last executing test programs:

32.840716701s ago: executing program 2 (id=1659):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nfc_llcp(r0, &(0x7f0000001600)={&(0x7f0000000040)={0x27, 0x0, 0x0, 0x6, 0x4, 0x0, "94f909b22e251e6003e2cde678b086f50f34928a2aab02c4c3c51fe552af279f503d3656d68573a38056d6bc474363bf1412677d6767d69634531f0ed735ef", 0x3b}, 0x60, &(0x7f0000000540)=[{&(0x7f00000000c0)="649188c6af2129cd77847c4208d81954d5083cd1bf7a89208347760c78cbe441333db179013bf51f7bb136b342cc8732407e08283b628ec94f3c116353d1b072a62ef68233203c67857017979f9f34bf7ab0b88f83902ca3f85c36f64ec2c5dce5c1e569e28b4ad81e9085e8648e2ab868b3321512eb9874456b2ce4b4af3ddf2d6fe3255f20254bd9769b832df344a3d736417805cf5157415ee6d5ce9071f6d649efe02d5f1694afdf4ab39d3cae43946c3eaeffe64be15936f589c018e96d749ee2e7c682a4c55f86", 0xca}, {&(0x7f00000001c0)}, {&(0x7f0000000200)="8a44603f", 0x4}, {&(0x7f0000000240)="ad61d10646a79dd477c56a97b9f3a6a8a7abe3e11c6f3e5f5f1f88591f472d561f5b4608706808cbf619874f51fc", 0x2e}, {&(0x7f0000000280)="06160e73dcee796f1bfbcf77c656c16055fdee857d43f1aa80fcd00e4257ae9c211a31d984583a98f6aba0f9a45933f08a16ad8e776e6a5d2c6a18d0ab6c364b918a1347a8bf3123ba188a50f3d1127c96040e2bb7a8385e06857a44cf86f314b2ed5056c736a39c36be497142b552fee39621ce0548ebc2902932566dcad38ac0b8269a399023e49a2179eabfaef2b3764fa51bb68c119eb8b880185481818e77697f25e0bf06a2638b828532df374871fdd11c8c7444c05a7849c3669a2bf3027d6dee9461758b39be006e39c870154e021e59d9f79596a0f4cc96", 0xdc}, {&(0x7f0000000380)="8fb8c7ff94ee5f14b0edeaeefdd6b9449ea1a0f786859037f8882839b985a6874dde093318f87ea17f14773e940a91da058e343b2dd3dfd1465593ac566cd68b54eb80a8f0494108118fd3acf8ae9294e5f3f89fa47d05ae10543def03b9b96c9b6ef27d8425acc18a6c039f076282098a8777b73d5eac8995b543df39711c9f890112471603d0fc0e6742563abf58a7765b28f9c921ac77d6d9e8384bad38d4cdb0194a639a8c7b2b419851", 0xac}, {&(0x7f0000000440)="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", 0xfb}], 0x7, &(0x7f00000005c0)={0x1010, 0x103, 0x6, "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"}, 0x1010, 0x20000040}, 0x1)
r1 = socket$phonet(0x23, 0x2, 0x1)
sendto$phonet(r1, &(0x7f0000001640)="fd15abc331beeffb7b3fa87cacc5048b8048245371b42a930a0c052344a4a8b70b4684b572783b00616fbe1941aec0ab0c97b02cc389f528b6b93f1191cd0416dcb6a4aff98c00fb34fe55111e7698f81254c1dc0edbe49780ed4e1dd6ea41725737a647611d0ba372b66215c21276a3028f25c42d65b197cd7858af1b3480606c68d1b2c08cf0305b0bfaa54f8ddae76bce", 0x92, 0x4000, &(0x7f0000001700)={0x23, 0x9, 0x3, 0x20}, 0x10)
r2 = syz_io_uring_setup(0x5594, &(0x7f0000001740)={0x0, 0xf36c, 0x0, 0x0, 0xb6}, &(0x7f00000017c0)=<r3=>0x0, &(0x7f0000001800))
r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x10, 0xffffffffffffffff, 0x10000000)
syz_io_uring_submit(r3, r4, &(0x7f0000001840)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1})
r5 = io_uring_setup(0x7dbd, &(0x7f0000001880)={0x0, 0xb2c0, 0x20, 0x3, 0x366, 0x0, r2})
syz_io_uring_submit(r3, r4, &(0x7f0000001b40)=@IORING_OP_WRITEV={0x2, 0x2, 0x6000, @fd=r5, 0x2, &(0x7f0000001b00)=[{&(0x7f0000001900)="ec04f42e916407ba6e71fb039ee5205298e3b701bfed29e272d8767ecbdcb6893bb6799354f2a58612a8259ec7de58ca28b5c589f03055fcfe198dd89cc62b92f302854534a89d61b8a64dacdd5918f6a601dce478e1aba0ff639390fd0efe059e8fb0c0752cc7e6cc408e61d036eed1a86c7bb5df278c31e7ac361353b65ac4bd5830c240fceedcc7a240a8125aa28a85894c9ce432e6ba3456b2ca9836cc3471ad4786f94a7eb132cc3fe92c4af2ec9a474a40f63b1be184aa63fc49ba357677d696a4256dd7fa12003567db4e1d106b8cefda532d9f7b5b587c03e3", 0xdd}, {&(0x7f0000001a00)="8d59522289cefeefc57b26d9b670cec3c2a98d9583ec47703c18e6", 0x1b}, {&(0x7f0000001a40)="4770be3b0626a91a785133f28dee79cab15a4f643ff58f002320fc1d31a71036964d1521d8e0b7792c3a743fdc8c5b82806582c7b675c75347b7a488411db01b9f35d8049a5d0ade7f73d2e85b002fd36d73", 0x52}, {&(0x7f0000001ac0)="29b8eb0ab323ca1df0af6c7fdc24", 0xe}], 0x4, 0x16, 0x1, {0x1}})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000001b80), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000001bc0))
io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000001cc0)={0x1, 0x1, 0x0, &(0x7f0000001c40)=[{0x0}], 0x0}, 0x20)
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r5, 0xe, &(0x7f0000002180)={0xfffffffc, 0x0, 0x0, &(0x7f0000002140)=[0x0, 0x0]}, 0x20)
syz_genetlink_get_family_id$gtp(&(0x7f0000002200), r2)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000022c0)={'ip6tnl0\x00', &(0x7f0000002240)={'syztnl0\x00', 0x0, 0x0, 0x65, 0x0, 0x0, 0x44, @private0={0xfc, 0x0, '\x00', 0x1}, @private1, 0x7800, 0x840, 0x0, 0x6}})
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000002300)='ns/ipc\x00')
recvfrom$phonet(r1, &(0x7f0000002440)=""/4096, 0x1000, 0x10061, 0x0, 0x0)
r7 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2)
memfd_create(&(0x7f00000034c0)='+\x00', 0x0)
memfd_create(&(0x7f0000003580)='ns/ipc\x00', 0x0)
ioctl$UDMABUF_CREATE(r7, 0x40187542, &(0x7f0000003740)={0xffffffffffffffff, 0x0, 0x2000, 0xfffffffff0000000})
accept$nfc_llcp(r0, 0x0, 0x0)

31.673391489s ago: executing program 2 (id=1661):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r1 = fanotify_init(0x0, 0x0)
fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_ethernet(0x17, &(0x7f00000004c0)={@dev, @random="e5dbda09b0a5", @val, {@generic={0x0, "b2"}}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @const={0x0, 0x0, 0x0, 0xa, 0x2}]}}, 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1, 0x0, 0x0, @void, @value}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r5, &(0x7f0000000000), 0x400000)
read$FUSE(r1, &(0x7f00000057c0)={0x2020}, 0x2020)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)

30.24405768s ago: executing program 2 (id=1662):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000001010200000000000000000a0000003c0001802c00018014000300fc02000000000000000000000000000014000400fc0000000000000000000000000000000c0002"], 0x50}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0))
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @dev}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x1, 0x0, @loopback}], 0x1c)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000080))
ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000200))
socket$nl_audit(0x10, 0x3, 0x9)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_80211_inject_frame(&(0x7f0000000140)=@device_b, &(0x7f00000008c0)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, 0x1, 0x0, @val={0x10, 0x1}, [{0xdd, 0x6, "20608f7f1f5d"}, {0xdd, 0x6, "a2dbd0dc3eaa"}]}, 0x31)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080))
socket$l2tp6(0xa, 0x2, 0x73)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001b00))
sendmsg$nl_route(r4, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006970766c616e0000140002800600010080"], 0x44}}, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000800), &(0x7f0000000840)=0x4)
preadv(r0, &(0x7f0000002600)=[{0x0}, {&(0x7f00000001c0)=""/130, 0x82}, {0x0}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/162, 0xa2}, {&(0x7f0000002480)=""/12, 0xc}, {&(0x7f00000024c0)=""/57, 0x39}], 0x7, 0x58, 0x3)

28.584847292s ago: executing program 2 (id=1672):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_mount_image$udf(&(0x7f0000000140), &(0x7f00000000c0)='./file3/file0\x00', 0x18008, &(0x7f00000003c0)=ANY=[], 0xfe, 0x4c5, &(0x7f0000001200)="$eJzs20tsVFUcx/Hff+50mA5VysMChkATTawg0AcWSE0MDxtNeGihGoliKp1ipe2QTlFKQFiqOxcsXbJ14Yq4NSQujQuDMSxMkI2bWYkbgzl37mvGwkxDZ4bS74fQc++Z/52cc/5z55wzmREAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJAOvnGgt89a3QoAANBMx06M9A4w/wMAsKKcZP8PAACwkpg8/S7TznMlO+qfl2WPTM5cuDh6eHjhy9pNppQ8P979z/b1D+x5dXDvvrB89PVLbbOOnzh5oPtQYfr8bL5YzI93j85MnimM5+t+hse8vnCzqmK7PwDd0+cujE9MFLv7dw1UPHyx896q1V2dQ4MfHspou+fHjh4eHj6RiEm31d36mh62ws/I08syfXrzOzsmKaXHH4sar51Ga/c7sd3vxOjhYb8jU5NjM3PuQUsFUanKMcmEYxTkrZG5eCwpybXLMkuzZ2uTpx9kOri7ZMcleeE47PA/GK6rPa2QdltXST1aBjl7gq2Sp49kurW7U28H4+rnPyNdbnXj0HDp4P4vWMne8d8P3P3k3jaPvNv91sxEIRFrqeCOWu7zQzM94e9NWXk67t/xJRvRtlY3B03WLk/TMmW++cxfV8hfl64Z2rt12/7kCmNjjedxsbuCm6ueObktWDpYyv1b+n6hPlnz9KdM93/L+uc94RwgXXvwqAv/aErz0GjmaUqmf66UzKr2pV5ifx9Z7nN/Y9vfnj1UOD8/O3n2k7kFH89lD3xcnJsdO7Pww+W9q5esqbWPrZZa3JYsZ+Ud35efl6Lrgj3AM+Uzb8HreqrKUPL1U89x3bvYRayjXJvMPN2VaeL0pvI8o9yix2YlcPkflqlY+tnCTAf5T5fP4vzfeC0ev6xVlhE/t8+WP9cK1xKbT214WH0j8u/a5PL/vkwH/94UfKZRzn/1q9nFdcn0wfUtQVwq4+LSYXfKzzgxOZXvdbEPZFr3UxgrPzYXxK6PY/tcbFGmr25Vxq4OYjfEsf0u9rZMd35dOPa5OHbAxc67fN3pDmNzLnZrENsVx+46U5garzWsLv/9Mr139U0L+7xw/v99cONyPBdcqyoj/8v5o4+XKv+dibprQV5PBflP18j/1zLN/7Ul7Lc/9uHLaq3/N86/Wyt/f70yNtxQrotj++rtVqu5/K+V6d7rt6M+B30LTuMMJfP/fLqyjMa1Rflfm6jrDNqVWeRYrETF+Uvnxqam8rMcPMUHa/RENIODZXTQ6ncmNIOb/0fcrD7oWbiOCeb/jvJZvGK6/0U8/w9VlZEWzf/rEnVDwaqlLS1l56bPt22UssX5Szsnp8fO5s/mZwb2DPb279/TO7CvLRMu7uKjusfuaeDyv0OmKz/+Eu1jKtd/if1fYv2XqyojLcr/+mSfKtY1dQ/FiuTy3yHT4N3b0X4zyP/p8lnl+j/c//e8UFlG91+L8r8hUdcZtKtjkWMBAAAAAAAAAAAAAAAAAMtJzjy9KNPFkVcs/A1RPd//G68qI0v//a/yD5NrfP+rK1E33qTfNSxqoAEAAAAAAAAAAJokJU/fyvSSSnbVVXRIR5Mlnmr/BQAA///xOkk0")
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
dup(0xffffffffffffffff)
socket$key(0xf, 0x3, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f00000000c0)=0x81)
r3 = getpid()
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000340)={{0xffffffff, 0x0, 0x20000082, 0x9, 'syz1\x00'}, 0x2, 0x0, 0x9, r3, 0x0, 0x3, 'syz1\x00', 0x0})
r4 = dup(r2)
read$FUSE(r4, &(0x7f0000002540)={0x2020}, 0x2020)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0)
execve(0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0xffffffffffffffff, 0x16)
syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff)
sendmsg$IEEE802154_SCAN_REQ(r0, 0x0, 0x44890)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="b702000023008000bfa30000000000000703000000feffff7a0af0ff0000000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000001007d60b7030000010000006a0a00fe00000000850000000d0000009700000001000100950000000000000075cdc4b57b0c65752a3ad50000007ddd0000000000639100000000000000000000ff7f0000292f17cee19d0001000000000000000000cb04fcbb0ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb4413c0bef2e4852f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5d053bdee75dca3772be2c9d2d29dbaadbeab2a01685108e61aa000000000000000000000000008b798b4f7458d1863cc67d4c6a06e82800026f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f1b1b71b5f7ec6edc76609073909826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc972a3fd2c46f3c1cde713d2831210e00d2bfea3bf97ff8836d000000000000946bdb747e416b3064edb4f5aea06eba207ddab9f9baf98bc5192f23d95d33357fc55f92e5937e10995059f3348f69667b9260d504baa0446e1437af6fa875d9d32fdada251e6c74f192a23572ef582b7dd867c163c8cedaa2a2c5baceb37d4a40244c9bdca541cc7e65e20f5b5b735e2f33df9bd0614431d7dc5e47bb31c5b827d51733b64ddad4de1cdadce076d19d62e821b435619fb89fc07f81938200b4ebce83db57a6f5e9b1c2cf4b6ee90772d4865bf448d200e5c4e1e044d3587498128273b65670c02ff5c3c3ca633c41324fdc09e0b2621087db26bb0553612f2be27579ede2344a809e6b27d0044f2337895323357caddb54642dac82ae25deb08e111e0b9fa133c9da85dc50c3454ee0ff915331bd7f32f96fb55c7990334b1a1bc4d5d817b82f9fc278cc4868fbfa4d0f32a863c1ce050caddc5ca3b10c3e63daebba039e9f474aa8849dcc2501df3ffcb02d29d55a1a2cbe00e836db0e6b0a7ffd680dbcf7b982a956998df3dce0e9091a4d736db69038061e6b04c7c379e541afe1c5393e4e97c0146d7dc4915525c8bd6c044565badf8cc24727e70e619fa5a7c76a886946446162645e4ad8178185ba9aa929fb924eb2b3cc9ca3cf3a603683711a6f4aa84ffaec2c3b3ee0b13707916ec3cd5d000000000000000000005e717dbc2dfd109e05e37d975b3da80b38d9e021d75cc47a4df9804c36468f767cf23742d78f3d1f0d54ed01d0e282e8d73534e091e7582a53abec46e93d6908a1346180b59d64f70d7046faf247d17f96d9d1dff63704040ce49f2e66431a65155b71339237b591c482b5de7559f856fe20ac39adecdb5f64c003ac1f547bf1b151e84e8eb9ea69d3d752263d24c9d69b1762888ce75a91bdab16cd94d89b072d1bbeeba99cf52b45cdcfb12445b9b9d39bdb0fdfce46edc108aecd16d06f3c4a4e8bb71bdbfb6076d79321f7af34ab3e3b5b5747fda21c18546976e6df51f5cf3c372a550cca7f21d8cef069c0b5a4c3daeb11a0456c000f0fd1f039e1539ac31e037476fdfdc2da415ab02be45bc0f91369bd504e1b6e7403eee4bc957970c5b82259be461703e739f5802da2d036800fbe99198601e5639deb87f6e90a63a5c04993ea41a1ddd1d70548ee41b889705f99ea317f41dd59404d4f29"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)

25.441912101s ago: executing program 2 (id=1680):
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
r0 = socket$qrtr(0x2a, 0x2, 0x0)
bind$qrtr(r0, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e040011"], 0x7)
mkdir(0x0, 0x0)
open(0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f00000000c0)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000023c0), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mount(0x0, 0x0, &(0x7f0000000240)='dax\x00', 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_int(r3, 0x0, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0)
rmdir(&(0x7f0000000180)='./file1\x00')
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$bt_hci(r4, 0x11c, 0x4, 0x0, &(0x7f0000000040))
r5 = socket$igmp6(0xa, 0x3, 0x2)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000080)={'wg2\x00', <r8=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x44, r7, 0x1, 0x0, 0x25dfdbfb, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r8}, @WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049370, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, 0x0, 0x0)

25.283990306s ago: executing program 2 (id=1681):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000100001000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006970766c616e0000140002800600010080"], 0x44}}, 0x0)

20.312614213s ago: executing program 4 (id=1697):
mount$tmpfs(0x0, 0x0, 0x0, 0x30820, 0x0)
renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0)
rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./bus/file0\x00')
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04ff0f00"], 0x9)
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x2)
r1 = dup(r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet(0x2, 0x3, 0x6)
setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
sendmsg$inet(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x2, 0x0, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe0000000}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
sendto$packet(r5, &(0x7f0000000180)="02030c65420002000000ab5d71acedd7c9560385dcb1080084d7dc039806112405ce811cc352", 0xff88, 0x0, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_ext={0x1c, 0x13, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000005000000000000008100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000140000ffb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000181100003001c154a3c4c3fdffffffe2357f87d6ff16da31d0a64087d20a4b5e7f27a2f4c79dcc8049fba97c27751b4bc4d4c0e9951bcb", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x28b0, 0x28, &(0x7f0000000040)=""/40, 0x40f00, 0x2, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xe327, r1, 0x2, &(0x7f00000004c0)=[r1], &(0x7f0000000500)=[{0x2, 0x5, 0x10, 0x6}, {0x3, 0x5, 0xb}], 0x10, 0x80000000, @void, @value}, 0x90)

16.763511199s ago: executing program 4 (id=1709):
r0 = socket$pppoe(0x18, 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0/file0\x00', 0x6b142, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)="f7", 0x1)
flistxattr(r0, &(0x7f00000000c0)=""/60, 0x3c)
prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffc000/0x4000)=nil)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_emit_vhci(0x0, 0xb)
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_PAGE_SCAN_TYPE={{}, 0x4}}}, 0x7)
getpeername$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x8)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$vcs(0xffffff9c, 0x0, 0x1, 0x0)
r2 = socket$inet(0x2, 0x3, 0x8d)
setsockopt$inet_msfilter(r2, 0x0, 0x8, &(0x7f0000000280)=ANY=[@ANYRESHEX=r2], 0x1)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
getsockopt$inet6_tcp_int(r3, 0x6, 0x2, 0x0, &(0x7f0000000040))
writev(0xffffffffffffffff, &(0x7f00000003c0), 0x0)
socket(0xa, 0x1, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cryptd(adiantum(xts-serpent-avx,tea-generic,cryptd(sha256)))'}, 0x24)
open$dir(&(0x7f0000000240)='.\x00', 0x0, 0x0)

14.266697909s ago: executing program 1 (id=1716):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002ac0)=@delchain={0x378, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x40, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}]}}, @filter_kind_options=@f_route={{0xa}, {0x2ec, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x2c8, 0x6, [@m_ctinfo={0x8c, 0x0, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6}]}, {0x57, 0x6, "55eb88be72ea2bba577976ef9b5ab407e07afa05e4594285326849c2ec806d7b79f86d10adeb18245c150ce2b9eaeb2380aa7104a6df31aefd38f6b7bb0a45721ccbc5daab03190ea553ce464d09642e4ff5ee"}, {0xc}, {0xc}}}, @m_nat={0xc8, 0x0, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x2}, @rand_addr, @loopback}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @broadcast}}]}, {0x4e, 0x6, "ef93daeef78df7f9a037a0d7a2f92a1cc341deabba437fc636cbf66a843bc4e0304e79be1f16cfa199b042be92c52b0490cb3ccc8a115bd7fba1ddd4a3ea8aa011548c0a44af30d92f01"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_connmark={0xfc, 0x0, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}]}, {0x77, 0x6, "66396e732cf67237ecb590a592c571fa73ca19ec26dea927df7162b385d80fe15ca7f5cb6a4d958bd18714cd4f89f48d039d7da0dc8795f6ad32634b6b66cf821e93079c15dda212b0b37b761850342ebe270d64e92b80cf9114d976338d2dbd729e033dcd00b517933d3e64d73a30fc4e9a29"}, {0xc}, {0xc}}}, @m_bpf={0x74, 0x0, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0x0, 0x0, 0x3}, {}]}]}, {0x2d, 0x6, "538ccaa56078deef003c66568338f89ce81cefabfec7b5ecd9cf6ec4c86d636a2b2cee0c35637b64dc"}, {0xc}, {0xc}}}]}, @TCA_ROUTE4_IIF={0x8}]}}]}, 0x378}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001940)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x11, 0x1, "4d3f5c133c87603141460e6f31"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1080520}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x400d4}, 0x1)
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
chdir(&(0x7f0000002340)='./bus\x00')
r3 = open(&(0x7f0000007f80)='./bus\x00', 0x141142, 0x0)
ftruncate(r3, 0x2007ffb)
open(&(0x7f0000000400)='./bus\x00', 0x500, 0x0)
r4 = socket(0x15, 0x5, 0x0)
getsockopt(r4, 0x200000000114, 0x2721, 0x0, &(0x7f0000000000))

