last executing test programs:

2m37.151262286s ago: executing program 0 (id=26):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000a40)=[@reply_sg={0x40486312, {0x5, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x1001, 0x1}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x21}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000a00)={0x0, 0x18, 0x40}}, 0x400}], 0x0, 0x0, 0x0})

2m37.046321538s ago: executing program 0 (id=27):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0xb})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000007c0)={0x4c, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2fc0}], 0x0, 0x0, 0x0})

2m35.322146981s ago: executing program 0 (id=36):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket(0x10, 0x2, 0x0)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$unix(0x1, 0x1, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4400, &(0x7f0000000100)=ANY=[@ANYBLOB='check=strict,session=0x0000000000000024,iocharset=ascii,overriderockperm,overriderockperm,gid=', @ANYRESOCT=0x0, @ANYRES16=0x0, @ANYBLOB="f144ef566aaa2604da071bbeb6f430dfed6346ac280ad0be1430acfe313e69a2fa6cfe678c61c9f409a06bfd99bec80be2031abda528aae9370d25e0b4fbf0cf85b7fb437e3447f576f632761291515cb5463d90d1bb7568142a060494f630902b3ef5334efb547f8cf0b2458c7979b0db9ca4f520c1f1b85f556cf01d", @ANYBLOB="e18d8e322868343b38d9db095899a1945e4a12ea0f3ebe5067157346e5624f6d506a1c219ece53b17b14f64e7fa1124f331eb2d46b4e89a95ce23ee44d7d"], 0xf6, 0xa2a, &(0x7f0000000240)="$eJzs3c1vXOdeB/DvmdiJ41vl5vaGEqLeZpIqvb69xrEdmijqgpvY48QXvyDbkRoBaqomQVEsilqQ2opFKiFWVFQIIQEb1CWrSmVBNyg7WLJigQT9D1DFhrCAQXNmJh7H8xK7UzuEz2c0Pm+/5+2cM+fRjGfOE/4vq9fr5XOPyzf+Zj8ry7Pn6vzXn3/xaeP5yYMczqG8UfxdMpakmoz8d3mujM7Nr60uD8jofnIrycOkSHIkzWkPR7ct3UrxJ3lha/lhir/KyS7JxnbZOAaq8//aQZ9/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwTJqbn56eKbK0uHLjrWpv5RDgfba3s/uqHPW7+GpQsUVSNJ4ZG2sP9X3yxNbmlxp/zubl5tLLzZG/x/Lx9146/uYPRyrt9H0qtC8++Ojj++9sbt55f2vVaNfAkVa7GvNHtlY/aK06cIf3luxabWVxfXVx+cq1WnVxfbV6+eLF6fPXF9arC4uprd9c36gtV+fWalc2VteqE3M/qc5cvnyhWqvcXL2xcm1+aqnWXnnpl2enpy9Wfz7167Ura+urK+d/PrU+d31xaWlx5VoZ09jciLnUOBF/bXGjulG7slyt3r23eefCoEo2gma6bim2B80Oyml2enZ2ZmZ2dubiG5ffuDQ9PbJjxfQTsiPi4E9aDs7fDvXaDd9SpdX/ZymLWcmNvJVq18dc5rOW1Sz32N7S7v/Pna/1Lbez/2/38ie3Np9K2f+/0lx6pVf/36Mugx/1ejPnvaZvPz7IR/k49/NONrOZO3n/W+e4Y7/+15Byqn771u58XEstK1nMelazmOVcKddUW2uquZyLuZjpvJ3rWch6qlnIYpZSy3puZj0bqZVn1FzWUsuVbGQ1a6lmInP5SaqZyeVczoVUU8tUbmY1N7KSa5nPlTKXu7lX7vcL/fZgO2jmaYJm+wQNuf+vHznQvoiDMfRrOOxVvdX/H+4ZUG/PTcztW60AAACAYfqlf8yxEy/+w78mo/lR+bn8wuJSbfqgqwUAAAAMUfl1vZcbk9HG3I9SeP8PAAAAz5ui/I1dkWQ8p5tzzV9CHYoPAQAAAOA5Uf7//5XGZLwxdzrF4zuh3DrougEAAADDMfge+wMjisn27X+rt5vT262I1n1+xxcWl2pTc6tLb87ktfIuA+UvDXbkdigpRsufH7yeM82oM+PN6fj2HMcaUTNTb87k9ZxtNWTi1cbk1YkukbPNyB83I3/cJ/JCIxIAnndn+/THT9v/v57JZsTkqZHDSUZOdelZp/WsAPCs6DbGTtmHd/T/A0bhKX5l6/3/aCvbbf3/i7n7n82vFEzl3byXzdzOZE4n98tvHGzL9Tc/a31m8PhrCNOZHPBpQDv2ny5VMjng84DxjoFeJgd8ItCMzW8lF/blWADAfjlb/upvZz+8m/5/suP9f3a+/388tNAdPykEgGfC4xHshzrz/W05H3QbAYDt9NIAAAAAAAAAAAAAAAAAAAAAAAAAAAAwfEO97f/YHpP/W2tcv2EPQzBg5mhrH+w9nz9Nsn91LoZcVmUI+dST7Nfx2r+ZHE/2vFe7nsaHkxx8uwbOjLReEvff2TyoKxIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD7qUgOdVtfSY4kmU5yfv9r9d15cNAV2H+/2rlQPMqjfJhjB1cdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDnU+v+/5U0p99rrspIJTmX5FaS3zjoOg7To4OuwJAc3WO6jvv/N4556kVGmoc9xejc/NrqcuPwl2M/VL7+/ItPG8+O5EeetpwysPLE4BKtEp6M/esX2nM/KFONz9/54P7vvfe71fmrqeRwrm4sLM0vX1v72VaSl4ovk2qaz7Z2ff/g3N9/1qXlXzZa2t2T5S6UO2d+Z7m/2C11/3L7ubd5Z7ZR0kbtrY3f/517H3ZsejFnklcnkontJf1249mjpDMZ7Vda8U3xR8Wx/Hlulce/sTeKetE4RN8v23/07r3NO1Pvvrd5u0edjud0ktvJWP86fdKx+XR5PemqPOsqo41Sp8ugxp8TA9rYV0eOMz3a8IPylBlvteFwzzZ0qnZpw//U6/X2fMd+r3SrVrNGF3rU6Id5rcuRrh9Jetfotf5Hurvim+Jfiuv55/xhx/gflcbxP5fer87tWZSRHWdKz8hKM7Js+WznhrefjPz3v3iq2ncdpobd+uNtL95Kx/W/dayGdD2qF32vRx0l7u510VFiZedZ0ed1UfZIJ55I0br69ErTqueJZlSPev5CfpqMnOp3VdzRW/+091Vxe/qfdd+819f/XxYT+Y88MP4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw7CuSQ93WV5JzSY63l6tJfRfZHum1oTJe7LaKQ/Xg8Z/nQmW3CYpHeZQPc+y7qQ4AAAAAAAAA++3q/Neff/Fp41kcba1q/X+/mowkOV782dHMr60uD8hoNLmV5GFjfqzL9j7/7m+kywtbyw8bSyd32xIA4Gn9bwAAAP//vGtjCg==")
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054)
r4 = socket(0x1e, 0x4, 0x0)
write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r4], 0x14)

2m33.065508368s ago: executing program 0 (id=41):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000500)={[{@init_itable}]}, 0x1, 0x79f, &(0x7f0000000f80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4842, 0x1ff)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x101042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143041, 0x0)
pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7b, 0x92c9, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
writev(0xffffffffffffffff, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x20fffe82)

2m31.35351058s ago: executing program 0 (id=50):
syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f00000008c0)=ANY=[@ANYBLOB='fmask=00000000000000000000016,dmask=00000000000000000000020,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c696f636861727365743d6d616363656c74adc23e3c1cbd69632c696f636861727365743d63703836392c6e616d65636173653d312c6769643d", @ANYRESHEX=0x0, @ANYBLOB=',namecase=1,uid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=continue,namecase=1,\x00'], 0x1, 0x1535, &(0x7f0000001380)="$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")
unlink(0x0)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r0 = timerfd_create(0x8, 0x0)
timerfd_settime(r0, 0x3, 0x0, 0x0)
timerfd_gettime(r0, 0x0)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2c7, &(0x7f0000000280)="$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")
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/class/rtc/rtc0/wakealarm\x00', 0x2, 0x61)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
mount$9p_fd(0x0, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x1008441, 0x0)

2m30.776061634s ago: executing program 0 (id=56):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x80000)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/43, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/245, &(0x7f0000000780)=""/87, &(0x7f0000000800)=""/90})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001a40)={0x3, 0x0, [{0x0, 0x24, &(0x7f0000000000)=""/36}, {0x4, 0xffb, &(0x7f0000000880)=""/4091}, {0x58000, 0xf2, &(0x7f0000001880)=""/242}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5})

2m30.627286158s ago: executing program 32 (id=56):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x80000)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/43, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/245, &(0x7f0000000780)=""/87, &(0x7f0000000800)=""/90})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001a40)={0x3, 0x0, [{0x0, 0x24, &(0x7f0000000000)=""/36}, {0x4, 0xffb, &(0x7f0000000880)=""/4091}, {0x58000, 0xf2, &(0x7f0000001880)=""/242}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5})

2m3.894381434s ago: executing program 2 (id=142):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x200000000000000, &(0x7f0000000600)="f3"})

2m3.800459217s ago: executing program 2 (id=144):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet(0x2, 0x1, 0x0)
getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xe, 0x0, 0x0)
mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, r0, 0x0)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040))
read$FUSE(r1, &(0x7f00000034c0)={0x2020}, 0x2020)

2m3.67691606s ago: executing program 2 (id=147):
close(0x3)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
close(0x3)
r1 = socket(0x26, 0x80805, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={<r3=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0)
setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, '\x00', 0x35}}}}, 0x84)

2m3.506273354s ago: executing program 2 (id=150):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x54d, &(0x7f0000000400)="$eJzs3d9rW1UcAPDvTdv96nQdjKE+SGEPTubStfXHBB/mo+hwoO8ztHdlNFlGk461Dtwe3IsvMgQRB+If4LuPw3/Av2KggyGj6IMvkZvedNmatFmXrZn5fOC259x703NPzv2enpOTkACG1mT2oxDxakR8m0Qcajs2GvnByfXz1h5cm8u2JBqNz/5KIsn3tc5P8t/jeeaViPjt64gThc3l1lZWF0vlcrqU56fqlctTtZXVkxcrpYV0Ib00Mzt7+p3Zmfffe7dvdX3z3D8/fHrno9PfHFv7/pd7h28lcSYO5sfa6/EUrrdnJmMyf07G4sxjJ073obBBkuz2BbAjI3mcj0XWBxyKkTzqgf+/ryKiAQypRPzDkGqNA1pz+z7Ng18Y9z9cnwBtrv/o+msjsa85NzqwljwyM8rmuxN9KD8r49c/b9/Ktujf6xAA27p+IyJOjY5u7v+SvP/buVM9nPN4Gfo/eH7uZOOftzqNfwob45/oMP4Z7xC7O7F9/Bfu9aGYrrLx3wcdx78bi1YTI3nupeaYbyy5cLGcZn3byxFxPMb2Zvmt1nNOr91tdDvWPv7Ltqz81lgwv457o3sffcx8qV56mjq3u38j4rWO499ko/2TDu2fPR/neizjaHr79W7Htq//s9X4OeKNju3/cEUr2Xp9cqp5P0y17orN/r559Pdu5e92/bP2P7B1/SeS9vXa2pOX8dO+f9Nux3Z6/+9JPm+m9+T7rpbq9aXpiD3JJ5v3zzx8bCvfOj+r//FjW/d/ne7//RHxRY/1v3nkZtdTB6H955+o/Z88cffjL3/sVn5v7f92M3U839NL/9frBT7NcwcAAAAAAACDphARByMpFDfShUKxuP7+jiNxoFCu1uonLlSXL81H87OyEzFWaK10j7e9H2I6fz9sKz/zWH42Ig5HxHcj+5v54ly1PL/blQcAAAAAAAAAAAAAAAAAAIABMd7l8/+ZP0Z2++qAZ85XfsPw2jb++/FNT8BA8v8fhpf4h+El/mF4iX8YXuIfhpf4h+El/mF4iX8AAAAAAAAAAAAAAAAAAAAAAAAAAADoq3Nnz2ZbY+3BtbksP39lZXmxeuXkfFpbLFaW54pz1aXLxYVqdaGcFueqle3+XrlavTw9E8tXp+pprT5VW1k9X6kuX6qfv1gpLaTn07HnUisAAAAAAAAAAAAAAAAAAAB4sdRWVhdL5XK6JCGxo8ToYFyGRJ8Tu90zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBD/wUAAP//y284sw==")
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]})
futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
close(0x4)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x818d0, &(0x7f00000001c0)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@nodioread_nolock}, {@test_dummy_encryption}, {@lazytime}, {@stripe}, {@minixdf}, {@orlov}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$eJzs3M1rXFUbAPDn3ny2zftO+vIi1k0jIi2o07SSYotgKxU3LgTdCg3ppIRMP0giNWkWE/0HRF0LbgS1KF3YdTcKbt1o3VpcCEVioyCikTsfSWxmkrSd5Ibk94Mz95w5d+Z5nrlM7j0wNwHsWgPZQxpxICLOJhGF+vNpRHRXe70Rldp+C/OzI7/Pz44ksbj42i9JJBFxd352pPFeSX27rz7ojYhvX0zif++sjjs5PTM+XC6XJurjI1MXLh+ZnJ55ZuzC8PnS+dLFo8efGzo2dHzwxFDbav3jx1M3fnv85Z8qf37617Vf3/84iVPRV59bWUe7DMTA0meyUmdEDLc7WE466vWsrDPpXOdF6SYnBQBAS+mKa7hHohAdsXzxVoivvss1OQAAAKAtFjsiFgEAAIAdLrH+BwAAgB2u8TuAu/OzI42W7y8Sttad0xHRX6t/od5qM51RqW57oysi9t5NYuVtrUntZQ9tICJu/3Dii6zFJt2HvJbKXEQ82uz4J9X6+6t3ca+uP42IwTbEH7hnvN3qf7q7df2n2hA/7/oB2J1unq6dyFaf/9Kl659ocv7rbHLuehB5n/8a138Lq67/luvvaHH99+oGY1z95MMrreay+p+/8dLnjZbFz7YPVdR9uDMX8Vhns/qTpfqTFvWf3WCMwt9XSq3m8q5/8aOIQ9G8/oZk7f9PdGR0rFwarD02jTH3zdBnreLnXX92/Pe2qH+94395gzHeOHPmequ59etPf+5OXq/2uuvPvDU8NTVxNKI7eWX188fqN7S30Nin8R5Z/YefWPv736z+LESl/jlka4G5+jYbv31PzBeuXf1yrfqztV+ex//cAx7/dzcY48mv3zvcam7l+jdrWfzbSW0tDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaUT0RZIWl/ppWixG7IuI/8fetHxpcuqp0UtvXjyXzUX0R1c6OlYuDUZEoTZOsvHRan95fOye8bMRsT8iPijsqY6LI5fK5/IuHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCX7IqIvkrQYEWlELBTStFjMOysAAACg7frzTgAAAADYdNb/AAAAsPNZ/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDJ9h+8eSuJiMrJPdWW6a7PdeWaGbDZ0rwTAHLTkXcCQG46804AyM19rvFdLsAOlKwz39typqftuQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwfR06cPNWEhGVk3uqLdNdn+tq+oqDW5gdsJnSvBMActOx1mTn1uUBbD1fcdi9mq/xgd0kWWe+d3mfyr9nejYtJwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2n75qS9JiRKTVfpoWixH/iYj+6EpGx8qlwYj4b0R8X+jqycY9eScNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA201Oz4wPl8ulCR0dnXw7yfZIo9bJ+y8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5mJyeGR8ul0sTk3lnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAORtcnpmfLhcLk1soHP9fnZe0cm7RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8vNPAAAA///5ZQ4Q")
syz_mount_image$vfat(&(0x7f0000006d80), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0x1, 0x0, &(0x7f0000001180))
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
unlink(&(0x7f0000000140)='./file0\x00')
rename(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280)='./file0\x00')

2m1.65781975s ago: executing program 2 (id=159):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
listen(r0, 0x5)
connect$inet(r1, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10)
r2 = accept(r0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000020), 0x4)
setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000030)=@gcm_128={{0x303}}, 0x28)
setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000020), 0x4)
setsockopt$inet_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f0000000080)=@gcm_128={{0x303}}, 0x28)
sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000440)='h', 0x1}], 0x1, &(0x7f00000000c0)=[@ip_ttl={{0x14, 0x11a, 0x1, 0x15}}], 0x18}, 0x0)
recvmsg(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/256, 0x100}], 0x1, &(0x7f0000000400)=""/16, 0xfffffffffffffde6}, 0x40)

