last executing test programs:

32.758534395s ago: executing program 1 (id=215):
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
r4 = dup(r3)
r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x100)
r6 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x402)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r7=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r7, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000340)={r8, 0x5, 0x3, 0x0, 0x3, [<r9=>0x0], [0x4, 0x7, 0x7b], [0x7, 0xffff, 0x2, 0x10000], [0x0, 0x0, 0x1, 0xfff]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000280)={r9, 0x0, <r10=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r10})
r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7fff0000}]})
close_range(r11, 0xffffffffffffffff, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x1f, 0x6, 0x420, 0x0, 0x198, 0xd8, 0xd8, 0x230, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, 0x0, {[{{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xc00000, 0x9, @ipv4=@private=0xa010102, 0x4e21}}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x4, 0x6}}}, {{@ip={@empty, @loopback, 0xffffff00, 0xff000000, 'dummy0\x00', 'wlan0\x00', {}, {0xff}, 0x0, 0x7, 0x65}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x30, 0x1}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xff, 0xffffffff, 'veth1_to_batadv\x00', 'veth1_vlan\x00', {}, {0xff}, 0x2f, 0x2, 0x9}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0x3}}}, {{@ip={@remote, @private=0xa010102, 0xff, 0xffffffff, 'veth1\x00', 'nr0\x00', {}, {}, 0x60, 0x3, 0x23}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0xc, 0x0, 0x1}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x14, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000003a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14}}, 0x7c}}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
bind$inet6(r4, &(0x7f0000000180)={0xa, 0x4e24, 0x2a1, @ipv4={'\x00', '\xff\xff', @local}, 0xed43}, 0x1c)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x20442, 0x36)

31.197754333s ago: executing program 1 (id=217):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000380)=0x8)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0))
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0xc)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10)
write$dsp(r0, &(0x7f0000000080)="9a", 0x1)
close(r0)

30.439828526s ago: executing program 1 (id=219):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x20605)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000029c0)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x1fe, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x7, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0x100, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x800007, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x4, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x2, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x4000000, 0x8000, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x9, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000002, 0xb, 0x7, 0x5, 0x2, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1f6, 0x3, 0x5, 0x9, 0x9, {0x4, 0x0, 0x6, 0x7fff, 0x4, 0x3}, {0x5, 0x1, 0x5, 0x40, 0x6, 0x3}, 0x2, 0xfffffff7, 0x3}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0)

29.579901084s ago: executing program 1 (id=223):
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000800)
syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080)
ioctl$LOOP_SET_FD(r4, 0x4c00, r3)
ioctl$LOOP_SET_FD(r4, 0x4c05, r4)
dup2(r3, r1)
pipe(0x0)
syz_open_dev$sndctrl(0x0, 0x336, 0x20a00)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)="fc", 0x1)
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x1100002000f336, 0x5)

27.943169685s ago: executing program 1 (id=227):
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
r4 = dup(r3)
r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x100)
r6 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x402)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r7=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r7, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000340)={r8, 0x5, 0x3, 0x0, 0x3, [<r9=>0x0], [0x4, 0x7, 0x7b], [0x7, 0xffff, 0x2, 0x10000], [0x0, 0x0, 0x1, 0xfff]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000280)={r9, 0x0, <r10=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r10})
r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7fff0000}]})
close_range(r11, 0xffffffffffffffff, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x1f, 0x6, 0x448, 0x0, 0x198, 0xd8, 0xd8, 0x230, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, 0x0, {[{{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xc00000, 0x9, @ipv4=@private=0xa010102, 0x4e21}}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x4, 0x6}}}, {{@ip={@empty, @loopback, 0xffffff00, 0xff000000, 'dummy0\x00', 'wlan0\x00', {}, {0xff}, 0x0, 0x7, 0x65}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x30, 0x1}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xff, 0xffffffff, 'veth1_to_batadv\x00', 'veth1_vlan\x00', {}, {0xff}, 0x2f, 0x2, 0x9}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0x3}}}, {{@ip={@remote, @private=0xa010102, 0xff, 0xffffffff, 'veth1\x00', 'nr0\x00', {}, {}, 0x60, 0x3, 0x23}, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0xc, 0x0, 0x1}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x14, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r12, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
bind$inet6(r4, &(0x7f0000000180)={0xa, 0x4e24, 0x2a1, @ipv4={'\x00', '\xff\xff', @local}, 0xed43}, 0x1c)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x20442, 0x36)

27.643549497s ago: executing program 1 (id=229):
socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000014c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_fw={{0x7}, {0x1c, 0x2, [@TCA_FW_ACT={0x4}, @TCA_FW_INDEV={0x14, 0x3, 'bridge_slave_1\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x24004000)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

27.183124727s ago: executing program 32 (id=229):
socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000014c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_fw={{0x7}, {0x1c, 0x2, [@TCA_FW_ACT={0x4}, @TCA_FW_INDEV={0x14, 0x3, 'bridge_slave_1\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x24004000)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

21.524451054s ago: executing program 3 (id=245):
ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6(0xa, 0x80002, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b1600000000000000000200000844000480100001800a000100726564697200000030000180080001006e6174002400028008000140000002000800054000000017080006400000001208000240000000020900010073797a30000000000900020073797a32"], 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080)

20.155779023s ago: executing program 3 (id=250):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = dup(0xffffffffffffffff)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5)
fsmount(0xffffffffffffffff, 0x1, 0x8c)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)={r1})
connect$inet(r0, 0x0, 0x0)
listen(0xffffffffffffffff, 0x8)
r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000700)=""/200, 0xc8, 0x0, 0x0)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r4, 0x0, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)

18.800798002s ago: executing program 3 (id=253):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x6161, 0x4d15, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x11, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0x4, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x4, 0x0, 0x6}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, 0x0, &(0x7f0000000e80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3875}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @string={0x4, 0x3, 'K~'}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x5, @string={0x5, 0x3, 'h>q'}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x4, @string={0x4, 0x3, "b852"}}, 0x0, 0x0}, 0x0)

14.647696483s ago: executing program 3 (id=265):
syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509a914"], 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1)
write$P9_RVERSION(r0, &(0x7f0000000640)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.L'}, 0x5ce)

12.680533669s ago: executing program 4 (id=271):
r0 = io_uring_setup(0x699, &(0x7f00000000c0)={0x0, 0x168c, 0x10, 0x1, 0x3d0})
r1 = io_uring_setup(0x6dde, &(0x7f00000002c0)={0x0, 0xd28, 0x1, 0x0, 0x28b, 0x0, r0})
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20)
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0xffffffff00000000}], &(0x7f0000000100), 0x7}, 0x20)

12.487748557s ago: executing program 4 (id=272):
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
r4 = dup(r3)
r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x100)
r6 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x402)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r7=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r7, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000340)={r8, 0x5, 0x3, 0x0, 0x3, [<r9=>0x0], [0x4, 0x7, 0x7b], [0x7, 0xffff, 0x2, 0x10000], [0x0, 0x0, 0x1, 0xfff]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000280)={r9, 0x0, <r10=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r10})
r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7fff0000}]})
close_range(r11, 0xffffffffffffffff, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x1f, 0x6, 0x448, 0x0, 0x198, 0xd8, 0xd8, 0x230, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, 0x0, {[{{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xc00000, 0x9, @ipv4=@private=0xa010102, 0x4e21}}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x4, 0x6}}}, {{@ip={@empty, @loopback, 0xffffff00, 0xff000000, 'dummy0\x00', 'wlan0\x00', {}, {0xff}, 0x0, 0x7, 0x65}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x30, 0x1}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xff, 0xffffffff, 'veth1_to_batadv\x00', 'veth1_vlan\x00', {}, {0xff}, 0x2f, 0x2, 0x9}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0x3}}}, {{@ip={@remote, @private=0xa010102, 0xff, 0xffffffff, 'veth1\x00', 'nr0\x00', {}, {}, 0x60, 0x3, 0x23}, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0xc, 0x0, 0x1}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x14, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
bind$inet6(r4, &(0x7f0000000180)={0xa, 0x4e24, 0x2a1, @ipv4={'\x00', '\xff\xff', @local}, 0xed43}, 0x1c)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x20442, 0x36)

12.18646894s ago: executing program 3 (id=274):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = dup(0xffffffffffffffff)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5)
fsmount(0xffffffffffffffff, 0x1, 0x8c)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)={r1})
connect$inet(r0, 0x0, 0x0)
listen(0xffffffffffffffff, 0x8)
r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000700)=""/200, 0xc8, 0x0, 0x0)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r4, 0x0, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)

11.26939825s ago: executing program 4 (id=275):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0)
write(r3, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000180)=ANY=[], 0xe)
sendfile(r3, r3, &(0x7f0000001000), 0xffff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0)

8.981734819s ago: executing program 4 (id=278):
semget$private(0x0, 0x1, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x8002, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
semctl$SEM_STAT(0x0, 0x5, 0x12, 0x0)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x40000000)
sendmsg$inet(r2, 0x0, 0x4091)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0x3)

7.937225765s ago: executing program 4 (id=281):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = dup(r1)
r4 = fcntl$dupfd(r0, 0x406, r2)
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0})
ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})

6.342920234s ago: executing program 2 (id=285):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r4}, 0x18)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE2(r5, &(0x7f0000000100)={0xb, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0x2, 0xffff, 0x8, 0x3, 0x772f6461, 0xaf4, "8ac9"}}, 0x11a)
write$UHID_INPUT(r5, &(0x7f00000002c0)={0x8, {"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", 0x1000}}, 0x1006)

5.323894989s ago: executing program 2 (id=286):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000002c0)=0x7)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0)
r2 = syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002400)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x25}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'veth0_to_bridge\x00', <r3=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0xc00, 0xfff, 0x7})
socket$tipc(0x1e, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
llistxattr(&(0x7f0000002300)='./file0\x00', 0x0, 0xdeff)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./bus\x00', 0x2000c12, &(0x7f000001fa80)=ANY=[@ANYBLOB="757466382c696f636861727365743d63703836352c756e686964652c6d61703d61636f726e2c6f76657272696465726f636b7065726d2c73657373696f6e3d3078303030303030303030303030303031392c636865636b3d7374726963742c6d61703d6f66662c696f636861727365743d6d6163726f6d616e2c6d6f64653d30783030000030303030ce058730303030303934622c636865636b3d7265ec617865642c686964652c756e686964"], 0x4, 0xa00, &(0x7f00000003c0)="$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")
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)