9.618038726s ago: executing program 3 (id=1719):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nfc_llcp(r0, &(0x7f0000001600)={&(0x7f0000000040)={0x27, 0x0, 0x0, 0x6, 0x4, 0x0, "94f909b22e251e6003e2cde678b086f50f34928a2aab02c4c3c51fe552af279f503d3656d68573a38056d6bc474363bf1412677d6767d69634531f0ed735ef", 0x3b}, 0x60, &(0x7f0000000540)=[{&(0x7f00000000c0)="649188c6af2129cd77847c4208d81954d5083cd1bf7a89208347760c78cbe441333db179013bf51f7bb136b342cc8732407e08283b628ec94f3c116353d1b072a62ef68233203c67857017979f9f34bf7ab0b88f83902ca3f85c36f64ec2c5dce5c1e569e28b4ad81e9085e8648e2ab868b3321512eb9874456b2ce4b4af3ddf2d6fe3255f20254bd9769b832df344a3d736417805cf5157415ee6d5ce9071f6d649efe02d5f1694afdf4ab39d3cae43946c3eaeffe64be15936f589c018e96d749ee2e7c682a4c55f86", 0xca}, {&(0x7f00000001c0)}, {&(0x7f0000000200)="8a44603f", 0x4}, {&(0x7f0000000240)="ad61d10646a79dd477c56a97b9f3a6a8a7abe3e11c6f3e5f5f1f88591f472d561f5b4608706808cbf619874f51fc", 0x2e}, {&(0x7f0000000280)="06160e73dcee796f1bfbcf77c656c16055fdee857d43f1aa80fcd00e4257ae9c211a31d984583a98f6aba0f9a45933f08a16ad8e776e6a5d2c6a18d0ab6c364b918a1347a8bf3123ba188a50f3d1127c96040e2bb7a8385e06857a44cf86f314b2ed5056c736a39c36be497142b552fee39621ce0548ebc2902932566dcad38ac0b8269a399023e49a2179eabfaef2b3764fa51bb68c119eb8b880185481818e77697f25e0bf06a2638b828532df374871fdd11c8c7444c05a7849c3669a2bf3027d6dee9461758b39be006e39c870154e021e59d9f79596a0f4cc96", 0xdc}, {&(0x7f0000000380)="8fb8c7ff94ee5f14b0edeaeefdd6b9449ea1a0f786859037f8882839b985a6874dde093318f87ea17f14773e940a91da058e343b2dd3dfd1465593ac566cd68b54eb80a8f0494108118fd3acf8ae9294e5f3f89fa47d05ae10543def03b9b96c9b6ef27d8425acc18a6c039f076282098a8777b73d5eac8995b543df39711c9f890112471603d0fc0e6742563abf58a7765b28f9c921ac77d6d9e8384bad38d4cdb0194a639a8c7b2b419851", 0xac}, {&(0x7f0000000440)="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", 0xfb}], 0x7, &(0x7f00000005c0)={0x1010, 0x103, 0x6, "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"}, 0x1010, 0x20000040}, 0x1)
r1 = socket$phonet(0x23, 0x2, 0x1)
sendto$phonet(r1, &(0x7f0000001640)="fd15abc331beeffb7b3fa87cacc5048b8048245371b42a930a0c052344a4a8b70b4684b572783b00616fbe1941aec0ab0c97b02cc389f528b6b93f1191cd0416dcb6a4aff98c00fb34fe55111e7698f81254c1dc0edbe49780ed4e1dd6ea41725737a647611d0ba372b66215c21276a3028f25c42d65b197cd7858af1b3480606c68d1b2c08cf0305b0bfaa54f8ddae76bce0d", 0x93, 0x4000, &(0x7f0000001700)={0x23, 0x9, 0x3, 0x20}, 0x10)
r2 = syz_io_uring_setup(0x5594, &(0x7f0000001740)={0x0, 0xf36c, 0x0, 0x0, 0xb6}, 0x0, &(0x7f0000001800))
r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x10, 0xffffffffffffffff, 0x10000000)
syz_io_uring_submit(0x0, r3, &(0x7f0000001840)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1})
r4 = io_uring_setup(0x7dbd, &(0x7f0000001880)={0x0, 0xb2c0, 0x20, 0x3, 0x366, 0x0, r2})
syz_io_uring_submit(0x0, r3, &(0x7f0000001b40)=@IORING_OP_WRITEV={0x2, 0x2, 0x6000, @fd=r4, 0x2, &(0x7f0000001b00)=[{&(0x7f0000001900)="ec04f42e916407ba6e71fb039ee5205298e3b701bfed29e272d8767ecbdcb6893bb6799354f2a58612a8259ec7de58ca28b5c589f03055fcfe198dd89cc62b92f302854534a89d61b8a64dacdd5918f6a601dce478e1aba0ff639390fd0efe059e8fb0c0752cc7e6cc408e61d036eed1a86c7bb5df278c31e7ac361353b65ac4bd5830c240fceedcc7a240a8125aa28a85894c9ce432e6ba3456b2ca9836cc3471ad4786f94a7eb132cc3fe92c4af2ec9a474a40f63b1be184aa63fc49ba357677d696a4256dd7fa12003567db4e1d106b8cefda532d9f7b5b587c03e3", 0xdd}, {&(0x7f0000001a00)="8d59522289cefeefc57b26d9b670cec3c2a98d9583ec47703c18e6", 0x1b}, {&(0x7f0000001a40)="4770be3b0626a91a785133f28dee79cab15a4f643ff58f002320fc1d31a71036964d1521d8e0b7792c3a743fdc8c5b82806582c7b675c75347b7a488411db01b9f35d8049a5d0ade7f73d2e85b002fd36d73", 0x52}, {&(0x7f0000001ac0)="29b8eb0ab323ca1df0af6c7fdc24", 0xe}], 0x4, 0x16, 0x1, {0x1}})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000001b80), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000001bc0))
io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000001cc0)={0x1, 0x1, 0x0, &(0x7f0000001c40)=[{0x0}], 0x0}, 0x20)
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r4, 0xe, &(0x7f0000002180)={0xfffffffc, 0x0, 0x0, &(0x7f0000002140)=[0x0, 0x0]}, 0x20)
syz_genetlink_get_family_id$gtp(&(0x7f0000002200), r2)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000022c0)={'ip6tnl0\x00', &(0x7f0000002240)={'syztnl0\x00', 0x0, 0x0, 0x65, 0x0, 0x0, 0x44, @private0={0xfc, 0x0, '\x00', 0x1}, @private1, 0x7800, 0x840, 0x0, 0x6}})
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000002300)='ns/ipc\x00')
recvfrom$phonet(r1, &(0x7f0000002440)=""/4096, 0x1000, 0x10061, 0x0, 0x0)
r6 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2)
memfd_create(&(0x7f00000034c0)='+\x00', 0x0)
memfd_create(&(0x7f0000003580)='ns/ipc\x00', 0x0)
ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000003740)={0xffffffffffffffff, 0x0, 0x2000, 0xfffffffff0000000})
accept$nfc_llcp(r0, 0x0, 0x0)

9.274501058s ago: executing program 1 (id=1720):
mount$tmpfs(0x0, 0x0, 0x0, 0x30820, 0x0)
renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0)
rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./bus/file0\x00')
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04ff0f00"], 0x9)
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x2)
r1 = dup(r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet(0x2, 0x3, 0x6)
setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
sendmsg$inet(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x2, 0x0, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe0000000}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
sendto$packet(r5, &(0x7f0000000180)="02030c65420002000000ab5d71acedd7c9560385dcb1080084d7dc039806112405ce811cc352", 0xff88, 0x0, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_ext={0x1c, 0x13, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000005000000000000008100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000140000ffb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000181100003001c154a3c4c3fdffffffe2357f87d6ff16da31d0a64087d20a4b5e7f27a2f4c79dcc8049fba97c27751b4bc4d4c0e9951bcb", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x28b0, 0x28, &(0x7f0000000040)=""/40, 0x40f00, 0x2, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xe327, r1, 0x2, &(0x7f00000004c0)=[r1], &(0x7f0000000500)=[{0x2, 0x5, 0x10, 0x6}, {0x3, 0x5, 0xb}], 0x10, 0x80000000, @void, @value}, 0x90)

9.083085575s ago: executing program 3 (id=1721):
io_uring_setup(0x669, &(0x7f0000007940))
r0 = syz_open_dev$amidi(&(0x7f0000000080), 0x8000000000000000, 0x121201)
write$midi(r0, &(0x7f00000000c0)="caf76b6e903566cc6d174b64ce239c439b527d013117275d3b706a49dfd974868090defc9576c4bbf2dbf3d8726616389f7eeebbbaf7baad90d0c1871c580c36cb83ecd06f3d37f594e3c7fc1a82bf598f21c4f2290b344f6fad1d7e6fd88efb55b49f6900d2cf137fd9b0e31f833fad1fd4dec4b4c5a77582ad43123c78f912584a0cd44bb1", 0x86)
io_setup(0x6, &(0x7f0000000300)=<r1=>0x0)
r2 = syz_open_dev$video(0x0, 0x0, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000040)={0x0, 0x80000000})
syz_io_uring_submit(0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x1e68, 0x0, 0x0, 0x0)
r3 = syz_open_dev$evdev(0x0, 0x3, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f0000000000)="00008100", 0x4, 0x0, &(0x7f0000000080)={0x11, 0x8100, r5}, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x34)
socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$f2fs(&(0x7f0000000240), &(0x7f0000000080)='./file2\x00', 0x0, &(0x7f0000000280)=ANY=[], 0x1, 0x54f9, &(0x7f000000ab40)="$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")
fstat(0xffffffffffffffff, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0)
fcntl$setstatus(r6, 0x4, 0x6100)
sched_setaffinity(0x0, 0x8, &(0x7f00000004c0)=0x6)
read$msr(0xffffffffffffffff, &(0x7f0000002140)=""/102400, 0x19000)
prctl$PR_SCHED_CORE(0x3e, 0x800000001, 0x0, 0x2, 0x0)
write$cgroup_type(r6, &(0x7f0000000200), 0x3fe00)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
getpid()
io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0}])

7.875261026s ago: executing program 4 (id=1722):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x15)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000002c0)=0x7e)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000001c0)=0x9)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180))
ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000003c0))
ioctl$TIOCSTI(r4, 0x5412, 0x0)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x7e)
lgetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f00000003c0)=@random={'security.', 'sched_switch\x00'}, &(0x7f0000000400)=""/248, 0xf8)
mount(0x0, 0x0, &(0x7f0000000000)='devtmpfs\x00', 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0)
getdents(0xffffffffffffffff, &(0x7f0000000200)=""/222, 0xde)
symlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x0)
landlock_create_ruleset(0x0, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x0, 0x0)

6.314991579s ago: executing program 0 (id=1725):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = socket$unix(0x1, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x10, &(0x7f0000000200)=0x1c, 0x4)
bind$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r4, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2)
accept4$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000380)=0x1c, 0x80800)
r6 = dup(r5)
ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000340)={0x23, 0x1, 0x11, 0x0, 0x0, 0x0, 0x0})
r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0)
fcntl$setstatus(r7, 0x4, 0x2800)
io_setup(0x7, &(0x7f0000000000)=<r8=>0x0)
r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0)
io_submit(r8, 0x1, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r9, 0x0}])
ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000240)={0x50, 0x0, &(0x7f0000000100)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @register_looper], 0x0, 0x0, 0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000010000000000000000000000000000000a3ffb01a12ff5b3c778e46ea8da1721c45c724444d47960d9831114bbd0017", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0)

5.192737443s ago: executing program 0 (id=1726):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000100001000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006970766c616e0000140002800600010080"], 0x44}}, 0x0)

4.909499998s ago: executing program 3 (id=1727):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b6af8ff00000000b50900000000000073aaf0ff00000000bf8700000000000007080000fffdffffbf2400000000000007060000f0ffffff740200000800000018260000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)

4.908654918s ago: executing program 0 (id=1728):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xa)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', <r4=>0x0})
syz_emit_ethernet(0x3e, &(0x7f0000000340)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x8, 0x3a, 0x0, @remote, @local, {[], @echo_request}}}}}, 0x0)
r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r6, 0x29, 0x1a, &(0x7f0000000000)=0x40, 0x4)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000040)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}}, 0x3}, 0x9c)
r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r7, 0x40000000af01, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r5, 0x58, &(0x7f0000000940)}, 0x10)
ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000300))
r8 = socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000000200)=""/148, 0x0})
r9 = dup(r8)
ioctl$VHOST_NET_SET_BACKEND(r7, 0x4008af30, &(0x7f0000000000)={0x0, r9})
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r10, &(0x7f0000000040), 0xfea7)
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8}]}}]}, 0x38}}, 0x0)
setresuid(0x0, r1, 0x0)
keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f0000000080)=0x2)
socket(0x0, 0x0, 0x0)
r11 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(r11, &(0x7f0000000000), 0xfea7)

4.477647308s ago: executing program 0 (id=1729):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x11, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0000000b7080000000000007b8af8ff0000000005000000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0edffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000900)=r4, 0x4)
socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
r6 = socket(0x10, 0x3, 0x0)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xe)
shutdown(r7, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={<r8=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f00000001c0)={r8}, 0x8)
write(r6, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14)
recvmmsg(r6, &(0x7f0000005c80), 0x1b, 0x10122, 0x0)
ioctl$FS_IOC_GETFSLABEL(r1, 0x800452d2, &(0x7f0000000100))
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="e14e73ed2e3c00000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c00028005002d000100"], 0x3c}}, 0x0)

4.374954197s ago: executing program 1 (id=1730):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nfc_llcp(r0, &(0x7f0000001600)={&(0x7f0000000040)={0x27, 0x0, 0x0, 0x6, 0x4, 0x0, "94f909b22e251e6003e2cde678b086f50f34928a2aab02c4c3c51fe552af279f503d3656d68573a38056d6bc474363bf1412677d6767d69634531f0ed735ef", 0x3b}, 0x60, &(0x7f0000000540)=[{&(0x7f00000000c0)="649188c6af2129cd77847c4208d81954d5083cd1bf7a89208347760c78cbe441333db179013bf51f7bb136b342cc8732407e08283b628ec94f3c116353d1b072a62ef68233203c67857017979f9f34bf7ab0b88f83902ca3f85c36f64ec2c5dce5c1e569e28b4ad81e9085e8648e2ab868b3321512eb9874456b2ce4b4af3ddf2d6fe3255f20254bd9769b832df344a3d736417805cf5157415ee6d5ce9071f6d649efe02d5f1694afdf4ab39d3cae43946c3eaeffe64be15936f589c018e96d749ee2e7c682a4c55f86", 0xca}, {&(0x7f00000001c0)}, {&(0x7f0000000200)="8a44603f", 0x4}, {&(0x7f0000000240)="ad61d10646a79dd477c56a97b9f3a6a8a7abe3e11c6f3e5f5f1f88591f472d561f5b4608706808cbf619874f51fc", 0x2e}, {&(0x7f0000000280)="06160e73dcee796f1bfbcf77c656c16055fdee857d43f1aa80fcd00e4257ae9c211a31d984583a98f6aba0f9a45933f08a16ad8e776e6a5d2c6a18d0ab6c364b918a1347a8bf3123ba188a50f3d1127c96040e2bb7a8385e06857a44cf86f314b2ed5056c736a39c36be497142b552fee39621ce0548ebc2902932566dcad38ac0b8269a399023e49a2179eabfaef2b3764fa51bb68c119eb8b880185481818e77697f25e0bf06a2638b828532df374871fdd11c8c7444c05a7849c3669a2bf3027d6dee9461758b39be006e39c870154e021e59d9f79596a0f4cc96", 0xdc}, {&(0x7f0000000380)="8fb8c7ff94ee5f14b0edeaeefdd6b9449ea1a0f786859037f8882839b985a6874dde093318f87ea17f14773e940a91da058e343b2dd3dfd1465593ac566cd68b54eb80a8f0494108118fd3acf8ae9294e5f3f89fa47d05ae10543def03b9b96c9b6ef27d8425acc18a6c039f076282098a8777b73d5eac8995b543df39711c9f890112471603d0fc0e6742563abf58a7765b28f9c921ac77d6d9e8384bad38d4cdb0194a639a8c7b2b419851", 0xac}, {&(0x7f0000000440)="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", 0xfb}], 0x7, &(0x7f00000005c0)={0x1010, 0x103, 0x6, "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"}, 0x1010, 0x20000040}, 0x1)
r1 = socket$phonet(0x23, 0x2, 0x1)
sendto$phonet(r1, &(0x7f0000001640)="fd15abc331beeffb7b3fa87cacc5048b8048245371b42a930a0c052344a4a8b70b4684b572783b00616fbe1941aec0ab0c97b02cc389f528b6b93f1191cd0416dcb6a4aff98c00fb34fe55111e7698f81254c1dc0edbe49780ed4e1dd6ea41725737a647611d0ba372b66215c21276a3028f25c42d65b197cd7858af1b3480606c68d1b2c08cf0305b0bfaa54f8ddae76bce0d", 0x93, 0x4000, &(0x7f0000001700)={0x23, 0x9, 0x3, 0x20}, 0x10)
r2 = syz_io_uring_setup(0x5594, &(0x7f0000001740)={0x0, 0xf36c, 0x0, 0x0, 0xb6}, &(0x7f00000017c0)=<r3=>0x0, 0x0)
r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x10, 0xffffffffffffffff, 0x10000000)
syz_io_uring_submit(r3, r4, &(0x7f0000001840)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1})
r5 = io_uring_setup(0x7dbd, &(0x7f0000001880)={0x0, 0xb2c0, 0x20, 0x3, 0x366, 0x0, r2})
syz_io_uring_submit(r3, r4, &(0x7f0000001b40)=@IORING_OP_WRITEV={0x2, 0x2, 0x6000, @fd=r5, 0x2, &(0x7f0000001b00)=[{&(0x7f0000001900)="ec04f42e916407ba6e71fb039ee5205298e3b701bfed29e272d8767ecbdcb6893bb6799354f2a58612a8259ec7de58ca28b5c589f03055fcfe198dd89cc62b92f302854534a89d61b8a64dacdd5918f6a601dce478e1aba0ff639390fd0efe059e8fb0c0752cc7e6cc408e61d036eed1a86c7bb5df278c31e7ac361353b65ac4bd5830c240fceedcc7a240a8125aa28a85894c9ce432e6ba3456b2ca9836cc3471ad4786f94a7eb132cc3fe92c4af2ec9a474a40f63b1be184aa63fc49ba357677d696a4256dd7fa12003567db4e1d106b8cefda532d9f7b5b587c03e3", 0xdd}, {&(0x7f0000001a00)="8d59522289cefeefc57b26d9b670cec3c2a98d9583ec47703c18e6", 0x1b}, {&(0x7f0000001a40)="4770be3b0626a91a785133f28dee79cab15a4f643ff58f002320fc1d31a71036964d1521d8e0b7792c3a743fdc8c5b82806582c7b675c75347b7a488411db01b9f35d8049a5d0ade7f73d2e85b002fd36d73", 0x52}, {&(0x7f0000001ac0)="29b8eb0ab323ca1df0af6c7fdc24", 0xe}], 0x4, 0x16, 0x1, {0x1}})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000001b80), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000001bc0))
io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000001cc0)={0x1, 0x1, 0x0, &(0x7f0000001c40)=[{0x0}], 0x0}, 0x20)
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r5, 0xe, &(0x7f0000002180)={0xfffffffc, 0x0, 0x0, &(0x7f0000002140)=[0x0, 0x0]}, 0x20)
syz_genetlink_get_family_id$gtp(&(0x7f0000002200), r2)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000022c0)={'ip6tnl0\x00', &(0x7f0000002240)={'syztnl0\x00', 0x0, 0x0, 0x65, 0x0, 0x0, 0x44, @private0={0xfc, 0x0, '\x00', 0x1}, @private1, 0x7800, 0x840, 0x0, 0x6}})
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000002300)='ns/ipc\x00')
recvfrom$phonet(r1, &(0x7f0000002440)=""/4096, 0x1000, 0x10061, 0x0, 0x0)
r7 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2)
memfd_create(&(0x7f00000034c0)='+\x00', 0x0)
memfd_create(&(0x7f0000003580)='ns/ipc\x00', 0x0)
ioctl$UDMABUF_CREATE(r7, 0x40187542, &(0x7f0000003740)={0xffffffffffffffff, 0x0, 0x2000, 0xfffffffff0000000})
accept$nfc_llcp(r0, 0x0, 0x0)

4.02784346s ago: executing program 1 (id=1731):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
socket$alg(0x26, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000000c0))
ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000140)=0x9)
mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x5bfbe43f074f02f5, r1, 0x0)
ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000000)=0x1)
ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000100)=0x1)
write$dsp(r1, &(0x7f0000000280)="4b1f558d5ca164a2b25425fa59a6eea0c54f439391053ed0d020252860bc038acd31063acba8e04a160a4de90caf3e9a0e0454e2ba64", 0x36)
write$dsp(r1, 0x0, 0x0)
write$dsp(r1, &(0x7f0000000200)="254ed655d7672c1336eebfca44adfe2dad4d0000006aad18c641e0167c", 0x1d)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x8})
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0x0)
mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r1, 0x0)
close(r1)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x100442, 0x1ff)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x1)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYBLOB])
read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020, 0x0, <r3=>0x0}, 0x2020)
open(&(0x7f00000000c0)='./file0\x00', 0xa4202, 0x2c53d61f8fd58804)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002300)={0x50, 0xffffffffffffffda, r3, {0x7, 0x9, 0x9, 0x0, 0x8, 0x0, 0x7, 0x8000}}, 0x50)
read$FUSE(0xffffffffffffffff, &(0x7f0000004580)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r4}, 0x10)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

3.951108586s ago: executing program 0 (id=1732):
r0 = io_uring_setup(0x32df, &(0x7f00000001c0)={0x0, 0xf012, 0x1000})
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000000308000000000000000000000000001400048008000340000000000800084000"/52], 0x34}}, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="020000002000000000000100040000000000000010003c000000000000200000009d060000"], 0x24, 0x0)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x3, [@typedef={0x0, 0x0, 0x0, 0x8, 0x3}, @ptr={0x9, 0x0, 0x0, 0x2, 0x4}, @restrict={0x0, 0x0, 0x0, 0xb, 0x5}, @typedef={0x5, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x0]}}, &(0x7f00000002c0)=""/234, 0x4b, 0xea, 0x1, 0x5265, 0x0, @void, @value}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x6)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f0000000440)={0x1, [0x0]})
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f0000000140)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x2a, 0x0, 0x2, 0x0, 0x80, 0x2}, 0x20)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
acct(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00')
acct(0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000003e00250304000000000000000a", @ANYRES16=r2, @ANYRESHEX=r2, @ANYRES64=r1], 0x14}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
fsmount(r6, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a841d", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r7, &(0x7f0000000380)={0xc, 0x8, 0xfa00, {0x0}}, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)