1m59.126872713s ago: executing program 2 (id=165):
socket(0x10, 0x803, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c0001800500010003000000060004000a0a0000060005000a0a00"], 0xbc}}, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x6)
bind$inet(r1, &(0x7f0000000600)={0x2, 0x6bb, @loopback}, 0x10)
listen(r1, 0x1)
r2 = socket$inet_tcp(0x2, 0x1, 0x6)
bind$inet(r2, &(0x7f0000000700)={0x2, 0x3039, @loopback}, 0x10)
connect$inet(r2, &(0x7f0000000800)={0x2, 0x6bb, @loopback}, 0x10)
r3 = accept$inet(r1, 0x0, 0x0)
write(r2, &(0x7f0000000b00)="00a800011a2b3c4d00070000000100010000012c05f5e1000000000300000003004000"/168, 0xa8)
write(r3, &(0x7f0000000c00)="002000011a2b3c4d00080000000100010100000005f5e1000040000000000000", 0x20)

1m58.210159075s ago: executing program 33 (id=165):
socket(0x10, 0x803, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c0001800500010003000000060004000a0a0000060005000a0a00"], 0xbc}}, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x6)
bind$inet(r1, &(0x7f0000000600)={0x2, 0x6bb, @loopback}, 0x10)
listen(r1, 0x1)
r2 = socket$inet_tcp(0x2, 0x1, 0x6)
bind$inet(r2, &(0x7f0000000700)={0x2, 0x3039, @loopback}, 0x10)
connect$inet(r2, &(0x7f0000000800)={0x2, 0x6bb, @loopback}, 0x10)
r3 = accept$inet(r1, 0x0, 0x0)
write(r2, &(0x7f0000000b00)="00a800011a2b3c4d00070000000100010000012c05f5e1000000000300000003004000"/168, 0xa8)
write(r3, &(0x7f0000000c00)="002000011a2b3c4d00080000000100010100000005f5e1000040000000000000", 0x20)

1m47.853960163s ago: executing program 5 (id=219):
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6465636f6d706f73652c747970653dce8570652c6e6c733d69736f383835392d332c00274e4856fb3ad9a972b21881e2496a16b278bf41c4b16ca8bd4e7aad710fd228d022e727fa396df5d74e8cb6ebed87fc977bc919cf1a19972133203c6d"], 0x1, 0x5f0, &(0x7f0000000bc0)="$eJzs3c1rHOcdB/DvjF6sdcFREjtJ3UJECsXExNaLSVsoVC2m6BBMoJdcRS3HwmsnSJui5FDU4j8kPainHHopgdJDKD73kH9A0GOh0KPoRWVmZ19sS7KUWNIq/nzQs/OMnpnf/OanmQftSLABXlhLH2RiM0WWrr63Ua1vby20t7cW7vf6Sc4lKeuvjFfdfyVjD5OZdFu+n6RowhX7HefL+S8uf31r40p3rWxavf3YQfsdzmbTstgkufgc4z361vGK/hlWQW/2go+C3Wf77zEefuwYY3MExT4/i+nkfJKpZh7oXbjlyWb3/I3MDQgAAADH6KWd7GQjF047DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADhLms//L5pW9vozKXqf/z/ZfC9N/0z76rQTAAAAAAAAAIDn4M2d7GQjF3rru0X9N/+36pWL9ev38knWs5K1XMtGltNJJ2uZSzLd3af+Z4DJjeVOZ23uEHvOD/bMYM/5kztnAAAAAAAAAPgO+mOWBn//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAUVAkY91F3S72+tMpx5NMJZmstttM/t7rn2VfnXYCAAAAcAJe2slONnKht75b1O/5X6vf90/lkzxIJ6vppJ2V3K6fBXTf9ZfbWwvt7a2F+1V7Ou4v/3OkNOqI6T572PvIs/UWl/p7LOXX+U2uZibv7+5mNb/LcjpZyUxu1r3lFJlunl5M9/LcO9/Fx9bef1aub9SZtHInq3Vu1/LbfJR2bqesz6He5uAj/qGqTvGLxiFrdLtZFknxg+bMRsN0XZGJfkVmm9pX1Xj54Eo8fp2URz3SXMr+M6iLx1Dz882yqvnU6NV8Iv1KzA9dfa8dXInknc5f37zbfnDv7p31q6NzSt/Qk9fEwlAlXn+hKjHZVKM7i+4zW2Ztz9nyrXrfC1nNrXyU21nJT/Ju5uu2UC+H63rpEPdaebR77UdXms4rSdHqLkdEVdeXh+o6PNNN12PD3xlU6ZXnPyONX246Y0kx3s9pFDxZibmhSrx6cCX+tFu9rrcf3Fu7u/zxIY/342ZZzc3nRmpunmyu3vF67fGroxp7dc+xuXrsYn+sfGrsUn/sWXfqZPM73NOR5uux1/cc6+73xtDYXr/lADDyzr99frL179Y/W5+3Hrbutt6b+tW5n5774WQmHo3/bewv5Z/Lnxdv5/P8fvD+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+ObWP/3s3nK7vbKmc6Y7483Pc1Ty0TnrnSdniqmTn5w4dtc79z++vv7pZ++s3l/+cOXDlQc3Zufn3r0x97Mb1++stldmu6+nnSXHZXDTn3YmAAAAAAAAAAAAHMVJ/DvpaZ8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAZ8fSB5nYTJG52Wuz1fr21kK7ar3+YMsyyXi1/F8y9jCZSbdleihcsd9xvpz/4vLXtzauDGKVve3Hkvzj253FZtOy2CS5+OQWrWcHKfeJ92iveEdS9CtTBb3ZCw6n7f8BAAD//21RHVg=")
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000)

1m46.493745028s ago: executing program 5 (id=222):
mmap$IORING_OFF_SQ_RING(0x0, 0xbffffd, 0x4000008, 0x14032, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x34}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1800}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)
r4 = socket$netlink(0x10, 0x3, 0xc)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1m42.910786067s ago: executing program 5 (id=235):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0)
sendto$inet6(r0, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r0, r1, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/190, 0xfffffffffffffeff, 0x0, 0x0}, &(0x7f0000001380)=0x40)
sendmsg$inet6(r0, &(0x7f0000004200)={0x0, 0x0, &(0x7f0000003f40)=[{&(0x7f0000002f40)="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", 0x1000}], 0x1}, 0x20000000)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000000)=0x40)

1m41.57158847s ago: executing program 5 (id=238):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x3005840, 0x0, 0x5, 0x0, 0x0)
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x104000, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0)
mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2125099, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000340)={<r2=>0x0, <r3=>0x0, <r4=>0x0}, &(0x7f00000002c0)=0xc)
syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r3, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r4, @ANYRES16=r2, @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f3, &(0x7f0000001580)="$eJzs3AuYjlW7OPB1r7UexjTpbZLDsO51P7xpaJkkySGnHJIkCUlOCUmTJAmJcZY0JCHHSXIYkuQwjUnjfD7knDT5pEmSkJBk/S/V3r5v9327vf/f9//b1577d13rsm7Pc9/vWnPPNe963uua+bbXmHot69duRkTinwK//ZMihIgRQowQQlwnhAiEEBXjK8Zfvl5AQco/9yLsX6t5+tVeAbuauP95G/c/b+P+523c/7yN+5+3cf/zNu5/3sb9Zywv2zGv2PU88u7gz//zMn7//18kt9zULzeVu7H3fyOF+5+3cf/zNu5/3sb9z9u4/3kb9/9/v1r/yTXuf97G/WcsL7vanz/zuLrjan//McYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLG877K7QQ4t/m/zDh5z+7gTHGGGOMMcYYY//T+PxXewWMMcYYY4wxxhj7fw+EFEpoEYh8Ir+IEQVErLhGxIlrRUFxnYiI60W8uEEUEjeKwqKIKCqKiQRRXJQQRqCwgkQoSopSIipuEqXFzSJRlBFlxS3CiXIiSdwqyovbRAVxu6go7hCVxJ2isqgiqopq4i5RXdQQNUUtUVvcLeqIuqKeqC/uEQ3EvaKhuE80EveLxuIB0UQ8KJqKh0Qz0Vy0EA+LluIR0Uo8KlqLNqKtaCfa/1/lvyj6iZdEfzFApIiBYpAYLIaIoWKYGC5GiJfFSPGKGCVeFalitBgjXhNjxetinHhDjBcTxETxppgkJospYqqYJqaLNPGWmCHeFjPFO2KWmC3miLkiXcwT88W7YoF4TywU74tF4gOxWCwRS8UykSE+FJliucgSH4kV4mORLVaKVWK1WCPWinVivdggNopNYrPYIraKbWK72CE+ETvFLrFb7BF7xT6xX3wqDojPxEHxucgRX/w388/9h/zeIECABAkaNOSDfBADMRALsRAHcVAQCkIEIhAP8VAICkFhKAxFoSgkQAKUgBKAgEBAUBJKQhSiUBpKQyIkQlkoCw4cJEESlIfboAJUgIpQESpBJagMVaAKVINqUB2qQ02oCbWhNtSBOlAP6sE9cA/cCw2hITSCRtAYGkMTaAJNoSk0g2bQAlpAS2gJraAVtIbW0BbaQntoDx2gA3SEjtAZOkMX6AJdoSskQzJ0g27QHbpDD+gBPaEn9IJe0Bv6QB94EV6El+AlGAB15EAYBINgCAyBYTAchsPLMBJegVfgVUiF0TAGXoPX4HUYB2dhPEyAiTARqsvJMAWmAsnpkAZpMANmwEyYCbNgNsyGuZAO82A+zIcF8B68B+/DIvgAPoAlsASWQQZkQCYshyzIghVwDrJhJayC1bAG1sIaWA8bYD1sgs2wCbbCVtgO2+ET+AR2wS7YA3tgH+yDT+FT+Aw+g1TIgRw4BIfgMByGI3AEciEXjsJROAbH4DgchxNwAk7CKTgNp+AMnIGzcA7Ow3m4ABfgIjyf8HWLfWU2pgp5mZZa5pP5ZIyMkbEyVsbJOFlQFpQRGZHxMl4WkoVkYVlYFpVFZYJMkCVkCYkSJclQlpQlZVRGZWlZWibKRFlWlpVOOpkkk2R5WV5WkBVkRXmHrCTvlJVlFdnJVZPVZHXZ2dWUtWRtWVvWkXVlPVlf1pcNZAPZUDaUjWQj2Vg2lk3kg7KpHAjDoLm83JmWcjS0kmOgtWwj28p28nV4THaQ46Cj7CQ7yyfkBBgPXWUHlyyflt3kFOgun5VT4TnZU06HXvIF2Vv2kX3li7Kf7Oj6ywFyFgyUg+RcGCKHymFyuFwAdeXljtWTr8pUOVqOka/JZfC6HCffkOPlBDlRviknyclyipwqp8npMk2+JWfIt+VM+Y6cJWfLOXKuTJfz5Hz5rlwg35ML5ftykfxALpZL5FK5TGbID2WmXC6z5EdyhfxYZsuVcpVcLdfItXKdXC83yI1yk9wst8itcpvcLnfIT+ROuUvulnvkXrlP7pefygPyM3lQfi5z5BfykPyLPCy/lEfkVzJXfi2Pym/kMfmtPC6/kyfk9/KkPCVPyx/kGfmjPCvPyfPyJ3lB/iwvyl/kJemlUKCkUkqrQOVT+VWMKqBi1TUqTl2rCqrrVERdr+LVDaqQulEVVkVUUVVMJajiqoQyCpVVpEJVUpVSUXWTKq1uVomqjCqrblFOlVNJ6lZVXt2mKqjbVUV1h6qk7lSVVRVVVVVTd6nqqoaqqWqp2upuVUfVVfVUfXWPaqDuVQ3VfaqRul81Vg+oJupB1VQ9pJqp5qqFeli1VI+oVupR1Vq1UW1VO9VePaY6qMdVR9VJdVZPqC7qSdVVPaWS1dOqm3pGdVfPqh7qOdVTPa96qRdUb9VH9VW/qEvKq/5qgEpRA9UgNVgNUUPVMDVcjVAvq5HqFTVKvapS1Wg1Rr2mxqrX1Tj1hhqvJqiJ6k01SU1WU9RUNU1NV2nqLTVDva1mqnfULDVbzVFzVbqap4b9XmnhfyH/7b+TP+rXV9+udqhP1E61S+1We9RetU/tV/vVAXVAHVQHVY7KUYfUIXVYHVZH1BGVq3LVUXVUHVPH1HF1XJ1QJ9RJdUr9pH5QZ9SP6qw6p86pn9QFdUFd/P1rIDRoqZXWOtD5dH4dowvoWH2NjtPX6oL6Oh3R1+t4fYMupG/UhXURXVQX0wm6uC6hjUZtNelQl9SldFTfpEvrm3WiLqPL6lu00+V0kr71n87/s/W11+11B91Bd9QddWfdWXfRXXRX3VUn62TdTXfT3XV33UP30D11T91L99K9dW/dV/fV/XQ/3V/31yk6RQ/Sg/UQPVQP08P1CP2yHqlH6lF6lE7VqXqMHqPH6rF6nB6nx+vxeqKeqCfpSXqKnqKn6Wk6TafpGXqGnqln6ll6lp6j5+h0na7n6/l6gV6gF+qFepFepBfrxXqpXqozdIbO1Jk6S2fpFXqFztYr9Uq9Wq/Wa/VavV6v1xv1Rr1Zb9Zb9VadrXfoHXqn3ql36916r96r9+v9+oA+oA/qgzpH5+hD+pA+rA/rI/qIztW5+qg+qo/pY/q4Pq5P6BP6pD6pT+vT+ow+o8/qs/q8Pq8v6Av6or6oL+lLl499gQxkoAMd5AvyBTFBTBAbxAZxQVxQMCgYRIJIEB/EB4WCG4PCQZGgaFAsSAiKByUCE2BgAwrCoGRQKogGNwWlg5uDxKBMUDa4JXBBuSApuDUoH9wWVAhuDyoGdwSVgjuDykGVoGpQLbgrqB7UCGoGtYLawd1BnaBuUC+oH9wTNAjuDRoG9wWNgvuDxsEDQZPgwaBp8FDQLGgetAgeDloGjwStgkeD1kGboG3QLmj/L63v/dkij7v+ZoBJMQPNIDPYDDFDzTAz3IwwL5uR5hUzyrxqUs1oM8a8Zsaa180484YZbyaYieZNM8lMNlPMVDPNTDdp5i0zw7xtZpp3zCwz28wxc026mVfj90O3WWjeN4vMB2axWWKWmmUmw3xoMs1yk2U+MivMxybbrDSrzGqzxqw168x6s8FsNJvMZrPFbDXbzHazw3xidppdZrfZY/aafWa/+dQcMJ+Zg+Zzk2O+MIfMX8xh86U5Yr4yueZrc9R8Y46Zb81x8505Yb43J80pc9r8YM6YH81Zc86cNz+ZC+Znc9H8Yi4Zf/lwf/ntHTVqzIf5MAZjMBZjMQ7jsCAWxAhGMB7jsRAWwsJYGItiUUzABCyBJfAyQsKSWBKjGMXSWBoTMRHLYll06DAJk7A8lscKWAErYkWshJWwMlbGqlgV78K7sAbWwFpYC+/Gu7Eu1sX6WB8bYANsiA2xETbCxtgYm2ATbIpNsRk2wxbYAltiS2yFrbA1tsa22BbbY3vsgB2wI3bEztgZu2AX7IpdMRmTsRt2w+7YHXtgD+yJPbEX9sLe2Bv7Yl/sh/2wP/bHFEzBQTgIh+AQHIbDcASOwJE4EkfhKEzFVByDY3AsjsVxOA7H4wSciG/iJJyMU3AqTsPpmIZpOANn4EycibNwFs7BOZiO6Tgf5+MCXIALcSEuwkW4GBfjUlyKGZiBmZiJWZiFK3AFZmM2rsJVuAbX4DpchxtwA27CTbgFt+A23IY7cAfuxJ24G3fjXtyL+3E/HsADeBAPYg7m4CE8hIfxMB7BI5iLuXgUj+IxPIbH8TiewBN4Ek/iaTyNZ/AMnsWzeB7P4wX8GS/iL3gJPcZYKWLtNTbOXmsL2utsjC1g/zouaovZBFvclrDGFrZF/iZGa22iLWPL2luss+Vskr31D3FlW8VWtdXsXba6rWFr/iFuYO+1De19tpG939a39/xN3Ng+YJvYR2xT+6htZtvYFradbWkfsa3so7a1bWPb2na2i33SdrVP2WT7tO1mn/lDnGmX2w12o91kN9sD9jN73v5kj9lv7QX7s+1vB9gR9mU70r5iR9lXbaod/Yd4on3TTrKT7RQ71U6z0/8Qz7FzbbqdZ+fbd+0C+94f4gz7oV1ks+xiu8Qutct+jS+vKct+ZFfYj222XWlX2dV2jV1r19n1/77W1Xar3Wa32/32U7vT7rK77R671+77Nb68j4P2c5tjv7BH7Tf2sP3SHrHHba79+tf48v6O2+/sCfu9PWlP2dP2B3vG/mjP2nO/7v/y3n+wv9hL1ltBQJIUaQooH+WnGCpAsXQNxdG1VJCuowhdT/F0AxWiG6kwFaGiVIwSqDiVIENIlohCKkmlKEo3UWm6mRKpDJWlW8hROUqiW6k83UYV6HaqSHdQJbqTKlMVqkrV6C6qTjWoJtWi2nQ31aG6VI/q0z3UgO6lhnQfNaL7qTE9QE3oQWpKD1Ezak4t6GFqSY9QK3qUWlMbakvtqD09Rh3ocepInagzPUFd6EnqSk9RMj1N3egZ6k7PUg96jnrS89SLXqDe1If60ovUj16i/jSAUmggDaLBNISG0jAaTiPoZRpJr9AoepVSaTSNoddoLL1O4+gNGk8TaCK9SZNoMk2hqTSNplMavUUz6G2aSe/QLJpNc2gupdM8mk/v0gJ6jxbS+7SIPqDFtISW0jLKoA8pk5ZTFn1EK+hjyqaVtIpW0xpaS+toPW2gjbSJNtMW2krbaDvtoE9oJ+2i3bSH9tI+2k+f0gH6jA7S55RDX9Ah+gsdpi/pCH1FufQ1HaVv6Bh9S8fpOzpB39NJOkWn6Qc6Qz/SWTpH5+knukA/00X6hS6RJxFCKEMV6jAI84X5w5iwQBgbXhPGhdeGBcPrwkh4fRgf3hAWCm8MC4dFwqJhsTAhLB6WCE2IoQ0pDMOSYakwGt4Ulg5vDhPDMmHZ8JbQheXCpPDWsHx4W1ghvD2sGN4RVgrvDCuHVcJH7q8W3hVWD2uENcNaYe3w7rBOWDesF9YP7wkbhPeGDcP7wkbh/WGF8IGwSfhg2DR8KGwWNg9bhA+HLcNHwlbho2HrsE3YNmwXtg8fCzuEj4cdw05h5/CJsEv4ZNg1fCpMDp8Ou4XP/On1lHBgOCgcHA4Ovb9PLY0ui2ZEP4xmRpdHs6IfRVdEP45mR1dGV0VXR9dE10bXRddHN0Q3RjdFN0e3RLdGt0W3R72vn184cNIpp13g8rn8LsYVcLHuGhfnrnUF3XUu4q538e4GV8jd6Aq7Iq6oK+YSXHFXwhmHzjpyoSvpSrmou8mVdje7RDe4+W8HiHIuybVz7V1718E97jq6Tq6ze8I94Z50T7qn3FPuadfNPeO6u2ddD/ec6+med8+7F1xv18f1dS+6fu4l198NcCkuxQ1yg9wQN8QNc8PcCDfCjXQj3Sg3yqW6VDfGjXFj3Vg3zo1z4914N9FNdJPcJDfFTXHT3DSX5tLcDDfDzXQz3Sw3y81xc1y6S3fz3Xy3wC1wC91CtyhxkVvsFrulbqnLcBku02W6LJflVrgVLttlu1VulVvj1rh1bp3b4Da4TW6T2+K2uG1um9vhdridbqfb7Xa7vW6v2+/2uwPugDvoDrocl+MOuUPusDvsjrivXK772h1137hj7lt33H3nTrjv3Ul3yp12P7gz7kd31p1z591P7oL72V10v7hLzru0yFuRGZG3IzMj70RmRWZH5kTmRtIj8yLzI+9GFkTeiyyMvB9ZFPkgsjiyJLI0siySEfkwkhlZHsmKfBRZEfk4kh1ZGVkVWR1ZE1kb8b74ztCX9KV81N/kS/ubfaIv48v6W7zz5XySv9WX97f5Cv52X9Hf4Sv5O31lX8VX9Y/61r6Nb+vb+fb+Md/BP+47+k6+s3/Cd/FP+q7+KZ/sn/bd/DO+u3/W9/DP+Z7+ed/Lv+B7+z6+r3/R9/Mv+f5+gE/xA/0gP9gP8UP9MD/cj/Av+5H+FT/Kv+pT/Wg/xr/mx/rX/Tj/hh/vJ/iJ/k0/yU/2U/xUP81P92n+LT/Dv+1n+nf8LD/bz/Fzfbqf5+f7d/0C/55f6N/3i/wHfrFf4pf6ZT7Df+gz/XKf5T/yK/zHPtuv9Kv8ar/Gr/Xr/Hq/wW/0m/xmv8Vv9dv8dr/Df+J3+l1+t9/j9/p9fr//1B/wn/mD/nOf47/wh/xf/GH/pT/iv/K5/mt/1H/jj/lv/XH/nT/hv/cn/Sl/2v/gz/gf/Vl/zp/3P/kL/md/0f/iL/GvpDHGGGOM/ZeoP7k+8O/8n/x9XDZICHHtrmK5/7HmlsK/zYfKhC4RIcTTA3o1/7dRp05KSsrv92YrEZRaIoSIXMnPJ67EK0Vn8aRIFp1E+b+7vqGyzwX6k/rRO4SI/aucGHElvlL/tn9Q/7EnJmZWCs/H/yf1lwiRWOpKTgFxJb5Sv8I/qF+kw5+sv8CXaUJ0/KucOHElvlI/STwunhHJf3MnY4wxxhhjjDH2m6Gyao8/e36+/HyeoK/k5BdX4j97PmeMMcYYY4wxxtjV91yfvk89lpzcqQdPeMITnvz75Gr/ZGKMMcYYY4z9q1059F/tlTDGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY3nX/48/J3a198gYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4xdbf8nAAD//yx2QLk=")