5.178880205s ago: executing program 0 (id=287):
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0xbeeb0000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f", 0x1a, 0x0, 0x0, 0x0)

4.232346896s ago: executing program 0 (id=288):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0)
write(r3, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000180)=ANY=[], 0xe)
sendfile(r3, r3, &(0x7f0000001000), 0xffff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0)

4.019990465s ago: executing program 2 (id=289):
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
r4 = dup(r3)
r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x100)
r6 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x402)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r7=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r7, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000340)={r8, 0x5, 0x3, 0x0, 0x3, [<r9=>0x0], [0x4, 0x7, 0x7b], [0x7, 0xffff, 0x2, 0x10000], [0x0, 0x0, 0x1, 0xfff]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000280)={r9, 0x0, <r10=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r10})
r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7fff0000}]})
close_range(r11, 0xffffffffffffffff, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x1f, 0x6, 0x448, 0x0, 0x198, 0xd8, 0xd8, 0x230, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, 0x0, {[{{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xc00000, 0x9, @ipv4=@private=0xa010102, 0x4e21}}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x4, 0x6}}}, {{@ip={@empty, @loopback, 0xffffff00, 0xff000000, 'dummy0\x00', 'wlan0\x00', {}, {0xff}, 0x0, 0x7, 0x65}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x30, 0x1}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xff, 0xffffffff, 'veth1_to_batadv\x00', 'veth1_vlan\x00', {}, {0xff}, 0x2f, 0x2, 0x9}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0x3}}}, {{@ip={@remote, @private=0xa010102, 0xff, 0xffffffff, 'veth1\x00', 'nr0\x00', {}, {}, 0x60, 0x3, 0x23}, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0xc, 0x0, 0x1}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x14, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000003a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}}], {0x14}}, 0x5c}}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
bind$inet6(r4, &(0x7f0000000180)={0xa, 0x4e24, 0x2a1, @ipv4={'\x00', '\xff\xff', @local}, 0xed43}, 0x1c)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x20442, 0x36)

2.934016633s ago: executing program 2 (id=290):
semget$private(0x0, 0x1, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x8002, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
semctl$SEM_STAT(0x0, 0x5, 0x12, 0x0)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x40000000)
sendmsg$inet(r2, 0x0, 0x4091)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0x3)

2.808077518s ago: executing program 0 (id=291):
accept$alg(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES8=0x0, @ANYBLOB="557b000000000000280012800b00010067656e65"], 0x48}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_emit_ethernet(0x7a, &(0x7f00000009c0)=ANY=[@ANYBLOB="856b1200ffffaaaaaaaaaaaa86dd60381f3400442f00f6f7000000000000000000000000ff020000000000000000000000000001042088a8f5ff00000088be0000000010000000010000000000080022eb00000000200000000200000000000000000000000800655800000000"], 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000880)={0x0, @in6={{0x2, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}, 0x1}}}, &(0x7f0000000300)=0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0xf, &(0x7f0000000580)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x50}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0xbb}}}, &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x1, 0xffffffffffffffff, 0x0)
r6 = socket(0x10, 0x3, 0x0)
sendmmsg(r6, &(0x7f0000000000), 0x0, 0x20000004)

1.939060636s ago: executing program 2 (id=292):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
epoll_create1(0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18)
dup(0xffffffffffffffff)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r5)
ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0xf34)

1.469902606s ago: executing program 0 (id=293):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)={0xb0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x34eaaa04}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x400}]}]}, 0xb0}}, 0x0)
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
r2 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140))
ioctl$UFFDIO_COPY(r2, 0xc028aa05, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x9, @loopback, 0x3}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, 0x0, 0x109)
socket(0xa, 0x5, 0x0)
r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}})
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000071000100000000000000000007000000", @ANYRES32, @ANYBLOB="2c0001800800010003000100200001"], 0x44}}, 0x0)
socket$inet(0x2, 0xa, 0x81)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'das16m1\x00', [0x4f27, 0x8, 0x10000, 0x4, 0xe, 0x0, 0xb, 0x7, 0xa, 0x1, 0x1, 0x8, 0x0, 0x801, 0xfffffffe, 0x0, 0xfffffffe, 0x5, 0x6, 0xfffff801, 0x89, 0x8, 0x1ff, 0x0, 0xb, 0xe6b, 0x68a1589b, 0x8, 0x65c, 0x2, 0x2]})

1.408018249s ago: executing program 3 (id=294):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x27125ae6fbb99f61, '\x00', 0x0, @sk_msg}, 0x94)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)
r0 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8)
socket$netlink(0x10, 0x3, 0x0)
mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000080)='configfs\x00', 0x200, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20400, 0x38)
getdents64(r2, 0x0, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)='4', 0x1}], 0x1)

1.181845949s ago: executing program 0 (id=295):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r4}, 0x18)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE2(r5, &(0x7f0000000100)={0xb, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0x2, 0xffff, 0x8, 0x3, 0x772f6461, 0xaf4, "8ac9"}}, 0x11a)
write$UHID_INPUT(r5, &(0x7f00000002c0)={0x8, {"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", 0x1000}}, 0x1006)

1.16003813s ago: executing program 4 (id=296):
ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000001c0)={0x0, 0x4, 0x2, 0x0, 0x8d})
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6(0xa, 0x80002, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b1600000000000000000200000844000480100001800a000100726564697200000030000180080001006e6174002400028008000140000002000800054000000017080006400000001208000240000000020900010073797a30000000000900020073797a32"], 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080)

1.024045436s ago: executing program 2 (id=297):
syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509a914"], 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1)
write$P9_RVERSION(r0, &(0x7f0000000640)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.L'}, 0x5ce)

0s ago: executing program 0 (id=298):
r0 = syz_usb_connect(0x3, 0x3f, &(0x7f0000002140)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000003c0)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$FS_IOC_GETVERSION(r1, 0x40025b0c, &(0x7f0000000040))

