59"}})

0s ago: executing program 2 (id=66):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r1 = io_uring_setup(0x4822, &(0x7f00000004c0))
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fsopen(&(0x7f00000000c0)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='fd', 0x0, r3)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.61' (ED25519) to the list of known hosts.
[   48.036249][ T3623] cgroup: Unknown subsys name 'net'
[   48.162695][ T3623] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.439439][ T3623] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k FS
[   50.622858][ T3643] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   50.630716][ T3643] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   50.636145][ T3650] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   50.641139][ T3643] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   50.645667][ T3650] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   50.652937][ T3643] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   50.660737][ T3650] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   50.667321][ T3643] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   50.681035][ T3650] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   50.681770][ T3643] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   50.688598][ T3650] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   50.696130][ T3643] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   50.703290][ T3650] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   50.710441][ T3643] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   50.717917][ T3650] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   50.723588][ T3643] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   50.730942][ T3650] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   50.737351][ T3643] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   50.744899][ T3650] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   50.751985][ T3643] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   50.759932][ T3650] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   50.772768][ T3643] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   50.774451][ T3650] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   50.788541][ T3650] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   50.801035][ T3643] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   50.807519][ T3650] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   50.815477][ T3650] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   50.819839][ T3640] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   50.833300][ T3649] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   50.841138][ T3649] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   51.079525][ T3647] chnl_net:caif_netlink_parms(): no params data found
[   51.209038][ T3647] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.216212][ T3647] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.225254][ T3647] device bridge_slave_0 entered promiscuous mode
[   51.266349][ T3647] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.273730][ T3647] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.281581][ T3647] device bridge_slave_1 entered promiscuous mode
[   51.301084][ T3635] chnl_net:caif_netlink_parms(): no params data found
[   51.327319][ T3647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   51.365149][ T3647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   51.418178][ T3647] team0: Port device team_slave_0 added
[   51.428001][ T3647] team0: Port device team_slave_1 added
[   51.451807][ T3636] chnl_net:caif_netlink_parms(): no params data found
[   51.517485][ T3639] chnl_net:caif_netlink_parms(): no params data found
[   51.528256][ T3647] batman_adv: batadv0: Adding interface: batadv_slave_0
[   51.535202][ T3647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   51.561569][ T3647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   51.578099][ T3635] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.585181][ T3635] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.593708][ T3635] device bridge_slave_0 entered promiscuous mode
[   51.605361][ T3647] batman_adv: batadv0: Adding interface: batadv_slave_1
[   51.616070][ T3647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   51.642544][ T3647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   51.663188][ T3635] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.670833][ T3635] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.679197][ T3635] device bridge_slave_1 entered promiscuous mode
[   51.725756][ T3644] chnl_net:caif_netlink_parms(): no params data found
[   51.744839][ T3635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   51.777197][ T3635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   51.833405][ T3647] device hsr_slave_0 entered promiscuous mode
[   51.840193][ T3647] device hsr_slave_1 entered promiscuous mode
[   51.847239][ T3636] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.854330][ T3636] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.863307][ T3636] device bridge_slave_0 entered promiscuous mode
[   51.885378][ T3635] team0: Port device team_slave_0 added
[   51.893039][ T3635] team0: Port device team_slave_1 added
[   51.900975][ T3636] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.908420][ T3636] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.916789][ T3636] device bridge_slave_1 entered promiscuous mode
[   51.958418][ T3639] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.965525][ T3639] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.974181][ T3639] device bridge_slave_0 entered promiscuous mode
[   51.992298][ T3635] batman_adv: batadv0: Adding interface: batadv_slave_0
[   51.999374][ T3635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.025394][ T3635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   52.044708][ T3639] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.052387][ T3639] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.060184][ T3639] device bridge_slave_1 entered promiscuous mode
[   52.078619][ T3635] batman_adv: batadv0: Adding interface: batadv_slave_1
[   52.085571][ T3635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.112003][ T3635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   52.124935][ T3636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.137353][ T3636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   52.195732][ T3644] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.203061][ T3644] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.211418][ T3644] device bridge_slave_0 entered promiscuous mode
[   52.244740][ T3639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.254321][ T3644] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.261983][ T3644] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.270280][ T3644] device bridge_slave_1 entered promiscuous mode
[   52.299123][ T3636] team0: Port device team_slave_0 added
[   52.308372][ T3635] device hsr_slave_0 entered promiscuous mode
[   52.315029][ T3635] device hsr_slave_1 entered promiscuous mode
[   52.321823][ T3635] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   52.329926][ T3635] Cannot create hsr debugfs directory
[   52.337079][ T3639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   52.361161][ T3636] team0: Port device team_slave_1 added
[   52.401873][ T3644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.414166][ T3644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   52.435102][ T3639] team0: Port device team_slave_0 added
[   52.445830][ T3639] team0: Port device team_slave_1 added
[   52.469141][ T3636] batman_adv: batadv0: Adding interface: batadv_slave_0
[   52.476224][ T3636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.502448][ T3636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   52.534665][ T3644] team0: Port device team_slave_0 added
[   52.541138][ T3636] batman_adv: batadv0: Adding interface: batadv_slave_1
[   52.548200][ T3636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.574787][ T3636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   52.606300][ T3644] team0: Port device team_slave_1 added
[   52.621754][ T3639] batman_adv: batadv0: Adding interface: batadv_slave_0
[   52.628820][ T3639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.655122][ T3639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   52.689396][ T3639] batman_adv: batadv0: Adding interface: batadv_slave_1
[   52.696516][ T3639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.722979][ T3639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   52.744500][ T3644] batman_adv: batadv0: Adding interface: batadv_slave_0
[   52.751549][ T3644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.777628][ T3644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   52.808275][ T3636] device hsr_slave_0 entered promiscuous mode
[   52.815381][ T3636] device hsr_slave_1 entered promiscuous mode
[   52.822431][ T3636] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   52.830144][ T3636] Cannot create hsr debugfs directory
[   52.848584][ T3644] batman_adv: batadv0: Adding interface: batadv_slave_1
[   52.857657][ T3650] Bluetooth: hci2: command tx timeout
[   52.857802][ T3649] Bluetooth: hci4: command tx timeout
[   52.864730][ T3644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.868867][ T3649] Bluetooth: hci1: command tx timeout
[   52.902124][ T3644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   52.937121][ T3652] Bluetooth: hci3: command tx timeout