1m40.430546508s ago: executing program 5 (id=243):
r0 = socket(0x840000000002, 0x3, 0x100)
socket$key(0xf, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x1}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10)
sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0)

1m39.681276607s ago: executing program 5 (id=247):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94)
bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'aead\x00', 0x11, 0x0, 'aegis256-generic\x00'}, 0x58)
writev(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x800)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x812, 0x0, 0x0, 0x10, &(0x7f0000002e00), 0x0, 0x0, 0x21, 0x8, 0x0, 0x0}}, 0x10)
recvmsg(r1, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014)

1m38.885714437s ago: executing program 34 (id=247):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94)
bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'aead\x00', 0x11, 0x0, 'aegis256-generic\x00'}, 0x58)
writev(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x800)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x812, 0x0, 0x0, 0x10, &(0x7f0000002e00), 0x0, 0x0, 0x21, 0x8, 0x0, 0x0}}, 0x10)
recvmsg(r1, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014)

11.859900234s ago: executing program 6 (id=653):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$unix(0x1, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0xffe0, 0xb}, {0x7, 0xfff1}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x54815}, 0x4008000)
ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

11.558898302s ago: executing program 6 (id=654):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r4=>0x0})
bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r3, 0x1, 0x6, 0x0, 0x0)
sendmmsg(r3, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041)

10.611540985s ago: executing program 4 (id=658):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400)
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xe, 0xf}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x8001, 0x20000000, 0x7, 0xfffffffc}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x2004c011}, 0x4800)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
socket$inet6(0xa, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}})
r6 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$kcm(r6, &(0x7f0000000500)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3f}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\r', 0x1}], 0x1}, 0x4)

10.548221937s ago: executing program 6 (id=660):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c)
sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="13", 0x1}], 0x1}, 0x48043)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x2, 0x20}, 0xc)
r2 = dup(r0)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c)
pipe2$9p(&(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a)
splice(r3, 0x0, r0, 0x0, 0xffff, 0x2)
sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=' ', 0x1}], 0x1}}], 0x1, 0x4040000)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0xfffffff7, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c)

9.459585884s ago: executing program 4 (id=663):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8})
fcntl$lock(r3, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9})
fcntl$lock(r3, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x8, 0x73e9})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)

9.339987367s ago: executing program 6 (id=664):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$unix(0x1, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0xffe0, 0xb}, {0x7, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2401c805}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

9.197899931s ago: executing program 7 (id=666):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', <r7=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)

9.018329415s ago: executing program 6 (id=669):
r0 = add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0x0, r0)
keyctl$read(0xb, r4, &(0x7f0000000dc0)=""/4096, 0x1000)
r5 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0xc0c00)
ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000580)={0x1, 0x6, 0x7, &(0x7f0000000540)={0x1c, "584fc4dfae9a34fb1ffbb539b436cc843759a57bf235d2f60200"}})

7.968418631s ago: executing program 6 (id=671):
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x1403, 0x5, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0)
write(r0, &(0x7f0000000000)='3', 0x1)
socket$packet(0x11, 0x3, 0x300)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000200))
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000240))
accept4$unix(r0, &(0x7f00000004c0), &(0x7f0000000540)=0x6e, 0x80000)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000280))
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000340))
sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x14, 0x0, 0x800, 0x70bd2d, 0x25dfdbff}, 0x14}}, 0x40040)

7.730236317s ago: executing program 7 (id=673):
socket$nl_generic(0x10, 0x3, 0x10)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
pipe2$watch_queue(&(0x7f0000000040), 0x80)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x40054)

7.532003822s ago: executing program 7 (id=675):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000400)={r0, &(0x7f0000000080)='wg1\x00', 0x800, &(0x7f00000001c0)={@_ha_fsid={[0x7, 0x5]}, {0x2, 0x1bcc, 0x3, 0x10001}}, 0x7, &(0x7f0000000280)={@_ha_fsid}, &(0x7f0000000300)=0x9})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r1, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000c1}, 0x20040000)

7.367920466s ago: executing program 4 (id=677):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6d2, &(0x7f0000000e80)="$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")
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

5.689783488s ago: executing program 7 (id=678):
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
unshare(0x2a020480)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896)
landlock_create_ruleset(0x0, 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x8100)
ioctl$EVIOCSABS20(r3, 0x401845e0, &(0x7f0000000100)={0x0, 0x1ff, 0x530, 0x94e, 0x2, 0x7})

5.58782198s ago: executing program 4 (id=680):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3)
fchdir(0xffffffffffffffff)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r4, &(0x7f0000002080)={0xfc, {"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", 0xa75}}, 0x1006)

5.160005961s ago: executing program 4 (id=681):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000087}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r3, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0)

4.216557645s ago: executing program 3 (id=684):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x1b6)
fallocate(r0, 0x0, 0x0, 0x10000)
pwrite64(r0, &(0x7f0000000100)="fc4e2ba9010000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000a000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000008000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c532ba901", 0xdd, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000180), 0x0, 0x0)
ioctl$LOOP_SET_FD(r1, 0x4c00, r0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r2, &(0x7f0000000300)='md123', 0x5)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md123/md/metadata_version\x00', 0x1, 0x0)
write(r3, &(0x7f0000000500)='1.1', 0x3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md123/md/new_dev\x00', 0x1, 0x0)
write(r4, &(0x7f0000000700)='7:0', 0x3)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/block/md123/md/array_state\x00', 0x1, 0x0)
write(r5, &(0x7f0000000900)='act', 0x3)

4.097901227s ago: executing program 3 (id=685):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$unix(0x1, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0xe30a16b12b0d1e59, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0xffe0, 0xb}, {0x7, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4054805}, 0x8040)
ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

3.899264412s ago: executing program 1 (id=687):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, &(0x7f0000000680), 0x0, 0x48c, &(0x7f0000001940)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r4, 0xffffffffffffffff, 0x0)

2.955883716s ago: executing program 1 (id=688):
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
socket(0x11, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x901800, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil})
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f2", @ANYRES64=r4], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

2.951906986s ago: executing program 3 (id=689):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0)
prctl$PR_SVE_SET_VL(0x32, 0x212f0)
r3 = socket$kcm(0x29, 0x5, 0x0)
setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000002900)={0x2020}, 0x2020)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x20080, 0x0)

2.723469612s ago: executing program 1 (id=690):
r0 = socket(0x11, 0x3, 0x0)
accept4$inet6(r0, 0x0, &(0x7f0000000100), 0x80000)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e25, 0x14, @remote, 0x200105}, 0x1c)
r1 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$MEMREADOOB64(r1, 0x1269, &(0x7f00000000c0)={0x1})

1.98013s ago: executing program 3 (id=691):
open(0x0, 0x108843, 0x98)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3)
io_setup(0x8, &(0x7f0000002740)=<r4=>0x0)
io_pgetevents(r4, 0x2, 0x2, &(0x7f0000000000)=[{}, {}], &(0x7f0000000080), 0x0)

1.406838244s ago: executing program 7 (id=692):
openat$sysfs(0xffffffffffffff9c, 0x0, 0x82843, 0xf)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0)
syz_emit_ethernet(0x80d, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff)
r0 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1)
ioctl$MEMERASE64(r0, 0x40104d14, 0x0)
signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0xf]}, 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpid()
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019c80)=""/102400, 0x19000)
kcmp(r1, r2, 0x1, 0xffffffffffffffff, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

1.377441866s ago: executing program 3 (id=693):
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)}, 0x44046)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4)
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]})
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x10002, 0x3, 0x25000, 0x2000, &(0x7f0000ffc000/0x2000)=nil})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x2f, 0x0}}], 0x1, 0x800)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
pselect6(0x40, &(0x7f0000000040)={0xf, 0xd, 0x9, 0x5, 0x9, 0x9, 0x8, 0xf}, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x8, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2839d1})
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x44000)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.236017489s ago: executing program 1 (id=694):
socket$alg(0x26, 0x5, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x87}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, <r1=>0xffffffffffffffff}, 0x0}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r1, 0x0, &(0x7f0000001780)=""/4096}, 0x20)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x4, 0x17fe2, 0x1, 0x1, 0xffffffffffffffff, 0xfff}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r2}, &(0x7f0000000600), 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000ec0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff}, 0x106}}, 0x20)
timer_create(0xb, 0x0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
timer_gettime(0x0, &(0x7f0000000040))
write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r4, 0x1}}, 0x18)

910.122727ms ago: executing program 7 (id=695):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xffffffffffffff59}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890)
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)

258.685343ms ago: executing program 1 (id=696):
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={<r2=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r2, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c)

120.245747ms ago: executing program 3 (id=697):
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000000)={0x1145, 0x800, 0x7, 0x9}, 0x10)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r0, 0x84, 0x81, 0x0, 0x0)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001f00)=[{0x0, 0x0, 0x0}], 0x1, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
close(0xffffffffffffffff)
getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000100), &(0x7f0000000180)=0x4)

68.070608ms ago: executing program 4 (id=698):
socket$nl_netfilter(0x10, 0x3, 0xc)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000f, 0x204031, 0xffffffffffffffff, 0xb320a000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000040)={0x10, {"0dbad96fff01000008ff00200800", "3dfab043e504adbeecec4b1c55794177", "a7c947420000000000000000ff4a70f3"}, 0x4, 0x6})
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18}, './file0\x00'})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
syz_emit_ethernet(0x4e, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0)
syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000)
fsopen(0x0, 0x0)