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.51' (ED25519) to the list of known hosts.
[   56.247857][ T4254] cgroup: Unknown subsys name 'net'
[   56.376477][ T4254] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   57.627049][ T4254] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k FS
[   58.984795][ T4274] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   58.991855][ T4280] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   58.993542][ T4280] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   59.000447][ T4274] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   59.007596][ T4280] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   59.014859][ T4274] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   59.021684][ T4280] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   59.029127][ T4274] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   59.035061][ T4280] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   59.041915][ T4274] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   59.049941][ T4280] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   59.062327][ T4274] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   59.063237][ T4280] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   59.069391][ T4274] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   59.077354][ T4280] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   59.092220][ T4281] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   59.092852][ T4280] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   59.099845][ T4282] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   59.107101][ T4280] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   59.121492][ T4280] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   59.121648][ T4282] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   59.152058][ T4282] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   59.159720][ T4278] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   59.163750][ T4281] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   59.166961][ T4278] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   59.174326][ T4282] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   59.188160][ T4281] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   59.188601][ T4278] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   59.197387][ T4282] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   59.209955][ T4266] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   59.600479][ T4264] chnl_net:caif_netlink_parms(): no params data found
[   59.613552][ T4268] chnl_net:caif_netlink_parms(): no params data found
[   59.667673][ T4272] chnl_net:caif_netlink_parms(): no params data found
[   59.773441][ T4277] chnl_net:caif_netlink_parms(): no params data found
[   59.783027][ T4271] chnl_net:caif_netlink_parms(): no params data found
[   59.838774][ T4268] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.846621][ T4268] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.855389][ T4268] device bridge_slave_0 entered promiscuous mode
[   59.864195][ T4264] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.871276][ T4264] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.879124][ T4264] device bridge_slave_0 entered promiscuous mode
[   59.890582][ T4264] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.897967][ T4264] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.906228][ T4264] device bridge_slave_1 entered promiscuous mode
[   59.930819][ T4268] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.937978][ T4268] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.946183][ T4268] device bridge_slave_1 entered promiscuous mode
[   59.993150][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.000261][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.008355][ T4272] device bridge_slave_0 entered promiscuous mode
[   60.030734][ T4264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.040732][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.048076][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.056668][ T4272] device bridge_slave_1 entered promiscuous mode
[   60.065347][ T4268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.080801][ T4264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.108669][ T4268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.166331][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.173613][ T4271] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.181234][ T4271] device bridge_slave_0 entered promiscuous mode
[   60.190247][ T4272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.201636][ T4272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.216121][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.223499][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.231135][ T4277] device bridge_slave_0 entered promiscuous mode
[   60.241297][ T4264] team0: Port device team_slave_0 added
[   60.247767][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.255749][ T4271] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.263568][ T4271] device bridge_slave_1 entered promiscuous mode
[   60.281608][ T4268] team0: Port device team_slave_0 added
[   60.294919][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.302131][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.310062][ T4277] device bridge_slave_1 entered promiscuous mode
[   60.323492][ T4264] team0: Port device team_slave_1 added
[   60.344563][ T4268] team0: Port device team_slave_1 added
[   60.359814][ T4272] team0: Port device team_slave_0 added
[   60.374818][ T4277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.391126][ T4271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.403420][ T4272] team0: Port device team_slave_1 added
[   60.410508][ T4271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.428456][ T4277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.457724][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.464785][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.490835][ T4264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.510443][ T4268] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.517547][ T4268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.543625][ T4268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.577873][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.584999][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.611123][ T4264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.629864][ T4268] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.637304][ T4268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.663893][ T4268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.675914][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.683145][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.709118][ T4272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.722476][ T4271] team0: Port device team_slave_0 added
[   60.733954][ T4277] team0: Port device team_slave_0 added
[   60.745044][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.754590][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.781091][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.793635][ T4271] team0: Port device team_slave_1 added
[   60.805097][ T4277] team0: Port device team_slave_1 added
[   60.878152][ T4268] device hsr_slave_0 entered promiscuous mode
[   60.885108][ T4268] device hsr_slave_1 entered promiscuous mode
[   60.892271][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.899217][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.925210][ T4277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.944125][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.951094][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.977256][ T4271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.990140][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.997560][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.023578][ T4271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.036747][ T4264] device hsr_slave_0 entered promiscuous mode
[   61.043772][ T4264] device hsr_slave_1 entered promiscuous mode
[   61.050398][ T4264] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   61.058261][ T4264] Cannot create hsr debugfs directory
[   61.064879][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.072283][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.098256][ T4277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.113211][ T4272] device hsr_slave_0 entered promiscuous mode
[   61.120249][ T4272] device hsr_slave_1 entered promiscuous mode
[   61.126949][ T4272] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   61.134718][ T4272] Cannot create hsr debugfs directory
[   61.212184][ T4281] Bluetooth: hci4: command 0x0409 tx timeout
[   61.243484][ T4277] device hsr_slave_0 entered promiscuous mode
[   61.250142][ T4277] device hsr_slave_1 entered promiscuous mode
[   61.257132][ T4277] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   61.264959][ T4277] Cannot create hsr debugfs directory
[   61.276837][ T4271] device hsr_slave_0 entered promiscuous mode
[   61.284105][ T4271] device hsr_slave_1 entered promiscuous mode
[   61.290643][ T4271] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   61.298503][ T4271] Cannot create hsr debugfs directory
[   61.301537][ T4281] Bluetooth: hci3: command 0x0409 tx timeout
[   61.310121][ T4281] Bluetooth: hci2: command 0x0409 tx timeout
[   61.316236][ T4276] Bluetooth: hci1: command 0x0409 tx timeout
[   61.316352][ T4276] Bluetooth: hci0: command 0x0409 tx timeout
[   61.579276][ T4264] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   61.589191][ T4264] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   61.599324][ T4264] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   61.609977][ T4264] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   61.670877][ T4268] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   61.690969][ T4268] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   61.700854][ T4268] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   61.717239][ T4268] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   61.750348][ T4277] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   61.762240][ T4277] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   61.780342][ T4277] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   61.801194][ T4277] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   61.896135][ T4271] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   61.919004][ T4264] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.929333][ T4271] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   61.945128][ T4271] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   61.971167][ T4271] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   61.983344][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   61.994384][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   62.038476][ T4264] 8021q: adding VLAN 0 to HW filter on device team0
[   62.050462][ T4272] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   62.066021][ T4268] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.083879][ T4272] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   62.097125][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.105044][ T4272] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   62.114090][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   62.124643][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   62.134917][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.142193][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.151294][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   62.160787][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   62.169464][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.176562][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.184438][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   62.193361][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   62.202423][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   62.226171][ T4268] 8021q: adding VLAN 0 to HW filter on device team0
[   62.233529][ T4272] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   62.249613][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   62.260067][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   62.268719][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   62.277521][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   62.285471][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   62.294584][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   62.303469][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   62.314755][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   62.323656][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   62.352061][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   62.359928][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   62.368267][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   62.377588][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   62.386061][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.393173][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.402348][ T4277] 8021q: adding VLAN 0 to HW filter on device team0