3.862798655s ago: executing program 3 (id=1733):
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0xffffffffffffffff, 0x2, 0x8}, 0xc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x11, 0x401, 0x66, 0x400, 0x903, r0, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x18, &(0x7f0000000300)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = socket(0x840000000002, 0x3, 0xfa)
connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
getsockopt$inet_pktinfo(r3, 0x0, 0x13, 0x0, &(0x7f0000000480))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @remote}, 0x1c)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendto$inet6(r4, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000640)=0x3, 0x4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x20)
socketpair$unix(0x1, 0xf, 0x0, 0x0)
setsockopt$inet6_udp_int(r4, 0x88, 0x1, &(0x7f0000000080), 0x4)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r6, 0x0, 0xf, &(0x7f00000006c0), 0x4)
bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f00000001c0)={@initdev, @multicast2}, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x20, &(0x7f0000000600)={&(0x7f00000004c0)=""/23, 0x17, <r7=>0x0, &(0x7f0000000500)=""/211, 0xd3}}, 0x10)
socket$nl_audit(0x10, 0x3, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x7, 0x17, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {}, [@map_fd={0x18, 0xa, 0x1, 0x0, r1}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x35c4eb00, 0x29, &(0x7f0000000080)=""/41, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x6}, 0x8, 0x10, &(0x7f0000000440)={0x1, 0x2, 0x4, 0x3}, 0x10, r7, r2, 0x4, 0x0, &(0x7f0000000700)=[{0x2, 0x3, 0xa, 0xa}, {0x5, 0x3, 0x8, 0x1}, {0x3, 0x2, 0x8, 0xa}, {0x4, 0x0, 0x1, 0x2}], 0x10, 0x1f, @void, @value}, 0x90)

3.673914732s ago: executing program 1 (id=1734):
set_mempolicy(0x3, &(0x7f0000000580)=0x3, 0x774)
r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x5d031, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0xffff521e0080ffff)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
r2 = socket$inet6(0xa, 0x1, 0x0)
connect$inet6(r2, &(0x7f0000000b80)={0xa, 0x0, 0x4, @empty, 0x10}, 0x4f)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800fbffffff000000000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000780)=ANY=[@ANYRESOCT, @ANYBLOB="50da3fd449b29f434d6b501854f15599f5d280dfae78c93a80b7c3d128b79a42a7fc", @ANYRES8=r0], 0x64}, 0x1, 0x0, 0x0, 0x20000014}, 0x200408c4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = socket(0x840000000002, 0x3, 0xff)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x16, &(0x7f0000000000)=0x9, 0x4)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000f40))
ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000080)=0x200000000)
r5 = dup2(r4, r4)
ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f00000005c0)={0x2, 0xfffffffc, 0x0, &(0x7f0000000600)=""/121, 0x0})
ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x5)
read$FUSE(r5, &(0x7f0000004d80)={0x2020}, 0x2020)
readv(r5, &(0x7f0000000dc0)=[{0x0}, {&(0x7f0000000a40)=""/229, 0xe5}, {&(0x7f0000000c00)=""/212, 0xd4}, {&(0x7f0000000300)=""/32, 0x20}, {&(0x7f0000000e80)=""/190, 0xbe}], 0x5)
ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000040)=0x1)
write$vhost_msg_v2(r5, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000280)=""/128, 0x80, 0x0, 0x0, 0x2}}, 0x48)
sendmmsg$inet(r3, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a9050000000074640000000000003552bde5c064c6", 0x15}, {&(0x7f0000000340)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2}}, {{&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="5825be57aff9352b356be67ca2746357d17879358b394762d6a5387374ccf333", 0x20}], 0x1}}], 0x2, 0x0)

3.601867339s ago: executing program 4 (id=1735):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
memfd_create(&(0x7f0000000880)='[\x00', 0x5)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10)
sendmmsg$unix(r3, &(0x7f0000006ec0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000001680)="b479c667", 0x4}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB='\x00\x00'], 0x18}}], 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r6 = dup(r5)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000000000009a000040"])
r7 = creat(0x0, 0x0)
syz_emit_ethernet(0x4a, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10)
write$binfmt_aout(r8, &(0x7f0000000000)=ANY=[], 0xfdef)
ioctl$EXT4_IOC_GET_ES_CACHE(r7, 0xc020662a, &(0x7f0000000c80)={0x0, 0x738, 0x1})
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)

2.649342216s ago: executing program 3 (id=1736):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="30000000c596f74ec0a0a4ba6c5f3394deebe3e3b6e9e9e954469734ef979d0a9380d3cc8578fe24d4d90b0e0303f57e559e3e277d0754a09ef6187d6b100cc40f15fc366d3d12c0c5b9d7e104f04e9a37eda2a49b7269f541db07e1ea28e759ea0d539d95fa8038691e091b166b1c6ee816f82ef7ee57b433ea2ac75ec0c608d89dd587a411c63de7f51dd35cc52dbfc91e03e677852e86b4fa54d499b8db0043cb9daaa009bf3a527876db44ed4a2a1d5f9afdd34c11be69a79084355d1fd6de3f122aa42435b2721e883c4e437edf8c37f18c3f3980f2fa99e965c391286e7edb46e0dc9af2ad59e4a0225f227291515c1522db430ac461ef2091df19ee76029281b27620c62eb993ef43313bfe7d623398af0cc09336602d84a0702fd9820cb9c5e2fb59a99681438b126db437acd6fc7381007b449651c59db9bf6975408dca9a28ec1b7ab676d1d5c4508042af8469bcec857e1af30da606f64d", @ANYRES16=r4], 0x30}}, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x42, 0x0, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x2, &(0x7f00000002c0)="0f2266ba410066ed64ffe2d8e90f01c32636d3b400000ffcdb6766c7442400006800006766c74424029d0000006766c744240600000000670f011c2466b9280800000f32262932", 0x47}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r5)
sendmsg$NLBL_MGMT_C_ADDDEF(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x40, r10, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x40}}, 0x20000000)
sendmsg$IEEE802154_SET_MACPARAMS(r9, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x100, 0x0, 0x25dfdbff, {}, [@IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x4}, @IEEE802154_ATTR_LBT_ENABLED={0x5}]}, 0x24}}, 0x50004)

2.574624893s ago: executing program 1 (id=1737):
sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000003c80)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x25, 0x4}}}}, 0x11)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x105982, 0x0)
pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
sendfile(r3, r2, 0x0, 0x9205)
r4 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x200, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r4, 0xc0585604, &(0x7f0000000100)={0x1})
r5 = syz_open_dev$evdev(&(0x7f0000000a00), 0x2, 0x802)
fcntl$setstatus(r5, 0x4, 0x2800)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
write$FUSE_BMAP(r6, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(r6, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7f, 0x35}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x200000c0)
unshare(0x2a060400)
ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000080)=<r7=>0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, <r8=>0x0}, &(0x7f00000003c0)=0xc)
r9 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000001640), 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r9, 0xc0585609, &(0x7f0000001680)={0x0, 0x9, 0x0, "d8ef5d46bab9d328096ff00a9956801adfee37d04bd2a343af577962d8428ccd"})
fchownat(r1, &(0x7f0000000040)='./file0\x00', r7, r8, 0x400)
fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f0000000400)={0x1, [0x994]})
poll(&(0x7f0000000000), 0x51, 0x0)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r6)
sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r10, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x23}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004055}, 0x24004080)
write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c460006000000e0ff0000ffffff02000000d4"], 0x78)
syz_usb_connect$cdc_ncm(0x1, 0x77, &(0x7f0000000280)=ANY=[@ANYBLOB="12015002020000ff2505a1a4400001020301090265000201a250050904000001020d0000072406000153d905240001000d240f0101040000b902f5700106241a01f0000724140800010109058103000200267f0904010000020d00000904010102020d00000905820220000601010905030200040000075005ff8c56623736df0000000000008a52ee86e35cdabe62c51b38ce264b0a11c22b7b5270a8e1923c48768d8c5bd09730f51e5542ee581eb83a5273226517f032d9eb76e7740569c25528d5bc1edbb6a33ea9044e743721bd91e8fb"], &(0x7f0000000140)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x9d, 0x40, 0x3, 0x8, 0x52}, 0x40, &(0x7f0000000440)={0x5, 0xf, 0x40, 0x3, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "cf353e06608cb68a8cff7a8a7bac1b81"}, @ssp_cap={0x24, 0x10, 0xa, 0x3f, 0x6, 0xfff, 0x0, 0x4, [0x3f, 0xffcf, 0xc000, 0xff00cf, 0xc00f, 0xcf]}]}})

1.585686654s ago: executing program 3 (id=1738):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x2c, 0xa, 0x6, 0x101, 0xd000000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x2c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@call]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
ioctl$KDENABIO(0xffffffffffffffff, 0x4b36)
syz_emit_vhci(0x0, 0x21)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000100)={<r3=>0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000000)=0x10)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>r3}, &(0x7f0000000040)=0x20)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f0000000a40)={r4, 0x0, 0x30}, &(0x7f0000000a80)=0x18)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r5 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r6 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000140)='source\x00\xb5\x838\x8d\xbd\xdf\xfe\x9a\xf2RM\xb6\xe0\xf9\xac\xa2\x06\x1cD\xe7C\xa5<\xd1=\x93\xf7\xf7Sn\xcb\xd5\xa7\xc9@D\x81\xff\xaar\xc8\xa9\x13\b\x9a\x8bF\v\x8a\x93F\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f00000001c0)='.\n#)|.\x02\xd8\b\xb2f\xcd\x04\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\x06\x13o\xd6w\xbf\xfa\xd5?\xa3\'\xca%\xd0\x8fKAq\x89f\xbb\x9dC\xd6\xea\xa8\xc2z\xbfe\xadSb3L)Hy\xfao\b\xa4\xb6\xff\xff\xff\xff\xff\xff\xff\xf7\xc7\xa4\xdcY\x9aM\x90\xa4\x05\xa8\xec\xf3\xa4h\x11\x19\x87E$\n://\xf3\x96\xaf\x1c8\b\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495/\x00d\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xb7\x1e\xf7Ys#m\xd40\xceP\xdc\x15FI>\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x8d\x8e\x02\xc6\xf61\xbd\xbcBq\xba\xc6\x8e\x89\x15UTaf\xfc\x89\xab\x19\xd7\x82\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc30]\xad7\x1eZA7\x89\xf5\x81b\r\xc1\x7f[\x84y\xac\x12\xaa\xa2-t\x16>V\xfc\xbf\xdb\xe4\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xadp\xba\xaa\xab\'\x1cRO\x89\x17i\x88\"\x8dQI\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa2\xcdjjBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2\x04s\b\xcb\xa9\x17\x8529\xd7`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xa4C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\b\x88\xc9Xw\xe9\xf4\xa4\x94Q\x03s/\xac\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\b\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6g\x00\'(\x02[\xef\x03\x90W% \xe6b\xa2\\\x86\xac\xdax\x997AOJ=\x1f\x00\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c', 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x53}, @printk={@u, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r8 = socket$alg(0x26, 0x5, 0x0)
accept4(r8, 0x0, 0x0, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
mkdir(&(0x7f0000000300)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd='])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18}, './file0\x00'})

937.362184ms ago: executing program 0 (id=1739):
mount$tmpfs(0x0, 0x0, 0x0, 0x30820, 0x0)
renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0)
rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./bus/file0\x00')
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04ff0f00"], 0x9)
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x2)
r1 = dup(r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet(0x2, 0x3, 0x6)
setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
sendmsg$inet(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x2, 0x0, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe0000000}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
sendto$packet(r5, &(0x7f0000000180)="02030c65420002000000ab5d71acedd7c9560385dcb1080084d7dc039806112405ce811cc352", 0xff88, 0x0, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_ext={0x1c, 0x13, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000005000000000000008100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000140000ffb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000181100003001c154a3c4c3fdffffffe2357f87d6ff16da31d0a64087d20a4b5e7f27a2f4c79dcc8049fba97c27751b4bc4d4c0e9951bcb", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x28b0, 0x28, &(0x7f0000000040)=""/40, 0x40f00, 0x2, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xe327, r1, 0x2, &(0x7f00000004c0)=[r1], &(0x7f0000000500)=[{0x2, 0x5, 0x10, 0x6}, {0x3, 0x5, 0xb}], 0x10, 0x80000000, @void, @value}, 0x90)

508.903043ms ago: executing program 4 (id=1740):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nfc_llcp(r0, &(0x7f0000001600)={&(0x7f0000000040)={0x27, 0x0, 0x0, 0x6, 0x4, 0x0, "94f909b22e251e6003e2cde678b086f50f34928a2aab02c4c3c51fe552af279f503d3656d68573a38056d6bc474363bf1412677d6767d69634531f0ed735ef", 0x3b}, 0x60, &(0x7f0000000540)=[{&(0x7f00000000c0)="649188c6af2129cd77847c4208d81954d5083cd1bf7a89208347760c78cbe441333db179013bf51f7bb136b342cc8732407e08283b628ec94f3c116353d1b072a62ef68233203c67857017979f9f34bf7ab0b88f83902ca3f85c36f64ec2c5dce5c1e569e28b4ad81e9085e8648e2ab868b3321512eb9874456b2ce4b4af3ddf2d6fe3255f20254bd9769b832df344a3d736417805cf5157415ee6d5ce9071f6d649efe02d5f1694afdf4ab39d3cae43946c3eaeffe64be15936f589c018e96d749ee2e7c682a4c55f86", 0xca}, {&(0x7f00000001c0)}, {&(0x7f0000000200)="8a44603f", 0x4}, {&(0x7f0000000240)="ad61d10646a79dd477c56a97b9f3a6a8a7abe3e11c6f3e5f5f1f88591f472d561f5b4608706808cbf619874f51fc", 0x2e}, {&(0x7f0000000280)="06160e73dcee796f1bfbcf77c656c16055fdee857d43f1aa80fcd00e4257ae9c211a31d984583a98f6aba0f9a45933f08a16ad8e776e6a5d2c6a18d0ab6c364b918a1347a8bf3123ba188a50f3d1127c96040e2bb7a8385e06857a44cf86f314b2ed5056c736a39c36be497142b552fee39621ce0548ebc2902932566dcad38ac0b8269a399023e49a2179eabfaef2b3764fa51bb68c119eb8b880185481818e77697f25e0bf06a2638b828532df374871fdd11c8c7444c05a7849c3669a2bf3027d6dee9461758b39be006e39c870154e021e59d9f79596a0f4cc96", 0xdc}, {&(0x7f0000000380)="8fb8c7ff94ee5f14b0edeaeefdd6b9449ea1a0f786859037f8882839b985a6874dde093318f87ea17f14773e940a91da058e343b2dd3dfd1465593ac566cd68b54eb80a8f0494108118fd3acf8ae9294e5f3f89fa47d05ae10543def03b9b96c9b6ef27d8425acc18a6c039f076282098a8777b73d5eac8995b543df39711c9f890112471603d0fc0e6742563abf58a7765b28f9c921ac77d6d9e8384bad38d4cdb0194a639a8c7b2b419851", 0xac}, {&(0x7f0000000440)="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", 0xfb}], 0x7, &(0x7f00000005c0)={0x1010, 0x103, 0x6, "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"}, 0x1010, 0x20000040}, 0x1)
r1 = socket$phonet(0x23, 0x2, 0x1)
sendto$phonet(r1, &(0x7f0000001640)="fd15abc331beeffb7b3fa87cacc5048b8048245371b42a930a0c052344a4a8b70b4684b572783b00616fbe1941aec0ab0c97b02cc389f528b6b93f1191cd0416dcb6a4aff98c00fb34fe55111e7698f81254c1dc0edbe49780ed4e1dd6ea41725737a647611d0ba372b66215c21276a3028f25c42d65b197cd7858af1b3480606c68d1b2c08cf0305b0bfaa54f8ddae76bce0d", 0x93, 0x4000, &(0x7f0000001700)={0x23, 0x9, 0x3, 0x20}, 0x10)
r2 = syz_io_uring_setup(0x5594, &(0x7f0000001740)={0x0, 0xf36c, 0x0, 0x0, 0xb6}, &(0x7f00000017c0)=<r3=>0x0, 0x0)
r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x10, 0xffffffffffffffff, 0x10000000)
syz_io_uring_submit(r3, r4, &(0x7f0000001840)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1})
r5 = io_uring_setup(0x7dbd, &(0x7f0000001880)={0x0, 0xb2c0, 0x20, 0x3, 0x366, 0x0, r2})
syz_io_uring_submit(r3, r4, &(0x7f0000001b40)=@IORING_OP_WRITEV={0x2, 0x2, 0x6000, @fd=r5, 0x2, &(0x7f0000001b00)=[{&(0x7f0000001900)="ec04f42e916407ba6e71fb039ee5205298e3b701bfed29e272d8767ecbdcb6893bb6799354f2a58612a8259ec7de58ca28b5c589f03055fcfe198dd89cc62b92f302854534a89d61b8a64dacdd5918f6a601dce478e1aba0ff639390fd0efe059e8fb0c0752cc7e6cc408e61d036eed1a86c7bb5df278c31e7ac361353b65ac4bd5830c240fceedcc7a240a8125aa28a85894c9ce432e6ba3456b2ca9836cc3471ad4786f94a7eb132cc3fe92c4af2ec9a474a40f63b1be184aa63fc49ba357677d696a4256dd7fa12003567db4e1d106b8cefda532d9f7b5b587c03e3", 0xdd}, {&(0x7f0000001a00)="8d59522289cefeefc57b26d9b670cec3c2a98d9583ec47703c18e6", 0x1b}, {&(0x7f0000001a40)="4770be3b0626a91a785133f28dee79cab15a4f643ff58f002320fc1d31a71036964d1521d8e0b7792c3a743fdc8c5b82806582c7b675c75347b7a488411db01b9f35d8049a5d0ade7f73d2e85b002fd36d73", 0x52}, {&(0x7f0000001ac0)="29b8eb0ab323ca1df0af6c7fdc24", 0xe}], 0x4, 0x16, 0x1, {0x1}})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000001b80), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000001bc0))
io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000001cc0)={0x1, 0x1, 0x0, &(0x7f0000001c40)=[{0x0}], 0x0}, 0x20)
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r5, 0xe, &(0x7f0000002180)={0xfffffffc, 0x0, 0x0, &(0x7f0000002140)=[0x0, 0x0]}, 0x20)
syz_genetlink_get_family_id$gtp(&(0x7f0000002200), r2)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000022c0)={'ip6tnl0\x00', &(0x7f0000002240)={'syztnl0\x00', 0x0, 0x0, 0x65, 0x0, 0x0, 0x44, @private0={0xfc, 0x0, '\x00', 0x1}, @private1, 0x7800, 0x840, 0x0, 0x6}})
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000002300)='ns/ipc\x00')
recvfrom$phonet(r1, &(0x7f0000002440)=""/4096, 0x1000, 0x10061, 0x0, 0x0)
r7 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2)
memfd_create(&(0x7f00000034c0)='+\x00', 0x0)
memfd_create(&(0x7f0000003580)='ns/ipc\x00', 0x0)
ioctl$UDMABUF_CREATE(r7, 0x40187542, &(0x7f0000003740)={0xffffffffffffffff, 0x0, 0x2000, 0xfffffffff0000000})
accept$nfc_llcp(r0, 0x0, 0x0)

0s ago: executing program 4 (id=1741):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000ac0)={[{@min_batch_time={'min_batch_time', 0x3d, 0xeb92}}, {@init_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}, {@grpid}, {@norecovery}]}, 0x9, 0x61f, &(0x7f0000000c40)="$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")
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r0, &(0x7f00000043c0)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15)
dup(r0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
io_setup(0x7, &(0x7f0000000000)=<r2=>0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0)
io_submit(r2, 0x1, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}])
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0xfc, 0x0, &(0x7f0000001280)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000500)={@ptr={0x70742a85, 0x1, &(0x7f0000000900)=""/12, 0xc, 0x0, 0x2f}, @flat=@binder={0x73622a85, 0x110b, 0x3}, @fda={0x66646185, 0x6, 0x0, 0x23}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}, 0x400}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={@fda={0x66646185, 0x3, 0x0, 0x1}, @fda={0x66646185, 0x8, 0x1, 0x32}, @fda={0x66646185, 0x7, 0x2, 0x33}}, &(0x7f0000000300)}}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000600)={@fda={0x66646185, 0x4, 0x0, 0x17}, @flat=@handle={0x73682a85, 0x1000, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/99, 0x63, 0x2, 0x13}}, &(0x7f0000000280)={0x0, 0x20, 0xfffffffffffffcd2}}, 0x1000}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x39, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@fda={0x66646185, 0x4, 0x2, 0x17}, @fda={0x66646185, 0x9, 0x2, 0x3a}, @ptr={0x70742a85, 0x0, &(0x7f0000000740)=""/156, 0x9c, 0x2, 0x8}}, &(0x7f0000000400)={0x0, 0x18, 0x38}}}, @free_buffer], 0x0, 0x0, 0x0})
ioctl$TIOCGSOFTCAR(r1, 0x5416, &(0x7f0000001100))
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x45, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})
r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
epoll_create(0x6)
write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket(0x29, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@grpid}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$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")
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
fallocate(r6, 0x0, 0x0, 0x9)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
write$cgroup_int(r7, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000000)={0x0, r7, 0x0, 0x0, 0xffffffffffffffff})
r8 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)

kernel console output (not intermixed with test programs):