0s ago: executing program 1 (id=699):
syz_open_procfs(0x0, &(0x7f00000003c0)='uid_map\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
write(r0, &(0x7f0000000040)="0f", 0x1)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'})
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
socket(0xa, 0x3, 0xff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r2, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r3, &(0x7f0000000240)='1', 0x1)

kernel console output (not intermixed with test programs):

no interfaces have a carrier
[   33.883887][ T3851] 8021q: adding VLAN 0 to HW filter on device bond0
[   33.895169][ T3851] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting crond: OK
Starting sshd: OK

syzkaller
Warning: Permanently added '10.128.0.145' (ED25519) to the list of known hosts.
syzkaller login: [   49.810122][ T4170] cgroup: Unknown subsys name 'net'
[   49.954812][ T4170] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.194662][ T4170] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k FS
[   52.606710][ T4189] chnl_net:caif_netlink_parms(): no params data found
[   52.616571][ T4188] chnl_net:caif_netlink_parms(): no params data found
[   52.725125][ T4186] chnl_net:caif_netlink_parms(): no params data found
[   52.734711][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.742283][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.750399][ T4189] device bridge_slave_0 entered promiscuous mode
[   52.763138][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.770378][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.778271][ T4189] device bridge_slave_1 entered promiscuous mode
[   52.802723][ T4187] chnl_net:caif_netlink_parms(): no params data found
[   52.824741][ T4195] chnl_net:caif_netlink_parms(): no params data found
[   52.833843][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.840978][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.848875][ T4188] device bridge_slave_0 entered promiscuous mode
[   52.875735][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.884972][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.892265][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.900068][ T4188] device bridge_slave_1 entered promiscuous mode
[   52.921393][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   52.976439][ T4189] team0: Port device team_slave_0 added
[   52.986324][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.997679][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.024053][ T4189] team0: Port device team_slave_1 added
[   53.043432][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.050880][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.058451][ T4187] device bridge_slave_0 entered promiscuous mode
[   53.083361][ T4188] team0: Port device team_slave_0 added
[   53.089220][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.096725][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.105292][ T4186] device bridge_slave_0 entered promiscuous mode
[   53.118524][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.125713][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.133909][ T4187] device bridge_slave_1 entered promiscuous mode
[   53.152750][ T4188] team0: Port device team_slave_1 added
[   53.165449][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.172536][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.180483][ T4186] device bridge_slave_1 entered promiscuous mode
[   53.187856][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.194882][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.220867][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.233828][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.248706][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.255864][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.263807][ T4195] device bridge_slave_0 entered promiscuous mode
[   53.277378][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.284563][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.310479][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.323014][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.338259][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.345415][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.353814][ T4195] device bridge_slave_1 entered promiscuous mode
[   53.377445][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.384777][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.411138][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.429031][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.436419][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.462778][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.475668][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.510665][ T4189] device hsr_slave_0 entered promiscuous mode
[   53.517664][ T4189] device hsr_slave_1 entered promiscuous mode
[   53.532040][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.549047][ T4187] team0: Port device team_slave_0 added
[   53.562852][ T4187] team0: Port device team_slave_1 added
[   53.574363][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.609505][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.632007][ T4188] device hsr_slave_0 entered promiscuous mode
[   53.638664][ T4188] device hsr_slave_1 entered promiscuous mode
[   53.645535][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   53.653543][ T4188] Cannot create hsr debugfs directory
[   53.676019][ T4186] team0: Port device team_slave_0 added
[   53.684788][ T4186] team0: Port device team_slave_1 added
[   53.700023][ T4195] team0: Port device team_slave_0 added
[   53.706225][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.713233][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.739405][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.767381][ T4195] team0: Port device team_slave_1 added
[   53.773661][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.780697][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.806815][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.853172][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.860179][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.886223][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.901523][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.908468][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.934552][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.949958][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.956896][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.983884][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.020486][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.030062][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.074119][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.146477][ T4186] device hsr_slave_0 entered promiscuous mode
[   54.153352][ T4186] device hsr_slave_1 entered promiscuous mode
[   54.162898][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   54.173489][ T4186] Cannot create hsr debugfs directory
[   54.183841][ T4187] device hsr_slave_0 entered promiscuous mode
[   54.196403][ T4187] device hsr_slave_1 entered promiscuous mode
[   54.206522][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   54.214397][ T4187] Cannot create hsr debugfs directory
[   54.288167][ T4195] device hsr_slave_0 entered promiscuous mode
[   54.295426][ T4195] device hsr_slave_1 entered promiscuous mode
[   54.302181][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   54.310263][ T4195] Cannot create hsr debugfs directory
[   54.370682][ T4175] Bluetooth: hci4: command 0x0409 tx timeout
[   54.377171][ T4175] Bluetooth: hci1: command 0x0409 tx timeout
[   54.380362][ T2301] Bluetooth: hci3: command 0x0409 tx timeout
[   54.389297][ T2301] Bluetooth: hci0: command 0x0409 tx timeout
[   54.399705][ T2301] Bluetooth: hci2: command 0x0409 tx timeout
[   54.456616][ T4189] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   54.466723][ T4189] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   54.482230][ T4189] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   54.504024][ T4189] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   54.556263][ T4188] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   54.567402][ T4188] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   54.577297][ T4188] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   54.587224][ T4188] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   54.663216][ T4187] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   54.685827][ T4187] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   54.696148][ T4187] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   54.705984][ T4187] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   54.724829][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.757555][ T4186] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   54.768859][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   54.778187][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   54.790391][ T4189] 8021q: adding VLAN 0 to HW filter on device team0
[   54.797863][ T4186] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   54.811798][ T4186] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   54.821959][ T4186] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   54.860999][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   54.869827][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   54.878793][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.886001][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.894942][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   54.905473][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   54.914239][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.921318][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.928981][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   54.945813][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.998991][ T4188] 8021q: adding VLAN 0 to HW filter on device team0
[   55.014599][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.021962][  T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   55.031837][  T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   55.041331][  T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   55.048901][  T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   55.061817][  T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   55.071329][  T150] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   55.080457][  T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   55.088879][  T150] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   55.097849][ T4195] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   55.115268][  T150] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   55.124453][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   55.134621][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   55.143167][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.150247][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.158425][ T4195] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   55.170817][ T4195] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   55.184884][ T4195] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   55.194450][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   55.202903][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   55.212067][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   55.222898][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   55.232452][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   55.244525][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   55.255893][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   55.273534][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   55.283104][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   55.299344][ T4187] 8021q: adding VLAN 0 to HW filter on device team0
[   55.329804][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   55.338457][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   55.347905][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.355014][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.363335][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   55.372637][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   55.383786][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.390838][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.398473][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   55.407912][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   55.416749][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   55.426688][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   55.435074][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   55.443802][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   55.452357][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   55.461102][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   55.469230][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   55.477607][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   55.491142][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.516972][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   55.530127][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   55.541376][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   55.552612][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   55.561374][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.568461][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.578247][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   55.587261][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   55.597008][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   55.605676][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   55.621014][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   55.631325][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   55.639588][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   55.648139][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   55.658885][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   55.676000][ T4187] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   55.686883][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   55.710574][ T4186] 8021q: adding VLAN 0 to HW filter on device team0
[   55.720724][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   55.732711][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   55.745149][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   55.757129][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   55.768483][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   55.777234][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   55.785386][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   55.793504][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   55.804361][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   55.818570][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.849317][  T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   55.870900][  T150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   55.886270][  T150] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.893382][  T150] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.908086][  T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   55.917347][  T150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   55.926601][  T150] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.933748][  T150] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.957726][  T150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   55.968734][  T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   55.984745][  T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   55.996194][  T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   56.009483][  T150] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   56.018340][  T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   56.028093][  T150] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   56.036785][  T150] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   56.053527][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.084847][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.094437][  T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   56.103979][  T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   56.114284][  T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   56.122931][  T150] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   56.132119][  T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   56.141798][  T150] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   56.150367][  T150] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   56.157767][  T150] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   56.169379][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   56.192593][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.205835][ T4189] device veth0_vlan entered promiscuous mode
[   56.223793][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   56.232255][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   56.240296][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   56.248534][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   56.257181][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   56.265177][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   56.273068][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   56.281992][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   56.291114][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   56.298772][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   56.316276][ T4195] 8021q: adding VLAN 0 to HW filter on device team0
[   56.341315][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   56.351630][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   56.371580][ T4189] device veth1_vlan entered promiscuous mode
[   56.382250][ T4187] device veth0_vlan entered promiscuous mode
[   56.395536][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   56.403964][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   56.413031][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   56.420749][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   56.432493][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   56.451612][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   56.460106][ T4233] Bluetooth: hci2: command 0x041b tx timeout
[   56.464257][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   56.469964][ T4233] Bluetooth: hci0: command 0x041b tx timeout
[   56.476380][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   56.489157][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.495247][ T4233] Bluetooth: hci3: command 0x041b tx timeout
[   56.496267][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.509967][ T4233] Bluetooth: hci1: command 0x041b tx timeout
[   56.520905][ T4233] Bluetooth: hci4: command 0x041b tx timeout
[   56.536087][ T4189] device veth0_macvtap entered promiscuous mode
[   56.547938][ T4187] device veth1_vlan entered promiscuous mode
[   56.557566][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   56.566991][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   56.576320][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   56.585884][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   56.594435][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.601522][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.609473][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   56.618723][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   56.628101][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   56.636679][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   56.645620][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   56.654192][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   56.668117][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   56.676517][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   56.684829][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   56.696065][ T4188] device veth0_vlan entered promiscuous mode
[   56.704213][ T4189] device veth1_macvtap entered promiscuous mode
[   56.726174][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.747397][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.768925][ T4195] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   56.782603][ T4195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.793974][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   56.803415][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   56.812083][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   56.821094][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   56.829345][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   56.837020][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   56.844673][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   56.853425][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   56.862246][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   56.871765][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   56.880174][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   56.888382][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   56.903847][ T4188] device veth1_vlan entered promiscuous mode
[   56.919162][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   56.927359][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   56.941688][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   56.954233][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   56.971860][ T4187] device veth0_macvtap entered promiscuous mode
[   56.982620][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.012669][  T150] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   57.040977][  T150] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   57.053586][  T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   57.086420][ T4187] device veth1_macvtap entered promiscuous mode
[   57.108423][ T4188] device veth0_macvtap entered promiscuous mode
[   57.135713][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   57.152489][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   57.167797][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   57.183295][ T4189] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.194306][ T4189] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.204859][ T4189] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.217156][ T4189] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.233358][ T4188] device veth1_macvtap entered promiscuous mode