[   62.420384][ T4264] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   62.435684][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   62.446992][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   62.455680][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   62.464661][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   62.474707][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.481834][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.489525][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   62.498401][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   62.506990][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.514111][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.522199][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   62.530517][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   62.561623][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   62.570435][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   62.581034][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   62.594341][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.601482][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.611813][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   62.621036][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   62.630382][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   62.639487][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   62.649609][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   62.658949][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   62.669416][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   62.684710][   T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   62.698421][   T64] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   62.724454][   T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   62.733806][   T64] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   62.784689][ T4268] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   62.797180][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   62.810775][   T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   62.837816][   T64] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   62.848189][   T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   62.857815][   T64] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   62.866630][   T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   62.875516][   T64] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   62.885102][   T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   62.894682][   T64] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   62.903527][   T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   62.912101][   T64] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   62.920330][   T64] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   62.931403][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   62.961254][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   62.970257][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   62.997313][ T4264] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.035693][ T4271] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.069443][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.086968][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   63.105960][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   63.119848][ T4271] 8021q: adding VLAN 0 to HW filter on device team0
[   63.144938][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   63.168428][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   63.215991][ T4272] 8021q: adding VLAN 0 to HW filter on device team0
[   63.224536][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   63.235020][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   63.244888][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   63.254225][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   63.263645][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.270755][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.279737][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   63.289253][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   63.297493][ T4266] Bluetooth: hci4: command 0x041b tx timeout
[   63.305182][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.312326][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.320329][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   63.329876][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   63.346644][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   63.357571][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   63.374987][ T4281] Bluetooth: hci0: command 0x041b tx timeout
[   63.375005][ T4266] Bluetooth: hci1: command 0x041b tx timeout
[   63.375036][ T4266] Bluetooth: hci3: command 0x041b tx timeout
[   63.381131][ T4281] Bluetooth: hci2: command 0x041b tx timeout
[   63.433801][ T4264] device veth0_vlan entered promiscuous mode
[   63.455139][ T4271] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   63.466654][ T4271] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   63.485911][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   63.494038][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   63.502504][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   63.510963][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   63.519929][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   63.528775][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   63.538076][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   63.546613][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.553695][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.562055][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   63.572037][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   63.580450][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.587571][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.596041][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   63.604818][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   63.613746][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   63.623278][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   63.631786][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   63.640223][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   63.648894][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   63.657736][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   63.666227][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   63.675563][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   63.709936][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   63.720738][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   63.729526][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   63.739179][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   63.747396][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   63.755714][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   63.763709][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   63.774436][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   63.783141][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   63.791762][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   63.805296][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   63.816831][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   63.836171][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.844971][ T4264] device veth1_vlan entered promiscuous mode
[   63.866817][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   63.875528][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   63.883970][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   63.913054][ T4268] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.937170][   T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   63.962531][   T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   63.994851][   T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   64.017312][   T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   64.045931][   T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   64.067070][   T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   64.099428][   T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   64.117064][   T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   64.150727][ T4277] device veth0_vlan entered promiscuous mode
[   64.163258][ T4264] device veth0_macvtap entered promiscuous mode
[   64.193409][ T4277] device veth1_vlan entered promiscuous mode
[   64.218655][ T4264] device veth1_macvtap entered promiscuous mode
[   64.271708][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.279819][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   64.289091][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   64.298186][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   64.312856][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   64.321130][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   64.336504][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   64.355362][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.367044][ T4264] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.377161][ T4264] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.393367][ T4264] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.408310][ T4264] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.426471][ T4277] device veth0_macvtap entered promiscuous mode
[   64.435126][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   64.444043][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   64.453523][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   64.463207][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   64.485446][ T4277] device veth1_macvtap entered promiscuous mode
[   64.495498][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   64.505122][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   64.513769][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   64.521261][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   64.529358][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   64.538588][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   64.550674][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.565274][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.634994][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   64.659156][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.673065][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.711726][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   64.720789][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   64.731455][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   64.740248][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   64.752444][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   64.761251][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   64.772141][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   64.783362][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.796680][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.826714][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   64.837193][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   64.846819][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   64.855739][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   64.864379][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   64.873326][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   64.881709][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   64.889512][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   64.898594][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   64.906947][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   64.915539][ T4272] device veth0_vlan entered promiscuous mode
[   64.924680][ T4271] device veth0_vlan entered promiscuous mode
[   64.943889][ T4277] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.952779][ T4277] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.963090][ T4277] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.973366][ T4277] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.986612][ T4341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.004112][ T4272] device veth1_vlan entered promiscuous mode
[   65.015109][ T4341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.027008][ T4271] device veth1_vlan entered promiscuous mode
[   65.064499][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   65.073059][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   65.080962][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   65.089624][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   65.098268][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   65.106263][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   65.115492][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   65.152164][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   65.160498][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   65.175786][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.179142][ T4271] device veth0_macvtap entered promiscuous mode
[   65.184124][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.201825][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   65.209785][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   65.218384][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   65.228812][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   65.238381][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   65.247120][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   65.271824][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   65.281926][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   65.296433][ T4271] device veth1_macvtap entered promiscuous mode
[   65.319078][ T4268] device veth0_vlan entered promiscuous mode
[   65.338276][ T4272] device veth0_macvtap entered promiscuous mode
[   65.372109][ T4281] Bluetooth: hci4: command 0x040f tx timeout
[   65.385661][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.396877][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.423968][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.434755][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.451535][ T4281] Bluetooth: hci3: command 0x040f tx timeout
[   65.457607][ T4281] Bluetooth: hci0: command 0x040f tx timeout
[   65.464487][ T4280] Bluetooth: hci1: command 0x040f tx timeout
[   65.464643][ T4266] Bluetooth: hci2: command 0x040f tx timeout
[   65.481787][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.498718][ T4272] device veth1_macvtap entered promiscuous mode
[   65.515938][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.534881][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.547713][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.565166][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.577974][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.594434][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.609624][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.626793][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.637682][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.647859][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.661941][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.673883][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.697212][ T4272] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.706621][ T4272] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.715969][ T4272] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.725208][ T4272] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.737012][ T4268] device veth1_vlan entered promiscuous mode