ode: writeback.
[  651.410738][ T9718] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038 (0x7fffffff)
[  651.514253][ T9718] EXT4-fs error (device loop4): __ext4_new_inode:1282: comm syz.4.1258: failed to insert inode 16: doubly allocated?
[  652.355737][ T9542] 8021q: adding VLAN 0 to HW filter on device bond0
[  652.423894][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  652.451032][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  652.517441][ T9542] 8021q: adding VLAN 0 to HW filter on device team0
[  652.563299][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  652.574738][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  652.584263][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[  652.591427][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[  652.626865][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  652.801813][ T6354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  653.051595][ T6354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  653.113730][ T6354] bridge0: port 2(bridge_slave_1) entered blocking state
[  653.120957][ T6354] bridge0: port 2(bridge_slave_1) entered forwarding state
[  653.372459][ T6354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  653.548028][ T6354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  653.695427][ T6354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  654.095046][ T6354] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  654.104636][ T6354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  654.122971][ T6354] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  654.134568][ T6354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  654.145954][ T6354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  654.165513][ T9542] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  654.180246][ T9542] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  654.312763][ T6354] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  654.334035][ T6354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  654.494279][ T6354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  654.801029][ T9780] loop1: detected capacity change from 0 to 256
[  654.874436][ T9780] exfat: Deprecated parameter 'namecase'
[  654.880255][ T9780] exfat: Deprecated parameter 'namecase'
[  655.057156][ T9780] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  655.070627][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  655.088628][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  655.123186][ T9141] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  655.167362][ T9542] 8021q: adding VLAN 0 to HW filter on device batadv0
[  655.723847][ T9141] usb 4-1: Using ep0 maxpacket: 8
[  655.759740][ T9792] fuse: Bad value for 'fd'
[  655.854128][ T9141] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  655.881202][ T9141] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  655.923356][ T9141] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  655.954005][ T9141] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  656.001605][ T9141] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  656.023200][ T6354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  656.043862][ T6354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  656.055386][ T9141] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  656.925502][ T9141] usb 4-1: usb_control_msg returned -32
[  656.931242][ T9141] usbtmc 4-1:16.0: can't read capabilities
[  656.958246][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  656.994382][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  657.022369][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  657.067669][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  657.078425][ T9542] device veth0_vlan entered promiscuous mode
[  657.093262][ T9802] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1275'.
[  657.150340][ T9542] device veth1_vlan entered promiscuous mode
[  657.291254][ T6354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  657.322786][ T6354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  657.523039][ T9542] device veth0_macvtap entered promiscuous mode
[  658.159546][ T9542] device veth1_macvtap entered promiscuous mode
[  658.196645][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  658.227072][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  658.260000][ T9542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  658.294199][ T2075] usb 4-1: USB disconnect, device number 14
[  658.351816][ T9542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  658.369435][ T9542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  658.421163][ T9542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  658.442176][ T9542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  658.453766][ T9542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  658.464721][ T9542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  658.476024][ T9542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  658.486534][ T9542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  658.504136][ T9542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  658.551411][ T9542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  658.580237][ T9542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  658.601293][ T9542] batman_adv: batadv0: Interface activated: batadv_slave_0
[  658.668002][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  658.692917][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  658.735040][ T9542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  658.776091][ T9542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  658.803380][ T9826] loop4: detected capacity change from 0 to 2048
[  658.816665][ T9542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  658.837354][ T9542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  658.856678][ T9542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  658.876697][ T9542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  658.893232][ T9814] loop1: detected capacity change from 0 to 40427
[  658.899846][ T9542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  658.910821][ T9542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  658.921242][ T9542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  658.932298][ T9542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  658.952536][ T9542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  658.974820][ T9542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  658.995520][ T9542] batman_adv: batadv0: Interface activated: batadv_slave_1
[  659.107768][ T9814] F2FS-fs (loop1): Wrong NAT boundary, start(2560) end(462336) blocks(1024)
[  659.116504][ T9814] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  659.210859][ T9830] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  659.326348][ T9830] xt_SECMARK: invalid mode: 0
[  660.018259][ T9826] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  660.186620][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  660.209205][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  660.211082][ T9814] F2FS-fs (loop1): Found nat_bits in checkpoint
[  661.043443][ T9542] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  661.059343][ T9542] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  661.107682][ T9542] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  661.131665][ T9542] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  661.407870][ T9843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1284'.
[  661.531184][ T9845] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1286'.
[  661.588734][ T9843] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  661.589590][ T9846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1284'.
[  661.897371][ T3680] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  662.122783][ T3680] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  662.646899][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  662.737071][ T3679] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  662.790262][ T3679] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  662.839360][ T6354] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  663.003065][ T9862] loop2: detected capacity change from 0 to 128
[  663.050025][ T9864] loop3: detected capacity change from 0 to 256
[  663.098161][ T9862] FAT-fs (loop2): Unrecognized mount option "����01777777777777777777777" or missing value
[  663.178131][ T3654] device hsr_slave_0 left promiscuous mode
[  663.206842][ T3654] device hsr_slave_1 left promiscuous mode
[  663.301985][ T3654] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  663.309469][ T3654] batman_adv: batadv0: Removing interface: batadv_slave_0
[  663.336794][ T3654] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  663.338466][ T9864] FAT-fs (loop3): Directory bread(block 64) failed
[  663.383791][ T3654] batman_adv: batadv0: Removing interface: batadv_slave_1
[  663.390911][ T9864] FAT-fs (loop3): Directory bread(block 65) failed
[  663.391034][ T9864] FAT-fs (loop3): Directory bread(block 66) failed
[  663.391071][ T9864] FAT-fs (loop3): Directory bread(block 67) failed
[  663.447611][ T9869] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1293'.
[  663.449500][ T3654] device bridge_slave_1 left promiscuous mode
[  663.505638][ T3654] bridge0: port 2(bridge_slave_1) entered disabled state
[  663.557824][ T3654] device hsr_slave_0 left promiscuous mode
[  663.603650][ T3654] device hsr_slave_1 left promiscuous mode
[  663.621459][ T9864] FAT-fs (loop3): Directory bread(block 68) failed
[  663.628040][ T9864] FAT-fs (loop3): Directory bread(block 69) failed
[  663.659075][ T9864] FAT-fs (loop3): Directory bread(block 70) failed
[  663.666448][ T9864] FAT-fs (loop3): Directory bread(block 71) failed
[  663.673158][ T9864] FAT-fs (loop3): Directory bread(block 72) failed
[  663.679718][ T9864] FAT-fs (loop3): Directory bread(block 73) failed
[  664.662005][   T26] kauditd_printk_skb: 20 callbacks suppressed
[  664.702030][   T26] audit: type=1804 audit(1727994261.563:414): pid=9882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1291" name="/newroot/11/bus/file0" dev="loop3" ino=1048700 res=1 errno=0
[  665.706171][ T9888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1297'.
[  665.779621][ T3654] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  665.787345][ T3654] batman_adv: batadv0: Removing interface: batadv_slave_0
[  665.787502][ T9351] FAT-fs (loop3): error, corrupted directory (invalid entries)
[  665.825345][ T3654] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  665.832818][ T3654] batman_adv: batadv0: Removing interface: batadv_slave_1
[  665.854281][ T3654] device bridge_slave_1 left promiscuous mode
[  665.860552][ T3654] bridge0: port 2(bridge_slave_1) entered disabled state
[  665.868527][ T9351] FAT-fs (loop3): Filesystem has been set read-only
[  665.917818][ T3654] device bridge_slave_0 left promiscuous mode
[  665.961893][ T3654] bridge0: port 1(bridge_slave_0) entered disabled state
[  666.042907][ T3654] device veth1_macvtap left promiscuous mode
[  666.073523][ T3654] device veth0_macvtap left promiscuous mode
[  666.079660][ T3654] device veth1_vlan left promiscuous mode
[  666.091836][ T3654] device veth0_vlan left promiscuous mode
[  666.092334][ T9897] netlink: 'syz.0.1300': attribute type 1 has an invalid length.
[  666.289005][ T3654] device veth1_macvtap left promiscuous mode
[  666.305793][ T3654] device veth0_macvtap left promiscuous mode
[  666.311944][ T3654] device veth1_vlan left promiscuous mode
[  666.326959][ T3654] device veth0_vlan left promiscuous mode
[  667.396735][ T9906] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0001 with DS=0x2
[  667.512030][ T9908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1303'.
[  667.696584][ T9152] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  668.538725][ T3654] team0 (unregistering): Port device team_slave_1 removed
[  668.573340][ T3654] team0 (unregistering): Port device team_slave_0 removed
[  668.591877][ T3654] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  668.626462][ T3654] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  668.695558][ T9152] usb 3-1: Using ep0 maxpacket: 16
[  668.816007][ T9152] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  668.845763][ T9152] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  668.876222][ T9152] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  668.878126][ T3654] bond0 (unregistering): Released all slaves
[  668.911869][ T9152] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  668.941365][ T9152] usb 3-1: config 0 descriptor??
[  669.211321][ T3654] team0 (unregistering): Port device team_slave_1 removed
[  669.232791][ T3654] team0 (unregistering): Port device team_slave_0 removed
[  669.247090][ T3654] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  669.262114][ T3654] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  669.353924][ T3654] bond0 (unregistering): Released all slaves
[  669.468973][ T9929] udc-core: couldn't find an available UDC or it's busy
[  669.476265][ T9929] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  669.488759][ T9922] sch_fq: defrate 0 ignored.
[  669.551811][ T9152] hid-generic 0003:0158:0100.0008: unknown main item tag 0x1
[  669.578083][ T9152] hid-generic 0003:0158:0100.0008: unexpected long global item
[  669.602985][ T9152] hid-generic: probe of 0003:0158:0100.0008 failed with error -22
[  669.801285][ T9141] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  669.884671][ T3613] usb 3-1: USB disconnect, device number 13
[  670.787458][ T9141] usb 5-1: Using ep0 maxpacket: 16
[  671.738308][ T9141] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  671.758510][ T9141] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  671.776086][ T9141] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  671.786666][ T9141] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  671.810766][ T9141] usb 5-1: config 0 descriptor??
[  671.855115][ T9944] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1313'.
[  672.842105][ T9956] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  672.864028][ T9956] xt_SECMARK: invalid mode: 0
[  673.328595][ T9959] udc-core: couldn't find an available UDC or it's busy
[  673.373464][ T9959] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  673.403472][ T2075] Bluetooth: hci2: command 0x0409 tx timeout
[  673.481295][ T9959] udc-core: couldn't find an available UDC or it's busy
[  673.488289][ T9959] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  673.602248][ T9141] microsoft 0003:045E:07DA.0009: No inputs registered, leaving
[  673.611303][ T9141] microsoft 0003:045E:07DA.0009: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  673.623566][ T9141] microsoft 0003:045E:07DA.0009: no inputs found
[  673.630255][ T9141] microsoft 0003:045E:07DA.0009: could not initialize ff, continuing anyway
[  673.633847][ T9937] chnl_net:caif_netlink_parms(): no params data found
[  673.793336][ T9968] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1320'.
[  674.162651][ T9976] netlink: 'syz.1.1321': attribute type 9 has an invalid length.
[  674.353728][ T3569] usb 5-1: USB disconnect, device number 10
[  674.582697][ T9937] bridge0: port 1(bridge_slave_0) entered blocking state
[  674.589802][ T9937] bridge0: port 1(bridge_slave_0) entered disabled state
[  674.727424][ T9937] device bridge_slave_0 entered promiscuous mode
[  674.792291][ T9937] bridge0: port 2(bridge_slave_1) entered blocking state
[  674.808178][ T9937] bridge0: port 2(bridge_slave_1) entered disabled state
[  674.817907][ T9937] device bridge_slave_1 entered promiscuous mode
[  675.461597][ T3569] Bluetooth: hci2: command 0x041b tx timeout
[  675.778550][ T9937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  675.859440][ T9937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  675.926582][ T9994] loop1: detected capacity change from 0 to 512
[  676.010403][ T9937] team0: Port device team_slave_0 added
[  676.073042][ T9937] team0: Port device team_slave_1 added
[  676.116234][ T9994] kernel read not supported for file /file0 (pid: 9994 comm: syz.1.1326)
[  676.245348][   T26] audit: type=1800 audit(1727994273.223:415): pid=9994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1326" name="file0" dev="mqueue" ino=62775 res=0 errno=0
[  676.332461][ T9994] loop1: detected capacity change from 0 to 256
[  676.411854][T10013] loop4: detected capacity change from 0 to 2048
[  676.527600][T10013] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[  676.573659][ T9937] batman_adv: batadv0: Adding interface: batadv_slave_0
[  676.580636][ T9937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  676.605379][T10015] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1330'.
[  676.637909][T10013] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  676.652954][ T9994] kernel read not supported for file /bus (pid: 9994 comm: syz.1.1326)
[  676.660700][T10015] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1330'.
[  676.666870][   T26] audit: type=1800 audit(1727994273.633:416): pid=9994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1326" name="bus" dev="mqueue" ino=62785 res=0 errno=0
[  676.697464][T10015] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1330'.
[  676.828610][ T9937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  676.867597][ T9937] batman_adv: batadv0: Adding interface: batadv_slave_1
[  676.882557][ T9937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  676.967309][ T9937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  677.015410][T10017] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1331'.
[  677.613632][ T3612] Bluetooth: hci2: command 0x040f tx timeout
[  677.902377][   T23] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  678.073037][ T9937] device hsr_slave_0 entered promiscuous mode
[  678.164106][ T9937] device hsr_slave_1 entered promiscuous mode
[  678.178876][ T9937] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  678.203445][ T9937] Cannot create hsr debugfs directory
[  678.354260][   T23] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  678.389325][   T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  678.447257][   T23] usb 5-1: config 0 descriptor??
[  678.655803][ T9937] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  678.777141][ T9937] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  678.900308][ T9937] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  679.026349][   T23] ath6kl: Failed to submit usb control message: -71
[  679.033410][   T23] ath6kl: unable to send the bmi data to the device: -71
[  679.052067][   T23] ath6kl: Unable to send get target info: -71
[  679.057884][ T9937] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  679.212268][   T23] ath6kl: Failed to init ath6kl core: -71
[  679.298635][   T23] ath6kl_usb: probe of 5-1:0.0 failed with error -71
[  679.356965][   T23] usb 5-1: USB disconnect, device number 11
[  679.607772][ T9937] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  679.651710][ T9937] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  679.680596][ T9937] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  679.695125][ T3613] Bluetooth: hci2: command 0x0419 tx timeout
[  679.716747][ T9937] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  680.028908][T10040] chnl_net:caif_netlink_parms(): no params data found
[  681.090923][T10040] bridge0: port 1(bridge_slave_0) entered blocking state
[  681.113605][T10040] bridge0: port 1(bridge_slave_0) entered disabled state
[  681.134628][T10040] device bridge_slave_0 entered promiscuous mode
[  681.136186][ T9152] Bluetooth: hci0: command 0x0409 tx timeout
[  681.174507][ T9937] 8021q: adding VLAN 0 to HW filter on device bond0
[  681.210681][T10040] bridge0: port 2(bridge_slave_1) entered blocking state
[  681.248365][T10040] bridge0: port 2(bridge_slave_1) entered disabled state
[  681.288950][T10040] device bridge_slave_1 entered promiscuous mode
[  681.319632][T10062] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1342'.
[  681.333481][T10070] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1344'.
[  681.369008][T10070] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1344'.
[  681.390643][T10070] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1344'.
[  681.516069][T10065] device bridge_slave_1 left promiscuous mode
[  681.525956][T10065] bridge0: port 2(bridge_slave_1) entered disabled state
[  681.535349][T10065] bridge2: port 1(bridge_slave_1) entered blocking state
[  681.548090][T10065] bridge2: port 1(bridge_slave_1) entered disabled state
[  681.557545][T10065] device bridge_slave_1 entered promiscuous mode
[  681.565449][T10065] bridge2: port 1(bridge_slave_1) entered blocking state
[  681.573001][T10065] bridge2: port 1(bridge_slave_1) entered forwarding state
[  681.582719][T10069] bridge2: port 2(veth1_to_bond) entered blocking state
[  681.590156][T10069] bridge2: port 2(veth1_to_bond) entered disabled state
[  681.607292][T10069] device veth1_to_bond entered promiscuous mode
[  681.620021][T10069] bridge2: port 2(veth1_to_bond) entered blocking state
[  681.627064][T10069] bridge2: port 2(veth1_to_bond) entered forwarding state
[  681.673205][T10040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  681.712307][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  681.731388][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  681.775224][T10040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  681.813289][T10077] loop4: detected capacity change from 0 to 8192
[  682.030394][T10077]  loop4: p1 p3 p4
[  682.036156][T10077] loop4: partition table partially beyond EOD, truncated
[  682.046567][ T9937] 8021q: adding VLAN 0 to HW filter on device team0
[  682.061600][T10040] team0: Port device team_slave_0 added
[  682.084912][T10077] loop4: p1 size 3523149824 extends beyond EOD, truncated
[  682.100454][ T6354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  682.541709][ T6354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  682.553444][T10077] loop4: p3 start 4294901760 is beyond EOD, truncated
[  682.562125][ T6354] bridge0: port 1(bridge_slave_0) entered blocking state
[  682.569242][ T6354] bridge0: port 1(bridge_slave_0) entered forwarding state
[  682.577704][T10077] loop4: p4 size 50331648 extends beyond EOD, truncated
[  682.593732][T10040] team0: Port device team_slave_1 added
[  682.722140][ T6354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  682.740847][ T6354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  682.766725][ T6354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  682.786308][ T6354] bridge0: port 2(bridge_slave_1) entered blocking state
[  682.794789][ T6354] bridge0: port 2(bridge_slave_1) entered forwarding state
[  682.823782][ T6354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  682.833049][ T6354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  682.896189][T10091] loop2: detected capacity change from 0 to 8
[  682.928206][T10040] batman_adv: batadv0: Adding interface: batadv_slave_0
[  682.935360][T10040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  682.962613][T10040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  682.978202][T10040] batman_adv: batadv0: Adding interface: batadv_slave_1
[  682.985302][T10040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  683.013214][T10040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  683.038606][T10091] SQUASHFS error: zlib decompression failed, data probably corrupt
[  683.119373][T10091] SQUASHFS error: Failed to read block 0x9b: -5
[  683.168882][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  683.177238][T10091] SQUASHFS error: Unable to read metadata cache entry [99]
[  683.178744][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  683.199291][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  683.219855][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  683.227973][ T3613] Bluetooth: hci0: command 0x041b tx timeout
[  683.286296][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  683.295128][T10091] SQUASHFS error: Unable to read inode 0x127
[  683.352801][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  683.585343][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  684.173238][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  684.186197][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  684.953339][T10040] device hsr_slave_0 entered promiscuous mode
[  684.968547][T10040] device hsr_slave_1 entered promiscuous mode
[  684.976660][T10040] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  685.000567][T10040] Cannot create hsr debugfs directory
[  685.011568][ T9937] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  685.093710][T10104] loop4: detected capacity change from 0 to 256
[  685.236818][T10109] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  685.301928][ T3612] Bluetooth: hci0: command 0x040f tx timeout
[  685.771477][T10104] FAT-fs (loop4): Directory bread(block 64) failed
[  685.778089][T10104] FAT-fs (loop4): Directory bread(block 65) failed
[  685.814704][T10104] FAT-fs (loop4): Directory bread(block 66) failed
[  685.856848][T10104] FAT-fs (loop4): Directory bread(block 67) failed
[  685.867646][T10104] FAT-fs (loop4): Directory bread(block 68) failed
[  685.891724][T10104] FAT-fs (loop4): Directory bread(block 69) failed
[  686.635270][T10104] FAT-fs (loop4): Directory bread(block 70) failed
[  686.672475][T10104] FAT-fs (loop4): Directory bread(block 71) failed
[  686.691146][T10104] FAT-fs (loop4): Directory bread(block 72) failed
[  686.719213][T10104] FAT-fs (loop4): Directory bread(block 73) failed
[  686.751686][ T1387] ieee802154 phy1 wpan1: encryption failed: -22
[  686.806216][T10040] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  687.052611][T10121] loop2: detected capacity change from 0 to 512
[  687.431196][   T26] audit: type=1804 audit(1727994284.204:417): pid=10123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1352" name="/newroot/113/bus/file0" dev="loop4" ino=1048722 res=1 errno=0
[  687.453300][    C0] vkms_vblank_simulate: vblank timer overrun
[  687.470663][T10121] EXT4-fs (loop2): VFS: Found ext4 filesystem with unknown checksum algorithm.
[  687.679140][ T3932] Bluetooth: hci0: command 0x0419 tx timeout
[  687.682559][ T7757] FAT-fs (loop4): error, corrupted directory (invalid entries)
[  687.711342][ T7757] FAT-fs (loop4): Filesystem has been set read-only
[  687.743500][T10040] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  687.769808][ T6354] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  687.778598][ T6354] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  687.808801][ T9937] 8021q: adding VLAN 0 to HW filter on device batadv0
[  688.219365][T10127] mmap: syz.2.1357 (10127): VmData 164384768 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[  688.256435][   T23] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  688.336418][T10040] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  688.587840][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  688.607589][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  688.649395][T10040] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  688.665333][   T23] usb 2-1: Using ep0 maxpacket: 32
[  688.688595][ T9937] device veth0_vlan entered promiscuous mode
[  688.708023][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  688.723046][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  688.749380][ T9937] device veth1_vlan entered promiscuous mode
[  688.779934][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  688.789042][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  688.802329][   T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  688.802999][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  688.866711][T10129] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1359'.
[  688.885486][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  688.900147][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  688.933109][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  688.950760][ T9937] device veth0_macvtap entered promiscuous mode
[  689.015831][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  689.040392][ T9937] device veth1_macvtap entered promiscuous mode