[   52.940903][ T3639] device hsr_slave_0 entered promiscuous mode
[   52.947402][ T3649] Bluetooth: hci0: command tx timeout
[   52.954871][ T3639] device hsr_slave_1 entered promiscuous mode
[   52.962573][ T3639] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   52.970293][ T3639] Cannot create hsr debugfs directory
[   53.053390][ T3644] device hsr_slave_0 entered promiscuous mode
[   53.060502][ T3644] device hsr_slave_1 entered promiscuous mode
[   53.067193][ T3644] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   53.074841][ T3644] Cannot create hsr debugfs directory
[   53.248080][ T3647] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   53.258396][ T3647] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   53.287937][ T3647] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   53.301622][ T3647] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   53.339553][ T3635] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   53.350503][ T3635] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   53.360592][ T3635] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   53.372475][ T3635] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   53.449098][ T3639] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   53.458317][ T3639] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   53.497721][ T3639] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   53.533391][ T3639] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   53.563815][ T3636] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   53.584293][ T3636] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   53.612070][ T3644] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   53.621471][ T3644] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   53.632949][ T3644] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   53.641972][ T3636] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   53.650973][ T3636] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   53.665816][ T3644] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   53.679508][ T3647] 8021q: adding VLAN 0 to HW filter on device bond0
[   53.715718][  T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   53.725294][  T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   53.744376][ T3647] 8021q: adding VLAN 0 to HW filter on device team0
[   53.775910][ T3635] 8021q: adding VLAN 0 to HW filter on device bond0
[   53.802328][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   53.812265][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   53.822363][ T1298] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.829704][ T1298] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.838810][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   53.873734][ T3635] 8021q: adding VLAN 0 to HW filter on device team0
[   53.894765][  T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   53.903462][  T102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   53.912581][  T102] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.919746][  T102] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.928095][  T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   53.936667][  T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   53.944670][  T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   53.964819][ T3639] 8021q: adding VLAN 0 to HW filter on device bond0
[   53.996677][  T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   54.006287][  T102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   54.015536][  T102] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.022691][  T102] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.031536][  T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   54.043795][  T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   54.052678][  T102] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   54.061516][  T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   54.070309][  T102] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   54.087731][  T102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   54.095914][  T102] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   54.105340][  T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   54.115059][  T102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   54.126738][  T102] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.133877][  T102] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.142514][  T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   54.151743][  T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   54.162993][  T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   54.171876][  T102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   54.213886][  T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   54.222570][  T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   54.230822][  T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   54.240241][  T102] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   54.249334][  T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   54.258385][  T102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   54.266643][  T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   54.275705][  T102] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   54.285098][  T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   54.293922][  T102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   54.307994][ T3639] 8021q: adding VLAN 0 to HW filter on device team0
[   54.318194][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   54.336788][ T3644] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.348669][ T3635] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   54.362082][ T3635] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   54.370613][  T102] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   54.380065][  T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   54.388870][  T102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   54.401442][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   54.411227][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   54.420005][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.427113][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.435843][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   54.478013][ T3636] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.489873][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   54.498813][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   54.506810][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   54.522827][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   54.533158][   T34] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.540427][   T34] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.548712][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   54.557440][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   54.565940][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   54.574738][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   54.583420][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   54.599483][ T3644] 8021q: adding VLAN 0 to HW filter on device team0
[   54.619044][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   54.628540][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   54.689742][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   54.704457][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   54.715546][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   54.731348][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   54.743468][ T1298] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.750619][ T1298] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.760323][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   54.768785][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   54.778140][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   54.786708][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   54.795226][ T1298] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.802361][ T1298] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.811834][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   54.820280][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   54.829436][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   54.839968][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   54.849256][ T3639] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   54.862605][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   54.883808][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   54.891893][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   54.902295][ T3636] 8021q: adding VLAN 0 to HW filter on device team0
[   54.930217][ T3647] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.937401][ T3652] Bluetooth: hci1: command tx timeout
[   54.942826][ T3652] Bluetooth: hci4: command tx timeout
[   54.948563][ T3649] Bluetooth: hci2: command tx timeout
[   54.965779][  T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   54.984016][  T102] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   54.993806][  T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   55.017479][ T3652] Bluetooth: hci0: command tx timeout
[   55.022919][ T3652] Bluetooth: hci3: command tx timeout