[   57.244785][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   57.253846][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   57.292040][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   57.303040][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   57.316895][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.324863][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   57.332550][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   57.340219][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   57.348661][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   57.362985][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   57.371963][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   57.395514][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.414678][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   57.426007][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   57.436158][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   57.446811][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   57.457722][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.470688][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   57.485448][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   57.496513][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.525403][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   57.534275][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   57.543460][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   57.553377][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   57.562255][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   57.572166][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   57.581602][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   57.592168][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   57.602620][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   57.613298][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   57.624428][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.637545][ T4188] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.646831][ T4188] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.656827][ T4188] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.665773][ T4188] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.691289][ T4187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.700965][ T4187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.709835][ T4187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.718515][ T4187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.733188][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   57.742318][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   57.756875][ T4186] device veth0_vlan entered promiscuous mode
[   57.774367][ T4195] device veth0_vlan entered promiscuous mode
[   57.788879][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   57.797205][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   57.805589][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   57.816858][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   57.825711][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   57.833605][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   57.841568][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   57.849156][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   57.882089][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.895175][ T4195] device veth1_vlan entered promiscuous mode
[   57.908121][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.917727][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.922339][ T4186] device veth1_vlan entered promiscuous mode
[   57.927225][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.952956][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   57.967195][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   57.976815][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   57.984839][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   58.024674][  T150] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   58.033297][  T150] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   58.048365][  T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   58.058640][  T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   58.087696][ T4186] device veth0_macvtap entered promiscuous mode
[   58.135830][ T4264] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   58.139219][ T4186] device veth1_macvtap entered promiscuous mode
[   58.180311][ T4244] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.188305][ T4244] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.196721][ T1238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.212761][ T1238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.229107][  T150] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   58.239426][  T150] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   58.247604][  T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   58.256323][  T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   58.270350][  T150] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   58.278521][  T150] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   58.303152][ T4195] device veth0_macvtap entered promiscuous mode
[   58.351643][ T4195] device veth1_macvtap entered promiscuous mode
[   58.366146][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   58.379224][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.390617][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   58.401881][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.412351][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   58.423093][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.434971][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.459888][ T1238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.471061][ T1238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.475354][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   58.488128][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   58.496613][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   58.506322][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   58.516842][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   58.540195][ T4262] Bluetooth: hci4: command 0x040f tx timeout
[   58.540470][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   58.546398][ T4262] Bluetooth: hci1: command 0x040f tx timeout
[   58.563816][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.575237][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   58.586213][ T4262] Bluetooth: hci3: command 0x040f tx timeout
[   58.591851][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.600984][ T4262] Bluetooth: hci0: command 0x040f tx timeout
[   58.604437][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   58.623339][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.625183][ T4262] Bluetooth: hci2: command 0x040f tx timeout
[   58.634887][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.654645][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   58.665938][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   58.678084][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   58.696495][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.706967][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   58.717961][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.728427][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   58.739234][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.749503][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   58.765279][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.793000][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.805160][ T1238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.818505][  T150] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   58.826844][ T1238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.841392][  T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   58.855941][  T150] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   58.870052][ T4186] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.890840][ T4186] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.908229][ T4186] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.917523][ T4186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.929403][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   58.949444][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.960114][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   58.979937][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.999603][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   59.005391][ T4268] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   59.019613][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.049132][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   59.063136][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.091427][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.160848][  T150] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   59.178948][  T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   59.203310][ T4195] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.218844][ T4195] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.242310][ T4195] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.255063][ T4195] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.360915][ T4244] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.368763][ T4244] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.409131][ T4271] device syzkaller0 entered promiscuous mode
[   59.435204][  T150] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   59.462925][ T4274] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   59.540931][  T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.548959][  T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.579830][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   59.625545][ T4286] sch_fq: defrate 4294967295 ignored.
[   59.631582][ T4230] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   59.644017][ T4286] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8'.
[   59.664334][ T4244] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.696706][ T4244] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.740169][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   59.763953][  T160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.775691][  T160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.794538][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   59.908310][ T4292] loop2: detected capacity change from 0 to 512
[   59.976845][ T4292] EXT4-fs (loop2): bad s_min_extra_isize: 544
[   59.999978][ T4230] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[   60.017614][ T4230] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   60.067906][ T4230] usb 1-1: config 0 descriptor??
[   60.075833][ T4290] loop1: detected capacity change from 0 to 4096
[   60.136800][ T4230] gspca_main: STV06xx-2.14.0 probing 046d:0870
[   60.269519][ T4300] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   60.314629][ T4301] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   60.897908][ T4233] Bluetooth: hci3: command 0x0419 tx timeout
[   60.978299][ T4233] Bluetooth: hci1: command 0x0419 tx timeout
[   61.080672][ T4233] Bluetooth: hci4: command 0x0419 tx timeout
[   61.333322][ T4305] loop4: detected capacity change from 0 to 512
[   61.348301][ T4233] Bluetooth: hci2: command 0x0419 tx timeout
[   61.355199][ T4233] Bluetooth: hci0: command 0x0419 tx timeout
[   61.407015][ T4314] loop2: detected capacity change from 0 to 4096
[   61.456108][ T4305] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #2: comm syz.4.14: missing EA_INODE flag
[   61.471740][ T4305] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.14: error while reading EA inode 2 err=-117
[   61.479045][ T4317] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   61.490616][ T4305] EXT4-fs (loop4): 1 orphan inode deleted
[   61.502371][ T4305] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback.
[   61.687941][ T4314] overlayfs: upper fs does not support tmpfile.
[   61.699121][ T4314] overlayfs: upper fs does not support RENAME_WHITEOUT.
[   61.706483][ T4314] overlayfs: failed to set xattr on upper
[   61.713217][ T4314] overlayfs: ...falling back to index=off,metacopy=off.
[   63.041778][ T4230] usb 1-1: USB disconnect, device number 2
[   63.241062][ T4332] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   63.499657][   T21] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   63.846776][ T4361] binder_alloc: 4356: binder_alloc_buf size 12224 failed, no address space
[   63.869842][   T21] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[   63.876927][ T4361] binder_alloc: allocated: 4096 (num: 1 largest: 4096), free: 8192 (num: 1 largest: 8192)
[   63.885897][ T4357] ODEBUG: Out of memory. ODEBUG disabled
[   63.898548][   T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   63.931870][   T21] usb 4-1: config 0 descriptor??
[   63.981483][   T21] gspca_main: STV06xx-2.14.0 probing 046d:0870
[   64.323652][ T4372] hub 7-0:1.0: USB hub found
[   64.329235][ T4372] hub 7-0:1.0: 1 port detected
[   65.029566][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!!
[   65.049566][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[   65.069559][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[   65.089569][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!!
[   65.119559][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!!
[   65.139566][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!!
[   65.415778][ T4357] syz.0.27 (4357): drop_caches: 2
[   65.661947][ T4397] loop0: detected capacity change from 0 to 1764
[   66.299917][   T21] gspca_stv06xx: HDCS-1020 sensor detected
[   66.659772][   T21] STV06xx: probe of 4-1:0.0 failed with error -71
[   67.702700][   T21] usb 4-1: USB disconnect, device number 2
[   67.858013][ T4418] loop0: detected capacity change from 0 to 2048
[   68.004223][ T4418] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none.
[   68.189773][   T25] audit: type=1800 audit(1788212977.012:2): pid=4418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.41" name="file1" dev="loop0" ino=15 res=0 errno=0
[   68.211589][ T4418] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[   68.325493][ T4430] netlink: 28 bytes leftover after parsing attributes in process `syz.1.43'.
[   68.475701][ T4418] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28
[   68.899913][ T4418] EXT4-fs (loop0): This should not happen!! Data will be lost
[   68.899913][ T4418] 
[   68.919589][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #30a!!!
[   68.929585][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!!
[   69.096725][ T4418] EXT4-fs (loop0): Total free blocks count 0
[   69.129717][ T4418] EXT4-fs (loop0): Free/Dirty block details
[   69.148876][ T4418] EXT4-fs (loop0): free_blocks=2415919504
[   69.169709][ T4418] EXT4-fs (loop0): dirty_blocks=16
[   69.174869][ T4418] EXT4-fs (loop0): Block reservation details
[   69.210698][ T4418] EXT4-fs (loop0): i_reserved_data_blocks=1
[   69.502900][ T4448] tipc: Started in network mode
[   69.508002][ T4448] tipc: Node identity 000000002e0000000040000000000001, cluster identity 4711
[   69.539723][ T4448] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   69.707487][ T4452] overlayfs: missing 'lowerdir'
[   69.727841][ T4452] =======================================================
[   69.727841][ T4452] WARNING: The mand mount option has been deprecated and
[   69.727841][ T4452]          and is ignored by this kernel. Remove the mand
[   69.727841][ T4452]          option from the mount to silence this warning.
[   69.727841][ T4452] =======================================================
[   69.773675][ T4232] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   69.781001][ T4452] overlayfs: "xino" feature enabled using 3 upper inode bits.
[   69.845160][ T4454] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   69.984366][  T144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.109408][  T144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.159801][ T4232] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   70.181624][ T4232] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   70.227651][  T144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.367586][  T144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.379834][ T4232] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00
[   70.404803][ T4232] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   70.433530][ T4232] usb 5-1: Product: syz
[   70.439505][ T4464] FAULT_INJECTION: forcing a failure.
[   70.439505][ T4464] name failslab, interval 1, probability 0, space 0, times 1
[   70.449793][ T4232] usb 5-1: Manufacturer: syz
[   70.480796][ T4232] usb 5-1: SerialNumber: syz
[   70.508299][ T4464] CPU: 1 PID: 4464 Comm: syz.2.59 Not tainted syzkaller #0
[   70.515549][ T4464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   70.525631][ T4464] Call Trace:
[   70.528915][ T4464]  <TASK>
[   70.531846][ T4464]  dump_stack_lvl+0x188/0x250
[   70.536552][ T4464]  ? show_regs_print_info+0x20/0x20
[   70.540547][ T4232] usb 5-1: NFC: intf ffff888079d23000 id ffffffff8cb63620
[   70.541760][ T4464]  ? load_image+0x410/0x410
[   70.553348][ T4464]  ? __might_sleep+0xf0/0xf0
[   70.557948][ T4464]  ? __lock_acquire+0x7b50/0x7b50
[   70.562985][ T4464]  ? crypto_alg_lookup+0x186/0x1d0
[   70.568115][ T4464]  should_fail+0x383/0x4b0
[   70.572546][ T4464]  should_failslab+0x5/0x20
[   70.577050][ T4464]  slab_pre_alloc_hook+0x51/0xc0
[   70.581995][ T4464]  __kmalloc_node+0x6d/0x3a0
[   70.586585][ T4464]  ? crypto_create_tfm_node+0x72/0x340
[   70.592071][ T4464]  crypto_create_tfm_node+0x72/0x340
[   70.597359][ T4464]  ? crypto_alg_mod_lookup+0x47f/0x6d0
[   70.602833][ T4464]  crypto_alloc_tfm_node+0x177/0x360
[   70.608128][ T4464]  ? memcpy+0x3c/0x60
[   70.612117][ T4464]  tls_set_sw_offload+0xaed/0x1330
[   70.617247][ T4464]  ? tls_data_ready+0x160/0x160
[   70.622104][ T4464]  ? tls_set_device_offload+0x460/0xee0
[   70.627654][ T4464]  ? _copy_from_user+0x111/0x170
[   70.632604][ T4464]  tls_setsockopt+0x4ef/0xa90
[   70.637284][ T4464]  ? sock_common_recvmsg+0x1c0/0x1c0
[   70.642572][ T4464]  __sys_setsockopt+0x2bf/0x3d0
[   70.647431][ T4464]  __x64_sys_setsockopt+0xb1/0xc0
[   70.652464][ T4464]  do_syscall_64+0x4c/0xa0
[   70.656883][ T4464]  ? clear_bhb_loop+0x30/0x80
[   70.661558][ T4464]  ? clear_bhb_loop+0x30/0x80
[   70.666241][ T4464]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   70.672149][ T4464] RIP: 0033:0x7f7a3d90e159
[   70.676567][ T4464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   70.696174][ T4464] RSP: 002b:00007f7a3bb66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   70.704601][ T4464] RAX: ffffffffffffffda RBX: 00007f7a3db95fa0 RCX: 00007f7a3d90e159
[   70.712576][ T4464] RDX: 0000000000000001 RSI: 000000000000011a RDI: 0000000000000004
[   70.720723][ T4464] RBP: 00007f7a3d9a5024 R08: 0000000000000038 R09: 0000000000000000
[   70.728695][ T4464] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000000
[   70.736669][ T4464] R13: 00007f7a3db96038 R14: 00007f7a3db95fa0 R15: 00007ffd979789f8
[   70.744657][ T4464]  </TASK>
[   70.759044][ T4450] jffs2: notice: (4450) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   70.823806][ T4232] nfcmrvl 5-1:1.0: NFC: registered with nci successfully
[   71.095202][ T4475] netlink: 4 bytes leftover after parsing attributes in process `syz.3.60'.
[   71.174578][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[   71.185201][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[   71.205300][ T4230] usb 5-1: USB disconnect, device number 2
[   71.228287][ T4230] usb 5-1: NFC: intf ffff888079d23000
[   71.437395][ T4483] loop2: detected capacity change from 0 to 512
[   71.589375][ T4483] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,barrier=0x0000000000000004,max_batch_time=0x0000000000000d73,nombcache,,errors=continue. Quota mode: none.
[   71.754881][ T4466] chnl_net:caif_netlink_parms(): no params data found
[   71.848875][ T4483] EXT4-fs error (device loop2): __ext4_get_inode_loc:4334: comm syz.2.62: Invalid inode table block 16336429715176579692 in block_group 0
[   71.884816][ T4495] loop4: detected capacity change from 0 to 1024
[   71.915239][ T4483] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem
[   71.950273][ T4495] EXT4-fs (loop4): Ignoring removed bh option
[   72.929726][ T4232] Bluetooth: hci2: command 0x0409 tx timeout
[   72.958248][ T4483] EXT4-fs error (device loop2): ext4_dirty_inode:6077: inode #15: comm syz.2.62: mark_inode_dirty error
[   73.030098][ T4495] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,bh,,errors=continue. Quota mode: none.
[   73.171022][ T4466] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.250476][ T4495] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   73.251909][ T4337] EXT4-fs error (device loop2): __ext4_get_inode_loc:4334: comm kworker/u4:8: Invalid inode table block 16336429715176579692 in block_group 0
[   73.261645][ T4466] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.362041][ T4337] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem
[   73.377832][ T4495] EXT4-fs error (device loop4): ext4_map_blocks:741: inode #15: comm syz.4.64: lblock 0 mapped to illegal pblock 0 (length 1)
[   73.383578][ T4466] device bridge_slave_0 entered promiscuous mode
[   73.409846][ T4337] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #15: comm kworker/u4:8: mark_inode_dirty error
[   73.451402][ T4517] fuse: Bad value for 'fd'
[   73.455782][ T4337] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[   73.469165][ T4495] EXT4-fs error (device loop4): ext4_map_blocks:741: inode #15: block 3: comm syz.4.64: lblock 3 mapped to illegal pblock 3 (length 3)
[   73.503434][ T4495] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[   73.505523][ T4337] EXT4-fs (loop2): This should not happen!! Data will be lost
[   73.505523][ T4337] 
[   73.527817][ T4466] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.550796][ T4495] EXT4-fs (loop4): This should not happen!! Data will be lost
[   73.550796][ T4495] 
[   73.560118][ T4466] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.568778][ T4466] device bridge_slave_1 entered promiscuous mode
[   73.569813][ T4518] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #15: block 3: comm syz.4.64: lblock 3 mapped to illegal pblock 3 (length 1)
[   73.590133][ T4337] EXT4-fs error (device loop2): __ext4_get_inode_loc:4334: comm kworker/u4:8: Invalid inode table block 16336429715176579692 in block_group 0
[   73.702241][ T4525] EXT4-fs error (device loop4): ext4_ext_remove_space:2944: inode #15: comm syz.4.64: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[   73.738673][ T4466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.779150][ T4466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.791827][ T4528] typec_fusb302 0-0022: I2C/SMBus block functionality not supported!
[   73.825208][ T4518] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #15: block 3: comm syz.4.64: lblock 3 mapped to illegal pblock 3 (length 1)
[   73.842172][ T4528] i2c i2c-0: new_device: Instantiated device typec_fusb302 at 0x22
[   73.865160][ T4525] EXT4-fs error (device loop4) in ext4_setattr:5645: Corrupt filesystem
[   73.899262][ T4518] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #15: block 3: comm syz.4.64: lblock 3 mapped to illegal pblock 3 (length 1)
[   73.899319][ T4532] Invalid option length (1047276) for dns_resolver key