[  689.047420][   T23] usb 2-1: New USB device found, idVendor=03eb, idProduct=21fe, bcdDevice=17.ac
[  689.062208][   T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  689.090818][   T23] usb 2-1: Product: syz
[  689.095636][   T23] usb 2-1: Manufacturer: syz
[  689.100268][   T23] usb 2-1: SerialNumber: syz
[  689.128023][   T23] usb 2-1: config 0 descriptor??
[  689.173359][ T9937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  689.205091][   T23] igorplugusb 2-1:0.0: endpoint incorrect
[  689.211632][ T9937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  689.252491][ T9937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  689.272751][ T9937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  689.295847][ T9937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  689.315216][ T9937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  689.325307][ T9937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  689.337360][ T9937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  689.352528][ T9937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  689.363147][ T9937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  689.380158][ T9937] batman_adv: batadv0: Interface activated: batadv_slave_0
[  689.407249][ T9141] usb 2-1: USB disconnect, device number 7
[  689.479608][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  689.488842][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  689.501506][ T9937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  689.516140][ T9937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  689.526768][ T9937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  689.537629][ T9937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  689.547934][ T9937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  689.558814][ T9937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  689.568818][ T9937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  689.580100][ T9937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  689.590396][ T9937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  689.603297][ T9937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  689.614981][ T9937] batman_adv: batadv0: Interface activated: batadv_slave_1
[  689.648086][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  689.690870][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  689.714475][ T9937] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  689.729887][ T9937] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  689.739363][ T9937] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  689.749913][ T9937] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  689.762339][T10040] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  689.798080][T10040] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  689.814500][T10040] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  689.852930][T10040] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  690.034065][ T6272] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  690.148557][T10134] chnl_net:caif_netlink_parms(): no params data found
[  690.188076][T10147] loop1: detected capacity change from 0 to 1024
[  690.219148][ T3654] IPVS: stopping master sync thread 9104 ...
[  690.231062][ T6354] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  690.252618][T10147] EXT4-fs (loop1): Test dummy encryption mode enabled
[  690.273194][ T6272] usb 3-1: Using ep0 maxpacket: 8
[  690.278580][T10147] EXT4-fs (loop1): Ignoring removed orlov option
[  690.296117][ T6354] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  690.333933][T10147] EXT4-fs (loop1): Test dummy encryption mode enabled
[  690.414136][T10147] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,quota,test_dummy_encryption,,errors=continue. Quota mode: writeback.
[  690.472784][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  690.538195][ T3653] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  690.570609][T10040] 8021q: adding VLAN 0 to HW filter on device bond0
[  690.573725][ T6272] usb 3-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice= f.59
[  690.639030][ T6272] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  690.656627][ T3653] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  690.697484][ T6272] usb 3-1: Product: syz
[  690.701798][ T6272] usb 3-1: Manufacturer: syz
[  690.774808][ T6272] usb 3-1: SerialNumber: syz
[  690.805528][ T6272] usb 3-1: config 0 descriptor??
[  690.874933][ T6272] ums-datafab 3-1:0.0: USB Mass Storage device detected
[  690.936808][T10134] bridge0: port 1(bridge_slave_0) entered blocking state
[  690.963940][T10147] loop1: detected capacity change from 0 to 2048
[  690.979542][ T6272] ums-sddr55 3-1:0.0: USB Mass Storage device detected
[  691.004102][T10147]  loop1: p2 < > p3 p4 < >
[  691.008585][T10147] loop1: partition table partially beyond EOD, truncated
[  691.016426][T10134] bridge0: port 1(bridge_slave_0) entered disabled state
[  691.045176][T10134] device bridge_slave_0 entered promiscuous mode
[  691.064481][T10147] loop1: p2 start 4294902784 is beyond EOD, truncated
[  691.071433][T10147] loop1: p3 start 4278191616 is beyond EOD, truncated
[  691.126979][ T6354] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  691.154428][T10134] bridge0: port 2(bridge_slave_1) entered blocking state
[  691.161518][T10134] bridge0: port 2(bridge_slave_1) entered disabled state
[  691.186052][   T26] audit: type=1326 audit(1727994288.151:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10146 comm="syz.1.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44290dff9 code=0x7ffc0000
[  691.198638][T10134] device bridge_slave_1 entered promiscuous mode
[  691.218737][ T6272] usb 3-1: USB disconnect, device number 14
[  691.230338][ T6354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  691.266069][ T6354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  691.280073][   T26] audit: type=1326 audit(1727994288.231:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10146 comm="syz.1.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44290dff9 code=0x7ffc0000
[  691.305509][T10040] 8021q: adding VLAN 0 to HW filter on device team0
[  692.172388][   T23] Bluetooth: hci3: command 0x0409 tx timeout
[  692.211570][T10164] loop2: detected capacity change from 0 to 512
[  692.226070][ T6729] udevd[6729]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  692.363460][T10040] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  692.396366][T10040] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  692.432114][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  692.442258][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  692.696439][T10164] EXT4-fs (loop2): 1 orphan inode deleted
[  692.751983][ T3680] bridge0: port 1(bridge_slave_0) entered blocking state
[  692.759155][ T3680] bridge0: port 1(bridge_slave_0) entered forwarding state
[  692.820050][T10164] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  692.843232][ T6729] udevd[6729]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  693.167718][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  693.177037][T10164] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038 (0x7fffffff)
[  693.215923][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  693.251503][ T3680] bridge0: port 2(bridge_slave_1) entered blocking state
[  693.258666][ T3680] bridge0: port 2(bridge_slave_1) entered forwarding state
[  693.283374][ T9139] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  693.283934][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  693.285028][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  693.286125][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  693.287070][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  693.287837][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  693.288705][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  693.289472][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  693.290133][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  693.291017][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  693.291674][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  693.292413][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  693.293154][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  693.293949][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  693.347282][T10134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  693.356585][T10175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1368'.
[  693.362343][T10134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  693.519086][T10134] team0: Port device team_slave_0 added
[  693.636254][ T9139] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  693.660311][ T9139] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  693.671779][T10134] team0: Port device team_slave_1 added
[  693.683528][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  693.691771][ T9139] usb 4-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00
[  693.700115][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  693.702075][ T9139] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  693.719366][ T9139] usb 4-1: config 0 descriptor??
[  693.760052][T10182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1371'.
[  693.816550][T10174] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  693.848772][T10040] 8021q: adding VLAN 0 to HW filter on device batadv0
[  693.877430][T10174] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  693.933929][T10134] batman_adv: batadv0: Adding interface: batadv_slave_0
[  693.955757][T10134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  694.012345][T10134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  694.052274][ T3654] device hsr_slave_0 left promiscuous mode
[  694.065761][ T3654] device hsr_slave_1 left promiscuous mode
[  694.171492][ T3654] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  694.186690][ T3932] Bluetooth: hci3: command 0x041b tx timeout
[  694.208924][ T3654] batman_adv: batadv0: Removing interface: batadv_slave_0
[  694.218151][ T9139] cypress 0003:04B4:DE61.000A: unknown main item tag 0x7
[  694.233625][ T9139] cypress 0003:04B4:DE61.000A: hidraw0: USB HID v0.00 Device [HID 04b4:de61] on usb-dummy_hcd.3-1/input0
[  694.296902][ T3654] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  694.306871][ T3654] batman_adv: batadv0: Removing interface: batadv_slave_1
[  694.357259][ T3654] device bridge_slave_1 left promiscuous mode
[  694.366022][ T3654] bridge0: port 2(bridge_slave_1) entered disabled state
[  694.399667][ T3654] device bridge_slave_0 left promiscuous mode
[  694.406029][ T3654] bridge0: port 1(bridge_slave_0) entered disabled state
[  694.446799][ T3654] device hsr_slave_0 left promiscuous mode
[  694.460386][ T3654] device hsr_slave_1 left promiscuous mode
[  694.473723][ T3654] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  694.481693][ T3654] batman_adv: batadv0: Removing interface: batadv_slave_0
[  694.492962][ T3654] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  694.500746][ T3654] batman_adv: batadv0: Removing interface: batadv_slave_1
[  694.514926][ T3654] device bridge_slave_1 left promiscuous mode
[  694.521689][ T3654] bridge0: port 2(bridge_slave_1) entered disabled state
[  694.532009][ T3654] device bridge_slave_0 left promiscuous mode
[  694.539939][ T3654] bridge0: port 1(bridge_slave_0) entered disabled state
[  694.572750][ T3654] device veth1_macvtap left promiscuous mode
[  694.585128][ T3654] device veth0_macvtap left promiscuous mode
[  694.594747][ T3654] device veth1_vlan left promiscuous mode
[  694.606754][ T3654] device veth0_vlan left promiscuous mode
[  694.625881][ T3654] device veth1_macvtap left promiscuous mode
[  694.633155][ T3654] device veth0_macvtap left promiscuous mode
[  694.640436][ T3654] device veth1_vlan left promiscuous mode
[  694.646355][ T3654] device veth0_vlan left promiscuous mode
[  695.562946][ T3654] team0 (unregistering): Port device team_slave_1 removed
[  695.594254][ T3654] team0 (unregistering): Port device team_slave_0 removed
[  695.615263][ T3654] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  695.646526][ T3654] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  695.871003][ T3654] bond0 (unregistering): Released all slaves
[  696.193698][ T3654] team0 (unregistering): Port device team_slave_1 removed
[  696.217764][ T3654] team0 (unregistering): Port device team_slave_0 removed
[  696.232358][ T3654] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  696.263329][ T3654] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  696.272101][ T3612] Bluetooth: hci3: command 0x040f tx timeout
[  696.440383][ T3654] bond0 (unregistering): Released all slaves
[  696.538667][T10134] batman_adv: batadv0: Adding interface: batadv_slave_1
[  696.545643][T10134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  696.618086][T10134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  696.702541][ T3932] usb 4-1: USB disconnect, device number 15
[  696.792576][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  696.807569][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  696.941672][T10134] device hsr_slave_0 entered promiscuous mode
[  696.968740][T10134] device hsr_slave_1 entered promiscuous mode
[  696.979047][T10134] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  696.986639][T10134] Cannot create hsr debugfs directory
[  697.151062][T10199] MTD: Attempt to mount non-MTD device "/dev/nbd2"
[  697.181629][T10199] cramfs: wrong magic
[  697.517380][T10198] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1375'.
[  698.128085][T10040] device veth0_vlan entered promiscuous mode
[  698.138897][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  698.150139][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  698.575426][ T3569] Bluetooth: hci3: command 0x0419 tx timeout
[  698.606795][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  698.633798][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  698.774051][T10207] device wireguard0 entered promiscuous mode
[  699.121863][T10218] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1380'.
[  699.411323][T10040] device veth1_vlan entered promiscuous mode
[  700.346978][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  700.383971][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  701.095739][T10238] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  701.154013][T10040] device veth0_macvtap entered promiscuous mode
[  701.200990][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  701.220174][T10040] device veth1_macvtap entered promiscuous mode
[  701.322225][T10134] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  701.348702][T10241] loop1: detected capacity change from 0 to 512
[  701.411582][T10040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  701.431477][T10040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  701.451470][T10040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  701.463116][T10040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  701.474478][T10040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  701.485404][T10040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  701.496667][T10040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  701.508064][T10040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  701.520441][T10040] batman_adv: batadv0: Interface activated: batadv_slave_0
[  701.544079][T10040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  701.558492][T10241] EXT4-fs (loop1): Ignoring removed nobh option
[  701.572492][T10241] EXT4-fs (loop1): Journaled quota options ignored when QUOTA feature is enabled
[  701.582254][T10040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  701.600105][T10040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  701.651642][T10040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  701.661509][T10040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  701.685672][T10241] EXT4-fs (loop1): 1 orphan inode deleted
[  701.691625][T10040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  701.691656][T10040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  701.691674][T10040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  701.693364][T10040] batman_adv: batadv0: Interface activated: batadv_slave_1
[  701.730474][T10241] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nodiscard,noquota,resuid=0x0000000000000000,errors=remount-ro,nobh,sysvgroups,delalloc,usrjquota=./file1,. Quota mode: writeback.
[  701.782765][T10241] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038 (0x7fffffff)
[  701.794456][T10243] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1385'.
[  701.822290][T10244] device bridge_slave_1 left promiscuous mode
[  701.828817][T10244] bridge0: port 2(bridge_slave_1) entered disabled state
[  701.854317][ T6354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  701.876265][ T6354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  701.913304][ T6354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  701.932347][ T6354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  701.974440][T10134] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  702.036000][T10040] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  702.059227][T10040] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  702.082162][T10040] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  702.093502][T10040] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  702.190023][T10251] syz.1.1394[10251] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  702.190584][T10251] syz.1.1394[10251] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  703.453523][   T26] audit: type=1326 audit(1727994300.252:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10252 comm="syz.3.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3068ee3ff9 code=0x7ffc0000
[  704.000877][   T26] audit: type=1326 audit(1727994300.252:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10252 comm="syz.3.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3068ee3ff9 code=0x7ffc0000
[  704.040960][T10134] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  704.137426][T10264] loop1: detected capacity change from 0 to 256
[  704.156894][   T26] audit: type=1326 audit(1727994300.262:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10252 comm="syz.3.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3068ee3ff9 code=0x7ffc0000
[  704.220790][   T26] audit: type=1326 audit(1727994300.262:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10252 comm="syz.3.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3068ee3ff9 code=0x7ffc0000
[  704.253094][   T26] audit: type=1326 audit(1727994300.262:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10252 comm="syz.3.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3068ee3ff9 code=0x7ffc0000
[  704.304163][ T3681] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  704.325436][   T26] audit: type=1326 audit(1727994300.272:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10252 comm="syz.3.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3068ee3ff9 code=0x7ffc0000
[  704.391407][   T26] audit: type=1326 audit(1727994300.272:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10252 comm="syz.3.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3068ee3ff9 code=0x7ffc0000
[  704.611883][   T26] audit: type=1326 audit(1727994300.272:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10252 comm="syz.3.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3068ee3ff9 code=0x7ffc0000
[  704.723051][ T3681] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  704.782959][T10264] FAT-fs (loop1): Directory bread(block 64) failed
[  704.847359][T10264] FAT-fs (loop1): Directory bread(block 65) failed
[  704.868194][   T26] audit: type=1326 audit(1727994300.272:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10252 comm="syz.3.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f3068ee3ff9 code=0x7ffc0000
[  704.914331][T10264] FAT-fs (loop1): Directory bread(block 66) failed
[  704.978765][   T26] audit: type=1326 audit(1727994300.282:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10252 comm="syz.3.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3068ee3ff9 code=0x7ffc0000
[  705.003104][T10264] FAT-fs (loop1): Directory bread(block 67) failed
[  705.011022][T10264] FAT-fs (loop1): Directory bread(block 68) failed
[  705.064116][T10264] FAT-fs (loop1): Directory bread(block 69) failed
[  705.081281][T10134] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  705.134382][T10264] FAT-fs (loop1): Directory bread(block 70) failed
[  705.141139][T10264] FAT-fs (loop1): Directory bread(block 71) failed
[  705.148128][T10264] FAT-fs (loop1): Directory bread(block 72) failed
[  705.152480][ T6354] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  705.161120][T10264] FAT-fs (loop1): Directory bread(block 73) failed
[  705.221613][ T6354] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  705.221716][T10272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1391'.
[  705.248855][T10271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  705.255006][ T6354] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  705.336135][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  705.376211][T10271] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1392'.
[  705.493934][T10134] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  705.557341][T10134] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  705.647508][T10134] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  705.658634][T10134] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  705.693535][T10287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1393'.
[  706.537102][T10297] hub 6-0:1.0: USB hub found
[  706.545203][T10297] hub 6-0:1.0: 1 port detected
[  707.356695][T10301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  708.358134][T10308] netlink: 'syz.0.1400': attribute type 21 has an invalid length.
[  708.463691][T10311] tmpfs: Bad value for 'mpol'
[  708.485407][T10308] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1400'.
[  708.504666][T10311] overlayfs: missing 'lowerdir'
[  708.510563][T10134] 8021q: adding VLAN 0 to HW filter on device bond0
[  708.534340][T10308] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1400'.
[  708.598427][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  708.624724][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  708.671296][T10134] 8021q: adding VLAN 0 to HW filter on device team0
[  708.684832][T10314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1403'.
[  708.851700][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  708.908087][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  709.060026][ T3680] bridge0: port 1(bridge_slave_0) entered blocking state
[  709.067197][ T3680] bridge0: port 1(bridge_slave_0) entered forwarding state
[  709.620203][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  709.695452][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  709.820763][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  709.839156][ T3680] bridge0: port 2(bridge_slave_1) entered blocking state
[  709.846287][ T3680] bridge0: port 2(bridge_slave_1) entered forwarding state
[  710.131250][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  710.223513][T10336] hub 6-0:1.0: USB hub found
[  710.229927][T10336] hub 6-0:1.0: 1 port detected
[  710.485576][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  710.572979][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  710.623980][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  710.740011][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  710.759389][ T3932] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  710.979981][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  711.487160][ T3932] usb 4-1: Using ep0 maxpacket: 8
[  711.874422][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  711.883360][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  711.893485][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  711.979065][T10134] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  712.010194][T10134] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  712.039883][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  712.048772][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  712.129148][ T3932] usb 4-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice= f.59
[  712.138312][ T3932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  712.167600][ T3932] usb 4-1: Product: syz
[  712.177342][ T3932] usb 4-1: Manufacturer: syz
[  712.187496][ T3932] usb 4-1: SerialNumber: syz
[  712.199685][ T3932] usb 4-1: config 0 descriptor??
[  712.260614][ T3932] ums-datafab 4-1:0.0: USB Mass Storage device detected
[  712.337257][ T3932] ums-sddr55 4-1:0.0: USB Mass Storage device detected
[  712.567944][ T3569] usb 4-1: USB disconnect, device number 16
[  712.729416][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  712.745127][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  712.771457][T10134] 8021q: adding VLAN 0 to HW filter on device batadv0
[  713.749316][T10398] hub 6-0:1.0: USB hub found
[  713.754891][T10398] hub 6-0:1.0: 1 port detected
[  713.811325][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  713.926607][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  714.018609][T10134] device veth0_vlan entered promiscuous mode
[  714.040050][T10401] loop3: detected capacity change from 0 to 512
[  714.065999][T10134] device veth1_vlan entered promiscuous mode
[  714.249471][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  714.275779][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  714.293082][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  714.355055][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  714.476991][T10401] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  714.504290][T10373] chnl_net:caif_netlink_parms(): no params data found
[  714.524435][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  714.531978][T10401] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038 (0x7fffffff)
[  714.533174][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  714.661024][ T3932] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  714.961082][ T3932] usb 1-1: Using ep0 maxpacket: 8
[  715.091333][   T23] Bluetooth: hci4: command 0x0409 tx timeout
[  715.098994][ T3932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  715.248878][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  715.254352][ T3932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  715.262093][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  715.275924][ T3932] usb 1-1: New USB device found, idVendor=056a, idProduct=4135, bcdDevice= 0.cc
[  715.285637][ T3932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  715.302875][T10134] device veth0_macvtap entered promiscuous mode
[  715.331993][ T3932] usb 1-1: config 0 descriptor??
[  715.467596][T10134] device veth1_macvtap entered promiscuous mode
[  715.558983][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  715.604041][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  715.612903][T10373] bridge0: port 1(bridge_slave_0) entered blocking state
[  715.619999][T10373] bridge0: port 1(bridge_slave_0) entered disabled state
[  715.629004][T10373] device bridge_slave_0 entered promiscuous mode
[  715.797247][T10134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  715.827038][T10134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  715.875856][ T3932] wacom 0003:056A:4135.000B: unknown main item tag 0x0
[  715.891922][T10134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  715.912569][ T3932] wacom 0003:056A:4135.000B: Unknown device_type for 'HID 056a:4135'. Ignoring.
[  715.941703][T10134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  715.993862][T10134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  716.024344][T10134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  716.049882][T10134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  716.146225][T10134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  716.204902][T10134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  716.267599][T10134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  716.304181][T10134] batman_adv: batadv0: Interface activated: batadv_slave_0