[   55.023537][  T102] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   55.047447][  T102] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   55.060713][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   55.071040][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   55.080513][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.087683][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.122371][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   55.132496][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   55.143473][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   55.153189][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   55.162239][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   55.171368][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.178518][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.194005][ T3644] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   55.204632][ T3644] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   55.231759][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   55.240427][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   55.250495][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   55.260044][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   55.269191][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   55.278058][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   55.293158][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   55.313055][ T3647] device veth0_vlan entered promiscuous mode
[   55.349255][ T3635] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.356681][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   55.365419][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   55.374076][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   55.383396][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   55.392716][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   55.401993][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   55.440282][ T3639] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.451021][ T3647] device veth1_vlan entered promiscuous mode
[   55.464088][ T3636] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   55.475568][ T3636] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   55.488455][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   55.496842][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   55.505830][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   55.514388][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   55.523719][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   55.536747][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   55.545239][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   55.556743][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   55.565444][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   55.574034][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   55.583023][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   55.591884][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   55.600531][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   55.650641][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   55.680566][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   55.698136][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   55.731328][ T3647] device veth0_macvtap entered promiscuous mode
[   55.753923][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   55.771124][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   55.798341][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   55.820750][ T3647] device veth1_macvtap entered promiscuous mode
[   55.835790][ T3639] device veth0_vlan entered promiscuous mode
[   55.849921][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   55.871252][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   55.886034][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   55.908080][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   55.919278][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   55.951049][ T3639] device veth1_vlan entered promiscuous mode
[   55.966718][ T3647] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.983184][ T3647] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.999335][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   56.013393][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   56.023388][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   56.032330][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   56.041439][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   56.071383][ T3647] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.081025][ T3647] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.090720][ T3647] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.100239][ T3647] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.116544][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   56.125691][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   56.133498][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   56.149813][ T3644] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.187806][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   56.201196][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   56.211104][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   56.220661][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   56.232613][ T3639] device veth0_macvtap entered promiscuous mode
[   56.255835][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   56.270765][ T3639] device veth1_macvtap entered promiscuous mode
[   56.286414][ T3635] device veth0_vlan entered promiscuous mode
[   56.296769][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   56.305328][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   56.314135][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   56.322995][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   56.371213][ T3636] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.378995][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.388978][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.405222][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   56.415017][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   56.423338][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   56.431729][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   56.441665][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   56.462131][ T3635] device veth1_vlan entered promiscuous mode
[   56.494719][ T3644] device veth0_vlan entered promiscuous mode
[   56.504193][ T3639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   56.515623][ T3639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.528864][ T3639] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.536265][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   56.544880][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   56.553208][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   56.562839][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   56.573259][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   56.582082][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   56.592803][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   56.601044][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   56.624646][ T3639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   56.635593][ T3639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.648683][ T3639] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.664141][ T3644] device veth1_vlan entered promiscuous mode
[   56.673871][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   56.683238][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   56.692310][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   56.702716][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   56.711759][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   56.723265][ T3639] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.732717][ T3639] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.743286][ T3639] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.752342][ T3639] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.763907][ T1298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.772731][ T1298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.796112][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   56.810834][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   56.833093][ T3636] device veth0_vlan entered promiscuous mode
[   56.854529][ T3644] device veth0_macvtap entered promiscuous mode
[   56.878589][ T3635] device veth0_macvtap entered promiscuous mode
[   56.896177][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   56.905644][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   56.914627][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   56.923294][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   56.932689][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   56.942772][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   56.956680][ T3644] device veth1_macvtap entered promiscuous mode
[   56.973472][ T3636] device veth1_vlan entered promiscuous mode
[   56.990703][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   57.001486][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   57.013150][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   57.028669][ T3652] Bluetooth: hci4: command tx timeout
[   57.032091][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   57.034079][ T3652] Bluetooth: hci2: command tx timeout
[   57.042956][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   57.047181][ T3650] Bluetooth: hci1: command tx timeout
[   57.076487][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   57.082668][ T3714] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'.
[   57.094303][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   57.106217][ T3635] device veth1_macvtap entered promiscuous mode
[   57.107346][ T3652] Bluetooth: hci3: command tx timeout
[   57.112781][ T3649] Bluetooth: hci0: command tx timeout
[   57.216371][ T3644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   57.227089][ T3644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   57.240158][ T3644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   57.251222][ T3644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   57.264647][ T3644] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.286971][ T3636] device veth0_macvtap entered promiscuous mode
[   57.294581][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   57.303021][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   57.313179][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   57.323351][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   57.332911][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   57.343812][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   57.362659][ T3644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   57.376418][ T3644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   57.386868][ T3644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   57.399545][ T3644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   57.428044][ T3644] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.443648][ T3636] device veth1_macvtap entered promiscuous mode
[   57.451220][ T3701] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.468375][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   57.484817][ T3701] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.494616][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   57.513138][ T3644] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.529005][ T3644] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.537837][ T3644] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.538341][ T3716] misc userio: The device must be registered before sending interrupts
[   57.547277][ T3644] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.587676][ T3635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   57.601302][ T3635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   57.613473][ T3635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   57.624322][ T3635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   57.634683][ T3635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   57.646598][ T3635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   57.663394][ T3635] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.675984][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   57.691512][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   57.700750][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   57.711840][ T3636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   57.723042][ T3636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   57.733529][ T3636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   57.745628][ T3636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   57.756630][ T3636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   57.768135][ T3636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   57.779244][ T3636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   57.790938][ T3636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   57.808647][ T3636] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.840431][ T3635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   57.852797][ T3635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   57.862981][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   57.873552][ T3635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   57.884413][ T3635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   57.895281][ T3635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   57.907514][ T3635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   57.935480][ T3635] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.943920][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   57.958420][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   57.971133][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   57.981233][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   57.994442][ T3636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   58.005839][ T3636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.015891][ T3636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   58.027336][ T3636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.037719][ T3636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   58.055450][ T3636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.066218][ T3636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   58.080076][ T3636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.098711][ T3636] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.131482][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   58.149250][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   58.164115][ T3635] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.177432][ T3635] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.186223][ T3635] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.208021][ T3635] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.219892][  T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.234208][  T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.242680][ T3636] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.252016][ T3636] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.261843][ T3636] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.272057][ T3636] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.289491][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   58.413328][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.427651][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.434729][ T3725] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   58.439908][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   58.531866][ T1298] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.555667][ T3726] x_tables: eb_tables: nflog.0 target: invalid size 80 (kernel) != (user) 0
[   58.565536][ T1298] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.573293][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.587550][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.613480][  T102] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   58.627495][  T102] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   58.643399][ T1298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.655787][ T1298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.666834][  T102] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   58.705170][  T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.762291][  T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.784536][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   58.839660][ T1298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.858013][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   59.127861][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[   59.137253][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[   59.165184][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[   59.177012][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[   59.185309][ T3649] Bluetooth: hci2: command tx timeout
[   59.186324][ T3652] Bluetooth: hci1: command tx timeout
[   59.197054][ T3650] Bluetooth: hci4: command tx timeout
[   59.197485][ T3651] Bluetooth: hci0: command tx timeout
[   59.197504][ T3645] Bluetooth: hci3: command tx timeout
[   59.225656][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[   59.235320][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[   59.321138][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   59.337379][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   59.562929][ T1298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.857660][ T3733] x_tables: eb_tables: nflog.0 target: invalid size 80 (kernel) != (user) 0
[   59.861383][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   59.867952][ T3738] binder: BINDER_SET_CONTEXT_MGR already set
[   59.928183][ T3738] binder: 3737:3738 ioctl 4018620d 20000040 returned -16
[   60.112459][ T3750] device batadv0 entered promiscuous mode
[   60.112672][ T3750] device vlan2 entered promiscuous mode
[   60.130821][ T3750] device batadv0 left promiscuous mode
[   60.367143][ T3679] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   60.392942][    C0] eth0: bad gso: type: 1, size: 1408
[   60.470685][ T3762] netlink: 'syz.3.10': attribute type 4 has an invalid length.
[   60.521223][ T3762] netlink: 'syz.3.10': attribute type 4 has an invalid length.
[   60.643129][ T3762] syz.3.10 (3762) used greatest stack depth: 19704 bytes left
[   60.747830][ T3679] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   60.776010][ T3679] usb 1-1: config 0 has no interfaces?
[   60.879979][ T3679] usb 1-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10
[   60.929565][ T3679] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[   60.974306][ T3679] usb 1-1: Manufacturer: syz
[   61.035480][ T3679] usb 1-1: config 0 descriptor??
[   61.801993][ T3782] loop3: detected capacity change from 0 to 1024
[   61.868685][ T3782] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   61.926887][   T26] audit: type=1800 audit(1723992309.377:2): pid=3782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.16" name="bus" dev="loop3" ino=18 res=0 errno=0
[   61.977759][ T3626] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   61.985487][ T3682] usb 1-1: USB disconnect, device number 2
[   62.036400][   T26] audit: type=1800 audit(1723992309.427:3): pid=3782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.16" name="bus" dev="loop3" ino=18 res=0 errno=0
[   62.092986][ T3644] EXT4-fs (loop3): unmounting filesystem.
[   62.520344][ T3788] tipc: Started in network mode
[   62.525452][ T3788] tipc: Node identity 7f000001, cluster identity 4711
[   62.536137][ T3788] tipc: Enabled bearer <udp:syz1>, priority 10
[   62.562610][ T3626] usb 5-1: New USB device found, idVendor=1235, idProduct=000e, bcdDevice=f0.ee
[   62.591265][ T3626] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   62.903263][ T3626] usb 5-1: config 0 descriptor??
[   63.353947][ T3798] syz.3.19 uses obsolete (PF_INET,SOCK_PACKET)
[   63.433801][ T3626] snd-usb-audio: probe of 5-1:0.0 failed with error -2
[   63.747319][ T3801] loop0: detected capacity change from 0 to 128
[   63.774345][ T3801] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   64.093573][ T3803] loop3: detected capacity change from 0 to 16
[   64.805688][ T3802] sched: RT throttling activated
[   64.827968][ T3683] tipc: Node number set to 2130706433
[   64.846275][ T3803] erofs: (device loop3): mounted with root inode @ nid 36.
[   64.864399][ T3798] process 'syz.3.19' launched './file2' with NULL argv: empty string added
[   65.013466][ T3626] usb 5-1: USB disconnect, device number 2
[   65.256027][ T3645] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[   65.286722][ T3798] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192]
[   65.428048][   T26] audit: type=1800 audit(1723992312.867:4): pid=3798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.19" name="file2" dev="loop3" ino=89 res=0 errno=0
[   66.074838][ T3822] device batadv0 entered promiscuous mode
[   66.075151][ T3822] device vlan2 entered promiscuous mode
[   66.095895][ T3822] device batadv0 left promiscuous mode
[   66.120359][ T3825] loop1: detected capacity change from 0 to 256
[   66.120909][ T3825] =======================================================
[   66.120909][ T3825] WARNING: The mand mount option has been deprecated and
[   66.120909][ T3825]          and is ignored by this kernel. Remove the mand
[   66.120909][ T3825]          option from the mount to silence this warning.
[   66.120909][ T3825] =======================================================
[   66.145061][ T3825] FAT-fs (loop1): Directory bread(block 64) failed
[   66.145121][ T3825] FAT-fs (loop1): Directory bread(block 65) failed
[   66.145196][ T3825] FAT-fs (loop1): Directory bread(block 66) failed
[   66.145223][ T3825] FAT-fs (loop1): Directory bread(block 67) failed
[   66.145290][ T3825] FAT-fs (loop1): Directory bread(block 68) failed
[   66.145317][ T3825] FAT-fs (loop1): Directory bread(block 69) failed
[   66.145382][ T3825] FAT-fs (loop1): Directory bread(block 70) failed
[   66.145409][ T3825] FAT-fs (loop1): Directory bread(block 71) failed
[   66.145481][ T3825] FAT-fs (loop1): Directory bread(block 72) failed
[   66.145508][ T3825] FAT-fs (loop1): Directory bread(block 73) failed
[   66.193496][ T3819] x_tables: eb_tables: nflog.0 target: invalid size 80 (kernel) != (user) 0
[   66.429926][ T3742] kworker/u4:7: attempt to access beyond end of device
[   66.429926][ T3742] loop1: rw=1, sector=1224, nr_sectors = 4 limit=256
[   67.051901][ T3835] loop1: detected capacity change from 0 to 2048
[   67.154678][ T3835] EXT4-fs error (device loop1): ext4_orphan_get:1422: comm syz.1.28: bad orphan inode 8192
[   67.180909][ T3835] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   67.439268][ T3843] loop0: detected capacity change from 0 to 1024
[   67.933365][ T3850] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   67.954179][ T3850] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   68.063607][ T3636] EXT4-fs (loop1): unmounting filesystem.
[   68.090988][ T3843] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   68.134730][   T26] audit: type=1800 audit(1723992315.587:5): pid=3843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.29" name="bus" dev="loop0" ino=18 res=0 errno=0
[   68.227114][   T26] audit: type=1800 audit(1723992315.667:6): pid=3843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.29" name="bus" dev="loop0" ino=18 res=0 errno=0
[   68.254415][ T3855] loop3: detected capacity change from 0 to 256
[   68.337247][ T3639] EXT4-fs (loop0): unmounting filesystem.
[   68.343235][ T3855] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   68.361235][ T3859] loop4: detected capacity change from 0 to 512
[   68.367754][ T3855] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[   68.419832][ T3863] netlink: 28 bytes leftover after parsing attributes in process `syz.1.36'.
[   68.420424][ T3855] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   68.428817][ T3863] netlink: 28 bytes leftover after parsing attributes in process `syz.1.36'.
[   68.476790][ T3859] EXT4-fs (loop4): 1 orphan inode deleted
[   68.500233][ T3859] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   68.509598][ T3859] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038 (0x7fffffff)
[   71.084931][ T3889] tipc: Started in network mode
[   71.090003][ T3889] tipc: Node identity 7f000001, cluster identity 4711
[   71.097587][ T3889] tipc: Enabled bearer <udp:syz1>, priority 10
[   71.340426][ T1267] ieee802154 phy0 wpan0: encryption failed: -22
[   71.552729][ T1267] ieee802154 phy1 wpan1: encryption failed: -22
[   71.860399][ T3635] EXT4-fs (loop4): unmounting filesystem.
[   72.101491][   T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.122411][ T3899] loop2: detected capacity change from 0 to 2048
[   72.168227][ T3685] tipc: Node number set to 2130706433
[   72.198518][ T3899] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   72.198872][ T3901] loop0: detected capacity change from 0 to 2048
[   72.305039][ T3901] EXT4-fs error (device loop0): ext4_orphan_get:1422: comm syz.0.43: bad orphan inode 8192
[   72.337908][   T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.377593][ T3901] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   72.399379][   T26] audit: type=1800 audit(1723992319.857:7): pid=3899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.42" name="bus" dev="loop2" ino=1357 res=0 errno=0
[   72.651866][   T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.623756][ T3917] loop2: detected capacity change from 0 to 256
[   73.747089][   T26] audit: type=1800 audit(1723992321.197:8): pid=3917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.48" name="bus" dev="loop2" ino=1048598 res=0 errno=0
[   73.952731][ T3639] EXT4-fs (loop0): unmounting filesystem.
[   74.016784][   T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.183888][ T3923] loop2: detected capacity change from 0 to 1764
[   74.391126][   T26] audit: type=1326 audit(1723992321.847:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3932 comm="syz.3.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa790f79e79 code=0x7ffc0000
[   74.420107][ T3650] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   74.430012][ T3650] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   74.437763][ T3650] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   74.449801][ T3650] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   74.458668][ T3650] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   74.466014][ T3650] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   74.576310][   T26] audit: type=1326 audit(1723992321.877:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3932 comm="syz.3.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa790f79e79 code=0x7ffc0000
[   74.652224][   T26] audit: type=1326 audit(1723992321.877:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3932 comm="syz.3.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7fa790f79e79 code=0x7ffc0000
[   74.786102][   T26] audit: type=1326 audit(1723992321.877:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3932 comm="syz.3.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa790f79e79 code=0x7ffc0000
[   74.825356][   T26] audit: type=1326 audit(1723992321.877:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3932 comm="syz.3.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa790f79e79 code=0x7ffc0000
[   74.909006][ T3935] x_tables: eb_tables: nflog.0 target: invalid size 80 (kernel) != (user) 0
[   75.249161][ T3929] chnl_net:caif_netlink_parms(): no params data found
[   75.295232][ T3955] loop3: detected capacity change from 0 to 2048
[   75.350829][ T3955] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   75.539844][ T3965] loop0: detected capacity change from 0 to 512
[   75.614168][ T3966] loop1: detected capacity change from 0 to 16
[   75.731816][ T3966] erofs: (device loop1): mounted with root inode @ nid 36.
[   75.801536][ T3965] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   75.828199][ T3650] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[   75.888093][ T3966] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192]
[   76.017371][   T26] audit: type=1800 audit(1723992323.387:14): pid=3966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.59" name="file2" dev="loop1" ino=89 res=0 errno=0
[   76.184658][ T3965] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   76.211919][ T3965] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038 (0x7fffffff)
[   76.283343][ T3965] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[   76.361336][ T3929] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.391742][ T3965] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 32768 with max blocks 1 with error 28
[   76.423303][ T3929] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.451392][ T3929] device bridge_slave_0 entered promiscuous mode
[   76.459524][ T3965] EXT4-fs (loop0): This should not happen!! Data will be lost
[   76.459524][ T3965] 
[   76.462279][  T153] cfg80211: failed to load regulatory.db
[   76.513229][ T3929] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.528047][ T3929] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.537154][ T3650] Bluetooth: hci1: command tx timeout
[   76.538443][ T3965] EXT4-fs (loop0): Total free blocks count 0
[   76.569805][ T3929] device bridge_slave_1 entered promiscuous mode
[   76.621036][ T3982] mmap: syz.2.63 (3982) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   76.634219][ T3965] EXT4-fs (loop0): Free/Dirty block details
[   76.640914][ T3965] EXT4-fs (loop0): free_blocks=39626
[   76.676085][ T3965] EXT4-fs (loop0): dirty_blocks=1
[   76.698205][ T3965] EXT4-fs (loop0): Block reservation details
[   76.704504][ T3965] EXT4-fs (loop0): i_reserved_data_blocks=1
[   76.759705][ T3929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   76.783881][ T3639] EXT4-fs (loop0): unmounting filesystem.
[   76.873836][ T3929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.988299][ T3990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.66'.
[   77.015113][ T3990] autofs4:pid:3990:autofs_fill_super: called with bogus options
[   77.208841][ T3644] ==================================================================
[   77.216947][ T3644] BUG: KASAN: use-after-free in udf_close_lvid+0x6a4/0x9a0
[   77.224173][ T3644] Write of size 1 at addr ffff888168ae2060 by task syz-executor/3644
[   77.232238][ T3644] 
[   77.234572][ T3644] CPU: 1 PID: 3644 Comm: syz-executor Not tainted 6.1.105-syzkaller #0
[   77.242822][ T3644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[   77.252970][ T3644] Call Trace:
[   77.256258][ T3644]  <TASK>
[   77.259196][ T3644]  dump_stack_lvl+0x1e3/0x2cb
[   77.263885][ T3644]  ? nf_tcp_handle_invalid+0x642/0x642
[   77.269395][ T3644]  ? panic+0x764/0x764
[   77.273490][ T3644]  ? _printk+0xd1/0x111
[   77.277657][ T3644]  ? __virt_addr_valid+0x17f/0x530
[   77.282783][ T3644]  ? __virt_addr_valid+0x17f/0x530
[   77.287901][ T3644]  print_report+0x15f/0x4f0
[   77.292404][ T3644]  ? __virt_addr_valid+0x17f/0x530
[   77.297519][ T3644]  ? __virt_addr_valid+0x17f/0x530
[   77.302631][ T3644]  ? __virt_addr_valid+0x45b/0x530
[   77.307749][ T3644]  ? __phys_addr+0xb6/0x170
[   77.312258][ T3644]  ? udf_close_lvid+0x6a4/0x9a0
[   77.317112][ T3644]  kasan_report+0x136/0x160
[   77.321616][ T3644]  ? udf_close_lvid+0x6a4/0x9a0
[   77.326474][ T3644]  udf_close_lvid+0x6a4/0x9a0
[   77.331156][ T3644]  ? lockdep_hardirqs_on+0x94/0x130
[   77.336364][ T3644]  ? udf_open_lvid+0x5a0/0x5a0
[   77.341129][ T3644]  ? iput+0x3f7/0x980
[   77.345115][ T3644]  ? hook_sb_delete+0x842/0xb80
[   77.349987][ T3644]  udf_put_super+0xc9/0x160
[   77.354510][ T3644]  ? udf_free_in_core_inode+0x20/0x20
[   77.359891][ T3644]  generic_shutdown_super+0x130/0x340
[   77.365271][ T3644]  kill_block_super+0x7a/0xe0
[   77.369958][ T3644]  deactivate_locked_super+0xa0/0x110
[   77.375335][ T3644]  cleanup_mnt+0x490/0x520
[   77.379759][ T3644]  ? lockdep_hardirqs_on+0x94/0x130
[   77.384962][ T3644]  task_work_run+0x246/0x300
[   77.389553][ T3644]  ? kasan_quarantine_put+0xd4/0x220
[   77.394837][ T3644]  ? task_work_cancel+0x2e0/0x2e0
[   77.399861][ T3644]  ? kmem_cache_free+0x292/0x510
[   77.404795][ T3644]  ? do_exit+0xa6e/0x26a0
[   77.409127][ T3644]  do_exit+0xa73/0x26a0
[   77.413296][ T3644]  ? put_task_struct+0x80/0x80
[   77.418060][ T3644]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[   77.424044][ T3644]  ? print_irqtrace_events+0x210/0x210
[   77.429511][ T3644]  ? _raw_spin_unlock_irq+0x1f/0x40
[   77.434705][ T3644]  ? lockdep_hardirqs_on+0x94/0x130
[   77.439900][ T3644]  do_group_exit+0x202/0x2b0
[   77.444492][ T3644]  __x64_sys_exit_group+0x3b/0x40
[   77.449521][ T3644]  do_syscall_64+0x3b/0xb0
[   77.453938][ T3644]  ? clear_bhb_loop+0x45/0xa0
[   77.458636][ T3644]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   77.464539][ T3644] RIP: 0033:0x7fa790f79e79
[   77.468948][ T3644] Code: Unable to access opcode bytes at 0x7fa790f79e4f.
[   77.475954][ T3644] RSP: 002b:00007ffcf244ba68 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[   77.484375][ T3644] RAX: ffffffffffffffda RBX: 00007fa790fe7826 RCX: 00007fa790f79e79
[   77.492348][ T3644] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
[   77.500337][ T3644] RBP: 0000000000000010 R08: 00007ffcf2449806 R09: 00007ffcf244cd20
[   77.508400][ T3644] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcf244cd20
[   77.516378][ T3644] R13: 00007fa790fe77b4 R14: 0000555555e944a8 R15: 00007ffcf244dde0
[   77.524342][ T3644]  </TASK>
[   77.527444][ T3644] 
[   77.529759][ T3644] The buggy address belongs to the physical page:
[   77.536172][ T3644] page:ffffea0005a2b880 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x168ae2
[   77.546401][ T3644] flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff)
[   77.553683][ T3644] raw: 057ff00000000000 ffffea0005a2b888 ffffea0005a2b888 0000000000000000
[   77.562258][ T3644] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[   77.570817][ T3644] page dumped because: kasan: bad access detected
[   77.577220][ T3644] page_owner info is not present (never set?)
[   77.583258][ T3644] 
[   77.585561][ T3644] Memory state around the buggy address:
[   77.591257][ T3644]  ffff888168ae1f00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[   77.599307][ T3644]  ffff888168ae1f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   77.607348][ T3644] >ffff888168ae2000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[   77.615395][ T3644]                                                        ^
[   77.622563][ T3644]  ffff888168ae2080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[   77.630603][ T3644]  ffff888168ae2100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[   77.638651][ T3644] ==================================================================
[   77.677139][ T3644] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   77.684379][ T3644] CPU: 0 PID: 3644 Comm: syz-executor Not tainted 6.1.105-syzkaller #0
[   77.692624][ T3644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[   77.702734][ T3644] Call Trace:
[   77.706022][ T3644]  <TASK>
[   77.708960][ T3644]  dump_stack_lvl+0x1e3/0x2cb
[   77.713665][ T3644]  ? nf_tcp_handle_invalid+0x642/0x642
[   77.719141][ T3644]  ? panic+0x764/0x764
[   77.723220][ T3644]  ? preempt_schedule_common+0xa6/0xd0
[   77.728705][ T3644]  ? vscnprintf+0x59/0x80
[   77.733046][ T3644]  panic+0x318/0x764
[   77.737301][ T3644]  ? check_panic_on_warn+0x1d/0xa0
[   77.742431][ T3644]  ? memcpy_page_flushcache+0xfc/0xfc
[   77.747822][ T3644]  ? _raw_spin_unlock_irqrestore+0x128/0x130
[   77.753815][ T3644]  ? _raw_spin_unlock+0x40/0x40
[   77.758674][ T3644]  ? print_report+0x4a3/0x4f0
[   77.763365][ T3644]  check_panic_on_warn+0x7e/0xa0
[   77.768315][ T3644]  ? udf_close_lvid+0x6a4/0x9a0
[   77.773221][ T3644]  end_report+0x66/0x110
[   77.777474][ T3644]  kasan_report+0x143/0x160
[   77.781984][ T3644]  ? udf_close_lvid+0x6a4/0x9a0
[   77.787023][ T3644]  udf_close_lvid+0x6a4/0x9a0
[   77.791713][ T3644]  ? lockdep_hardirqs_on+0x94/0x130
[   77.796919][ T3644]  ? udf_open_lvid+0x5a0/0x5a0
[   77.801866][ T3644]  ? iput+0x3f7/0x980
[   77.805859][ T3644]  ? hook_sb_delete+0x842/0xb80
[   77.810809][ T3644]  udf_put_super+0xc9/0x160
[   77.815410][ T3644]  ? udf_free_in_core_inode+0x20/0x20
[   77.820800][ T3644]  generic_shutdown_super+0x130/0x340
[   77.826176][ T3644]  kill_block_super+0x7a/0xe0
[   77.830845][ T3644]  deactivate_locked_super+0xa0/0x110
[   77.836207][ T3644]  cleanup_mnt+0x490/0x520
[   77.840612][ T3644]  ? lockdep_hardirqs_on+0x94/0x130
[   77.845796][ T3644]  task_work_run+0x246/0x300
[   77.850382][ T3644]  ? kasan_quarantine_put+0xd4/0x220
[   77.855655][ T3644]  ? task_work_cancel+0x2e0/0x2e0
[   77.860842][ T3644]  ? kmem_cache_free+0x292/0x510
[   77.865767][ T3644]  ? do_exit+0xa6e/0x26a0
[   77.870084][ T3644]  do_exit+0xa73/0x26a0
[   77.874230][ T3644]  ? put_task_struct+0x80/0x80
[   77.878981][ T3644]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[   77.884949][ T3644]  ? print_irqtrace_events+0x210/0x210
[   77.890396][ T3644]  ? _raw_spin_unlock_irq+0x1f/0x40
[   77.895579][ T3644]  ? lockdep_hardirqs_on+0x94/0x130
[   77.900758][ T3644]  do_group_exit+0x202/0x2b0
[   77.905333][ T3644]  __x64_sys_exit_group+0x3b/0x40
[   77.910347][ T3644]  do_syscall_64+0x3b/0xb0
[   77.914747][ T3644]  ? clear_bhb_loop+0x45/0xa0
[   77.919408][ T3644]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   77.925285][ T3644] RIP: 0033:0x7fa790f79e79
[   77.929856][ T3644] Code: Unable to access opcode bytes at 0x7fa790f79e4f.
[   77.936868][ T3644] RSP: 002b:00007ffcf244ba68 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[   77.945269][ T3644] RAX: ffffffffffffffda RBX: 00007fa790fe7826 RCX: 00007fa790f79e79
[   77.953231][ T3644] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
[   77.961191][ T3644] RBP: 0000000000000010 R08: 00007ffcf2449806 R09: 00007ffcf244cd20
[   77.969145][ T3644] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcf244cd20
[   77.977101][ T3644] R13: 00007fa790fe77b4 R14: 0000555555e944a8 R15: 00007ffcf244dde0
[   77.985061][ T3644]  </TASK>
[   77.988171][ T3644] Kernel Offset: disabled
[   77.992485][ T3644] Rebooting in 86400 seconds..