[   73.965929][ T4494] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #15: block 3: comm syz.4.64: lblock 3 mapped to illegal pblock 3 (length 1)
[   73.994022][ T4466] team0: Port device team_slave_0 added
[   74.007112][ T4494] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #15: block 3: comm syz.4.64: lblock 3 mapped to illegal pblock 3 (length 1)
[   74.032393][ T4466] team0: Port device team_slave_1 added
[   74.056505][ T4518] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #15: block 3: comm syz.4.64: lblock 3 mapped to illegal pblock 3 (length 1)
[   74.279247][ T4466] batman_adv: batadv0: Adding interface: batadv_slave_0
[   74.304285][ T4466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.472676][ T4466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   74.517037][ T4466] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.547510][ T4466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.635145][ T4466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.841291][ T4466] device hsr_slave_0 entered promiscuous mode
[   74.889963][ T4466] device hsr_slave_1 entered promiscuous mode
[   74.897806][ T4466] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   74.911810][ T4466] Cannot create hsr debugfs directory
[   74.939292][ T4578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.78'.
[   75.003706][ T4582] loop0: detected capacity change from 0 to 2049
[   75.025000][ T4232] Bluetooth: hci2: command 0x041b tx timeout
[   75.070396][ T4582] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes.
[   75.093839][  T144] device hsr_slave_0 left promiscuous mode
[   75.120312][  T144] device hsr_slave_1 left promiscuous mode
[   75.126794][ T4582] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID.
[   75.144299][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   75.160888][ T4582] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[   75.166949][  T144] batman_adv: batadv0: Removing interface: batadv_slave_0
[   75.177826][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   75.178996][ T4582]  loop0:
[   75.197866][  T144] batman_adv: batadv0: Removing interface: batadv_slave_1
[   75.233076][  T144] device bridge_slave_1 left promiscuous mode
[   75.262376][  T144] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.274687][ T3558] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes.
[   75.301566][  T144] device bridge_slave_0 left promiscuous mode
[   75.315502][ T3558] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID.
[   75.329946][  T144] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.335638][ T3558] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[   75.373531][ T3558]  loop0:
[   75.420533][  T144] device veth1_macvtap left promiscuous mode
[   75.429347][  T144] device veth0_macvtap left promiscuous mode
[   75.465907][  T144] device veth1_vlan left promiscuous mode
[   75.501371][  T144] device veth0_vlan left promiscuous mode
[   76.090421][ T4608] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   77.108851][ T4232] Bluetooth: hci2: command 0x040f tx timeout
[   77.165171][ T4598] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[   77.214029][ T4598] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[   77.272328][  T144] team0 (unregistering): Port device team_slave_1 removed
[   78.007635][  T144] team0 (unregistering): Port device team_slave_0 removed
[   78.073898][  T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   78.160961][  T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   78.415984][  T144] bond0 (unregistering): Released all slaves
[   79.170813][ T4233] Bluetooth: hci2: command 0x0419 tx timeout
[   79.523763][ T4466] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   79.548736][ T4466] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   79.637641][ T4466] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   79.673030][ T4466] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   80.372571][ T4667] loop3: detected capacity change from 0 to 16
[   80.459519][ T4667] erofs: (device loop3): mounted with root inode @ nid 36.
[   80.496149][ T4672] netlink: 256 bytes leftover after parsing attributes in process `syz.4.98'.
[   80.640778][ T4672] unsupported nlmsg_type 40
[   80.654734][ T4466] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.718769][  T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   80.739241][  T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   80.801975][ T4466] 8021q: adding VLAN 0 to HW filter on device team0
[   80.830125][  T160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   80.846344][  T160] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   80.886759][  T160] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.893847][  T160] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.948969][  T160] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   80.965735][  T160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   80.994934][  T160] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   81.021226][  T160] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.028331][  T160] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.037020][  T160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   81.046135][  T160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   81.064336][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   81.082125][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   81.119972][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   82.469558][    C1] sched: RT throttling activated
[   82.488299][ T1108] cfg80211: failed to load regulatory.db
[   82.508329][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   82.690450][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   83.491268][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   83.580380][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   84.144349][ T4466] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   84.374665][ T4698] binder: 4696:4698 ioctl c0306201 200000000080 returned -14
[   84.409911][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   84.430461][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   84.486343][ T4698] binder: 4696:4698 ioctl c0306201 2000000003c0 returned -14
[   84.500705][ T4698] binder_alloc: 4696: binder_alloc_buf failed to map page at 200000ffd000 in userspace
[   84.559581][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!!
[   84.589574][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!!
[   85.062815][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   85.091843][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   85.193576][ T4466] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.499218][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   89.591400][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   89.648386][ T4745] netlink: 'syz.3.115': attribute type 2 has an invalid length.
[   89.683866][ T4466] device veth0_vlan entered promiscuous mode
[   89.714252][ T4757] fuse: Bad value for 'fd'
[   89.726434][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   89.747422][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   89.824191][ T4466] device veth1_vlan entered promiscuous mode
[   89.844978][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   90.014084][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   90.107087][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   90.705953][ T4466] device veth0_macvtap entered promiscuous mode
[   90.741093][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   90.771942][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   90.845785][ T4466] device veth1_macvtap entered promiscuous mode
[   90.870970][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   90.939963][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   90.956143][ T4466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.069602][ T4466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.084544][ T4466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.122232][ T4466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.162300][ T4466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.360023][ T4466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.051567][ T4466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   93.199586][ T4466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.468026][ T4466] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.483535][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   93.496265][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   93.514861][ T4466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   93.551589][ T4799] binder: BINDER_SET_CONTEXT_MGR already set
[   93.599783][ T4466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.614372][ T4799] binder: 4798:4799 ioctl 4018620d 200000004a80 returned -16
[   93.639592][ T4466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   93.669852][ T4466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.699972][ T4466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   93.726383][ T4466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.771112][ T4466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   93.802452][ T4466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.871757][ T4775] Zero length message leads to an empty skb
[   93.881356][ T4466] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.910188][ T4802] device syzkaller0 entered promiscuous mode
[   93.963239][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   93.997632][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   94.018194][ T4466] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.037203][ T4466] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.062697][ T4466] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.073761][ T4466] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.722172][ T4230] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   94.921105][ T1238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.970003][ T1238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.018711][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   95.042015][ T4819] process 'syz.1.131' launched './file0' with NULL argv: empty string added
[   95.070154][ T1238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.077997][ T1238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.086946][ T4821] loop3: detected capacity change from 0 to 512
[   95.196482][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   95.238150][ T4824] device syzkaller0 entered promiscuous mode
[   95.254867][ T4821] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   95.266137][ T4230] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   95.285794][ T4230] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.304789][ T4821] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   95.333480][   T25] audit: type=1800 audit(1788213004.172:3): pid=4821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.132" name="file1" dev="loop3" ino=15 res=0 errno=0
[   95.366395][ T4832] binder: BINDER_SET_CONTEXT_MGR already set
[   95.386647][ T4230] usb 5-1: Product: syz
[   95.422848][ T4230] usb 5-1: Manufacturer: syz
[   95.431042][ T4832] binder: 4830:4832 ioctl 4018620d 2000000002c0 returned -16
[   95.458820][ T4230] usb 5-1: SerialNumber: syz
[   95.722960][ T4849] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   96.680275][ T4230] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42
[   96.707118][ T4230] cdc_ncm 5-1:1.0: setting tx_max = 184
[   96.840965][ T4861] Illegal XDP return value 4294967294, expect packet loss!
[   96.906713][ T4866] binder: 4865:4866 ioctl c0306201 2000000006c0 returned -14
[   96.924886][ T4230] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM, 42:42:42:42:42:42
[   96.992923][ T4230] usb 5-1: USB disconnect, device number 3
[   97.002729][ T4871] capability: warning: `syz.3.143' uses deprecated v2 capabilities in a way that may be insecure
[   97.041081][ T4230] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM
[   97.396175][ T4887] loop2: detected capacity change from 0 to 1024
[   98.230555][ T4887] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback.
[   98.700818][ T4917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.155'.
[   99.057192][ T4904] loop3: detected capacity change from 0 to 32768
[   99.142166][ T4188] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size
[   99.177012][ T4188] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size
[   99.219173][ T4188] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size
[   99.219425][ T4904] JBD2: Ignoring recovery information on journal
[   99.246051][ T4188] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size
[   99.367531][ T4188] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size
[   99.400137][ T4904] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[   99.447003][ T4188] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size
[   99.606720][ T4188] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size
[  100.481793][ T4188] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size
[  100.564101][ T4188] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size
[  100.591251][ T4188] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size
[  100.949745][   T25] audit: type=1804 audit(1788213009.752:4): pid=4904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.153" name="/newroot/35/file1/file1" dev="loop3" ino=17059 res=1 errno=0
[  101.221284][   T25] audit: type=1804 audit(1788213010.062:5): pid=4904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.153" name="/newroot/35/file1/bus" dev="loop3" ino=17058 res=1 errno=0
[  102.101247][ T4195] ocfs2: Unmounting device (7,3) on (node local)
[  103.264943][ T4262] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  103.430506][ T4983] chnl_net:caif_netlink_parms(): no params data found
[  103.484023][ T4983] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.492066][ T4983] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.500106][ T4983] device bridge_slave_0 entered promiscuous mode
[  103.508482][ T4983] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.546070][ T4983] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.558717][ T4983] device bridge_slave_1 entered promiscuous mode
[  103.583863][ T4262] usb 5-1: Using ep0 maxpacket: 16
[  103.589097][    T7] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  103.614042][ T4993] loop3: detected capacity change from 0 to 128
[  103.625689][ T4983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  103.638751][ T4983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  103.662205][ T4983] team0: Port device team_slave_0 added
[  103.678130][ T4983] team0: Port device team_slave_1 added
[  103.694162][ T4993] FAT-fs (loop3): Directory bread(block 32) failed
[  103.697058][ T4983] batman_adv: batadv0: Adding interface: batadv_slave_0
[  103.708255][ T4262] usb 5-1: config 1 has an invalid interface number: 19 but max is 0
[  103.715806][ T4993] FAT-fs (loop3): Directory bread(block 33) failed
[  103.716464][ T4983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  103.750194][ T4262] usb 5-1: config 1 has no interface number 0
[  103.753874][ T4993] FAT-fs (loop3): Directory bread(block 34) failed
[  103.756292][ T4262] usb 5-1: config 1 interface 19 altsetting 2 endpoint 0x81 has an invalid bInterval 56, changing to 9
[  103.774226][ T4262] usb 5-1: config 1 interface 19 altsetting 2 endpoint 0x81 has invalid maxpacket 8512, setting to 1024
[  103.774248][ T4993] FAT-fs (loop3): Directory bread(block 35) failed
[  103.785630][ T4983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  103.801470][ T4993] FAT-fs (loop3): Directory bread(block 36) failed
[  103.802995][ T4262] usb 5-1: config 1 interface 19 has no altsetting 0
[  103.809156][ T4993] FAT-fs (loop3): Directory bread(block 37) failed
[  103.818851][ T4983] batman_adv: batadv0: Adding interface: batadv_slave_1
[  103.832067][ T4983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  103.834326][ T4993] FAT-fs (loop3): Directory bread(block 38) failed
[  103.858769][ T4983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  103.871887][ T4993] FAT-fs (loop3): Directory bread(block 39) failed
[  103.886617][ T4993] FAT-fs (loop3): Directory bread(block 40) failed
[  103.897560][ T4983] device hsr_slave_0 entered promiscuous mode
[  103.899105][ T4993] FAT-fs (loop3): Directory bread(block 41) failed
[  103.903904][    T7] usb 6-1: Using ep0 maxpacket: 8
[  103.926007][ T4983] device hsr_slave_1 entered promiscuous mode
[  103.934120][ T4983] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  103.942293][ T4983] Cannot create hsr debugfs directory
[  104.019969][ T4262] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 7.c9
[  104.029188][ T4262] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.038301][ T4262] usb 5-1: Product: syz
[  104.043291][    T7] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  104.057873][    T7] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  104.067835][ T4262] usb 5-1: Manufacturer: syz
[  104.077965][ T4262] usb 5-1: SerialNumber: syz
[  104.083304][    T7] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  104.123602][    T7] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  104.139794][    T7] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  104.140150][ T4983] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  104.159712][    T7] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  104.183475][ T4262] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  104.194522][    T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.207017][ T4983] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  104.227104][ T4983] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  104.244632][ T4983] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  104.327089][ T4983] 8021q: adding VLAN 0 to HW filter on device bond0
[  104.337755][  T160] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  104.353025][  T160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  104.361094][  T160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  104.390041][ T4983] 8021q: adding VLAN 0 to HW filter on device team0
[  104.409312][  T160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  104.422708][ T4976] loop4: detected capacity change from 0 to 8
[  104.434997][  T160] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  104.443806][  T160] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.450881][  T160] bridge0: port 1(bridge_slave_0) entered forwarding state
[  104.510218][ T4976] SQUASHFS error: xz decompression failed, data probably corrupt
[  104.518354][ T4976] SQUASHFS error: Failed to read block 0xa8: -5
[  104.525166][ T4976] SQUASHFS error: Unable to read data cache entry [a8]
[  104.532085][ T4976] SQUASHFS error: Unable to read page, block a8, size 54
[  104.539684][ T4976] SQUASHFS error: Unable to read data cache entry [a8]
[  104.543592][ T5007] udc-core: couldn't find an available UDC or it's busy
[  104.546529][ T4976] SQUASHFS error: Unable to read page, block a8, size 54
[  104.560483][ T5007] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  104.569088][ T4976] SQUASHFS error: Unable to read data cache entry [a8]
[  104.575979][ T4976] SQUASHFS error: Unable to read page, block a8, size 54
[  104.584405][    T7] usb 6-1: usb_control_msg returned -32
[  104.590285][ T4976] SQUASHFS error: xz decompression failed, data probably corrupt
[  104.598036][ T4976] SQUASHFS error: Failed to read block 0xa8: -5
[  104.607359][    T7] usbtmc 6-1:16.0: can't read capabilities
[  104.613300][ T4976] SQUASHFS error: xz decompression failed, data probably corrupt
[  104.621083][ T4976] SQUASHFS error: Failed to read block 0xa8: -5
[  104.627580][   T25] audit: type=1800 audit(1788213013.462:6): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.170" name="file0" dev="loop4" ino=3 res=0 errno=0
[  104.652558][  T160] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  104.695493][  T160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  104.708796][  T160] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  104.726657][  T160] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.734200][  T160] bridge0: port 2(bridge_slave_1) entered forwarding state
[  104.743856][  T160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  104.754453][  T160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  104.767516][  T160] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  104.780688][  T160] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  104.791453][  T160] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  104.807207][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  104.830226][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  104.856035][ T4983] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  104.886370][ T4983] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  104.902215][  T160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  104.911185][  T160] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  104.977864][ T5018] syz.1.179 uses obsolete (PF_INET,SOCK_PACKET)
[  105.022260][  T160] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  105.034985][  T160] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  105.047304][ T4983] 8021q: adding VLAN 0 to HW filter on device batadv0
[  105.145680][ T4230] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[  105.211324][ T4976] syz.4.170 (4976) used greatest stack depth: 19504 bytes left
[  105.225813][    T7] usb 5-1: USB disconnect, device number 4
[  105.235039][ T4500] usb 5-1: Failed to submit usb control message: -71
[  105.250449][ T4500] usb 5-1: unable to send the bmi data to the device: -71
[  105.250610][ T4233] Bluetooth: hci1: command 0x0409 tx timeout
[  105.257570][ T4500] usb 5-1: unable to get target info from device
[  105.257620][ T4500] usb 5-1: could not get target info (-71)
[  105.324655][ T4500] usb 5-1: could not probe fw (-71)
[  105.410546][ T5026] usbtmc 6-1:16.0: usb_control_msg returned -71
[  105.450983][ T5029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.180'.
[  105.507117][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  105.526675][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  105.566085][ T4230] usb 4-1: unable to get BOS descriptor or descriptor too short
[  105.588873][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  105.602066][    T7] usb 6-1: USB disconnect, device number 2
[  105.608351][ T5032] loop4: detected capacity change from 0 to 512
[  105.608627][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  105.627899][ T4230] usb 4-1: not running at top speed; connect to a high speed hub
[  105.640194][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  105.660352][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  105.670222][ T4983] device veth0_vlan entered promiscuous mode
[  105.687379][ T5032] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled
[  105.728254][ T4983] device veth1_vlan entered promiscuous mode
[  105.735420][ T4230] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 219, changing to 4