[  716.315452][T10134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  716.347410][T10134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  716.374996][T10134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  716.398803][T10134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  716.447814][T10134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  716.465755][T10134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  716.478818][T10134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  716.511159][T10134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  716.548076][T10134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  716.579576][T10134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  716.641312][T10134] batman_adv: batadv0: Interface activated: batadv_slave_1
[  716.737891][T10429] loop3: detected capacity change from 0 to 128
[  716.835217][T10373] bridge0: port 2(bridge_slave_1) entered blocking state
[  716.844718][T10373] bridge0: port 2(bridge_slave_1) entered disabled state
[  716.863248][T10373] device bridge_slave_1 entered promiscuous mode
[  716.885062][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  716.894196][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  716.904249][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  716.913716][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  717.177684][T10125] Bluetooth: hci4: command 0x041b tx timeout
[  717.192262][T10134] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  717.201471][T10134] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  717.210377][T10134] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  717.219441][T10134] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  717.248644][T10373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  717.442268][T10373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  717.832593][T10373] team0: Port device team_slave_0 added
[  717.855260][T10373] team0: Port device team_slave_1 added
[  717.918858][T10373] batman_adv: batadv0: Adding interface: batadv_slave_0
[  717.937116][T10373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  717.963076][    C0] vkms_vblank_simulate: vblank timer overrun
[  717.995345][T10373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  718.068168][ T3646] usb 1-1: USB disconnect, device number 12
[  718.341639][T10373] batman_adv: batadv0: Adding interface: batadv_slave_1
[  718.360858][T10373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  718.402493][T10455] netlink: 312 bytes leftover after parsing attributes in process `syz.0.1434'.
[  718.422936][T10373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  718.598535][ T3653] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  718.612085][ T3653] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  718.680408][T10373] device hsr_slave_0 entered promiscuous mode
[  718.701081][T10373] device hsr_slave_1 entered promiscuous mode
[  718.713326][T10373] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  718.727564][T10373] Cannot create hsr debugfs directory
[  718.739196][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  718.853956][ T3626] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  718.879534][ T3626] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  719.038315][T10466] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1436'.
[  719.054020][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  719.246165][ T3612] Bluetooth: hci4: command 0x040f tx timeout
[  719.312276][T10473] device bond0 entered promiscuous mode
[  719.388403][T10473] device bond_slave_0 entered promiscuous mode
[  719.448384][T10473] device bond_slave_1 entered promiscuous mode
[  719.840666][T10516] mip6: mip6_destopt_init_state: state's mode is not 2: 0
[  720.411694][ T3612] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  720.631393][ T3612] usb 4-1: device descriptor read/64, error -71
[  720.639094][T10473] loop4: detected capacity change from 0 to 512
[  720.832381][T10473] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  720.852651][T10473] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038 (0x7fffffff)
[  720.881491][T10373] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  720.927263][   T26] kauditd_printk_skb: 13 callbacks suppressed
[  720.927278][   T26] audit: type=1800 audit(1727994317.870:443): pid=10473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1362" name="bus" dev="loop4" ino=18 res=0 errno=0
[  720.967196][   T26] audit: type=1800 audit(1727994317.870:444): pid=10473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1362" name="bus" dev="loop4" ino=18 res=0 errno=0
[  721.037190][T10527] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1439'.
[  721.145398][ T3612] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  721.326175][ T1078] Bluetooth: hci4: command 0x0419 tx timeout
[  721.915846][ T3612] usb 4-1: device descriptor read/64, error -71
[  721.978131][T10373] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  722.063247][ T3612] usb usb4-port1: attempt power cycle
[  723.286973][ T3612] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  723.678694][ T6354] device hsr_slave_0 left promiscuous mode
[  723.687731][ T3612] usb 4-1: device descriptor read/8, error -71
[  723.818572][T10546] overlayfs: missing 'lowerdir'
[  723.823681][ T6354] device hsr_slave_1 left promiscuous mode
[  724.111235][ T6354] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  724.129032][ T6354] batman_adv: batadv0: Removing interface: batadv_slave_0
[  724.164844][ T6354] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  724.173342][ T6354] batman_adv: batadv0: Removing interface: batadv_slave_1
[  724.192038][ T6354] device bridge_slave_1 left promiscuous mode
[  724.225308][ T6354] bridge0: port 2(bridge_slave_1) entered disabled state
[  724.522938][ T6354] device bridge_slave_0 left promiscuous mode
[  724.768335][ T6354] bridge0: port 1(bridge_slave_0) entered disabled state
[  724.854660][ T6354] device veth1_macvtap left promiscuous mode
[  724.907572][ T6354] device veth0_macvtap left promiscuous mode
[  725.037842][ T6354] device veth1_vlan left promiscuous mode
[  725.043739][ T6354] device veth0_vlan left promiscuous mode
[  726.825339][T10568] mip6: mip6_destopt_init_state: state's mode is not 2: 0
[  728.708634][T10569] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1459'.
[  730.395388][ T6354] team0 (unregistering): Port device team_slave_1 removed
[  730.462526][ T6354] team0 (unregistering): Port device team_slave_0 removed
[  730.482000][ T6354] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  730.959530][ T6354] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  731.196808][T10593] loop1: detected capacity change from 0 to 4096
[  731.374537][ T6354] bond0 (unregistering): Released all slaves
[  731.479187][T10373] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  731.494439][T10576] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1451'.
[  731.558037][T10593] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2)
[  731.835645][T10373] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  732.218275][T10616] mip6: mip6_destopt_init_state: state's mode is not 2: 0
[  733.275566][T10624] loop1: detected capacity change from 0 to 1024
[  735.805253][T10624] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only.
[  735.864010][T10373] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  735.886686][T10624] hfsplus: filesystem is marked journaled, leaving read-only.
[  735.979219][T10373] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  736.039391][T10373] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  736.159461][T10373] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  737.165487][ T3609] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  737.189425][T10373] 8021q: adding VLAN 0 to HW filter on device bond0
[  737.201733][T10654] loop4: detected capacity change from 0 to 8
[  737.315190][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  737.327230][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  737.381701][T10373] 8021q: adding VLAN 0 to HW filter on device team0
[  737.557433][T10657] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2)
[  738.357529][   T26] audit: type=1326 audit(1727994334.639:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10655 comm="syz.1.1475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44290dff9 code=0x7ffc0000
[  738.426381][ T3609] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config
[  738.449095][   T26] audit: type=1326 audit(1727994334.639:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10655 comm="syz.1.1475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44290dff9 code=0x7ffc0000
[  738.488539][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  738.537010][ T3609] usb 4-1: config 9 has 0 interfaces, different from the descriptor's value: 1
[  738.547776][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  738.566327][ T3609] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  738.576993][ T3654] bridge0: port 1(bridge_slave_0) entered blocking state
[  738.584127][ T3654] bridge0: port 1(bridge_slave_0) entered forwarding state
[  738.585424][   T26] audit: type=1326 audit(1727994334.649:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10655 comm="syz.1.1475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff44290dff9 code=0x7ffc0000
[  738.643087][ T3609] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  738.699830][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  738.734120][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  738.743484][   T26] audit: type=1326 audit(1727994334.649:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10655 comm="syz.1.1475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44290dff9 code=0x7ffc0000
[  738.757777][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  738.840006][ T3654] bridge0: port 2(bridge_slave_1) entered blocking state
[  738.845303][   T26] audit: type=1326 audit(1727994334.659:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10655 comm="syz.1.1475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44290dff9 code=0x7ffc0000
[  738.847161][ T3654] bridge0: port 2(bridge_slave_1) entered forwarding state
[  738.990364][   T26] audit: type=1326 audit(1727994334.659:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10655 comm="syz.1.1475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff44290dff9 code=0x7ffc0000
[  739.028044][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  739.165264][   T26] audit: type=1326 audit(1727994334.659:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10655 comm="syz.1.1475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44290dff9 code=0x7ffc0000
[  739.196692][   T26] audit: type=1326 audit(1727994334.659:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10655 comm="syz.1.1475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44290dff9 code=0x7ffc0000
[  739.303766][T10670] mip6: mip6_destopt_init_state: state's mode is not 2: 0
[  739.313710][ T3609] usb 4-1: string descriptor 0 read error: -71
[  739.915142][   T26] audit: type=1326 audit(1727994334.669:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10655 comm="syz.1.1475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7ff44290dff9 code=0x7ffc0000
[  739.928125][ T3609] usb 4-1: USB disconnect, device number 21
[  739.938263][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  739.956650][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  739.977697][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  739.994108][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  740.022497][   T26] audit: type=1326 audit(1727994334.669:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10655 comm="syz.1.1475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44290dff9 code=0x7ffc0000
[  740.024499][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  740.192434][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  740.204413][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  740.221751][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  740.260946][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  740.318252][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  740.342490][T10373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  741.483419][T10685] loop3: detected capacity change from 0 to 512
[  741.727872][T10685] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback.
[  741.898627][T10685] ext4 filesystem being mounted at /25/bus supports timestamps until 2038 (0x7fffffff)
[  741.944503][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  741.953087][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  742.002749][T10373] 8021q: adding VLAN 0 to HW filter on device batadv0
[  742.105924][ T3607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  742.123909][ T3607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  742.218251][  T391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  742.249812][  T391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  742.293343][  T391] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  742.317896][  T391] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  742.414440][T10373] device veth0_vlan entered promiscuous mode
[  742.648886][T10704] loop3: detected capacity change from 0 to 2048
[  742.672425][T10373] device veth1_vlan entered promiscuous mode
[  742.731354][  T391] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  742.740624][  T391] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  742.751952][  T391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  742.767557][T10712] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  742.829866][  T391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  742.848465][T10373] device veth0_macvtap entered promiscuous mode
[  742.861253][T10373] device veth1_macvtap entered promiscuous mode
[  743.059458][ T9150] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  743.368334][T10704] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: disallowed inode number - offset=56, inode=6, rec_len=24, name_len=5
[  743.874132][T10704] Remounting filesystem read-only
[  743.882164][T10373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  743.892841][T10373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  743.904260][T10373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  743.939908][T10373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  743.977718][T10373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  743.999694][T10373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  744.010224][T10373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  744.021105][T10373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  744.037299][T10373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  744.048076][T10373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  744.088947][T10373] batman_adv: batadv0: Interface activated: batadv_slave_0
[  744.097752][T10507] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  744.109915][ T9150] usb 1-1: Using ep0 maxpacket: 16
[  744.143527][T10507] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  744.177834][T10507] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  744.197197][T10507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  744.221714][T10716] IPv6: sit1: Disabled Multicast RS
[  744.328011][ T9150] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  744.350008][ T9150] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  744.354102][T10373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  744.360315][ T9150] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  744.382746][T10373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  744.450053][ T9150] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  744.460357][T10373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  744.486697][ T9150] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  744.495447][T10373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  744.516492][ T9150] usb 1-1: config 0 descriptor??
[  744.543801][T10373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  744.560904][T10723] loop3: detected capacity change from 0 to 8192
[  744.603515][T10373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  744.663030][T10373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  744.690299][T10373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  744.702340][T10373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  744.765384][T10373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  744.784239][T10373] batman_adv: batadv0: Interface activated: batadv_slave_1
[  744.897657][T10373] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  744.928710][T10373] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  745.000933][T10373] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  745.009957][T10373] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  745.182475][ T9150] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0
[  745.189739][ T9150] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0
[  745.237747][ T9150] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0
[  745.256387][ T9150] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0
[  745.284187][ T9150] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0
[  745.316960][ T9150] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0
[  745.341805][ T9150] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0
[  745.366540][ T9150] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0
[  745.389626][ T9150] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0
[  745.400319][ T9150] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0
[  745.419031][ T9150] microsoft 0003:045E:07DA.000C: No inputs registered, leaving
[  745.446207][ T9150] microsoft 0003:045E:07DA.000C: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  745.466028][ T9150] microsoft 0003:045E:07DA.000C: no inputs found
[  745.475969][ T9150] microsoft 0003:045E:07DA.000C: could not initialize ff, continuing anyway
[  745.506489][  T391] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  745.531255][  T391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  745.576808][ T9150] usb 1-1: USB disconnect, device number 13
[  745.823714][  T391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  745.844542][  T391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  745.933870][ T3654] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  745.956122][ T3654] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  745.964668][  T391] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  746.134631][  T391] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  746.283940][T10755] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  747.287901][T10762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1414'.
[  747.402065][T10771] fuse: blksize only supported for fuseblk
[  747.464109][T10772] loop1: detected capacity change from 0 to 1024
[  747.607037][T10772] EXT4-fs (loop1): Journaled quota options ignored when QUOTA feature is enabled
[  747.634149][T10782] xt_ipcomp: unknown flags B
[  747.705329][T10772] EXT4-fs (loop1): INFO: recovery required on readonly filesystem
[  747.738772][T10772] EXT4-fs (loop1): write access will be enabled during recovery
[  747.761939][T10772] JBD2: no valid journal superblock found
[  747.768575][T10772] EXT4-fs (loop1): error loading journal
[  748.240725][ T1387] ieee802154 phy1 wpan1: encryption failed: -22
[  749.828735][T10807] loop2: detected capacity change from 0 to 8
[  749.874112][T10807] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  753.622638][T10813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1516'.
[  754.341766][T10834] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  756.462717][T10841] netlink: 'syz.3.1523': attribute type 11 has an invalid length.
[  756.500118][T10841] netlink: 'syz.3.1523': attribute type 11 has an invalid length.
[  756.512522][T10841] debugfs: Directory 'netdev:' with parent 'phy51' already present!
[  757.280752][T10853] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  759.359065][T10870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1529'.
[  759.402077][T10875] netlink: 'syz.0.1530': attribute type 10 has an invalid length.
[  759.421813][T10878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1532'.
[  760.067090][T10875] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  760.456948][T10888] loop2: detected capacity change from 0 to 164
[  760.825775][T10891] netlink: 'syz.0.1536': attribute type 2 has an invalid length.
[  761.825746][T10885] loop1: detected capacity change from 0 to 8192
[  761.993241][T10898] blk_update_request: I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  762.005893][T10898] blk_update_request: I/O error, dev loop2, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  762.020271][T10898] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  762.030174][T10898] blk_update_request: I/O error, dev loop2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  762.041418][T10898] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[  762.051052][T10898] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  762.058698][T10898] UDF-fs: Scanning with blocksize 512 failed
[  762.068513][T10898] blk_update_request: I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  762.079803][T10898] blk_update_request: I/O error, dev loop2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  762.090956][T10898] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  762.102094][T10898] blk_update_request: I/O error, dev loop2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  762.113376][T10898] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[  762.122988][T10898] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  762.130698][T10898] UDF-fs: Scanning with blocksize 1024 failed
[  762.141226][T10895] netlink: 'syz.0.1536': attribute type 1 has an invalid length.
[  762.141523][T10898] blk_update_request: I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  762.161905][T10898] blk_update_request: I/O error, dev loop2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  762.173839][T10898] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  762.183631][T10898] blk_update_request: I/O error, dev loop2, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  762.197690][T10898] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[  762.207714][T10898] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  762.215485][T10898] UDF-fs: Scanning with blocksize 2048 failed
[  762.222095][T10898] blk_update_request: I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  762.233366][T10898] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  762.243292][T10898] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[  762.253055][T10898] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  762.255693][T10885] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  762.260743][T10898] UDF-fs: Scanning with blocksize 4096 failed
[  762.260803][T10898] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1)
[  762.374734][T10885] REISERFS (device loop1): using ordered data mode
[  762.390763][T10885] reiserfs: using flush barriers
[  762.422208][T10885] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  762.481169][T10885] REISERFS (device loop1): checking transaction log (loop1)
[  762.507705][T10909] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg2, syncid = 2, id = 0
[  762.556586][T10905] loop3: detected capacity change from 0 to 256
[  762.803841][T10908] xt_socket: unknown flags 0x50
[  762.815362][T10905] exfat: Unknown parameter '�	�'
[  763.940988][T10885] REISERFS (device loop1): Using tea hash to sort names
[  764.132017][T10885] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  764.197686][T10920] loop2: detected capacity change from 0 to 1024
[  764.812306][T10920] hfsplus: request for non-existent node 33423360 in B*Tree
[  764.967486][T10920] hfsplus: request for non-existent node 33423360 in B*Tree
[  765.153511][T10940] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1548'.
[  766.537011][T10955] loop3: detected capacity change from 0 to 164
[  766.843516][ T6272] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  766.938991][T10967] loop2: detected capacity change from 0 to 512
[  767.093420][   T23] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  767.117832][T10967] EXT4-fs (loop2): Unrecognized mount option "appraise_type=imasig" or missing value
[  767.228464][T10970] print_req_error: 2 callbacks suppressed
[  767.228506][T10970] blk_update_request: I/O error, dev loop3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  767.247302][T10970] blk_update_request: I/O error, dev loop3, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  767.259283][T10970] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  767.270722][T10970] blk_update_request: I/O error, dev loop3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  767.282271][T10970] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512
[  767.292623][T10970] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  767.300677][T10970] UDF-fs: Scanning with blocksize 512 failed
[  767.310672][T10970] blk_update_request: I/O error, dev loop3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  767.323392][T10970] blk_update_request: I/O error, dev loop3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  767.334964][T10970] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  767.345992][T10970] blk_update_request: I/O error, dev loop3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  767.357692][T10970] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512
[  767.367520][T10970] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  767.417269][T10970] UDF-fs: Scanning with blocksize 1024 failed
[  767.424029][T10970] blk_update_request: I/O error, dev loop3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  767.435326][T10970] blk_update_request: I/O error, dev loop3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  767.446759][T10970] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  767.456584][T10970] blk_update_request: I/O error, dev loop3, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  767.467851][T10970] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512
[  767.477504][T10970] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  767.485228][T10970] UDF-fs: Scanning with blocksize 2048 failed
[  767.491828][T10970] blk_update_request: I/O error, dev loop3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  767.503102][T10970] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  767.512908][T10970] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512
[  767.522563][T10970] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  767.530291][T10970] UDF-fs: Scanning with blocksize 4096 failed
[  767.536458][T10970] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1)
[  767.928263][T10976] loop2: detected capacity change from 0 to 256
[  768.014257][ T6272] usb 2-1: config 7 descriptor has 1 excess byte, ignoring
[  768.021651][ T6272] usb 2-1: config 7 has 1 interface, different from the descriptor's value: 2
[  768.064732][   T23] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  768.289380][   T23] usb 5-1: config 0 has no interfaces?
[  768.432803][T10976] trusted_key: encrypted_key: master key parameter 'defaul��' is invalid
[  768.467171][   T23] usb 5-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4
[  768.914474][   T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  768.944033][   T23] usb 5-1: config 0 descriptor??
[  769.076266][ T6272] usb 2-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84
[  769.106330][ T6272] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  769.140254][ T6272] usb 2-1: Product: syz
[  769.154932][ T6272] usb 2-1: Manufacturer: syz
[  769.168090][ T6272] usb 2-1: SerialNumber: syz
[  769.274520][T10985] vxcan0: tx drop: invalid da for name 0x0000000000000001