[   65.863425][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   65.890703][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   65.977406][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   66.048266][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   66.105211][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   66.160650][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   66.209429][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   66.302559][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   66.311437][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   66.320220][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   66.339384][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.356882][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.370815][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.388121][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.398454][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.418553][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.438030][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.459823][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.501192][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.520319][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   66.531049][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   66.540448][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   66.554371][ T4271] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.566370][ T4271] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.575701][ T4271] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.586597][ T4271] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.621217][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.629403][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.678600][   T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   66.689568][   T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   66.705528][   T40] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   66.754738][ T4268] device veth0_macvtap entered promiscuous mode
[   66.810913][ T4268] device veth1_macvtap entered promiscuous mode
[   66.831749][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.874122][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.877638][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.894564][   T64] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   66.913037][   T64] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   66.930590][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.958978][   T64] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   67.110216][   T64] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   67.131766][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   67.141395][    T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!!
[   67.149626][    T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!!
[   67.157807][    T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!!
[   67.577648][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.586670][ T4266] Bluetooth: hci4: command 0x0419 tx timeout
[   67.594017][ T4266] Bluetooth: hci0: command 0x0419 tx timeout
[   67.611641][ T4266] Bluetooth: hci1: command 0x0419 tx timeout
[   67.678405][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   67.702398][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   67.992741][ T4397] loop0: detected capacity change from 0 to 32768
[   68.006042][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   68.011569][ T4276] Bluetooth: hci2: command 0x0419 tx timeout
[   68.022587][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.026327][ T4276] Bluetooth: hci3: command 0x0419 tx timeout
[   68.049096][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.102674][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.102878][ T4397] XFS (loop0): Mounting V5 Filesystem
[   68.119405][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.150390][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.177076][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.208838][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.236223][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.268275][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.341030][ T4397] XFS (loop0): Ending clean mount
[   68.416378][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.662256][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   68.712916][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   68.780797][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   68.891529][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   68.907517][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   68.972158][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   69.042913][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.055550][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.057054][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.152992][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.197013][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.303117][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.322149][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.337960][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.455285][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.469808][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.476774][ T4416] loop2: detected capacity change from 0 to 4096
[   69.483462][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.661371][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   69.730760][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   69.741435][ T4419] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   69.750525][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   69.807314][ T4268] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.854666][ T4268] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.873780][ T4268] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.984123][ T4268] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.241621][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[   71.248125][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[   71.482817][ T4264] XFS (loop0): Unmounting Filesystem
[   71.544501][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.565833][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.594104][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   71.699170][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.708573][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.720905][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   71.728732][  T126] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   72.801476][  T126] usb 4-1: Using ep0 maxpacket: 16
[   72.819401][  T126] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[   72.861518][  T126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   72.870758][  T126] usb 4-1: Product: syz
[   72.883454][   T27] audit: type=1326 audit(1764086255.594:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4439 comm="syz.4.5" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1ceff8f749 code=0x0
[   72.906590][  T126] usb 4-1: Manufacturer: syz
[   72.911222][  T126] usb 4-1: SerialNumber: syz
[   72.979235][  T126] r8152-cfgselector 4-1: config 0 descriptor??
[   72.999660][ T4445] loop4: detected capacity change from 0 to 512
[   73.017882][ T4445] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   73.059897][ T4445] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.5: iget: bad i_size value: 38620345925642
[   73.080413][ T4445] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.5: couldn't read orphan inode 15 (err -117)
[   73.107487][ T4445] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   73.191592][ T4325] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   73.321495][ T4411] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   73.371500][ T4325] usb 2-1: Using ep0 maxpacket: 16
[   73.379160][ T4325] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[   73.392118][ T4325] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[   73.401188][ T4325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   73.411001][ T4325] usb 2-1: config 0 descriptor??
[   73.416471][   T14] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[   73.445081][ T4325] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input5
[   73.476097][ T4429] loop3: detected capacity change from 0 to 4096
[   73.491482][ T4429] =======================================================
[   73.491482][ T4429] WARNING: The mand mount option has been deprecated and
[   73.491482][ T4429]          and is ignored by this kernel. Remove the mand
[   73.491482][ T4429]          option from the mount to silence this warning.
[   73.491482][ T4429] =======================================================
[   73.532688][ T4411] usb 3-1: Using ep0 maxpacket: 8
[   73.539761][ T4411] usb 3-1: config 237 has an invalid interface number: 26 but max is 0
[   73.549396][ T4411] usb 3-1: config 237 has no interface number 0
[   73.558248][ T4411] usb 3-1: config 237 interface 26 has no altsetting 0
[   73.581266][ T4411] usb 3-1: New USB device found, idVendor=04dd, idProduct=8002, bcdDevice=50.ad
[   73.591046][ T4411] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   73.593411][   T14] usb 1-1: device descriptor read/64, error -71
[   73.600217][ T4411] usb 3-1: Product: syz
[   73.611145][ T4411] usb 3-1: Manufacturer: syz
[   73.620726][ T4411] usb 3-1: SerialNumber: syz
[   73.641956][ T3622] bcm5974 2-1:0.0: could not read from device
[   73.650903][ T4325] bcm5974 2-1:0.0: could not read from device
[   73.665173][ T3622] bcm5974 2-1:0.0: could not read from device
[   73.677259][ T4429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   73.690801][ T4429] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   73.699319][ T4325] input: failed to attach handler mousedev to device input5, error: -5
[   73.715217][ T3622] bcm5974 2-1:0.0: could not read from device
[   73.737284][ T3622] bcm5974 2-1:0.0: could not read from device
[   73.746036][ T4325] usb 2-1: USB disconnect, device number 2
[   73.756441][  T126] r8152-cfgselector 4-1: Unknown version 0x0000
[   73.764666][  T126] r8152-cfgselector 4-1: bad CDC descriptors
[   73.802571][ T4414] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm kworker/u4:10: bg 0: block 5: invalid block bitmap
[   73.816420][  T126] r8152-cfgselector 4-1: Unknown version 0x0000
[   73.841769][  T126] r8152-cfgselector 4-1: USB disconnect, device number 2
[   73.862392][ T4414] EXT4-fs (loop4): Delayed block allocation failed for inode 19 at logical offset 3 with max blocks 65 with error 28
[   73.877335][   T14] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[   73.879685][ T4411] safe_serial 3-1:237.26: safe_serial converter detected
[   73.909558][ T4411] safe_serial: probe of 3-1:237.26 failed with error -22
[   73.920843][ T4414] EXT4-fs (loop4): This should not happen!! Data will be lost
[   73.920843][ T4414] 
[   73.927018][ T4411] usb 3-1: USB disconnect, device number 2
[   73.944219][ T4414] EXT4-fs (loop4): Total free blocks count 0
[   73.952675][ T4414] EXT4-fs (loop4): Free/Dirty block details
[   73.958729][ T4414] EXT4-fs (loop4): free_blocks=0
[   73.964368][ T4414] EXT4-fs (loop4): dirty_blocks=65
[   73.969502][ T4414] EXT4-fs (loop4): Block reservation details
[   73.975892][ T4414] EXT4-fs (loop4): i_reserved_data_blocks=65
[   73.995108][ T4268] EXT4-fs (loop4): unmounting filesystem.
[   74.061459][   T14] usb 1-1: device descriptor read/64, error -71
[   74.194913][   T14] usb usb1-port1: attempt power cycle
[   74.332526][ T4459] Bluetooth: MGMT ver 1.22
[   75.684717][   T14] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[   75.750115][   T14] usb 1-1: device descriptor read/8, error -71
[   76.161596][   T14] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[   76.344432][  T954] cfg80211: failed to load regulatory.db
[   77.339439][ T4489] Zero length message leads to an empty skb
[   77.403286][   T14] usb 1-1: device descriptor read/8, error -71
[   77.533488][   T14] usb usb1-port1: unable to enumerate USB device
[   78.491233][ T4496] syz.4.27 uses obsolete (PF_INET,SOCK_PACKET)
[   78.536953][ T4496] device syzkaller1 entered promiscuous mode
[   79.447391][ T4510] loop2: detected capacity change from 0 to 512
[   79.456184][ T4510] EXT4-fs: Ignoring removed nobh option
[   79.574736][ T4510] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   79.774239][ T4510] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it
[   80.055892][ T4510] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.32: Corrupt directory, running e2fsck is recommended
[   80.117957][ T4510] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[   80.239407][ T4510] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2196: inode #15: comm syz.2.32: corrupted in-inode xattr
[   80.737393][ T4510] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.32: couldn't read orphan inode 15 (err -117)
[   80.771052][ T4510] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   80.916996][ T4277] EXT4-fs (loop2): unmounting filesystem.
[   80.981626][   T14] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[   81.038930][ T4533] loop0: detected capacity change from 0 to 64
[   81.591155][ T4541] Invalid ELF header magic: != ELF
[   81.831930][   T27] audit: type=1804 audit(1764086264.284:3): pid=4541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.38" name="/newroot/10/file1/bus" dev="loop0" ino=21 res=1 errno=0
[   82.235152][   T27] audit: type=1800 audit(1764086264.304:4): pid=4541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.38" name="file1" dev="loop0" ino=22 res=0 errno=0
[   82.274380][   T14] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4
[   82.293008][   T14] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023
[   82.304427][   T14] usb 2-1: config 0 interface 0 has no altsetting 0
[   82.325798][   T14] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[   82.345408][   T14] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[   82.361874][   T14] usb 2-1: Product: syz
[   82.366196][   T14] usb 2-1: Manufacturer: syz
[   82.371169][   T14] usb 2-1: SerialNumber: syz
[   82.382485][   T14] usb 2-1: config 0 descriptor??
[   82.397674][   T14] usb 2-1: selecting invalid altsetting 0
[   82.612857][ T4524] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled
[   85.060621][   T26] usb 2-1: USB disconnect, device number 3
[   85.401578][    T9] Bluetooth: Error in BCSP hdr checksum
[   86.263632][    T9] Bluetooth: Error in BCSP hdr checksum
[   86.287328][ T4572] device syzkaller1 entered promiscuous mode
[   86.902352][ T4276] Bluetooth: hci5: command 0x1003 tx timeout
[   86.908723][ T4266] Bluetooth: hci5: Opcode 0x1003 failed: -110
[   87.831249][ T4594] Bluetooth: MGMT ver 1.22
[   88.384496][ T4597] loop3: detected capacity change from 0 to 1024
[   88.459233][ T4597] EXT4-fs: Ignoring removed orlov option
[   88.891581][ T4597] EXT4-fs: Ignoring removed nomblk_io_submit option
[   89.536867][ T4597] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   89.859160][ T4617] random: crng reseeded on system resumption
[   91.122510][ T4272] EXT4-fs (loop3): unmounting filesystem.
[   93.907581][ T4667] loop3: detected capacity change from 0 to 1764
[   94.173089][ T4663] loop1: detected capacity change from 0 to 2048
[   94.522111][ T4663] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   95.751077][ T4672] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set
[   98.122830][ T4271] EXT4-fs (loop1): unmounting filesystem.
[   98.476749][ T4706] device syzkaller1 entered promiscuous mode
[   98.527878][ T4713] loop3: detected capacity change from 0 to 64
[   98.590134][   T27] audit: type=1800 audit(1764086281.294:5): pid=4713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.81" name="file1" dev="loop3" ino=21 res=0 errno=0
[   98.710442][   T27] audit: type=1326 audit(1764086281.414:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4715 comm="syz.1.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e3fb8f749 code=0x7ffc0000
[   98.791585][ T4716] loop1: detected capacity change from 0 to 1024
[   98.812795][   T27] audit: type=1326 audit(1764086281.474:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4715 comm="syz.1.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f1e3fb8f749 code=0x7ffc0000
[   99.081390][ T4340] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   99.188794][   T27] audit: type=1326 audit(1764086281.474:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4715 comm="syz.1.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1e3fb8f783 code=0x7ffc0000
[   99.282236][   T27] audit: type=1326 audit(1764086281.474:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4715 comm="syz.1.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1e3fb8e1ff code=0x7ffc0000
[   99.367624][ T4340] usb 5-1: Using ep0 maxpacket: 16
[   99.415143][ T4340] usb 5-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01
[   99.445262][ T4340] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.454691][ T4340] usb 5-1: Product: syz
[   99.459543][ T4340] usb 5-1: Manufacturer: syz
[   99.551208][ T4340] usb 5-1: SerialNumber: syz
[   99.560067][ T4340] usb 5-1: config 0 descriptor??
[   99.570858][ T4340] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected.
[   99.844682][ T4340] pwc: Warning: more than 1 configuration available.
[   99.853529][ T4340] pwc: Failed to set LED on/off time (-71)
[   99.859851][ T4340] pwc: send_video_command error -71
[   99.866099][ T4340] pwc: Failed to set video mode VGA@30 fps; return code = -71
[   99.876406][ T4340] Philips webcam: probe of 5-1:0.0 failed with error -71
[   99.884188][   T27] audit: type=1326 audit(1764086281.484:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4715 comm="syz.1.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f1e3fb8f7d7 code=0x7ffc0000
[   99.893935][ T4340] usb 5-1: USB disconnect, device number 2
[   99.991463][   T27] audit: type=1326 audit(1764086281.494:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4715 comm="syz.1.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1e3fb8df90 code=0x7ffc0000
[  100.097828][   T27] audit: type=1326 audit(1764086281.494:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4715 comm="syz.1.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1e3fb8f34b code=0x7ffc0000
[  100.149311][   T27] audit: type=1326 audit(1764086281.534:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4715 comm="syz.1.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f1e3fb8e3aa code=0x7ffc0000
[  100.185170][   T27] audit: type=1326 audit(1764086281.534:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4715 comm="syz.1.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f1e3fb8e3aa code=0x7ffc0000
[  100.332913][ T4733] loop3: detected capacity change from 0 to 256
[  102.072371][ T4741] loop1: detected capacity change from 0 to 2048
[  102.301206][ T4741] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  104.171233][ T4778] loop2: detected capacity change from 0 to 1764
[  105.105577][ T4271] EXT4-fs (loop1): unmounting filesystem.
[  107.338376][ T4804] loop1: detected capacity change from 0 to 128
[  107.395290][ T4804] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  107.436418][ T4808] loop2: detected capacity change from 0 to 64
[  107.467494][ T4804] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  107.472772][ T4810] device syzkaller1 entered promiscuous mode
[  107.574663][   T27] kauditd_printk_skb: 27 callbacks suppressed
[  107.574674][   T27] audit: type=1800 audit(1764086290.284:42): pid=4808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.108" name="file1" dev="loop2" ino=21 res=0 errno=0
[  107.740343][ T4271] EXT4-fs (loop1): unmounting filesystem.
[  107.969430][ T4816] loop2: detected capacity change from 0 to 2048
[  108.024283][ T4823] loop0: detected capacity change from 0 to 512
[  108.087956][ T4816] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  108.102255][ T4823] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  108.164958][ T4823] EXT4-fs (loop0): warning: maximal mount count reached, running e2fsck is recommended
[  108.212955][ T4823] EXT4-fs error (device loop0): ext4_orphan_get:1400: comm syz.0.113: inode #15: comm syz.0.113: iget: illegal inode #
[  108.292489][ T4823] EXT4-fs (loop0): Remounting filesystem read-only
[  108.302323][ T4823] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.113: couldn't read orphan inode 15 (err -117)
[  108.348323][ T4823] EXT4-fs (loop0): Remounting filesystem read-only
[  108.365748][ T4823] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  108.427882][ T4823] EXT4-fs (loop0): shut down requested (1)
[  108.500512][ T4264] EXT4-fs (loop0): unmounting filesystem.
[  110.121402][ T4311] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[  110.208379][ T4277] EXT4-fs (loop2): unmounting filesystem.
[  110.449620][ T4311] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  110.479599][ T4311] usb 1-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  110.503844][ T4311] usb 1-1: config 0 interface 0 has no altsetting 0
[  110.518579][ T4311] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  110.530983][ T4311] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  110.548875][ T4311] usb 1-1: Product: syz
[  110.554856][ T4311] usb 1-1: Manufacturer: syz
[  110.559625][ T4311] usb 1-1: SerialNumber: syz
[  110.607421][ T4311] usb 1-1: config 0 descriptor??
[  110.650802][ T4311] snd-usb-audio: probe of 1-1:0.0 failed with error -22
[  110.666846][ T4285] udevd[4285]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  110.829667][   T14] usb 1-1: USB disconnect, device number 6
[  119.067033][  T954] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  119.275791][  T954] usb 2-1: Using ep0 maxpacket: 16
[  119.305902][  T954] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  119.319242][  T954] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.330476][  T954] usb 2-1: Product: syz
[  119.335019][  T954] usb 2-1: Manufacturer: syz
[  119.339880][  T954] usb 2-1: SerialNumber: syz
[  119.356123][  T954] r8152-cfgselector 2-1: config 0 descriptor??
[  119.790556][  T954] r8152-cfgselector 2-1: Unknown version 0x0000
[  119.803423][  T954] r8152-cfgselector 2-1: bad CDC descriptors
[  119.815147][  T954] r8152-cfgselector 2-1: Unknown version 0x0000
[  119.845795][  T954] r8152-cfgselector 2-1: USB disconnect, device number 4
[  121.166882][ T4931] device syzkaller1 entered promiscuous mode
[  121.501458][  T954] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[  121.715236][  T954] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  121.731501][  T954] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  121.760705][  T954] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  121.770092][  T954] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.779402][  T954] usb 4-1: Product: syz
[  121.787505][  T954] usb 4-1: Manufacturer: syz
[  121.839086][  T954] usb 4-1: SerialNumber: syz
[  122.259484][  T954] usb 4-1: 0:2 : does not exist
[  122.291605][  T954] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  122.351098][  T954] usb 4-1: USB disconnect, device number 3
[  122.661483][   T14] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[  122.746818][ T4285] udevd[4285]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  123.599942][ T4965] loop0: detected capacity change from 0 to 256
[  123.743832][   T14] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  124.164122][   T14] usb 3-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  125.393866][   T14] usb 3-1: config 0 interface 0 has no altsetting 0
[  125.443632][   T14] usb 3-1: string descriptor 0 read error: -71
[  125.481507][   T14] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  125.515740][ T4978] process 'syz.1.156' launched './file2' with NULL argv: empty string added
[  125.541401][   T14] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  125.696877][   T14] usb 3-1: config 0 descriptor??
[  125.712378][   T14] usb 3-1: can't set config #0, error -71
[  125.803585][   T14] usb 3-1: USB disconnect, device number 3
[  126.861975][   T27] audit: type=1326 audit(1764086309.034:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4995 comm="syz.0.162" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fed9478f749 code=0x0
[  126.918768][ T4999] loop0: detected capacity change from 0 to 512
[  127.000820][ T4999] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  127.027865][ T4999] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.162: iget: bad i_size value: 38620345925642
[  127.564266][ T4999] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.162: couldn't read orphan inode 15 (err -117)
[  127.821645][ T5008] loop1: detected capacity change from 0 to 256
[  127.996961][ T4999] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  128.491839][ T5009] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  129.163555][ T4264] EXT4-fs (loop0): unmounting filesystem.
[  129.233076][ T5030] Bluetooth: hci0: unsupported parameter 255
[  129.275319][ T5030] Bluetooth: hci0: unsupported parameter 255
[  130.617642][ T5023] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.626090][ T5023] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.770511][ T5064] netlink: 8 bytes leftover after parsing attributes in process `syz.4.181'.
[  132.390690][ T5068] loop4: detected capacity change from 0 to 128
[  132.441464][   T27] audit: type=1326 audit(1764086315.144:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5069 comm="syz.0.184" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fed9478f749 code=0x0
[  132.450325][ T5068] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  132.488641][ T5068] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  132.533229][ T5068] syz.4.183 (pid 5068) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  132.611032][ T5075] loop0: detected capacity change from 0 to 512
[  132.640665][ T5075] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  132.653056][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  132.659390][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  132.789061][ T4268] EXT4-fs (loop4): unmounting filesystem.
[  132.792824][ T5075] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.184: iget: bad i_size value: 38620345925642
[  132.811678][ T5075] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.184: couldn't read orphan inode 15 (err -117)
[  132.833005][ T5075] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  133.025257][ T5080] loop4: detected capacity change from 0 to 64
[  133.442356][ T5084] Invalid ELF header magic: != ELF
[  133.609592][   T27] audit: type=1804 audit(1764086316.144:45): pid=5084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.186" name="/newroot/27/file1/bus" dev="loop4" ino=21 res=1 errno=0
[  133.658115][   T27] audit: type=1800 audit(1764086316.154:46): pid=5084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.186" name="file1" dev="loop4" ino=22 res=0 errno=0
[  134.034460][ T4264] EXT4-fs (loop0): unmounting filesystem.
[  134.067015][ T5023] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  134.092799][ T5023] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  134.381682][ T5092] Bluetooth: hci0: unsupported parameter 255
[  134.391779][ T5092] Bluetooth: hci0: unsupported parameter 255
[  134.511563][    T7] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  134.671997][    T7] usb 5-1: device descriptor read/64, error -71
[  134.776662][ T5098] loop1: detected capacity change from 0 to 128
[  135.046061][ T5098] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  135.123199][ T5098] ext4 filesystem being mounted at /38/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  135.135694][    T7] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  135.154903][    C1] vkms_vblank_simulate: vblank timer overrun
[  135.303336][ T5105] comedi comedi3: 8255: I/O port conflict (0xffffffff80002002,4)
[  135.322457][    T7] usb 5-1: device descriptor read/64, error -71
[  135.338071][ T5105] comedi comedi3: 8255: I/O port conflict (0x10003,4)
[  135.364457][ T5105] comedi comedi3: 8255: I/O port conflict (0x8,4)
[  135.442304][    T7] usb usb5-port1: attempt power cycle
[  135.449445][ T4271] EXT4-fs (loop1): unmounting filesystem.
[  135.545515][ T5109] loop3: detected capacity change from 0 to 16