[  105.787241][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  105.796960][ T5032] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,grpjquota=,norecovery,nolazytime,,errors=continue. Quota mode: writeback.
[  105.808403][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  105.822167][ T5032] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  105.852082][ T4983] device veth0_macvtap entered promiscuous mode
[  105.895515][ T4983] device veth1_macvtap entered promiscuous mode
[  105.899914][ T4230] usb 4-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40
[  105.911213][ T4230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.919208][ T4230] usb 4-1: Product: syz
[  105.923516][ T4230] usb 4-1: Manufacturer: syz
[  105.928298][ T4230] usb 4-1: SerialNumber: syz
[  105.937807][ T5032] Quota error (device loop4): find_tree_dqentry: Getting block too big (33554435 >= 6)
[  105.957853][ T4983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  105.960656][ T5032] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0
[  105.978186][ T4983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.998948][ T5032] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.181: Failed to acquire dquot type 1
[  106.009700][ T4983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.025336][ T4983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.035454][ T4983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.046083][ T4983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.057164][ T4983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.067870][ T4983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.077924][ T4983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.088438][ T4983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.103868][ T4983] batman_adv: batadv0: Interface activated: batadv_slave_0
[  106.116909][ T4983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.136921][ T4983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.147178][ T4983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.170056][ T5039] FAULT_INJECTION: forcing a failure.
[  106.170056][ T5039] name failslab, interval 1, probability 0, space 0, times 0
[  106.178754][ T4983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.183586][ T5039] CPU: 1 PID: 5039 Comm: syz.5.182 Not tainted syzkaller #0
[  106.197684][ T4983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.200254][ T5039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  106.200267][ T5039] Call Trace:
[  106.200274][ T5039]  <TASK>
[  106.200282][ T5039]  dump_stack_lvl+0x188/0x250
[  106.200312][ T5039]  ? show_regs_print_info+0x20/0x20
[  106.211237][ T4983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.220749][ T5039]  ? load_image+0x410/0x410
[  106.220778][ T5039]  ? __might_sleep+0xf0/0xf0
[  106.220795][ T5039]  ? __lock_acquire+0x7b50/0x7b50
[  106.220820][ T5039]  should_fail+0x383/0x4b0
[  106.224383][ T4983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.227016][ T5039]  should_failslab+0x5/0x20
[  106.227041][ T5039]  slab_pre_alloc_hook+0x51/0xc0
[  106.227057][ T5039]  ? shmem_match+0x160/0x160
[  106.231798][ T4983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.236896][ T5039]  ? shmem_alloc_inode+0x16/0x30
[  106.236926][ T5039]  kmem_cache_alloc+0x3d/0x280
[  106.236943][ T5039]  ? shmem_match+0x160/0x160
[  106.236963][ T5039]  shmem_alloc_inode+0x16/0x30
[  106.256349][ T4983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.260825][ T5039]  new_inode_pseudo+0x5f/0x210
[  106.260854][ T5039]  new_inode+0x25/0x1d0
[  106.260875][ T5039]  shmem_get_inode+0x304/0xa40
[  106.260908][ T5039]  shmem_mknod+0x55/0x1b0
[  106.265442][ T4983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.275695][ T5039]  vfs_mknod+0x430/0x4c0
[  106.275734][ T5039]  do_mknodat+0x453/0x630
[  106.275758][ T5039]  ? may_open+0x400/0x400
[  106.275779][ T5039]  ? getname_flags+0x1f9/0x4f0
[  106.275800][ T5039]  __x64_sys_mknodat+0xa5/0xc0
[  106.288312][ T4983] batman_adv: batadv0: Interface activated: batadv_slave_1
[  106.289770][ T5039]  do_syscall_64+0x4c/0xa0
[  106.289793][ T5039]  ? clear_bhb_loop+0x30/0x80
[  106.289810][ T5039]  ? clear_bhb_loop+0x30/0x80
[  106.289828][ T5039]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  106.289844][ T5039] RIP: 0033:0x7faf7979b159
[  106.289861][ T5039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  106.289875][ T5039] RSP: 002b:00007faf779f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103
[  106.289895][ T5039] RAX: ffffffffffffffda RBX: 00007faf79a22fa0 RCX: 00007faf7979b159
[  106.289908][ T5039] RDX: 0000000000006000 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  106.289920][ T5039] RBP: 00007faf79832024 R08: 0000000000000000 R09: 0000000000000000
[  106.289937][ T5039] R10: 000000000000070a R11: 0000000000000246 R12: 0000000000000000
[  106.289947][ T5039] R13: 00007faf79a23038 R14: 00007faf79a22fa0 R15: 00007ffdbfe01468
[  106.289974][ T5039]  </TASK>
[  106.290009][    C1] vkms_vblank_simulate: vblank timer overrun
[  106.440051][ T4230] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  106.557830][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  106.568797][ T4230] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  106.577473][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  106.596399][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  106.643738][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  106.713358][ T4230] usb 4-1: USB disconnect, device number 3
[  106.725365][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  106.788388][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  106.825232][ T4983] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  106.852208][ T4983] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  106.867008][ T4983] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  106.875830][ T4983] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.876095][ T5056] overlayfs: failed to clone upperpath
[  107.051938][  T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.069901][  T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.108766][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  107.137144][ T1238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.166301][ T1238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.204082][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  107.339974][ T4232] Bluetooth: hci1: command 0x041b tx timeout
[  107.473698][ T5079] loop3: detected capacity change from 0 to 512
[  107.579072][ T5079] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  107.592938][ T5079] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  107.667124][ T5083] netlink: 20 bytes leftover after parsing attributes in process `syz.6.168'.
[  107.961388][ T5079] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2812: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  108.158955][ T5079] EXT4-fs (loop3): 1 truncate cleaned up
[  108.205581][ T5079] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback.
[  108.224824][    C1] vkms_vblank_simulate: vblank timer overrun
[  108.300386][ T5092] netlink: 'syz.4.193': attribute type 10 has an invalid length.
[  108.429767][ T5092] device syz_tun entered promiscuous mode
[  108.684562][ T5092] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  109.498057][ T5102] netlink: 28 bytes leftover after parsing attributes in process `syz.1.196'.
[  109.516484][ T4232] Bluetooth: hci1: command 0x040f tx timeout
[  109.849758][ T4231] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  110.119737][ T4262] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  110.229752][ T4231] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  110.259621][ T4231] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  110.269390][ T4231] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  110.275094][ T5125] netlink: 4 bytes leftover after parsing attributes in process `syz.4.201'.
[  110.309767][ T4231] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  110.339699][ T4231] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.354226][ T5127] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  110.371104][ T4231] usb 7-1: config 0 descriptor??
[  110.399618][ T4262] usb 6-1: Using ep0 maxpacket: 8
[  110.413622][ T5127] batman_adv: batadv0: Removing interface: batadv_slave_0
[  110.540208][ T4262] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 102, changing to 10
[  110.566390][ T4262] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 24624, setting to 1024
[  110.597984][ T4262] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  110.617436][ T4262] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.632134][ T5140] netlink: 'syz.4.204': attribute type 1 has an invalid length.
[  110.648641][ T4262] usb 6-1: config 0 descriptor??
[  110.672135][ T5140] device bond1 entered promiscuous mode
[  110.677864][ T5140] 8021q: adding VLAN 0 to HW filter on device bond1
[  110.822910][ T5140] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  110.855063][ T4231] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving
[  110.890229][ T5140] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  110.936621][ T4262] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1
[  110.951948][ T4231] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[  110.965169][ T5140] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  111.209814][ T5171] device syzkaller0 entered promiscuous mode
[  111.219986][ T5097] udc-core: couldn't find an available UDC or it's busy
[  111.229677][ T5097] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  111.256192][ T5097] udc-core: couldn't find an available UDC or it's busy
[  111.266624][ T4231] usb 6-1: USB disconnect, device number 3
[  111.288771][ T5097] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  111.323532][ T4262] usb 7-1: USB disconnect, device number 2
[  111.569770][ T4232] Bluetooth: hci1: command 0x0419 tx timeout
[  111.828047][ T5208] binder_alloc: 5207: pid 5207 spamming oneway? 2 buffers allocated for a total size of 5120
[  113.009783][ T4232] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  113.144265][ T5258] loop5: detected capacity change from 0 to 1024
[  113.269780][ T4232] usb 4-1: Using ep0 maxpacket: 8
[  113.332181][ T5258] hfsplus: invalid length 1280 has been corrected to 255
[  113.422638][ T4232] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  113.531931][ T4232] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  113.686747][ T4232] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 60960, setting to 1024
[  113.849636][ T4232] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  114.005769][ T4232] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  114.229749][ T4232] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  114.239005][ T4232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.717139][ T5221] loop6: detected capacity change from 0 to 32768
[  114.915783][ T4232] usb 4-1: GET_CAPABILITIES returned 0
[  114.957898][ T4232] usbtmc 4-1:16.0: can't read capabilities
[  114.983028][ T5221] JBD2: Ignoring recovery information on journal
[  115.141900][   T26] usb 4-1: USB disconnect, device number 4
[  115.224801][ T5221] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  115.565460][ T4983] ocfs2: Unmounting device (7,6) on (node local)
[  119.997485][ T5354] netlink: 8 bytes leftover after parsing attributes in process `syz.4.240'.
[  120.044821][ T5349] loop5: detected capacity change from 0 to 256
[  120.174108][ T5349] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  124.211363][ T4262] libceph: connect (1)[c::]:6789 error -101
[  124.218277][ T4262] libceph: mon0 (1)[c::]:6789 connect error
[  124.254688][ T5422] chnl_net:caif_netlink_parms(): no params data found
[  124.276137][ T5444] ceph: No mds server is up or the cluster is laggy
[  124.296422][ T4262] libceph: connect (1)[c::]:6789 error -101
[  124.479348][ T4262] libceph: mon0 (1)[c::]:6789 connect error
[  124.970614][ T1324] libceph: connect (1)[c::]:6789 error -101
[  124.977155][ T1324] libceph: mon0 (1)[c::]:6789 connect error
[  125.151263][ T5422] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.219643][ T5422] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.257422][ T5422] device bridge_slave_0 entered promiscuous mode
[  125.291752][ T5422] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.326309][ T5422] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.351436][ T5422] device bridge_slave_1 entered promiscuous mode
[  125.889735][ T1324] Bluetooth: hci2: command 0x0409 tx timeout
[  126.034945][ T5422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  126.108205][ T5422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  126.193079][ T5422] team0: Port device team_slave_0 added
[  126.237744][ T5422] team0: Port device team_slave_1 added
[  126.340845][ T5422] batman_adv: batadv0: Adding interface: batadv_slave_0
[  126.369579][ T5422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  126.405854][ T5422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  126.421388][ T5422] batman_adv: batadv0: Adding interface: batadv_slave_1
[  126.448819][ T5422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  126.508678][ T5422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  126.523740][ T5511] netlink: 4 bytes leftover after parsing attributes in process `syz.3.273'.
[  127.252008][ T5422] device hsr_slave_0 entered promiscuous mode
[  127.286052][ T5422] device hsr_slave_1 entered promiscuous mode
[  127.315324][ T5422] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  127.323042][ T5422] Cannot create hsr debugfs directory
[  127.330291][ T5524] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  127.464598][ T5422] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  127.477914][ T5422] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  127.487918][ T5422] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  127.499124][ T5422] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  127.605024][ T5422] 8021q: adding VLAN 0 to HW filter on device bond0
[  127.632740][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  127.656515][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  127.670809][ T5422] 8021q: adding VLAN 0 to HW filter on device team0
[  127.688194][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  127.710285][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  127.724329][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  127.731446][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  127.749504][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  127.775921][ T5253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  127.801430][ T5253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  127.835023][ T5253] bridge0: port 2(bridge_slave_1) entered blocking state
[  127.844845][ T5253] bridge0: port 2(bridge_slave_1) entered forwarding state
[  127.905993][ T5253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  127.928041][ T5253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  127.964271][ T5253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  127.973148][ T4233] Bluetooth: hci2: command 0x041b tx timeout
[  127.990841][ T5253] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  128.013783][ T5253] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  128.027187][ T5253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  128.075628][ T5253] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  128.186990][ T5253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  128.348868][ T5253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  128.449064][ T5253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  128.543544][ T5253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  128.663553][ T5422] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  128.920507][   T25] audit: type=1326 audit(1788213037.702:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5555 comm="syz.3.289" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc1ce06d159 code=0x0
[  129.069243][ T5422] 8021q: adding VLAN 0 to HW filter on device batadv0
[  129.403650][ T5422] device veth0_vlan entered promiscuous mode
[  129.425209][ T5422] device veth1_vlan entered promiscuous mode
[  129.484804][ T5422] device veth0_macvtap entered promiscuous mode
[  129.503022][ T5422] device veth1_macvtap entered promiscuous mode
[  129.529232][ T5422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  129.548516][ T5422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.558972][ T5422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  129.581888][ T5422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.596329][ T5422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  129.607050][ T5422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.616896][ T5422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  129.628435][ T5422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.647164][ T5422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  129.658103][ T5422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.715293][ T5422] batman_adv: batadv0: Interface activated: batadv_slave_0
[  129.834670][ T5253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  129.844982][ T5253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  129.855583][ T5253] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  129.864428][ T5253] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  129.872808][ T5253] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  129.881420][ T5253] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  129.890588][ T5253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  129.908701][ T5253] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  129.919116][ T5253] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  129.937397][ T5253] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  129.948782][ T5253] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  129.968576][ T5253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  129.993440][ T5422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  130.009855][ T5422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.021805][ T5422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  130.032589][ T5422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.042447][ T5422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  130.053593][ T4233] Bluetooth: hci2: command 0x040f tx timeout
[  130.059866][ T5422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.070215][ T5422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  130.081627][ T5422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.094289][ T5422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  130.109726][ T5422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.124222][ T5422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  130.144791][ T5422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.175048][ T5422] batman_adv: batadv0: Interface activated: batadv_slave_1
[  130.590693][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  130.661371][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  130.710275][ T5422] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  130.719010][ T5422] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  130.735908][ T5422] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  130.748609][ T5422] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  131.085351][  T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  131.592258][  T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  131.800929][ T4413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  131.872970][ T4413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  131.891894][  T150] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  131.910637][  T150] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  132.130460][ T4233] Bluetooth: hci2: command 0x0419 tx timeout
[  132.960006][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  132.966930][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  137.057231][ T5662] netlink: 4 bytes leftover after parsing attributes in process `syz.1.322'.
[  137.301125][ T5662] netlink: 'syz.1.322': attribute type 2 has an invalid length.
[  137.587594][ T5662] netlink: 4 bytes leftover after parsing attributes in process `syz.1.322'.
[  138.837958][ T5700] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  139.722545][    T7] libceph: connect (1)[c::]:6789 error -101
[  139.728547][    T7] libceph: mon0 (1)[c::]:6789 connect error
[  139.759647][ T5710] ceph: No mds server is up or the cluster is laggy
[  139.879195][ T5726] netlink: 40 bytes leftover after parsing attributes in process `syz.3.339'.
[  140.658961][ T5736] netlink: 4 bytes leftover after parsing attributes in process `syz.1.342'.
[  140.676624][ T5736] device bridge_slave_1 left promiscuous mode
[  140.685768][ T5736] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.736741][ T5736] device bridge_slave_0 left promiscuous mode
[  140.769450][ T5736] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.924684][ T5745] netlink: 4 bytes leftover after parsing attributes in process `syz.3.345'.
[  145.984424][ T5814] bridge0: port 3(macvlan2) entered blocking state
[  146.018997][ T5814] bridge0: port 3(macvlan2) entered disabled state
[  146.057161][ T5814] device macvlan2 entered promiscuous mode
[  146.088188][ T5814] bridge0: port 3(macvlan2) entered blocking state
[  146.094809][ T5814] bridge0: port 3(macvlan2) entered forwarding state
[  148.032959][ T5846] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  148.252582][ T5850] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  148.684534][ T5865] netlink: 4 bytes leftover after parsing attributes in process `syz.3.383'.
[  148.858014][ T5865] netlink: 'syz.3.383': attribute type 2 has an invalid length.
[  149.084762][ T5865] netlink: 4 bytes leftover after parsing attributes in process `syz.3.383'.
[  150.530686][ T5898] netlink: 64 bytes leftover after parsing attributes in process `syz.3.392'.
[  151.836690][ T5921] netlink: 4 bytes leftover after parsing attributes in process `syz.4.397'.
[  151.881251][ T5921] netlink: 'syz.4.397': attribute type 2 has an invalid length.
[  151.920257][ T5921] netlink: 4 bytes leftover after parsing attributes in process `syz.4.397'.
[  155.452730][ T5986] netlink: 40 bytes leftover after parsing attributes in process `syz.4.415'.
[  157.923256][ T6031] device syzkaller0 entered promiscuous mode
[  158.178176][ T6054] netlink: 4 bytes leftover after parsing attributes in process `syz.7.429'.
[  158.301786][ T6054] device macvlan2 left promiscuous mode
[  158.575911][ T6054] bridge0: port 3(macvlan2) entered disabled state
[  158.805286][ T6054] device bridge_slave_1 left promiscuous mode
[  158.816293][ T6054] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.905834][ T6054] device bridge_slave_0 left promiscuous mode
[  158.924317][   T25] audit: type=1326 audit(2000000016.279:8): auid=4294967295 uid=255 gid=0 ses=4294967295 subj=unconfined pid=6059 comm="syz.4.430" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8686074159 code=0x0
[  158.965434][ T6054] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.447015][ T6109] binder: 6106:6109 ioctl c0306201 2000000006c0 returned -14
[  163.961004][ T6163] netlink: 92 bytes leftover after parsing attributes in process `syz.1.453'.
[  165.569806][ T6199] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  165.569806][ T6199] 
[  165.604326][ T6199] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  165.658800][ T6199] CIFS: Attempting to mount \\127.0.0.1\share
[  165.809341][ T6204] Set syz1 is full, maxelem 6117 reached
[  166.168262][ T6212] netlink: 24 bytes leftover after parsing attributes in process `syz.7.464'.
[  166.487860][ T6199] CIFS: VFS: Error connecting to socket. Aborting operation.
[  166.531611][ T6199] CIFS: VFS: cifs_mount failed w/return code = -4
[  169.772231][ T6266] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  171.502694][ T6291] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  171.608686][ T6291] device batadv_slave_0 entered promiscuous mode
[  171.890113][ T6304] netlink: 'syz.4.489': attribute type 13 has an invalid length.
[  171.924214][ T6304] netlink: 8 bytes leftover after parsing attributes in process `syz.4.489'.
[  171.965810][ T6304] bond0: option fail_over_mac: unable to set because the bond device has slaves
[  171.969633][ T1108] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  172.360032][ T1108] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  172.414481][ T1108] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  172.612840][ T1108] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  172.892564][ T1108] usb 8-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[  172.909191][ T1108] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.919976][ T1108] usb 8-1: config 0 descriptor??
[  173.064476][ T6313] netlink: 4 bytes leftover after parsing attributes in process `syz.4.493'.
[  173.164709][ T1108] usb 8-1: USB disconnect, device number 2
[  175.416907][ T6353] netlink: 68 bytes leftover after parsing attributes in process `syz.7.504'.
[  175.497040][ T6357] netlink: 8 bytes leftover after parsing attributes in process `syz.6.502'.
[  175.649725][   T21] Bluetooth: hci0: command 0x0406 tx timeout
[  175.656362][   T21] Bluetooth: hci3: command 0x0406 tx timeout
[  175.702268][   T21] Bluetooth: hci4: command 0x0406 tx timeout
[  179.363413][ T6415] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0
[  184.693356][ T6489] netlink: 4 bytes leftover after parsing attributes in process `syz.1.532'.
[  185.165036][ T6506] syz.3.539 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  185.564107][ T6516] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  185.626221][ T6520] netlink: 12 bytes leftover after parsing attributes in process `syz.7.543'.
[  185.644424][ T6522] netlink: 'syz.1.544': attribute type 2 has an invalid length.
[  185.765185][ T6532] CIFS: Attempting to mount \\127.0.0.1\share
[  185.969719][ T4175] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  186.240001][ T4175] usb 8-1: Using ep0 maxpacket: 8
[  186.360434][ T4175] usb 8-1: config 2 has an invalid interface number: 241 but max is 0
[  186.402124][ T4175] usb 8-1: config 2 has no interface number 0
[  186.453443][ T6532] CIFS: VFS: Error connecting to socket. Aborting operation.
[  186.461288][ T4175] usb 8-1: config 2 interface 241 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  186.471648][ T6532] CIFS: VFS: cifs_mount failed w/return code = -4
[  186.482768][ T4175] usb 8-1: config 2 interface 241 has no altsetting 0
[  188.109830][ T4175] usb 8-1: New USB device found, idVendor=110a, idProduct=1130, bcdDevice=b3.a3
[  188.150556][ T4175] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.347096][ T4175] usb 8-1: Product: syz
[  188.759837][ T4175] usb 8-1: Manufacturer: syz
[  188.781761][ T4175] usb 8-1: SerialNumber: syz
[  189.078696][ T4175] usb 8-1: can't set config #2, error -71
[  189.138005][ T4175] usb 8-1: USB disconnect, device number 3
[  189.447732][ T6580] netlink: 16 bytes leftover after parsing attributes in process `syz.6.558'.
[  190.065638][ T6579] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  190.511183][ T6593] Set syz1 is full, maxelem 6117 reached
[  191.369455][ T6605] logitech-hidpp-device 0005:046D:B012.0002: received hid++ report of bad size (4096)
[  191.567425][ T4229] logitech-hidpp-device 0005:046D:B012.0002: Device not connected
[  194.086490][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  194.110762][ T6664] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  194.119710][ T6664] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  194.127186][ T6664] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  194.135518][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  194.145522][ T6664] bond0: (slave bond_slave_0): Releasing backup interface
[  194.174632][ T6663] overlayfs: failed to clone lowerpath
[  194.222555][ T6664] bond0: (slave bond_slave_1): Releasing backup interface
[  194.240162][ T6672] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4186] was attempted by ""[6672]
[  194.794294][ T6664] team0: Port device team_slave_0 removed
[  194.865627][ T6664] team0: Port device team_slave_1 removed
[  194.896186][ T6664] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  194.912449][ T6664] batman_adv: batadv0: Removing interface: batadv_slave_0
[  194.925824][ T6664] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  194.956023][ T6664] batman_adv: batadv0: Removing interface: batadv_slave_1
[  194.978064][ T6668] team0: Port device xfrm0 added
[  195.137455][ T6683] overlayfs: failed to clone upperpath
[  197.695417][ T6727] xt_nat: multiple ranges no longer supported
[  197.929399][ T6737] device syzkaller0 left promiscuous mode
[  197.952943][ T6736] netlink: 'syz.1.602': attribute type 3 has an invalid length.
[  199.529680][ T1324] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  199.969957][ T1324] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  199.995178][ T1324] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  200.024947][ T1324] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.048173][ T1324] usb 8-1: config 0 descriptor??
[  200.746030][ T1324] pwc: Askey VC010 type 2 USB webcam detected.
[  201.719791][ T1324] pwc: recv_control_msg error -32 req 02 val 2b00
[  201.904499][ T1324] pwc: recv_control_msg error -32 req 02 val 2700
[  201.965320][ T1324] pwc: recv_control_msg error -32 req 02 val 2c00
[  202.009751][ T1324] pwc: recv_control_msg error -32 req 04 val 1000
[  202.049881][ T1324] pwc: recv_control_msg error -32 req 04 val 1300
[  202.117386][ T1324] pwc: recv_control_msg error -32 req 04 val 1400
[  202.200461][ T1324] pwc: recv_control_msg error -32 req 02 val 2000
[  202.828460][ T1324] pwc: recv_control_msg error -32 req 02 val 2100
[  202.863314][ T6828] netlink: 24 bytes leftover after parsing attributes in process `syz.3.628'.
[  202.879940][ T1324] pwc: recv_control_msg error -32 req 04 val 1500
[  202.919774][ T1324] pwc: recv_control_msg error -32 req 02 val 2500
[  202.979729][ T1324] pwc: recv_control_msg error -32 req 02 val 2400
[  203.704805][ T1324] pwc: recv_control_msg error -71 req 02 val 2900
[  203.759747][ T1324] pwc: recv_control_msg error -71 req 02 val 2800
[  203.789752][ T1324] pwc: recv_control_msg error -71 req 04 val 1100
[  203.826868][ T1324] pwc: recv_control_msg error -71 req 04 val 1200
[  203.879837][ T1324] pwc: Registered as video103.
[  203.901255][ T1324] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input5
[  204.017363][ T1324] usb 8-1: USB disconnect, device number 4
[  204.023754][ T6842] netlink: 'syz.4.619': attribute type 11 has an invalid length.
[  205.330265][   T21] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  205.659733][   T21] usb 8-1: Using ep0 maxpacket: 32
[  205.790415][   T21] usb 8-1: config 0 has an invalid interface number: 1 but max is 0
[  205.857836][   T21] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  205.875801][   T21] usb 8-1: config 0 has no interface number 0
[  205.882048][   T21] usb 8-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping
[  205.892670][   T21] usb 8-1: config 0 interface 1 has no altsetting 0
[  206.289785][   T21] usb 8-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[  206.323446][   T21] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.377847][   T21] usb 8-1: Product: syz
[  206.404976][   T21] usb 8-1: Manufacturer: syz
[  206.432265][   T21] usb 8-1: SerialNumber: syz
[  206.592906][   T21] usb 8-1: config 0 descriptor??
[  207.611501][   T21] cx231xx 8-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[  207.657206][   T21] cx231xx 8-1:0.1: Not found matching IAD interface
[  207.775082][   T21] usb 8-1: USB disconnect, device number 5
[  207.783283][ T6891] loop7: detected capacity change from 0 to 512
[  207.862517][ T6891] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[  208.025957][ T6891] EXT4-fs (loop7): orphan cleanup on readonly fs
[  208.042503][ T6891] EXT4-fs error (device loop7): ext4_orphan_get:1406: inode #15: comm syz.7.645: iget: bogus i_mode (5)
[  208.814579][ T6891] EXT4-fs error (device loop7): ext4_orphan_get:1411: comm syz.7.645: couldn't read orphan inode 15 (err -117)
[  208.844267][ T6891] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  208.882107][ T6917] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  208.899213][ T6913] ip_tables: iptables: counters copy to user failed while replacing table
[  208.940316][ T6913] netlink: 'syz.4.652': attribute type 4 has an invalid length.
[  208.994694][ T6913] netlink: 152 bytes leftover after parsing attributes in process `syz.4.652'.
[  209.057151][ T6913] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  211.451573][ T6978] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  211.612559][ T6989] netlink: 'syz.7.666': attribute type 1 has an invalid length.
[  211.715531][ T6989] 8021q: adding VLAN 0 to HW filter on device bond1
[  211.753164][ T6993] device macvlan3 entered promiscuous mode
[  211.793576][ T6993] device bond1 entered promiscuous mode
[  211.835745][ T6993] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  211.859590][ T6993] team0: Device macvlan3 is of different type
[  211.904271][ T6993] device bond1 left promiscuous mode
[  212.656543][ T6989] bond1: (slave ip6gretap1): making interface the new active one
[  212.665507][ T6989] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[  212.789641][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  212.874484][ T7008] lo speed is unknown, defaulting to 1000
[  212.961567][ T7008] lo speed is unknown, defaulting to 1000
[  213.068792][ T7008] lo speed is unknown, defaulting to 1000
[  213.260460][ T4244] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.613687][ T4244] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.620128][ T7008] infiniband syz0: set active
[  214.918259][ T7008] infiniband syz0: added lo
[  215.040512][   T13] lo speed is unknown, defaulting to 1000
[  215.049263][ T7035] MTDSB: Device #1 doesn't appear to exist
[  215.049263][ T7035] 
[  215.115898][   T25] audit: type=1326 audit(2000000072.469:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7036 comm="syz.1.679" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe881f04159 code=0x0
[  215.599499][ T4244] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.788480][ T7008] RDS/IB: syz0: added
[  216.459179][ T7008] smc: adding ib device syz0 with port count 1
[  216.533419][ T4244] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.549530][ T7008] smc:    ib device syz0 port 1 has pnetid 
[  216.577187][ T4232] lo speed is unknown, defaulting to 1000
[  216.609854][ T7008] lo speed is unknown, defaulting to 1000
[  216.736022][ T7056] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  217.023017][ T4244] tipc: Left network mode
[  217.898730][ T7008] lo speed is unknown, defaulting to 1000
[  219.399399][ T7008] lo speed is unknown, defaulting to 1000
[  220.003261][ T7008] lo speed is unknown, defaulting to 1000
[  220.307811][ T7008] lo speed is unknown, defaulting to 1000
[  220.447927][ T7008] lo speed is unknown, defaulting to 1000
[  220.639007][ T7098] device syzkaller0 entered promiscuous mode
[  220.686960][ T7108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.698'.
[  220.706578][ T7104] netlink: 4 bytes leftover after parsing attributes in process `syz.7.695'.
[  220.755220][ T7098] ==================================================================
[  220.765040][ T7098] BUG: KASAN: slab-out-of-bounds in ieee80211_monitor_select_queue+0x23a/0x240
[  220.774284][ T7098] Read of size 2 at addr ffff88802b716dfb by task syz.7.695/7098
[  220.782016][ T7098] 
[  220.784345][ T7098] CPU: 0 PID: 7098 Comm: syz.7.695 Not tainted syzkaller #0
[  220.791629][ T7098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  220.801836][ T7098] Call Trace:
[  220.805124][ T7098]  <TASK>
[  220.808058][ T7098]  dump_stack_lvl+0x188/0x250
[  220.812754][ T7098]  ? show_regs_print_info+0x20/0x20
[  220.817967][ T7098]  ? _printk+0xda/0x130
[  220.822132][ T7098]  ? ieee80211_monitor_select_queue+0x23a/0x240
[  220.828388][ T7098]  ? load_image+0x410/0x410
[  220.832911][ T7098]  print_address_description+0x60/0x2d0
[  220.838461][ T7098]  ? ieee80211_monitor_select_queue+0x23a/0x240
[  220.839398][ T7008] lo speed is unknown, defaulting to 1000
[  220.844705][ T7098]  kasan_report+0xdf/0x130
[  220.844749][ T7098]  ? ieee80211_monitor_select_queue+0x23a/0x240
[  220.844776][ T7098]  ieee80211_monitor_select_queue+0x23a/0x240
[  220.844805][ T7098]  ? ieee80211_recalc_smps_work+0x20/0x20
[  220.844827][ T7098]  netdev_core_pick_tx+0x12c/0x300
[  220.844851][ T7098]  __dev_queue_xmit+0x797/0x2e50
[  220.844868][ T7098]  ? __might_sleep+0xf0/0xf0
[  220.887626][ T7098]  ? dev_queue_xmit+0x20/0x20
[  220.892309][ T7098]  ? virtio_net_hdr_to_skb+0xb00/0x11e0
[  220.897874][ T7098]  ? packet_cached_dev_get+0x270/0x270
[  220.903342][ T7098]  packet_sendmsg+0x3b4f/0x4de0
[  220.908194][ T7098]  ? sched_move_task+0x2c0/0x4f0
[  220.913154][ T7098]  ? lock_chain_count+0x20/0x20
[  220.918031][ T7098]  ? aa_sk_perm+0x7dc/0x910
[  220.922552][ T7098]  ? packet_getsockopt+0x9a0/0x9a0
[  220.927675][ T7098]  ? unpack_rlimits+0x1136/0x1230
[  220.932706][ T7098]  ? apparmor_socket_sendmsg+0x88/0x230
[  220.938252][ T7098]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  220.943535][ T7098]  ? security_socket_sendmsg+0x7c/0xa0
[  220.948984][ T7098]  ? packet_getsockopt+0x9a0/0x9a0
[  220.954076][ T7098]  ____sys_sendmsg+0x5be/0x8f0
[  220.958831][ T7098]  ? __sys_sendmsg_sock+0x30/0x30
[  220.963840][ T7098]  ? import_iovec+0x6f/0xa0
[  220.968320][ T7098]  ___sys_sendmsg+0x236/0x2e0
[  220.973098][ T7098]  ? __sys_sendmsg+0x290/0x290
[  220.977858][ T7098]  ? sock_do_ioctl+0x296/0x320
[  220.982622][ T7098]  __se_sys_sendmsg+0x1b7/0x2a0
[  220.987461][ T7098]  ? __x64_sys_sendmsg+0x80/0x80
[  220.992382][ T7098]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  220.998351][ T7098]  ? lockdep_hardirqs_on+0x94/0x140
[  221.003542][ T7098]  do_syscall_64+0x4c/0xa0
[  221.007960][ T7098]  ? clear_bhb_loop+0x30/0x80
[  221.012634][ T7098]  ? clear_bhb_loop+0x30/0x80
[  221.017303][ T7098]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  221.023177][ T7098] RIP: 0033:0x7eff43aff159
[  221.027578][ T7098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  221.047168][ T7098] RSP: 002b:00007eff41d57028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  221.055581][ T7098] RAX: ffffffffffffffda RBX: 00007eff43d86fa0 RCX: 00007eff43aff159
[  221.063537][ T7098] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005
[  221.071491][ T7098] RBP: 00007eff43b96024 R08: 0000000000000000 R09: 0000000000000000
[  221.079459][ T7098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  221.087413][ T7098] R13: 00007eff43d87038 R14: 00007eff43d86fa0 R15: 00007ffe7e004198
[  221.095376][ T7098]  </TASK>
[  221.098373][ T7098] 
[  221.100678][ T7098] Allocated by task 0:
[  221.104719][ T7098] (stack is not available)
[  221.109107][ T7098] 
[  221.111411][ T7098] The buggy address belongs to the object at ffff88802b714000
[  221.111411][ T7098]  which belongs to the cache kmalloc-8k of size 8192
[  221.125447][ T7098] The buggy address is located 3579 bytes to the right of
[  221.125447][ T7098]  8192-byte region [ffff88802b714000, ffff88802b716000)
[  221.139401][ T7098] The buggy address belongs to the page:
[  221.145013][ T7098] page:ffffea0000adc400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2b710
[  221.155166][ T7098] head:ffffea0000adc400 order:3 compound_mapcount:0 compound_pincount:0
[  221.163468][ T7098] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  221.171462][ T7098] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888016c42280
[  221.180024][ T7098] raw: 0000000000000000 0000000080020002 00000001ffffffff 0000000000000000
[  221.188579][ T7098] page dumped because: kasan: bad access detected
[  221.194974][ T7098] page_owner tracks the page as allocated
[  221.200666][ T7098] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 7098, ts 220754595071, free_ts 220552776763
[  221.221304][ T7098]  get_page_from_freelist+0x24f6/0x2670
[  221.226830][ T7098]  __alloc_pages+0x1ee/0x480
[  221.231393][ T7098]  new_slab+0xc0/0x4b0
[  221.235435][ T7098]  ___slab_alloc+0x807/0xdd0
[  221.239998][ T7098]  __kmalloc_node_track_caller+0x13d/0x3a0
[  221.245776][ T7098]  __alloc_skb+0x22c/0x750
[  221.250169][ T7098]  alloc_skb_with_frags+0xa7/0x720
[  221.255256][ T7098]  sock_alloc_send_pskb+0x87f/0x9a0
[  221.260431][ T7098]  packet_sendmsg+0x31b0/0x4de0
[  221.265260][ T7098]  ____sys_sendmsg+0x5be/0x8f0
[  221.270002][ T7098]  ___sys_sendmsg+0x236/0x2e0
[  221.274655][ T7098]  __se_sys_sendmsg+0x1b7/0x2a0
[  221.279478][ T7098]  do_syscall_64+0x4c/0xa0
[  221.283869][ T7098]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  221.289737][ T7098] page last free stack trace:
[  221.294397][ T7098]  free_unref_page_prepare+0x637/0x6c0
[  221.299835][ T7098]  free_unref_page+0x8f/0x2a0
[  221.304489][ T7098]  qlist_free_all+0x35/0x90
[  221.308965][ T7098]  kasan_quarantine_reduce+0x150/0x160
[  221.314399][ T7098]  __kasan_slab_alloc+0x2f/0xc0
[  221.319244][ T7098]  slab_post_alloc_hook+0x4c/0x380
[  221.324334][ T7098]  kmem_cache_alloc+0x15d/0x280
[  221.329158][ T7098]  vm_area_dup+0x1e/0xb0
[  221.333388][ T7098]  __split_vma+0xb1/0x410
[  221.337703][ T7098]  mprotect_fixup+0x518/0x800
[  221.342356][ T7098]  do_mprotect_pkey+0x658/0x910
[  221.347193][ T7098]  __x64_sys_mprotect+0x7c/0x90
[  221.352026][ T7098]  do_syscall_64+0x4c/0xa0
[  221.356433][ T7098]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  221.362325][ T7098] 
[  221.364630][ T7098] Memory state around the buggy address:
[  221.370237][ T7098]  ffff88802b716c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  221.378293][ T7098]  ffff88802b716d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  221.386334][ T7098] >ffff88802b716d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  221.394368][ T7098]                                                                 ^
[  221.402323][ T7098]  ffff88802b716e00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  221.410375][ T7098]  ffff88802b716e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  221.418502][ T7098] ==================================================================
[  221.426542][ T7098] Disabling lock debugging due to kernel taint
[  221.432767][ T7098] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  221.439953][ T7098] CPU: 0 PID: 7098 Comm: syz.7.695 Tainted: G    B             syzkaller #0
[  221.448602][ T7098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  221.459625][ T7098] Call Trace:
[  221.462918][ T7098]  <TASK>
[  221.465850][ T7098]  dump_stack_lvl+0x188/0x250
[  221.470510][ T7098]  ? show_regs_print_info+0x20/0x20
[  221.475689][ T7098]  ? load_image+0x410/0x410
[  221.480174][ T7098]  panic+0x2f8/0x850
[  221.484046][ T7098]  ? bpf_jit_dump+0xd0/0xd0
[  221.488526][ T7098]  ? _raw_spin_unlock_irqrestore+0xbc/0x120
[  221.494399][ T7098]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  221.500289][ T7098]  ? _raw_spin_unlock+0x40/0x40
[  221.505119][ T7098]  ? print_memory_metadata+0x314/0x400
[  221.510557][ T7098]  ? ieee80211_monitor_select_queue+0x23a/0x240
[  221.516793][ T7098]  check_panic_on_warn+0x80/0xa0
[  221.521711][ T7098]  ? ieee80211_monitor_select_queue+0x23a/0x240
[  221.528129][ T7098]  end_report+0x6d/0xf0
[  221.532692][ T7098]  kasan_report+0x102/0x130
[  221.537192][ T7098]  ? ieee80211_monitor_select_queue+0x23a/0x240
[  221.543414][ T7098]  ieee80211_monitor_select_queue+0x23a/0x240
[  221.549472][ T7098]  ? ieee80211_recalc_smps_work+0x20/0x20
[  221.555171][ T7098]  netdev_core_pick_tx+0x12c/0x300
[  221.560262][ T7098]  __dev_queue_xmit+0x797/0x2e50
[  221.565183][ T7098]  ? __might_sleep+0xf0/0xf0
[  221.569756][ T7098]  ? dev_queue_xmit+0x20/0x20
[  221.574419][ T7098]  ? virtio_net_hdr_to_skb+0xb00/0x11e0
[  221.579941][ T7098]  ? packet_cached_dev_get+0x270/0x270
[  221.585377][ T7098]  packet_sendmsg+0x3b4f/0x4de0
[  221.590203][ T7098]  ? sched_move_task+0x2c0/0x4f0
[  221.595119][ T7098]  ? lock_chain_count+0x20/0x20
[  221.599953][ T7098]  ? aa_sk_perm+0x7dc/0x910
[  221.604437][ T7098]  ? packet_getsockopt+0x9a0/0x9a0
[  221.609620][ T7098]  ? unpack_rlimits+0x1136/0x1230
[  221.614633][ T7098]  ? apparmor_socket_sendmsg+0x88/0x230
[  221.620152][ T7098]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  221.625429][ T7098]  ? security_socket_sendmsg+0x7c/0xa0
[  221.630861][ T7098]  ? packet_getsockopt+0x9a0/0x9a0
[  221.635949][ T7098]  ____sys_sendmsg+0x5be/0x8f0
[  221.640689][ T7098]  ? __sys_sendmsg_sock+0x30/0x30
[  221.645720][ T7098]  ? import_iovec+0x6f/0xa0
[  221.650200][ T7098]  ___sys_sendmsg+0x236/0x2e0
[  221.654853][ T7098]  ? __sys_sendmsg+0x290/0x290
[  221.659593][ T7098]  ? sock_do_ioctl+0x296/0x320
[  221.664360][ T7098]  __se_sys_sendmsg+0x1b7/0x2a0
[  221.669218][ T7098]  ? __x64_sys_sendmsg+0x80/0x80
[  221.674157][ T7098]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  221.680124][ T7098]  ? lockdep_hardirqs_on+0x94/0x140
[  221.685319][ T7098]  do_syscall_64+0x4c/0xa0
[  221.690952][ T7098]  ? clear_bhb_loop+0x30/0x80
[  221.695611][ T7098]  ? clear_bhb_loop+0x30/0x80
[  221.700268][ T7098]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  221.706141][ T7098] RIP: 0033:0x7eff43aff159
[  221.710557][ T7098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  221.731534][ T7098] RSP: 002b:00007eff41d57028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  221.739946][ T7098] RAX: ffffffffffffffda RBX: 00007eff43d86fa0 RCX: 00007eff43aff159
[  221.747899][ T7098] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005
[  221.755854][ T7098] RBP: 00007eff43b96024 R08: 0000000000000000 R09: 0000000000000000
[  221.763806][ T7098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  221.771763][ T7098] R13: 00007eff43d87038 R14: 00007eff43d86fa0 R15: 00007ffe7e004198
[  221.779746][ T7098]  </TASK>
[  221.782979][ T7098] Kernel Offset: disabled
[  221.787295][ T7098] Rebooting in 86400 seconds..