[  769.606078][ T6272] rndis_wlan 2-1:7.0: skipping garbage
[  769.611905][ T6272] usb 2-1: bad CDC descriptors
[  769.776504][ T6272] rndis_host 2-1:7.0: skipping garbage
[  769.943357][ T6272] usb 2-1: bad CDC descriptors
[  770.037456][T10963] loop4: detected capacity change from 0 to 256
[  770.061111][ T6272] option 2-1:7.0: GSM modem (1-port) converter detected
[  770.150034][ T6272] usb 2-1: USB disconnect, device number 8
[  770.183532][ T6272] option 2-1:7.0: device disconnected
[  770.191217][T10963] FAT-fs (loop4): Unrecognized mount option "uni_xlatc=0" or missing value
[  770.262160][T10992] netlink: 'syz.0.1562': attribute type 1 has an invalid length.
[  770.285555][T10992] netlink: 'syz.0.1562': attribute type 2 has an invalid length.
[  770.304396][T10991] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1560'.
[  770.313938][T10992] netlink: 'syz.0.1562': attribute type 1 has an invalid length.
[  770.381889][T10996] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1563'.
[  770.416054][T10963] mkiss: ax0: crc mode is auto.
[  772.004829][T11021] tipc: Failed to remove unknown binding: 66,1,1/0:814750757/814750759
[  772.079039][T11026] tipc: Failed to remove unknown binding: 66,1,1/0:814750757/814750759
[  772.107159][T11026] tipc: Failed to remove unknown binding: 66,1,1/0:814750757/814750759
[  772.110486][ T3646] usb 5-1: USB disconnect, device number 12
[  772.274812][T11032] loop3: detected capacity change from 0 to 256
[  772.551595][T11040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1574'.
[  772.730898][T11032] FAT-fs (loop3): bogus sectors per cluster 0
[  772.867499][T11032] FAT-fs (loop3): Can't find a valid FAT filesystem
[  773.038748][T11042] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  773.213401][T11042] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1575'.
[  773.237201][T11044] loop4: detected capacity change from 0 to 1024
[  773.385610][T11044] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  773.437146][T11044] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  773.486540][T11044] jbd2_journal_init_inode: Cannot locate journal superblock
[  773.584710][T11051] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  773.914647][T11044] EXT4-fs (loop4): Could not load journal inode
[  774.294286][T11056] loop3: detected capacity change from 0 to 256
[  774.504370][T11056] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  774.870796][T11076] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  774.975074][T11056] exFAT-fs (loop3): hint_cluster is invalid (17)
[  776.438322][T11098] loop2: detected capacity change from 0 to 1024
[  776.741277][T11103] input: syz0 as /devices/virtual/input/input23
[  776.754533][T11098] loop2: detected capacity change from 0 to 2048
[  776.909641][T11098] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[  776.983946][T11098] UDF-fs: warning (device loop2): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount
[  777.659208][T11109] loop1: detected capacity change from 0 to 16
[  777.739637][T11109] erofs: (device loop1): mounted with root inode @ nid 36.
[  777.835338][T11115] loop2: detected capacity change from 0 to 256
[  777.905478][T11101] loop3: detected capacity change from 0 to 40427
[  777.993379][T11101] F2FS-fs (loop3): invalid crc value
[  778.028714][T11101] F2FS-fs (loop3): Found nat_bits in checkpoint
[  778.294501][T11101] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  778.653150][T11129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1593'.
[  779.617915][T11131] loop2: detected capacity change from 0 to 512
[  779.654730][ T9937] attempt to access beyond end of device
[  779.654730][ T9937] loop3: rw=2049, want=45104, limit=40427
[  779.963803][T11131] EXT4-fs (loop2): Test dummy encryption mode enabled
[  779.979046][T11131] EXT4-fs (loop2): Test dummy encryption mode enabled
[  780.020508][T11131] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:163: inode #12: comm syz.2.1601: inline data xattr refers to an external xattr inode
[  780.141417][T11109] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 46
[  780.222636][T11131] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1601: couldn't read orphan inode 12 (err -117)
[  780.632459][T11131] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000040000,init_itable=0x0000000000000000,nolazytime,grpid,prjquota,usrjquota=,lazytime,errors=continue,test_dummy_encryption,test_dummy_encryption,,errors=continue. Quota mode: writeback.
[  783.107170][T11158] overlayfs: './file0' not a directory
[  783.233152][T11157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1611'.
[  783.407849][T11174] loop1: detected capacity change from 0 to 256
[  783.549780][T11174] FAT-fs (loop1): Directory bread(block 64) failed
[  783.563194][T11174] FAT-fs (loop1): Directory bread(block 65) failed
[  783.589555][T11174] FAT-fs (loop1): Directory bread(block 66) failed
[  783.630732][T11174] FAT-fs (loop1): Directory bread(block 67) failed
[  783.772986][T11174] FAT-fs (loop1): Directory bread(block 68) failed
[  783.795906][T11174] FAT-fs (loop1): Directory bread(block 69) failed
[  783.806265][T11174] FAT-fs (loop1): Directory bread(block 70) failed
[  784.171101][T11174] FAT-fs (loop1): Directory bread(block 71) failed
[  784.536564][T11174] FAT-fs (loop1): Directory bread(block 72) failed
[  784.557036][T11174] FAT-fs (loop1): Directory bread(block 73) failed
[  784.804979][T11174] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1614'.
[  785.222584][T11187] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  786.052254][T11194] loop4: detected capacity change from 0 to 256
[  786.250305][T11194] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  786.316161][T11192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  788.800980][T11223] syz.2.1624 (11223): attempted to duplicate a private mapping with mremap.  This is not supported.
[  791.184816][T11250] loop1: detected capacity change from 0 to 512
[  791.731100][T11239] loop3: detected capacity change from 0 to 4096
[  791.796464][T11239] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512)
[  791.924403][T11250] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  791.954982][T11250] ext4 filesystem being mounted at /107/w��5�T��)�`)Y�F�nA��@T<�3�ڂ$���r�cnH�<�p�r��>�wC�" ��-������8 supports timestamps until 2038 (0x7fffffff)
[  791.979605][T11260] loop4: detected capacity change from 0 to 1024
[  792.009636][T11239] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  792.267227][T11250] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.1633: Directory hole found for htree leaf block 0
[  794.679609][T11291] netlink: 'syz.4.1640': attribute type 10 has an invalid length.
[  794.988028][  T154] ntfs3: loop3: ino=1c, Internal error
[  795.017981][  T154] ntfs3: loop3: ntfs3_write_inode r=1c failed, -22.
[  795.042330][  T154] ntfs3: loop3: ino=1e, Internal error
[  795.047992][  T154] ntfs3: loop3: ntfs3_write_inode r=1e failed, -22.
[  795.058829][ T9937] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22.
[  795.110432][T11291] device wlan1 entered promiscuous mode
[  795.156900][T11291] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  796.277900][T11311] loop4: detected capacity change from 0 to 8
[  796.947352][T11317] SQUASHFS error: Failed to read block 0x63a: -5
[  796.954496][T11317] SQUASHFS error: Unable to read metadata cache entry [638]
[  796.965418][T11317] SQUASHFS error: Unable to read directory block [26067d:ffff]
[  797.597940][    C0] vkms_vblank_simulate: vblank timer overrun
[  799.066308][T11355] loop3: detected capacity change from 0 to 512
[  799.235871][T11355] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  799.314781][T11355] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.1658: bad orphan inode 16
[  799.341810][ T3646] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  799.367291][T11355] ext4_test_bit(bit=15, block=4) = 0
[  799.416133][T11355] EXT4-fs (loop3): 1 orphan inode deleted
[  799.470203][T11355] EXT4-fs (loop3): mounted filesystem without journal. Opts: data_err=ignore,nodelalloc,bsdgroups,inode_readahead_blks=0x0000000002000000,block_validity,quota,,errors=continue. Quota mode: writeback.
[  799.601989][ T3646] usb 2-1: Using ep0 maxpacket: 32
[  799.744825][T11361] 9pnet: p9_fd_create_tcp (11361): problem binding to privport
[  799.829479][   T26] kauditd_printk_skb: 13 callbacks suppressed
[  799.829496][   T26] audit: type=1326 audit(1727994396.723:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11354 comm="syz.3.1658" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3068ee3ff9 code=0x0
[  799.892042][ T3646] usb 2-1: New USB device found, idVendor=13d3, idProduct=3311, bcdDevice=ea.d7
[  799.921697][ T3646] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  799.929982][ T3646] usb 2-1: Product: syz
[  799.990271][ T3646] usb 2-1: Manufacturer: syz
[  800.009418][ T3646] usb 2-1: SerialNumber: syz
[  800.038555][ T3646] usb 2-1: config 0 descriptor??
[  800.104727][ T3646] r8712u: register rtl8712_netdev_ops to netdev_ops
[  800.123040][ T3646] usb 2-1: r8712u: USB_SPEED_HIGH with 0 endpoints
[  800.572692][ T3646] usb 2-1: r8712u: Boot from EFUSE: Autoload Failed
[  800.572733][ T3646] usb 2-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00
[  800.572771][ T3646] usb 2-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin"
[  800.582824][ T3646] usb 2-1: USB disconnect, device number 9
[  800.816975][T11377] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  801.575094][ T9148] Bluetooth: hci2: command 0x0406 tx timeout
[  801.628121][T11379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1662'.
[  801.793492][T11379] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  801.837567][T11379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1662'.
[  801.852437][T11384] loop1: detected capacity change from 0 to 512
[  801.970692][T11384] EXT4-fs (loop1): Test dummy encryption mode enabled
[  802.020539][T11384] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:163: inode #12: comm syz.1.1664: inline data xattr refers to an external xattr inode
[  802.094828][T11384] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1664: couldn't read orphan inode 12 (err -117)
[  802.125383][T11384] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000001,init_itable=0x0000000000000000,nolazytime,grpid,prjquota,norecovery,lazytime,errors=continue,auto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: writeback.
[  804.158667][T11416] loop2: detected capacity change from 0 to 128
[  805.363215][T11435] loop3: detected capacity change from 0 to 1024
[  805.428673][T11437] netlink: 'syz.4.1677': attribute type 11 has an invalid length.
[  805.511921][T11435] EXT4-fs (loop3): Journaled quota options ignored when QUOTA feature is enabled
[  805.546487][T11437] netlink: 'syz.4.1677': attribute type 11 has an invalid length.
[  805.588883][T11435] EXT4-fs (loop3): INFO: recovery required on readonly filesystem
[  805.597593][T11437] debugfs: Directory 'netdev:' with parent 'phy55' already present!
[  805.700125][T11435] EXT4-fs (loop3): write access will be enabled during recovery
[  805.761871][T11435] JBD2: no valid journal superblock found
[  805.785159][T11435] EXT4-fs (loop3): error loading journal
[  806.973689][T11452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1682'.
[  807.036241][T11452] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  807.127245][T11452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1682'.
[  807.140238][T11438] loop4: detected capacity change from 0 to 32768
[  807.366089][T11438] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1677 (11438)
[  807.872115][T11438] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  807.910329][T11438] BTRFS info (device loop4): using free space tree
[  807.937754][T11438] BTRFS info (device loop4): has skinny extents
[  808.601636][T11438] BTRFS error (device loop4): open_ctree failed
[  809.639758][T11499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1689'.
[  809.699422][ T1387] ieee802154 phy1 wpan1: encryption failed: -22
[  809.999616][T11507] ODEBUG: Out of memory. ODEBUG disabled
[  810.717325][T11493] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  810.730810][T11493] Bluetooth: hci4: Injecting HCI hardware error event
[  810.859825][ T3574] Bluetooth: hci4: hardware error 0x00
[  811.263320][T11520] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1695'.
[  811.375982][T11524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1696'.
[  811.447612][T11524] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  811.521814][T11524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1696'.
[  811.778468][ T3609] Bluetooth: hci3: command 0x0406 tx timeout
[  813.163445][T11541] binder: 11539:11541 ioctl c018620c 20000000 returned -14
[  814.828606][   T26] audit: type=1326 audit(1727994411.715:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11558 comm="syz.0.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b35e8ff9 code=0x7ffc0000
[  814.953293][   T26] audit: type=1326 audit(1727994411.745:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11558 comm="syz.0.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7ff8b35e8ff9 code=0x7ffc0000
[  814.990256][   T26] audit: type=1326 audit(1727994411.745:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11558 comm="syz.0.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b35e8ff9 code=0x7ffc0000
[  815.022123][   T26] audit: type=1326 audit(1727994411.745:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11558 comm="syz.0.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b35e8ff9 code=0x7ffc0000
[  815.106635][   T26] audit: type=1326 audit(1727994411.745:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11558 comm="syz.0.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff8b35e8ff9 code=0x7ffc0000
[  815.177774][T11567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1707'.
[  815.247262][   T26] audit: type=1326 audit(1727994411.745:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11558 comm="syz.0.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b35e8ff9 code=0x7ffc0000
[  815.315629][   T26] audit: type=1326 audit(1727994411.745:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11558 comm="syz.0.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b35e8ff9 code=0x7ffc0000
[  815.466120][   T26] audit: type=1326 audit(1727994411.755:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11558 comm="syz.0.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff8b35e8ff9 code=0x7ffc0000
[  815.566151][   T26] audit: type=1326 audit(1727994411.755:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11558 comm="syz.0.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b35e8ff9 code=0x7ffc0000
[  815.788493][   T26] audit: type=1326 audit(1727994411.755:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11558 comm="syz.0.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b35e8ff9 code=0x7ffc0000
[  822.077511][   T26] kauditd_printk_skb: 35 callbacks suppressed
[  822.077536][   T26] audit: type=1804 audit(1727994414.563:514): pid=11593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1716" name="/newroot/131/bus/bus" dev="overlay" ino=753 res=1 errno=0
[  822.118882][ T2075] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  822.201214][ T2075] Bluetooth: hci3: Injecting HCI hardware error event
[  822.255198][ T3574] Bluetooth: hci3: hardware error 0x00
[  822.627602][    C1] vkms_vblank_simulate: vblank timer overrun
[  823.154107][T10496] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  823.288063][T10496] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  823.499248][T10496] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  823.897998][T11607] loop3: detected capacity change from 0 to 40427
[  823.992212][T10496] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  824.469516][T11607] F2FS-fs (loop3): Found nat_bits in checkpoint
[  824.543074][T11604] chnl_net:caif_netlink_parms(): no params data found
[  824.745228][ T2075] Bluetooth: hci4: command 0x0409 tx timeout
[  825.309337][T11607] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  826.509861][T11607] attempt to access beyond end of device
[  826.509861][T11607] loop3: rw=2049, want=78336, limit=40427
[  826.629140][   T26] audit: type=1326 audit(1727994423.519:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11606 comm="syz.3.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3068ee3ff9 code=0x7fc00000
[  826.652361][T11607] attempt to access beyond end of device
[  826.652361][T11607] loop3: rw=2049, want=78328, limit=40427
[  826.729992][   T26] audit: type=1326 audit(1727994423.539:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11606 comm="syz.3.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f3068ee3ff9 code=0x7fc00000
[  826.757116][   T26] audit: type=1326 audit(1727994423.539:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11606 comm="syz.3.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3068ee3ff9 code=0x7fc00000
[  826.757690][T11640] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1726'.
[  826.789746][   T26] audit: type=1326 audit(1727994423.539:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11606 comm="syz.3.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3068ee3ff9 code=0x7fc00000
[  826.822704][   T26] audit: type=1326 audit(1727994423.539:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11606 comm="syz.3.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3068ee3ff9 code=0x7fc00000
[  826.852957][   T21] Bluetooth: hci4: command 0x041b tx timeout
[  826.874844][ T9937] attempt to access beyond end of device
[  826.874844][ T9937] loop3: rw=2049, want=45104, limit=40427
[  826.926603][   T26] audit: type=1326 audit(1727994423.539:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11606 comm="syz.3.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3068ee3ff9 code=0x7fc00000
[  826.949445][T11604] bridge0: port 1(bridge_slave_0) entered blocking state
[  826.963075][T11604] bridge0: port 1(bridge_slave_0) entered disabled state
[  827.006793][T11604] device bridge_slave_0 entered promiscuous mode
[  827.034709][T11604] bridge0: port 2(bridge_slave_1) entered blocking state
[  827.037632][   T26] audit: type=1326 audit(1727994423.539:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11606 comm="syz.3.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3068ee3ff9 code=0x7fc00000
[  827.059729][T11604] bridge0: port 2(bridge_slave_1) entered disabled state
[  827.116602][T11604] device bridge_slave_1 entered promiscuous mode
[  827.139950][   T26] audit: type=1326 audit(1727994423.539:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11606 comm="syz.3.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3068ee3ff9 code=0x7fc00000
[  827.225951][   T26] audit: type=1326 audit(1727994423.539:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11606 comm="syz.3.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3068ee3ff9 code=0x7fc00000
[  827.333671][T11604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  827.334091][   T26] audit: type=1326 audit(1727994423.539:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11606 comm="syz.3.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3068ee3ff9 code=0x7fc00000
[  827.379253][T11604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  827.476782][   T26] audit: type=1326 audit(1727994423.539:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11606 comm="syz.3.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3068ee3ff9 code=0x7fc00000
[  827.581797][   T26] audit: type=1326 audit(1727994423.539:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11606 comm="syz.3.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3068ee3ff9 code=0x7fc00000
[  827.719895][   T26] audit: type=1326 audit(1727994423.539:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11606 comm="syz.3.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3068ee3ff9 code=0x7fc00000
[  827.751796][T11604] team0: Port device team_slave_0 added
[  827.844311][T11604] team0: Port device team_slave_1 added
[  827.860268][   T26] audit: type=1326 audit(1727994423.539:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11606 comm="syz.3.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3068ee3ff9 code=0x7fc00000
[  827.966367][   T26] audit: type=1326 audit(1727994423.539:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11606 comm="syz.3.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3068ee3ff9 code=0x7fc00000
[  828.006102][   T26] audit: type=1326 audit(1727994423.539:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11606 comm="syz.3.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3068ee3ff9 code=0x7fc00000
[  828.030979][T11678] fuse: Bad value for 'fd'
[  828.045642][T11604] batman_adv: batadv0: Adding interface: batadv_slave_0
[  828.063200][T11604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  828.128528][   T26] audit: type=1326 audit(1727994423.539:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11606 comm="syz.3.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3068ee3ff9 code=0x7fc00000
[  828.203339][T11604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  828.418084][T11604] batman_adv: batadv0: Adding interface: batadv_slave_1
[  828.427568][T11604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  829.165772][T11604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  829.205789][ T3609] Bluetooth: hci4: command 0x040f tx timeout
[  830.351530][T11604] device hsr_slave_0 entered promiscuous mode
[  830.417182][T11604] device hsr_slave_1 entered promiscuous mode
[  830.474950][T11604] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  830.509408][T11604] Cannot create hsr debugfs directory
[  830.688444][   T21] usb 2-1: new low-speed USB device number 10 using dummy_hcd
[  830.847694][T11675] Process accounting resumed
[  830.888516][   T21] usb 2-1: device descriptor read/64, error -71
[  830.901842][T11702] libceph: resolve '.
[  830.901842][T11702] #)|.��f��ǝ�a���2s�o�w���?�'�%ЏKAq�f��C���z�e�Sb3L)Hy�o����������Ǥ�Y�M�����h�E$
[  830.901842][T11702] ' (ret=-3): failed
[  831.158724][   T21] usb 2-1: new low-speed USB device number 11 using dummy_hcd
[  831.308751][ T9150] Bluetooth: hci4: command 0x0419 tx timeout
[  831.370792][   T21] usb 2-1: device descriptor read/64, error -71
[  831.478399][T10496] device hsr_slave_0 left promiscuous mode
[  831.509134][   T21] usb usb2-port1: attempt power cycle
[  831.763802][T10496] device hsr_slave_1 left promiscuous mode
[  831.846694][T10496] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  831.870916][T10496] batman_adv: batadv0: Removing interface: batadv_slave_0
[  831.885724][T11728] loop4: detected capacity change from 0 to 1024
[  831.914055][T10496] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  831.929061][   T21] usb 2-1: new low-speed USB device number 12 using dummy_hcd
[  831.948202][T10496] batman_adv: batadv0: Removing interface: batadv_slave_1
[  831.961059][T11728] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  832.001224][T10496] device bridge_slave_1 left promiscuous mode
[  832.014638][T10496] bridge0: port 2(bridge_slave_1) entered disabled state
[  832.022398][T11728] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #2: comm syz.4.1741: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  832.029516][   T21] usb 2-1: device descriptor read/8, error -71
[  832.059992][T11728] EXT4-fs (loop4): get root inode failed
[  832.065681][T11728] EXT4-fs (loop4): mount failed
[  832.082249][T10496] device bridge_slave_0 left promiscuous mode
[  832.088514][T10496] bridge0: port 1(bridge_slave_0) entered disabled state
[  832.191043][T10496] device veth1_macvtap left promiscuous mode
[  832.207533][T10496] device veth0_macvtap left promiscuous mode
[  832.227898][T10496] device veth1_vlan left promiscuous mode
[  832.285987][T10496] device veth0_vlan left promiscuous mode
[  832.319252][   T21] usb 2-1: new low-speed USB device number 13 using dummy_hcd
[  832.393410][T11728] 
[  832.395774][T11728] =====================================================
[  832.402698][T11728] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected
[  832.410148][T11728] 5.15.167-syzkaller #0 Not tainted
[  832.415334][T11728] -----------------------------------------------------
[  832.422272][T11728] syz.4.1741/11728 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire:
[  832.430015][T11728] ffff888069227210 (&new->fa_lock){....}-{2:2}, at: kill_fasync+0x16a/0x490
[  832.438820][T11728] 
[  832.438820][T11728] and this task is already holding:
[  832.439352][   T21] usb 2-1: device descriptor read/8, error -71
[  832.446326][T11728] ffff888073f4d028 (&client->buffer_lock){....}-{2:2}, at: evdev_pass_values+0xe7/0xb60
[  832.446394][T11728] which would create a new lock dependency:
[  832.446400][T11728]  (&client->buffer_lock){....}-{2:2} -> (&new->fa_lock){....}-{2:2}
[  832.446446][T11728] 
[  832.446446][T11728] but this new dependency connects a HARDIRQ-irq-safe lock:
[  832.446455][T11728]  (&dev->event_lock#2){-...}-{2:2}
[  832.446479][T11728] 
[  832.446479][T11728] ... which became HARDIRQ-irq-safe at:
[  832.446487][T11728]   lock_acquire+0x1db/0x4f0
[  832.446506][T11728]   _raw_spin_lock_irqsave+0xd1/0x120
[  832.446528][T11728]   input_event+0x8a/0xd0
[  832.446545][T11728]   psmouse_report_standard_packet+0x50/0x200
[  832.446566][T11728]   psmouse_process_byte+0x45b/0x640
[  832.446585][T11728]   psmouse_handle_byte+0x46/0x4b0
[  832.529541][T11728]   psmouse_interrupt+0x697/0x10a0
[  832.534651][T11728]   serio_interrupt+0x88/0x130
[  832.539522][T11728]   i8042_interrupt+0x355/0x750
[  832.544379][T11728]   __handle_irq_event_percpu+0x292/0xa70
[  832.550277][T11728]   handle_irq_event+0xff/0x2b0
[  832.555132][T11728]   handle_edge_irq+0x245/0xbf0
[  832.560093][T11728]   __common_interrupt+0xd7/0x1f0
[  832.565141][T11728]   common_interrupt+0x9f/0xc0
[  832.569911][T11728]   asm_common_interrupt+0x22/0x40
[  832.575206][T11728]   _raw_spin_unlock_irqrestore+0xd4/0x130
[  832.581029][T11728]   i8042_aux_write+0x112/0x190
[  832.585910][T11728]   ps2_do_sendbyte+0x20a/0x720
[  832.590753][T11728]   ps2_sendbyte+0x5c/0x120
[  832.595247][T11728]   cypress_send_ext_cmd+0x21d/0x900
[  832.600539][T11728]   cypress_detect+0x8f/0x220
[  832.605212][T11728]   psmouse_extensions+0xc2a/0x1550
[  832.610429][T11728]   psmouse_switch_protocol+0x308/0x840
[  832.615972][T11728]   psmouse_connect+0x94b/0x1430
[  832.620924][T11728]   serio_driver_probe+0x74/0x90
[  832.625957][T11728]   really_probe+0x24e/0xb60
[  832.630561][T11728]   __driver_probe_device+0x1a2/0x3d0
[  832.635941][T11728]   driver_probe_device+0x50/0x420
[  832.641106][T11728]   __driver_attach+0x479/0x690
[  832.645990][T11728]   bus_for_each_dev+0x17c/0x1f0
[  832.650924][T11728]   serio_handle_event+0x56a/0x8f0
[  832.656054][T11728]   process_one_work+0x8a1/0x10c0
[  832.661114][T11728]   worker_thread+0xaca/0x1280
[  832.665889][T11728]   kthread+0x3f6/0x4f0
[  832.670040][T11728]   ret_from_fork+0x1f/0x30
[  832.674543][T11728] 
[  832.674543][T11728] to a HARDIRQ-irq-unsafe lock:
[  832.681554][T11728]  (tasklist_lock){.+.+}-{2:2}
[  832.681579][T11728] 
[  832.681579][T11728] ... which became HARDIRQ-irq-unsafe at:
[  832.694426][T11728] ...
[  832.694437][T11728]   lock_acquire+0x1db/0x4f0
[  832.701689][T11728]   _raw_read_lock+0x32/0x40
[  832.706291][T11728]   do_wait+0x2a7/0xaf0
[  832.710450][T11728]   kernel_wait+0xe5/0x230
[  832.714891][T11728]   call_usermodehelper_exec_work+0xb5/0x220
[  832.720908][T11728]   process_one_work+0x8a1/0x10c0
[  832.725942][T11728]   worker_thread+0xaca/0x1280
[  832.730721][T11728]   kthread+0x3f6/0x4f0
[  832.734874][T11728]   ret_from_fork+0x1f/0x30
[  832.739377][T11728] 
[  832.739377][T11728] other info that might help us debug this:
[  832.739377][T11728] 
[  832.749727][T11728] Chain exists of:
[  832.749727][T11728]   &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock
[  832.749727][T11728] 
[  832.763441][T11728]  Possible interrupt unsafe locking scenario:
[  832.763441][T11728] 
[  832.771789][T11728]        CPU0                    CPU1
[  832.777271][T11728]        ----                    ----
[  832.782643][T11728]   lock(tasklist_lock);