[  136.432216][ T5104] sched: RT throttling activated
[  136.442883][ T5109] erofs: (device loop3): mounted with root inode @ nid 36.
[  136.454570][ T5109] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  136.562885][ T5109] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117]
[  136.680561][ T5112] loop1: detected capacity change from 0 to 128
[  136.750436][ T5112] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  136.800471][   T27] audit: type=1326 audit(1764086319.504:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5114 comm="syz.3.198" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5495d8f749 code=0x0
[  136.805846][ T5112] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  136.901830][    T7] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  136.916194][ T5118] loop3: detected capacity change from 0 to 512
[  137.024509][    T7] usb 5-1: device descriptor read/8, error -71
[  137.030821][ T5023] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  137.040489][ T5118] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  137.041546][ T5023] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  137.063761][ T5023] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  137.079889][ T5118] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.198: iget: bad i_size value: 38620345925642
[  137.388059][ T5118] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.198: couldn't read orphan inode 15 (err -117)
[  137.690180][ T5023] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  137.693457][ T5118] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  137.710481][ T4271] EXT4-fs (loop1): unmounting filesystem.
[  138.377144][ T4272] EXT4-fs (loop3): unmounting filesystem.
[  138.678641][ T4311] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[  138.816271][ T5136] Bluetooth: hci0: unsupported parameter 255
[  138.837092][ T5136] Bluetooth: hci0: unsupported parameter 255
[  138.904988][ T4311] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4
[  138.920675][ T4311] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023
[  138.959217][ T4311] usb 1-1: config 0 interface 0 has no altsetting 0
[  138.988080][ T4311] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  139.002337][ T4311] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  139.010734][ T4311] usb 1-1: Product: syz
[  139.018673][ T4311] usb 1-1: Manufacturer: syz
[  139.025649][ T4311] usb 1-1: SerialNumber: syz
[  139.035292][ T4311] usb 1-1: config 0 descriptor??
[  139.135672][ T4311] usb 1-1: selecting invalid altsetting 0
[  139.843937][ T5124] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled
[  140.953805][ T5122] snd-usb-audio 1-1:0.0: Runtime PM usage count underflow!
[  140.976019][ T4340] usb 1-1: USB disconnect, device number 7
[  146.243455][ T4311] hid-generic FFFF:0008:0003.0001: item fetching failed at offset 0/2
[  146.278708][ T4311] hid-generic: probe of FFFF:0008:0003.0001 failed with error -22
[  146.304428][ T5189] loop0: detected capacity change from 0 to 256
[  148.422201][   T27] audit: type=1326 audit(1764086331.134:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5212 comm="syz.2.228" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8633d8f749 code=0x0
[  148.505346][ T5214] loop2: detected capacity change from 0 to 512
[  148.525787][ T5214] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  148.667160][ T5218] loop0: detected capacity change from 0 to 2048
[  148.692470][ T5214] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.228: iget: bad i_size value: 38620345925642
[  148.716523][ T5218] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[  148.765488][ T5214] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.228: couldn't read orphan inode 15 (err -117)
[  148.811410][ T5218] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  148.844416][ T5214] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  148.904165][ T5218] UDF-fs: unknown compression code (0)
[  149.062234][ T5214] EXT4-fs error (device loop2): ext4_lookup:1858: inode #15: comm syz.2.228: iget: bad i_size value: 38620345925642
[  149.095669][ T5221] EXT4-fs error (device loop2): ext4_lookup:1858: inode #15: comm syz.2.228: iget: bad i_size value: 38620345925642
[  149.127694][ T4460] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.835837][ T4460] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.934268][   T22] hid-generic FFFF:0008:0003.0002: item fetching failed at offset 0/2
[  149.974662][   T22] hid-generic: probe of FFFF:0008:0003.0002 failed with error -22
[  150.469288][ T4277] EXT4-fs (loop2): unmounting filesystem.
[  151.125496][ T4460] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.201713][ T4266] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  151.211013][ T4266] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  151.230494][ T4266] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  151.242168][ T4266] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  151.250858][ T4266] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  151.258648][ T4266] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  151.309007][ T4460] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.339213][ T4266] Bluetooth: hci2: command 0x0409 tx timeout
[  154.676077][ T4325] hid-generic FFFF:0008:0003.0003: item fetching failed at offset 0/2
[  154.705171][ T4325] hid-generic: probe of FFFF:0008:0003.0003 failed with error -22
[  154.878874][ T5239] chnl_net:caif_netlink_parms(): no params data found
[  155.371445][ T4276] Bluetooth: hci2: command 0x041b tx timeout
[  155.746969][ T5295] capability: warning: `syz.4.247' uses deprecated v2 capabilities in a way that may be insecure
[  156.617574][ T5314] loop4: detected capacity change from 0 to 1764
[  157.175594][ T5239] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.184952][ T5239] bridge0: port 1(bridge_slave_0) entered disabled state
[  157.200390][ T5239] device bridge_slave_0 entered promiscuous mode
[  157.251261][ T5239] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.451395][ T4276] Bluetooth: hci2: command 0x040f tx timeout
[  157.480628][ T5239] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.500859][ T5239] device bridge_slave_1 entered promiscuous mode
[  158.082383][ T5239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  158.133651][ T5239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  158.312079][   T22] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  158.522667][   T22] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  158.541981][   T22] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  158.551267][   T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.206064][ T4318] hid-generic FFFF:0008:0003.0004: item fetching failed at offset 0/2
[  159.220070][   T22] usb 4-1: config 0 descriptor??
[  159.228968][ T4318] hid-generic: probe of FFFF:0008:0003.0004 failed with error -22
[  159.252377][ T5239] team0: Port device team_slave_0 added
[  159.325056][ T5239] team0: Port device team_slave_1 added
[  159.383346][ T5341] loop0: detected capacity change from 0 to 128
[  159.531853][ T4276] Bluetooth: hci2: command 0x0419 tx timeout
[  159.889267][ T5348] loop0: detected capacity change from 0 to 256
[  159.942684][   T22] usbhid 4-1:0.0: can't add hid device: -32
[  159.950581][   T22] usbhid: probe of 4-1:0.0 failed with error -32
[  160.066177][ T5352] loop4: detected capacity change from 0 to 256
[  160.103091][ T5352] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  160.161242][ T5239] batman_adv: batadv0: Adding interface: batadv_slave_0
[  160.168872][ T5239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  160.233893][ T5239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  160.241901][ T5352] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  160.249104][ T5239] batman_adv: batadv0: Adding interface: batadv_slave_1
[  160.260757][ T5239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  160.280303][ T5355] loop0: detected capacity change from 0 to 64
[  160.291587][ T5352] FAT-fs (loop4): Filesystem has been set read-only
[  160.313600][ T5352] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  160.325174][ T5352] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  160.334636][ T5352] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  160.343618][ T5352] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  160.353128][ T5239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  160.364092][ T5352] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  160.382371][ T4460] device hsr_slave_0 left promiscuous mode
[  160.382796][ T5352] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  160.402975][ T5352] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  160.511138][ T4460] device hsr_slave_1 left promiscuous mode
[  160.513598][ T5352] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  160.527011][ T4460] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  160.541509][ T4460] batman_adv: batadv0: Removing interface: batadv_slave_0
[  160.551142][ T4460] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  160.668444][ T5352] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  160.682534][ T4460] batman_adv: batadv0: Removing interface: batadv_slave_1
[  161.054628][   T27] audit: type=1804 audit(1764086343.754:49): pid=5361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.262" name="/newroot/69/file1/bus" dev="loop0" ino=21 res=1 errno=0
[  161.314080][ T4460] device bridge_slave_1 left promiscuous mode
[  161.373049][ T4460] bridge0: port 2(bridge_slave_1) entered disabled state
[  161.426732][ T4325] usb 4-1: USB disconnect, device number 4
[  161.432737][   T27] audit: type=1800 audit(1764086343.764:50): pid=5361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.262" name="file1" dev="loop0" ino=22 res=0 errno=0
[  161.526200][ T4460] device bridge_slave_0 left promiscuous mode
[  161.551049][ T4460] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.579960][ T5352] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  161.649453][ T5352] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  161.681168][ T5352] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  161.698227][ T4460] device veth1_macvtap left promiscuous mode
[  161.699263][ T5352] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  161.712197][ T4460] device veth0_macvtap left promiscuous mode
[  161.719420][ T5352] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  161.728360][ T4460] device veth1_vlan left promiscuous mode
[  161.728467][ T5352] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  161.741649][ T4460] device veth0_vlan left promiscuous mode
[  161.751088][ T5352] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  161.760047][ T5352] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  161.775821][ T5352] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  161.786878][ T5352] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  161.800882][ T5352] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  161.811551][ T5352] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  161.820796][ T5352] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  161.842384][ T5352] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  161.876837][   T27] audit: type=1800 audit(1764086344.584:51): pid=5352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.261" name="file1" dev="loop4" ino=1048599 res=0 errno=0
[  162.373954][ T4325] usb 4-1: new full-speed USB device number 5 using dummy_hcd
[  162.693053][ T4325] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4
[  162.710568][ T4325] usb 4-1: config 0 interface 0 has no altsetting 0
[  162.728570][ T4325] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  162.744120][ T4325] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  162.756469][ T4325] usb 4-1: Product: syz
[  162.760813][ T4325] usb 4-1: Manufacturer: syz
[  162.767107][ T4325] usb 4-1: SerialNumber: syz
[  163.108847][ T4325] usb 4-1: config 0 descriptor??
[  163.372682][ T4325] usb 4-1: selecting invalid altsetting 0
[  163.620133][ T4325] usb 4-1: USB disconnect, device number 5
[  165.699659][ T4392] hid-generic FFFF:0008:0003.0005: item fetching failed at offset 0/2
[  165.746602][ T4453] udevd[4453]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  165.832124][ T4392] hid-generic: probe of FFFF:0008:0003.0005 failed with error -22
[  168.705954][ T4460] team0 (unregistering): Port device team_slave_1 removed
[  168.915402][ T4460] team0 (unregistering): Port device team_slave_0 removed
[  169.084035][ T4460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  169.210512][ T4460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  172.040328][ T5453] loop2: detected capacity change from 0 to 1764
[  174.247904][ T4460] bond0 (unregistering): Released all slaves
[  174.536870][ T5239] device hsr_slave_0 entered promiscuous mode
[  174.550505][ T5239] device hsr_slave_1 entered promiscuous mode
[  174.557765][ T5239] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  174.572923][ T5239] Cannot create hsr debugfs directory
[  174.787654][ T5429] device syzkaller1 entered promiscuous mode
[  174.820642][ T5239] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  174.964762][ T5239] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  175.000443][ T5239] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  175.071568][ T5239] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  175.691635][ T4318] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[  176.080168][  T954] hid-generic FFFF:0008:0003.0006: item fetching failed at offset 0/2
[  176.130911][  T954] hid-generic: probe of FFFF:0008:0003.0006 failed with error -22
[  176.303977][ T4318] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4
[  176.329260][ T5239] 8021q: adding VLAN 0 to HW filter on device bond0
[  176.364815][ T4318] usb 3-1: config 0 interface 0 has no altsetting 0
[  176.399546][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  176.420708][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  176.458310][ T5239] 8021q: adding VLAN 0 to HW filter on device team0
[  176.475106][ T4318] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  176.479040][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  176.503393][ T4318] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  176.524032][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  176.541627][    T7] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  176.563367][ T4367] bridge0: port 1(bridge_slave_0) entered blocking state
[  176.570536][ T4367] bridge0: port 1(bridge_slave_0) entered forwarding state
[  176.596356][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  176.605325][ T4318] usb 3-1: Product: syz
[  176.628177][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  176.648523][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  176.651451][ T4318] usb 3-1: Manufacturer: syz
[  176.668232][ T4367] bridge0: port 2(bridge_slave_1) entered blocking state
[  176.675416][ T4318] usb 3-1: SerialNumber: syz
[  176.680155][ T4367] bridge0: port 2(bridge_slave_1) entered forwarding state
[  176.709282][ T4318] usb 3-1: config 0 descriptor??
[  176.731471][    T7] usb 1-1: Using ep0 maxpacket: 8
[  176.739717][    T7] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  176.760468][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  176.782604][    T7] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  176.784928][ T4318] usb 3-1: selecting invalid altsetting 0
[  176.797974][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  176.837804][    T7] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  176.875246][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  176.886783][    T7] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  176.905153][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  176.915916][    T7] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  176.943055][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  176.956841][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  176.965814][    T7] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  176.982796][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  176.992646][ T5496] ==================================================================
[  177.000713][ T5496] BUG: KASAN: slab-out-of-bounds in copy_to_urb+0x21f/0x410
[  177.008001][ T5496] Write of size 264 at addr ffff888056263500 by task syz.2.297/5496
[  177.015968][ T5496] 
[  177.018289][ T5496] CPU: 0 PID: 5496 Comm: syz.2.297 Not tainted syzkaller #0
[  177.025576][ T5496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  177.035668][ T5496] Call Trace:
[  177.038929][ T5496]  <TASK>
[  177.041850][ T5496]  dump_stack_lvl+0x168/0x22e
[  177.046538][ T5496]  ? __lock_acquire+0x7c50/0x7c50
[  177.051589][ T5496]  ? show_regs_print_info+0x12/0x12
[  177.056809][ T5496]  ? load_image+0x3b0/0x3b0
[  177.061347][ T5496]  ? _raw_spin_lock_irqsave+0xb0/0xf0
[  177.066743][ T5496]  ? __virt_addr_valid+0x188/0x540
[  177.071881][ T5496]  ? __virt_addr_valid+0x465/0x540
[  177.077020][ T5496]  ? copy_to_urb+0x21f/0x410
[  177.081632][ T5496]  print_report+0xa8/0x210
[  177.086504][ T5496]  kasan_report+0x10b/0x140
[  177.091029][ T5496]  ? copy_to_urb+0x21f/0x410
[  177.095652][ T5496]  ? copy_to_urb+0x21f/0x410
[  177.100263][ T5496]  kasan_check_range+0x27b/0x290
[  177.105327][ T5496]  memcpy+0x3c/0x60
[  177.109162][ T5496]  copy_to_urb+0x21f/0x410
[  177.113609][ T5496]  prepare_playback_urb+0x912/0x1440
[  177.118934][ T5496]  snd_usb_endpoint_start+0x49c/0x1280
[  177.124422][ T5496]  ? snd_usb_endpoint_get_clock_rate+0x100/0x100
[  177.130770][ T5496]  ? __rwlock_init+0x140/0x140
[  177.135558][ T5496]  start_endpoints+0xa1/0x270
[  177.140258][ T5496]  ? snd_usb_substream_playback_trigger+0x3d9/0x7d0
[  177.146876][ T5496]  snd_usb_substream_playback_trigger+0x3eb/0x7d0
[  177.153321][ T5496]  snd_pcm_action+0xda/0x230
[  177.157946][ T5496]  __snd_pcm_lib_xfer+0x179f/0x1c70
[  177.163171][ T5496]  ? fill_silence+0x240/0x240
[  177.167865][ T5496]  ? __snd_pcm_lib_xfer+0x1c70/0x1c70
[  177.173611][ T5496]  ? __mutex_unlock_slowpath+0x19e/0x6a0
[  177.179267][ T5496]  ? resample_expand+0x7e0/0x860
[  177.184235][ T5496]  ? pcm_lib_apply_appl_ptr+0x540/0x540
[  177.189810][ T5496]  snd_pcm_oss_write3+0x1b8/0x310
[  177.194860][ T5496]  snd_pcm_plug_write_transfer+0x2b4/0x4a0
[  177.200777][ T5496]  ? snd_pcm_plug_client_channels_buf+0x600/0x600
[  177.207216][ T5496]  ? snd_pcm_plug_client_channels_buf+0x466/0x600
[  177.213661][ T5496]  snd_pcm_oss_write+0xbae/0x1110
[  177.218711][ T5496]  ? snd_pcm_oss_read+0x8b0/0x8b0
[  177.223756][ T5496]  ? end_current_label_crit_section+0x14b/0x170
[  177.230024][ T5496]  ? common_file_perm+0x171/0x1c0
[  177.235077][ T5496]  ? fsnotify_perm+0x5a/0x550
[  177.239774][ T5496]  ? security_file_permission+0x75/0xa0
[  177.245340][ T5496]  ? snd_pcm_oss_read+0x8b0/0x8b0
[  177.250382][ T5496]  vfs_write+0x2c4/0x960
[  177.254651][ T5496]  ? file_end_write+0x250/0x250
[  177.254951][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  177.259500][ T5496]  ? __fget_files+0x28/0x4d0
[  177.259524][ T5496]  ? __fget_files+0x44a/0x4d0
[  177.259545][ T5496]  ? __fdget_pos+0x1d4/0x360
[  177.259563][ T5496]  ? ksys_write+0x71/0x240
[  177.285528][ T5496]  ksys_write+0x143/0x240
[  177.289490][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  177.289862][ T5496]  ? __ia32_sys_read+0x80/0x80
[  177.289889][ T5496]  ? lockdep_hardirqs_on+0x94/0x140
[  177.307114][ T5496]  do_syscall_64+0x4c/0xa0
[  177.311000][ T5239] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  177.311533][ T5496]  ? clear_bhb_loop+0x60/0xb0
[  177.311554][ T5496]  ? clear_bhb_loop+0x60/0xb0
[  177.311570][ T5496]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  177.337097][ T5496] RIP: 0033:0x7f8633d8f749
[  177.341548][ T5496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  177.351560][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  177.361417][ T5496] RSP: 002b:00007f8634c7a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  177.361452][ T5496] RAX: ffffffffffffffda RBX: 00007f8633fe5fa0 RCX: 00007f8633d8f749
[  177.361464][ T5496] RDX: 00000000000005ce RSI: 0000200000000640 RDI: 0000000000000004
[  177.361474][ T5496] RBP: 00007f8633e13f91 R08: 0000000000000000 R09: 0000000000000000
[  177.379012][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  177.385616][ T5496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  177.385629][ T5496] R13: 00007f8633fe6038 R14: 00007f8633fe5fa0 R15: 00007fff6f68daa8
[  177.385646][ T5496]  </TASK>
[  177.385653][ T5496] 
[  177.385656][ T5496] Allocated by task 5496:
[  177.385663][ T5496]  kasan_set_track+0x4b/0x70
[  177.439517][ T5496]  __kasan_kmalloc+0x8e/0xa0
[  177.444120][ T5496]  __kmalloc+0xb0/0x240
[  177.448282][ T5496]  snd_usb_endpoint_set_params+0x16bb/0x2a50
[  177.454303][ T5496]  snd_usb_hw_params+0x123a/0x19b0
[  177.459430][ T5496]  snd_pcm_hw_params+0x829/0x1c50
[  177.464472][ T5496]  snd_pcm_oss_change_params_locked+0x222c/0x3ee0
[  177.470904][ T5496]  snd_pcm_oss_write+0x2f8/0x1110
[  177.475941][ T5496]  vfs_write+0x2c4/0x960
[  177.480198][ T5496]  ksys_write+0x143/0x240
[  177.484552][ T5496]  do_syscall_64+0x4c/0xa0
[  177.488979][ T5496]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  177.494887][ T5496] 
[  177.497209][ T5496] The buggy address belongs to the object at ffff888056263500
[  177.497209][ T5496]  which belongs to the cache kmalloc-128 of size 128
[  177.511274][ T5496] The buggy address is located 0 bytes inside of
[  177.511274][ T5496]  128-byte region [ffff888056263500, ffff888056263580)
[  177.524387][ T5496] 
[  177.526712][ T5496] The buggy address belongs to the physical page:
[  177.533138][ T5496] page:ffffea00015898c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x56263
[  177.543301][ T5496] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff)
[  177.550874][ T5496] raw: 00fff00000000200 0000000000000000 dead000000000001 ffff8880174418c0
[  177.559470][ T5496] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[  177.568059][ T5496] page dumped because: kasan: bad access detected
[  177.574492][ T5496] page_owner tracks the page as allocated
[  177.580223][ T5496] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY), pid 4318, tgid 4318 (kworker/1:3), ts 61927953215, free_ts 11843028032
[  177.598484][ T5496]  post_alloc_hook+0x173/0x1a0
[  177.603275][ T5496]  get_page_from_freelist+0x1a26/0x1ac0
[  177.608846][ T5496]  __alloc_pages+0x1df/0x4e0
[  177.613457][ T5496]  alloc_slab_page+0x5d/0x160
[  177.618152][ T5496]  new_slab+0x87/0x2c0
[  177.622250][ T5496]  ___slab_alloc+0xbc6/0x1230
[  177.626951][ T5496]  __kmem_cache_alloc_node+0x1a0/0x260
[  177.632419][ T5496]  kmalloc_trace+0x26/0xe0
[  177.636854][ T5496]  __hw_addr_add_ex+0x1f4/0x760
[  177.641720][ T5496]  dev_mc_add+0x9d/0x110
[  177.645972][ T5496]  igmp6_group_added+0x1a1/0x530
[  177.650918][ T5496]  __ipv6_dev_mc_inc+0x8e5/0xa90
[  177.655871][ T5496]  addrconf_dad_work+0x3b9/0x14d0
[  177.660908][ T5496]  process_one_work+0x898/0x1160
[  177.665863][ T5496]  worker_thread+0xaa2/0x1250
[  177.670552][ T5496]  kthread+0x29d/0x330
[  177.674632][ T5496] page last free stack trace:
[  177.679308][ T5496]  free_unref_page_prepare+0x8b4/0x9a0
[  177.684782][ T5496]  free_unref_page+0x2e/0x3f0
[  177.689477][ T5496]  free_contig_range+0x9d/0x150
[  177.694343][ T5496]  destroy_args+0x100/0xa31
[  177.698863][ T5496]  debug_vm_pgtable+0x32a/0x37e
[  177.703730][ T5496]  do_one_initcall+0x214/0x7a0
[  177.708513][ T5496]  do_initcall_level+0x137/0x1e4
[  177.713483][ T5496]  do_initcalls+0x4b/0x8a
[  177.717837][ T5496]  kernel_init_freeable+0x3fa/0x5ac
[  177.723055][ T5496]  kernel_init+0x19/0x1b0
[  177.726420][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  177.727386][ T5496]  ret_from_fork+0x1f/0x30
[  177.727411][ T5496] 
[  177.727415][ T5496] Memory state around the buggy address:
[  177.727424][ T5496]  ffff888056263400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  177.727434][ T5496]  ffff888056263480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  177.735714][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  177.739099][ T5496] >ffff888056263500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc
[  177.739107][ T5496]                                                                 ^
[  177.739116][ T5496]  ffff888056263580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  177.739124][ T5496]  ffff888056263600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  177.739130][ T5496] ==================================================================
[  177.739155][ T5496] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  177.739163][ T5496] CPU: 0 PID: 5496 Comm: syz.2.297 Not tainted syzkaller #0
[  177.739176][ T5496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  177.739184][ T5496] Call Trace:
[  177.739190][ T5496]  <TASK>
[  177.739198][ T5496]  dump_stack_lvl+0x168/0x22e
[  177.739220][ T5496]  ? memcpy+0x3c/0x60
[  177.739241][ T5496]  ? show_regs_print_info+0x12/0x12
[  177.739259][ T5496]  ? load_image+0x3b0/0x3b0
[  177.739282][ T5496]  panic+0x2c9/0x710
[  177.739300][ T5496]  ? __lock_acquire+0x7c50/0x7c50
[  177.739320][ T5496]  ? bpf_jit_dump+0xd0/0xd0
[  177.739340][ T5496]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  177.739361][ T5496]  ? _raw_spin_unlock+0x40/0x40
[  177.739383][ T5496]  check_panic_on_warn+0x80/0xa0
[  177.739400][ T5496]  ? copy_to_urb+0x21f/0x410
[  177.739417][ T5496]  end_report+0x66/0x110
[  177.739435][ T5496]  kasan_report+0x118/0x140
[  177.739454][ T5496]  ? copy_to_urb+0x21f/0x410
[  177.739472][ T5496]  ? copy_to_urb+0x21f/0x410
[  177.739489][ T5496]  kasan_check_range+0x27b/0x290
[  177.739507][ T5496]  memcpy+0x3c/0x60
[  177.739533][ T5496]  copy_to_urb+0x21f/0x410
[  177.739554][ T5496]  prepare_playback_urb+0x912/0x1440
[  177.739580][ T5496]  snd_usb_endpoint_start+0x49c/0x1280
[  177.739603][ T5496]  ? snd_usb_endpoint_get_clock_rate+0x100/0x100
[  177.739620][ T5496]  ? __rwlock_init+0x140/0x140
[  177.739641][ T5496]  start_endpoints+0xa1/0x270
[  177.739657][ T5496]  ? snd_usb_substream_playback_trigger+0x3d9/0x7d0
[  177.739677][ T5496]  snd_usb_substream_playback_trigger+0x3eb/0x7d0
[  177.739697][ T5496]  snd_pcm_action+0xda/0x230
[  177.739716][ T5496]  __snd_pcm_lib_xfer+0x179f/0x1c70
[  177.739737][ T5496]  ? fill_silence+0x240/0x240
[  177.739752][ T5496]  ? __snd_pcm_lib_xfer+0x1c70/0x1c70
[  177.739771][ T5496]  ? __mutex_unlock_slowpath+0x19e/0x6a0
[  177.739789][ T5496]  ? resample_expand+0x7e0/0x860
[  177.739805][ T5496]  ? pcm_lib_apply_appl_ptr+0x540/0x540
[  177.739826][ T5496]  snd_pcm_oss_write3+0x1b8/0x310
[  177.739843][ T5496]  snd_pcm_plug_write_transfer+0x2b4/0x4a0
[  177.739862][ T5496]  ? snd_pcm_plug_client_channels_buf+0x600/0x600
[  177.739884][ T5496]  ? snd_pcm_plug_client_channels_buf+0x466/0x600
[  177.739903][ T5496]  snd_pcm_oss_write+0xbae/0x1110
[  177.739924][ T5496]  ? snd_pcm_oss_read+0x8b0/0x8b0
[  177.739937][ T5496]  ? end_current_label_crit_section+0x14b/0x170
[  177.739960][ T5496]  ? common_file_perm+0x171/0x1c0
[  177.739981][ T5496]  ? fsnotify_perm+0x5a/0x550
[  177.739996][ T5496]  ? security_file_permission+0x75/0xa0
[  177.740013][ T5496]  ? snd_pcm_oss_read+0x8b0/0x8b0
[  177.740027][ T5496]  vfs_write+0x2c4/0x960
[  177.740048][ T5496]  ? file_end_write+0x250/0x250
[  177.740067][ T5496]  ? __fget_files+0x28/0x4d0
[  177.740085][ T5496]  ? __fget_files+0x44a/0x4d0
[  177.740105][ T5496]  ? __fdget_pos+0x1d4/0x360
[  177.740122][ T5496]  ? ksys_write+0x71/0x240
[  177.740140][ T5496]  ksys_write+0x143/0x240
[  177.740160][ T5496]  ? __ia32_sys_read+0x80/0x80
[  177.740180][ T5496]  ? lockdep_hardirqs_on+0x94/0x140
[  177.740199][ T5496]  do_syscall_64+0x4c/0xa0
[  177.740214][ T5496]  ? clear_bhb_loop+0x60/0xb0
[  177.740229][ T5496]  ? clear_bhb_loop+0x60/0xb0
[  177.740246][ T5496]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  177.740262][ T5496] RIP: 0033:0x7f8633d8f749
[  177.740276][ T5496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  177.740289][ T5496] RSP: 002b:00007f8634c7a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  177.740306][ T5496] RAX: ffffffffffffffda RBX: 00007f8633fe5fa0 RCX: 00007f8633d8f749
[  177.740318][ T5496] RDX: 00000000000005ce RSI: 0000200000000640 RDI: 0000000000000004
[  177.740328][ T5496] RBP: 00007f8633e13f91 R08: 0000000000000000 R09: 0000000000000000
[  177.740338][ T5496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  177.740347][ T5496] R13: 00007f8633fe6038 R14: 00007f8633fe5fa0 R15: 00007fff6f68daa8
[  177.740364][ T5496]  </TASK>
[  177.741762][ T5496] Kernel Offset: disabled
[  178.199423][ T5496] Rebooting in 86400 seconds..