[  832.786907][T11728]                                local_irq_disable();
[  832.793740][T11728]                                lock(&dev->event_lock#2);
[  832.800932][T11728]                                lock(&client->buffer_lock);
[  832.808380][T11728]   <Interrupt>
[  832.811817][T11728]     lock(&dev->event_lock#2);
[  832.816658][T11728] 
[  832.816658][T11728]  *** DEADLOCK ***
[  832.816658][T11728] 
[  832.824801][T11728] 7 locks held by syz.4.1741/11728:
[  832.830073][T11728]  #0: ffff888025448110 (&evdev->mutex){+.+.}-{3:3}, at: evdev_write+0x26d/0x7c0
[  832.839395][T11728]  #1: ffff8881482a6230 (&dev->event_lock#2){-...}-{2:2}, at: input_inject_event+0xc0/0x300
[  832.849561][T11728]  #2: ffffffff8c91fc60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30
[  832.858878][T11728]  #3: ffffffff8c91fc60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30
[  832.868215][T11728]  #4: ffffffff8c91fc60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30
[  832.877524][T11728]  #5: ffff888073f4d028 (&client->buffer_lock){....}-{2:2}, at: evdev_pass_values+0xe7/0xb60
[  832.887695][T11728]  #6: ffffffff8c91fc60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30
[  832.896999][T11728] 
[  832.896999][T11728] the dependencies between HARDIRQ-irq-safe lock and the holding lock:
[  832.907403][T11728]  -> (&dev->event_lock#2){-...}-{2:2} {
[  832.913071][T11728]     IN-HARDIRQ-W at:
[  832.917130][T11728]                       lock_acquire+0x1db/0x4f0
[  832.923451][T11728]                       _raw_spin_lock_irqsave+0xd1/0x120
[  832.930561][T11728]                       input_event+0x8a/0xd0
[  832.936627][T11728]                       psmouse_report_standard_packet+0x50/0x200
[  832.944431][T11728]                       psmouse_process_byte+0x45b/0x640
[  832.951473][T11728]                       psmouse_handle_byte+0x46/0x4b0
[  832.958575][T11728]                       psmouse_interrupt+0x697/0x10a0
[  832.965443][T11728]                       serio_interrupt+0x88/0x130
[  832.972156][T11728]                       i8042_interrupt+0x355/0x750
[  832.978757][T11728]                       __handle_irq_event_percpu+0x292/0xa70
[  832.986217][T11728]                       handle_irq_event+0xff/0x2b0
[  832.992801][T11728]                       handle_edge_irq+0x245/0xbf0
[  832.999379][T11728]                       __common_interrupt+0xd7/0x1f0
[  833.006220][T11728]                       common_interrupt+0x9f/0xc0
[  833.012816][T11728]                       asm_common_interrupt+0x22/0x40
[  833.019668][T11728]                       _raw_spin_unlock_irqrestore+0xd4/0x130
[  833.027228][T11728]                       i8042_aux_write+0x112/0x190
[  833.034074][T11728]                       ps2_do_sendbyte+0x20a/0x720
[  833.040687][T11728]                       ps2_sendbyte+0x5c/0x120
[  833.046950][T11728]                       cypress_send_ext_cmd+0x21d/0x900
[  833.053977][T11728]                       cypress_detect+0x8f/0x220
[  833.060531][T11728]                       psmouse_extensions+0xc2a/0x1550
[  833.067742][T11728]                       psmouse_switch_protocol+0x308/0x840
[  833.075032][T11728]                       psmouse_connect+0x94b/0x1430
[  833.081732][T11728]                       serio_driver_probe+0x74/0x90
[  833.088408][T11728]                       really_probe+0x24e/0xb60
[  833.094734][T11728]                       __driver_probe_device+0x1a2/0x3d0
[  833.101837][T11728]                       driver_probe_device+0x50/0x420
[  833.108790][T11728]                       __driver_attach+0x479/0x690
[  833.115377][T11728]                       bus_for_each_dev+0x17c/0x1f0
[  833.122051][T11728]                       serio_handle_event+0x56a/0x8f0
[  833.128908][T11728]                       process_one_work+0x8a1/0x10c0
[  833.135736][T11728]                       worker_thread+0xaca/0x1280
[  833.142235][T11728]                       kthread+0x3f6/0x4f0
[  833.148127][T11728]                       ret_from_fork+0x1f/0x30
[  833.154397][T11728]     INITIAL USE at:
[  833.158384][T11728]                      lock_acquire+0x1db/0x4f0
[  833.164624][T11728]                      _raw_spin_lock_irqsave+0xd1/0x120
[  833.171653][T11728]                      input_inject_event+0xc0/0x300
[  833.178330][T11728]                      led_trigger_event+0x109/0x1e0
[  833.185001][T11728]                      kbd_led_trigger_activate+0xb9/0x100
[  833.192221][T11728]                      led_trigger_set+0x55a/0x970
[  833.198722][T11728]                      led_trigger_set_default+0x1c2/0x200
[  833.206197][T11728]                      led_classdev_register_ext+0x6cf/0x8d0
[  833.215366][T11728]                      input_leds_connect+0x503/0x740
[  833.222142][T11728]                      input_register_device+0xdae/0x1150
[  833.229264][T11728]                      atkbd_connect+0x7a7/0xa70
[  833.235599][T11728]                      serio_driver_probe+0x74/0x90
[  833.242191][T11728]                      really_probe+0x24e/0xb60
[  833.248465][T11728]                      __driver_probe_device+0x1a2/0x3d0
[  833.255514][T11728]                      driver_probe_device+0x50/0x420
[  833.262357][T11728]                      __driver_attach+0x479/0x690
[  833.268855][T11728]                      bus_for_each_dev+0x17c/0x1f0
[  833.275459][T11728]                      serio_handle_event+0x56a/0x8f0
[  833.282240][T11728]                      process_one_work+0x8a1/0x10c0
[  833.288909][T11728]                      worker_thread+0xaca/0x1280
[  833.295333][T11728]                      kthread+0x3f6/0x4f0
[  833.301146][T11728]                      ret_from_fork+0x1f/0x30
[  833.307298][T11728]   }
[  833.309878][T11728]   ... key      at: [<ffffffff96bcb300>] input_allocate_device.__key.6+0x0/0x20
[  833.318996][T11728] -> (&client->buffer_lock){....}-{2:2} {
[  833.324718][T11728]    INITIAL USE at:
[  833.328597][T11728]                    lock_acquire+0x1db/0x4f0
[  833.334666][T11728]                    _raw_spin_lock+0x2a/0x40
[  833.340742][T11728]                    evdev_pass_values+0xe7/0xb60
[  833.347148][T11728]                    evdev_events+0x198/0x2c0
[  833.353223][T11728]                    input_pass_values+0x873/0x1200
[  833.359818][T11728]                    input_handle_event+0xc9b/0x1600
[  833.366509][T11728]                    input_inject_event+0x1fc/0x300
[  833.373192][T11728]                    evdev_write+0x668/0x7c0
[  833.379347][T11728]                    vfs_write+0x30c/0xe50
[  833.385184][T11728]                    ksys_write+0x1a2/0x2c0
[  833.391123][T11728]                    do_syscall_64+0x3b/0xb0
[  833.397131][T11728]                    entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  833.404601][T11728]  }
[  833.407134][T11728]  ... key      at: [<ffffffff96bcb5c0>] evdev_open.__key.23+0x0/0x20
[  833.415289][T11728]  ... acquired at:
[  833.419086][T11728]    lock_acquire+0x1db/0x4f0
[  833.423762][T11728]    _raw_spin_lock+0x2a/0x40
[  833.428443][T11728]    evdev_pass_values+0xe7/0xb60
[  833.433469][T11728]    evdev_events+0x198/0x2c0
[  833.438174][T11728]    input_pass_values+0x873/0x1200
[  833.443368][T11728]    input_handle_event+0xc9b/0x1600
[  833.448648][T11728]    input_inject_event+0x1fc/0x300
[  833.453854][T11728]    evdev_write+0x668/0x7c0
[  833.458441][T11728]    vfs_write+0x30c/0xe50
[  833.462875][T11728]    ksys_write+0x1a2/0x2c0
[  833.467376][T11728]    do_syscall_64+0x3b/0xb0
[  833.471984][T11728]    entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  833.478060][T11728] 
[  833.480380][T11728] 
[  833.480380][T11728] the dependencies between the lock to be acquired
[  833.480390][T11728]  and HARDIRQ-irq-unsafe lock:
[  833.494050][T11728]   -> (tasklist_lock){.+.+}-{2:2} {
[  833.499381][T11728]      HARDIRQ-ON-R at:
[  833.503561][T11728]                         lock_acquire+0x1db/0x4f0
[  833.510157][T11728]                         _raw_read_lock+0x32/0x40
[  833.516665][T11728]                         do_wait+0x2a7/0xaf0
[  833.522766][T11728]                         kernel_wait+0xe5/0x230
[  833.529343][T11728]                         call_usermodehelper_exec_work+0xb5/0x220
[  833.537440][T11728]                         process_one_work+0x8a1/0x10c0
[  833.544394][T11728]                         worker_thread+0xaca/0x1280
[  833.551290][T11728]                         kthread+0x3f6/0x4f0
[  833.557532][T11728]                         ret_from_fork+0x1f/0x30
[  833.563966][T11728]      SOFTIRQ-ON-R at:
[  833.568208][T11728]                         lock_acquire+0x1db/0x4f0
[  833.574713][T11728]                         _raw_read_lock+0x32/0x40
[  833.581301][T11728]                         do_wait+0x2a7/0xaf0
[  833.587462][T11728]                         kernel_wait+0xe5/0x230
[  833.593794][T11728]                         call_usermodehelper_exec_work+0xb5/0x220
[  833.601856][T11728]                         process_one_work+0x8a1/0x10c0
[  833.608835][T11728]                         worker_thread+0xaca/0x1280
[  833.615511][T11728]                         kthread+0x3f6/0x4f0
[  833.621588][T11728]                         ret_from_fork+0x1f/0x30
[  833.628004][T11728]      INITIAL USE at:
[  833.632070][T11728]                        lock_acquire+0x1db/0x4f0
[  833.638502][T11728]                        _raw_write_lock_irq+0xcf/0x110
[  833.645442][T11728]                        copy_process+0x22be/0x3ef0
[  833.652136][T11728]                        kernel_clone+0x210/0x960
[  833.658546][T11728]                        kernel_thread+0x168/0x1e0
[  833.665041][T11728]                        rest_init+0x21/0x330
[  833.671132][T11728]                        start_kernel+0x48c/0x540
[  833.677575][T11728]                        secondary_startup_64_no_verify+0xb1/0xbb
[  833.685401][T11728]      INITIAL READ USE at:
[  833.689909][T11728]                             lock_acquire+0x1db/0x4f0
[  833.696763][T11728]                             _raw_read_lock+0x32/0x40
[  833.703611][T11728]                             do_wait+0x2a7/0xaf0
[  833.710025][T11728]                             kernel_wait+0xe5/0x230
[  833.716907][T11728]                             call_usermodehelper_exec_work+0xb5/0x220
[  833.725165][T11728]                             process_one_work+0x8a1/0x10c0
[  833.732454][T11728]                             worker_thread+0xaca/0x1280
[  833.739476][T11728]                             kthread+0x3f6/0x4f0
[  833.745886][T11728]                             ret_from_fork+0x1f/0x30
[  833.752669][T11728]    }
[  833.755333][T11728]    ... key      at: [<ffffffff8c60a058>] tasklist_lock+0x18/0x40
[  833.763909][T11728]    ... acquired at:
[  833.767935][T11728]    lock_acquire+0x1db/0x4f0
[  833.772628][T11728]    _raw_read_lock+0x32/0x40
[  833.777319][T11728]    send_sigio+0xd2/0x330
[  833.781731][T11728]    kill_fasync+0x20c/0x490
[  833.786324][T11728]    pipe_release+0x1ab/0x330
[  833.791007][T11728]    __fput+0x3fe/0x8e0
[  833.795169][T11728]    task_work_run+0x129/0x1a0
[  833.799933][T11728]    exit_to_user_mode_loop+0x106/0x130
[  833.805513][T11728]    exit_to_user_mode_prepare+0xb1/0x140
[  833.811238][T11728]    syscall_exit_to_user_mode+0x5d/0x240
[  833.817051][T11728]    do_syscall_64+0x47/0xb0
[  833.821646][T11728]    entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  833.827745][T11728] 
[  833.830062][T11728]  -> (&f->f_owner.lock){...-}-{2:2} {
[  833.835549][T11728]     IN-SOFTIRQ-R at:
[  833.839605][T11728]                       lock_acquire+0x1db/0x4f0
[  833.846012][T11728]                       _raw_read_lock_irqsave+0xd9/0x120
[  833.853118][T11728]                       send_sigurg+0x25/0x380
[  833.859353][T11728]                       sk_send_sigurg+0x6a/0xb0
[  833.865689][T11728]                       tcp_urg+0x2b8/0xb40
[  833.871578][T11728]                       tcp_rcv_state_process+0x1959/0x4520
[  833.879114][T11728]                       tcp_v6_do_rcv+0x867/0x10f0
[  833.885656][T11728]                       tcp_v6_rcv+0x2220/0x27b0
[  833.892074][T11728]                       ip6_protocol_deliver_rcu+0x93d/0x12d0
[  833.899525][T11728]                       ip6_input_finish+0xa2/0x130
[  833.906105][T11728]                       NF_HOOK+0x364/0x410
[  833.912024][T11728]                       NF_HOOK+0x364/0x410
[  833.917910][T11728]                       __netif_receive_skb+0x1c6/0x530
[  833.924861][T11728]                       process_backlog+0x363/0x7f0
[  833.931564][T11728]                       __napi_poll+0xc7/0x440
[  833.937743][T11728]                       net_rx_action+0x617/0xda0
[  833.944162][T11728]                       handle_softirqs+0x3a7/0x930
[  833.950748][T11728]                       run_ksoftirqd+0xc6/0x120
[  833.957065][T11728]                       smpboot_thread_fn+0x51b/0x9d0
[  833.963825][T11728]                       kthread+0x3f6/0x4f0
[  833.969834][T11728]                       ret_from_fork+0x1f/0x30
[  833.976113][T11728]     INITIAL USE at:
[  833.980109][T11728]                      lock_acquire+0x1db/0x4f0
[  833.986360][T11728]                      _raw_write_lock_irq+0xcf/0x110
[  833.993125][T11728]                      f_modown+0x38/0x340
[  833.998950][T11728]                      f_setown+0x127/0x1d0
[  834.004833][T11728]                      do_fcntl+0x1b7/0x1600
[  834.010910][T11728]                      __se_sys_fcntl+0xd8/0x1b0
[  834.017230][T11728]                      do_syscall_64+0x3b/0xb0
[  834.023388][T11728]                      entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  834.031013][T11728]     INITIAL READ USE at:
[  834.035413][T11728]                           lock_acquire+0x1db/0x4f0
[  834.042111][T11728]                           _raw_read_lock_irq+0xd6/0x120
[  834.049212][T11728]                           do_fcntl+0x160/0x1600
[  834.055640][T11728]                           __se_sys_fcntl+0xd8/0x1b0
[  834.062396][T11728]                           do_syscall_64+0x3b/0xb0
[  834.068976][T11728]                           entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  834.077049][T11728]   }
[  834.079646][T11728]   ... key      at: [<ffffffff968cfd00>] __alloc_file.__key+0x0/0x10
[  834.087796][T11728]   ... acquired at:
[  834.091694][T11728]    lock_acquire+0x1db/0x4f0
[  834.096364][T11728]    _raw_read_lock_irqsave+0xd9/0x120
[  834.101811][T11728]    send_sigio+0x2f/0x330
[  834.106233][T11728]    kill_fasync+0x20c/0x490
[  834.110825][T11728]    pipe_release+0x1ab/0x330
[  834.115490][T11728]    __fput+0x3fe/0x8e0
[  834.119676][T11728]    task_work_run+0x129/0x1a0
[  834.124465][T11728]    exit_to_user_mode_loop+0x106/0x130
[  834.130121][T11728]    exit_to_user_mode_prepare+0xb1/0x140
[  834.135862][T11728]    syscall_exit_to_user_mode+0x5d/0x240
[  834.141667][T11728]    do_syscall_64+0x47/0xb0
[  834.146285][T11728]    entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  834.152371][T11728] 
[  834.154686][T11728] -> (&new->fa_lock){....}-{2:2} {
[  834.159798][T11728]    INITIAL USE at:
[  834.163696][T11728]                    lock_acquire+0x1db/0x4f0
[  834.169758][T11728]                    _raw_write_lock_irq+0xcf/0x110
[  834.176349][T11728]                    fasync_remove_entry+0xfb/0x1d0
[  834.183094][T11728]                    pipe_fasync+0xb7/0x1f0
[  834.188996][T11728]                    __fput+0x766/0x8e0
[  834.194583][T11728]                    task_work_run+0x129/0x1a0
[  834.200777][T11728]                    exit_to_user_mode_loop+0x106/0x130
[  834.207720][T11728]                    exit_to_user_mode_prepare+0xb1/0x140
[  834.214830][T11728]                    syscall_exit_to_user_mode+0x5d/0x240
[  834.222062][T11728]                    do_syscall_64+0x47/0xb0
[  834.228133][T11728]                    entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  834.235635][T11728]    INITIAL READ USE at:
[  834.239986][T11728]                         lock_acquire+0x1db/0x4f0
[  834.246488][T11728]                         _raw_read_lock_irqsave+0xd9/0x120
[  834.253786][T11728]                         kill_fasync+0x16a/0x490
[  834.260206][T11728]                         pipe_release+0x1ab/0x330
[  834.266843][T11728]                         __fput+0x3fe/0x8e0
[  834.272820][T11728]                         task_work_run+0x129/0x1a0
[  834.279923][T11728]                         exit_to_user_mode_loop+0x106/0x130
[  834.287383][T11728]                         exit_to_user_mode_prepare+0xb1/0x140
[  834.294923][T11728]                         syscall_exit_to_user_mode+0x5d/0x240
[  834.302562][T11728]                         do_syscall_64+0x47/0xb0
[  834.308969][T11728]                         entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  834.317035][T11728]  }
[  834.319542][T11728]  ... key      at: [<ffffffff968d0980>] fasync_insert_entry.__key+0x0/0x20
[  834.328214][T11728]  ... acquired at:
[  834.332013][T11728]    lock_acquire+0x1db/0x4f0
[  834.336791][T11728]    _raw_read_lock_irqsave+0xd9/0x120
[  834.342331][T11728]    kill_fasync+0x16a/0x490
[  834.346938][T11728]    evdev_pass_values+0x5ad/0xb60
[  834.352147][T11728]    evdev_events+0x198/0x2c0
[  834.356827][T11728]    input_pass_values+0x873/0x1200
[  834.362067][T11728]    input_handle_event+0xc9b/0x1600
[  834.367520][T11728]    input_inject_event+0x1fc/0x300
[  834.372747][T11728]    evdev_write+0x668/0x7c0
[  834.377347][T11728]    vfs_write+0x30c/0xe50
[  834.381807][T11728]    ksys_write+0x1a2/0x2c0
[  834.386355][T11728]    do_syscall_64+0x3b/0xb0
[  834.390949][T11728]    entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  834.397028][T11728] 
[  834.399344][T11728] 
[  834.399344][T11728] stack backtrace:
[  834.405240][T11728] CPU: 0 PID: 11728 Comm: syz.4.1741 Not tainted 5.15.167-syzkaller #0
[  834.413969][T11728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  834.424039][T11728] Call Trace:
[  834.427365][T11728]  <TASK>
[  834.430307][T11728]  dump_stack_lvl+0x1e3/0x2d0
[  834.435007][T11728]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  834.440742][T11728]  ? panic+0x860/0x860
[  834.444825][T11728]  ? print_shortest_lock_dependencies+0xee/0x150
[  834.451186][T11728]  validate_chain+0x4d01/0x5930
[  834.456053][T11728]  ? reacquire_held_locks+0x660/0x660
[  834.461423][T11728]  ? try_to_wake_up+0x807/0x1300
[  834.466396][T11728]  ? __lock_acquire+0x1ff0/0x1ff0
[  834.471505][T11728]  ? register_lock_class+0x100/0x9a0
[  834.476782][T11728]  ? is_dynamic_key+0x1f0/0x1f0
[  834.481651][T11728]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  834.487711][T11728]  ? mark_lock+0x98/0x340
[  834.492049][T11728]  __lock_acquire+0x1295/0x1ff0
[  834.497044][T11728]  lock_acquire+0x1db/0x4f0
[  834.501677][T11728]  ? kill_fasync+0x16a/0x490
[  834.506387][T11728]  ? read_lock_is_recursive+0x10/0x10
[  834.511760][T11728]  ? read_lock_is_recursive+0x10/0x10
[  834.517127][T11728]  ? read_lock_is_recursive+0x10/0x10
[  834.522495][T11728]  _raw_read_lock_irqsave+0xd9/0x120
[  834.527886][T11728]  ? kill_fasync+0x16a/0x490
[  834.533337][T11728]  ? _raw_read_lock+0x40/0x40
[  834.538024][T11728]  kill_fasync+0x16a/0x490
[  834.542450][T11728]  evdev_pass_values+0x5ad/0xb60
[  834.547396][T11728]  ? evdev_pass_values+0x5d1/0xb60
[  834.552510][T11728]  evdev_events+0x198/0x2c0
[  834.557023][T11728]  ? evdev_event+0x170/0x170
[  834.561624][T11728]  input_pass_values+0x873/0x1200
[  834.566650][T11728]  input_handle_event+0xc9b/0x1600
[  834.571758][T11728]  input_inject_event+0x1fc/0x300
[  834.576790][T11728]  evdev_write+0x668/0x7c0
[  834.581635][T11728]  ? evdev_read+0xe00/0xe00
[  834.586174][T11728]  ? end_current_label_crit_section+0x147/0x170
[  834.592496][T11728]  ? common_file_perm+0x17d/0x1d0
[  834.597513][T11728]  ? fsnotify_perm+0x64/0x590
[  834.602183][T11728]  ? security_file_permission+0x75/0xa0
[  834.607817][T11728]  ? evdev_read+0xe00/0xe00
[  834.612318][T11728]  vfs_write+0x30c/0xe50
[  834.616561][T11728]  ? file_end_write+0x250/0x250
[  834.621432][T11728]  ? __fget_files+0x413/0x480
[  834.626107][T11728]  ? __fdget_pos+0x1e9/0x380
[  834.630692][T11728]  ? ksys_write+0x77/0x2c0
[  834.635110][T11728]  ksys_write+0x1a2/0x2c0
[  834.639456][T11728]  ? print_irqtrace_events+0x210/0x210
[  834.644942][T11728]  ? __ia32_sys_read+0x80/0x80
[  834.649738][T11728]  ? syscall_enter_from_user_mode+0x2e/0x240
[  834.655817][T11728]  ? lockdep_hardirqs_on+0x94/0x130
[  834.661075][T11728]  ? syscall_enter_from_user_mode+0x2e/0x240
[  834.667155][T11728]  do_syscall_64+0x3b/0xb0
[  834.671588][T11728]  ? clear_bhb_loop+0x15/0x70
[  834.676267][T11728]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  834.682164][T11728] RIP: 0033:0x7fc42b267ff9
[  834.686592][T11728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  834.706488][T11728] RSP: 002b:00007fc4296e0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  834.714911][T11728] RAX: ffffffffffffffda RBX: 00007fc42b41ff80 RCX: 00007fc42b267ff9
[  834.722879][T11728] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000008
[  834.730849][T11728] RBP: 00007fc42b2da296 R08: 0000000000000000 R09: 0000000000000000
[  834.738812][T11728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  834.746777][T11728] R13: 0000000000000000 R14: 00007fc42b41ff80 R15: 00007ffe8b05b028
[  834.754750][T11728]  </TASK>
[  834.865659][T11730] loop4: detected capacity change from 0 to 512
[  834.940671][   T21] usb usb2-port1: unable to enumerate USB device
[  835.156655][T10496] team0 (unregistering): Port device team_slave_1 removed
[  835.166639][T11730] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,grpid,auto_da_alloc,,errors=continue. Quota mode: writeback.
[  835.181403][T11730] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038 (0x7fffffff)
[  835.184543][T10496] team0 (unregistering): Port device team_slave_0 removed
[  835.206969][T10496] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  835.220599][T10496] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  835.285434][T10496] bond0 (unregistering): Released all slaves
[  835.760398][T11604] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  835.770682][T11604] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  835.783194][T11604] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  835.803935][T11604] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  835.915061][T11604] 8021q: adding VLAN 0 to HW filter on device bond0
[  835.930984][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  835.939960][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  835.953693][T11604] 8021q: adding VLAN 0 to HW filter on device team0
[  835.964355][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  835.974251][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  835.983277][ T3654] bridge0: port 1(bridge_slave_0) entered blocking state
[  835.990389][ T3654] bridge0: port 1(bridge_slave_0) entered forwarding state
[  836.012252][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  836.020790][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  836.031951][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  836.055524][ T3654] bridge0: port 2(bridge_slave_1) entered blocking state
[  836.062764][ T3654] bridge0: port 2(bridge_slave_1) entered forwarding state
[  836.084999][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  836.094343][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  836.106539][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  836.120784][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  836.133371][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  836.145638][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  836.167887][T11604] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  836.184499][T11604] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  836.199693][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  836.210915][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  836.220995][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  836.235464][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  836.245371][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  836.261497][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  836.389566][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  836.402018][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  836.415017][T11604] 8021q: adding VLAN 0 to HW filter on device batadv0
[  836.440351][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  836.453122][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  836.479040][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  836.490468][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  836.504701][T11604] device veth0_vlan entered promiscuous mode
[  836.512645][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  836.520792][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  836.536802][T11604] device veth1_vlan entered promiscuous mode
[  836.564488][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  836.574330][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  836.585548][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  836.596019][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  836.610380][T11604] device veth0_macvtap entered promiscuous mode
[  836.621234][T11604] device veth1_macvtap entered promiscuous mode
[  836.641182][T11604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  836.655317][T11604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  836.665551][T11604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  836.679469][T11604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  836.689620][T11604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  836.703583][T11604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  836.715102][T11604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  836.727707][T11604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  836.738919][T11604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  836.753623][T11604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  836.766615][T11604] batman_adv: batadv0: Interface activated: batadv_slave_0
[  836.776981][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  836.787992][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  836.797927][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  836.808345][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  836.819329][T11604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  836.830232][T11604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  836.840611][T11604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  836.851813][T11604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  836.862046][T11604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  836.872606][T11604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  836.882897][T11604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  836.894110][T11604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  836.904292][T11604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  836.918291][T11604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  836.929836][T11604] batman_adv: batadv0: Interface activated: batadv_slave_1
[  836.937718][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  836.949028][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  836.960281][T11604] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  836.970939][T11604] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  836.980664][T11604] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  836.989444][T11604] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  837.016335][T11604] ieee80211 phy60: Selected rate control algorithm 'minstrel_ht'
[  837.036356][ T3681] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  837.037326][T11604] ieee80211 phy61: Selected rate control algorithm 'minstrel_ht'
[  837.048724][ T3681] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  837.064651][ T7243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  837.076422][ T3681] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  837.086238][ T3681] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  837.094572][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready