last executing test programs:

6.864307139s ago: executing program 3 (id=59):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000000)={0x40, 0xe, 0x2, "011c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

6.198779258s ago: executing program 2 (id=62):
r0 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x89\xf0\x9e\b\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93<u\xbe\xeag\xd2\x04e\xf2s\xde}o#\x90\xda\x9cs,r\xfd:\xcb\xc7\vTmPZJ\xac\x8b\xd0\xc0\xbcRK\xcb\x1e8\xce\xbd[N\xb0\xb4<\xeb\x86[\xec\x8f\x14\n\x83\x9e&\\\xb7!\xed\xa0\xc3,\x90m\x0f\x00\x00\x00\x00\x00\x00\xff\xd0\xb3\x94\x00\x00\x00\x00\x00\x00\x00\x9dH\xf8\xffRo\xa3W\xe1\xed\x8eS\xaeX\x93\x7f\xd3\xb9\x84Q\x9c\"\xd9\xf5\xe4e\xf9\xcam\xe3\x03\xe4\xad\xd5&A\x02\xc8\xa9\xfe\xcb\x87\xd9\xd3\x8c\f\xc08T~\xc4\xbd\x90?\x1f\x9c\x9b0\x19 \x9f\xd1p`\xc0/\x00u\x19\x1d\xac\xe8%\xb7\t\x9f4\xbb\x89\xe9\xc1\x81\xb0\xd6\xf7\x90\x1f\x94\x01M.\x16\x05\x16\xb9\xe9\xdc~\xd3-s\xe6;\x94\x1c^\x06\xdav;\xccD\x95sj\xe0\xd5\xbeS\xac\xe5N\xea\x9eyl[[\xce5\xee\x05\x9c\x96\xabJ^c\xf7\x19\xb4\xd8\xe4\x87\x9dp\xea?/\xcb\x9a\xaa5\'Q\fuG\x81\x8a@\x97M=v\xfe\a\xabp\xf3\x93\x9d\x7f@9\xc0\xd2\xf1\x00\x10\x00\x00\x00\x00\x00\x00\x82\x13\xb2\xa9\xef\xa5\xf8\x8bk\xb3\x9ev\x92\x0e\xd1\x1f\x17Dx[\xad\xb0\x9d/\x96\xe42mO\x9fh\xea\xf3\x14\xcd\x96\x89_)\x1b\xe2\xd6\b\x94b\xaf;\x92T\xafz\x94\x9fG\xfb\xfd|$k\x03\xd7;\x9ay\xee\xf9W?\xb3\xf9\xf8I.E4\xc3eWq\xfa\":$\xd0\x17Q\x94\xf5\xe5mk\x8e&\xf1;#z\xef*\xce\x99\x04\xb9\x90\xbc\xc9#-\x8di\xae\xc5\xdf\x13\xd2K\x8b\xf5\f\xb2x\xdd\xd5\xb4\xa9^~O<\x12\xe3\xc3P|7\xc4\xc8\xb1r0Z\x98\x87^\xc8C\x1b\x96\xb4lsyF\xc5\xbc\xffOE\xe9\xd70\xe7\xfep\x83\xa7\xa1\xd9\xe4\xba\x92\x17\xbf\xe0\xe1\x01\xb7\x8b\x18j\x19n\xc8\xff\xe9\xf4\xf4\xcf a\xd7_w\x0f\x9dF\xae\xccA-/\x83\xabU\xd5\xbf8\xa4O\xb4\xef\xc8\xccH\xd1=\xbe\xbex\xb5-\x05\x01\x11\xfa\xcf\x1dm\xb5X\xe9\xb5O\x15\xc7;Lb\xce\x1a\xcc\x98\xe8\xe9e\xe0\xc2N\xe7\xd7\x1d\x92\x87F8\x9e\xf7\xdd\xdaW\xf5X\x80\xa0f\xceo\xd8\x7f\xc0\x96\bSB\xce&\x04$\xc3\xe31U\x84\x82\xf0{i\x1d\x02\x10\xc6C\x01^\xcf\x93?w\x01\x84\xa0\xd6\xa2\x10\xa4\xfcG\xabD\xd6dGZ\xb2Cx\x1b\xfdD9\x17\xe6\xcauM\xe3\x05)\xe2\x03\xe2j$F1n@\xde\n9t.[\xad\xb5\f<o\xdb\xa4\x90\xc4\xd0I\xa6\x96\xa1\x00\xbb\xdd\x94\x00t/1YekG\x7f\xbdrI\x1e\x8a4=\xa2\xe9\x82<\x9e|\xf5\xa4\x05#\x7f\xa8\x01\x00\x82ih\xf9?\x03Q\xf5\xc4\x95\x99 \xa7v~:$\x02O\xe3\xaa\x1f\x00\xebh\'\xd2q\x10\x1e\x94n\xd7w\xb1\xc8G\x89\xf4\x8ct\xf9R\x85\x1b8OE\x04\x9a\xd8\x80\x10x\xbf\n0\b,r\xc6r\xf7=\xfe\xc1\x16\xe6\xee\xbb:-h\xba\x8b\x14\x9a?\x8e\x03;\xe5\x04\xd8\xa9\x9a\xd3\x05(\x7f|\xadU\xafe\x87V.i4$6U,R\x9b\n{\'\xfe1\xc4\xb09\x96{\xc0e\xa1\xe7\xa9\xb4\x1a\n\xf5\xd7zuvz\x972\xd4\xfb\x13u2\xab\x18\x01~r\xbbcW!)\xf4\x9b\x1dI\x9ex;\xb2\xe3I\xbd\x16T\xb75\xa6\a\xb7\xa1\x8d\xc9\x12\xb1\xbd\xbc\xd9c\xe9\xe6k\xee\x06\x83\xf4\xab\x18\x038\x8f\xc9^\x0f\xab\xea&P\b\xef#\xf6\xc3\xfc\xd4\xa0\xfd\x15N\xd3\xa0\x80\x9f\bU\xa63\xf6\xc9\xecZ`\xa4\xa0(\xf9\x98B\xaf\xde*\x91\xddk\xa1`d\xf0\x97\xc9e\xc1\"EC\x9a?x\x89\x8d\xb3\xfaF}\x82D\xf8\f\xf1`\x90D\xd1|%(\xd8\t\xea\x00C\xce\x7fo+?v\xee\xc6bL\x1d\xbe\x84p\x8d\xa3\xec\xf7\xe0\xfe\x8c=<\xf2\x1f@\xe66E\xa7\x9c\xd3\xb6\xf5\xe0\x14\xb8\xd4`\x85\xe3;\x8c\xf8\xf2\xd9)\x0e\xd0\xff\xa5K\xf3\xf1\xc4\x18\xf4Z\xdci\x91\x84\xe8\xb7\x10\x90\xbc\xect\x14\xdfR\xe2\x80\xf8a\x92\xb2R\xdf0\xcaQ\xdf\x87\xbdjp\x1ch3h\xcf<\x82\x97\xa5s/m\xb2\x1dd\xf7\xfc\xf5\xa9\x1d\xd34{\xcc\x1f\t,i\x16\x82\xad\x8e\xb6\x17\x0f\xaa\x85^/w\xbb~\xff\xce\x92\x90\x83\n\xe5\x14\x95\x92|\xfe-S%\x91i\xafh\x97z\x00@K\xbb\xc2\fcD\xff\xdcl\xa1\xfaR\xbc\xd0k\\\x92\x19a6Sv\x05%{\xe2\xe9\xf1\xddRB$8\xb0q9\xa1g&\x17\xe5P\xef\xb1<\xb6\xe2\xb2\xc06^\x0f4\xba\x10\xba\x00\x00\x00\x00\x00\x00\x00\x00\xef\xba\"\xb7\xc7~T\xc4Ei\xfdk\xa9\"F\xa9C\xa0\xd3\xa0\x1b\xbf\x13\xfb\x14S<\xa6\n5\x86\x9e\xb2=8\'g`\x8f\xa8\x027\xbd\xb5s\xe9dti\xc0\xbd\\H\xe5v\xdd\x0fP\x8b+-\x02i\x8eZU\xa8YB\xfc\xc2R7\xe9\x11\x06\x1aRd\xa93\xa1\\\xf4_s\xf7\xe8+\xbdg\x13\xaea\x04\xd8\x82\xf6\x90\xaf1\x86b\x81J\xb7E\xb0\xe2\xd0\xac\x01\x9b\x98\xcb\xf9\xde=\xd6T\x8d\xea\xab\xa9Z!\xd3-\xa6_\xc4\xa4\xb6+\x89\xdc]O<g\x06~\x12W\x86\x06\xba\x15#\xa7Q\xffa\x926>\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0x8)
fsetxattr$security_capability(r0, &(0x7f00000000c0), &(0x7f0000000100)=@v2, 0x14, 0x0)
fchown(r0, 0x0, 0x0)

5.630365277s ago: executing program 1 (id=64):
r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r0, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x8e}}]}, 0x4c}}, 0x0)

5.186161104s ago: executing program 4 (id=65):
r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0)
ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000640)=0x31)
ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x1000005})

4.924509958s ago: executing program 2 (id=66):
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100))
setns(r0, 0x0)

4.529509705s ago: executing program 0 (id=67):
openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00', 0x9})

4.434309309s ago: executing program 1 (id=68):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x18, r1, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0xff07}, 0x2000000)

4.343720981s ago: executing program 4 (id=69):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp-reno\x00', 0xb)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x7f, 0x4)

4.009151323s ago: executing program 2 (id=70):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00')
read$FUSE(r0, &(0x7f0000001600)={0x2020}, 0x2020)
preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/187, 0xbb}], 0x1, 0x4c, 0x0)

3.826550684s ago: executing program 3 (id=71):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x800, 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000000480)={0x2020}, 0x2020)

3.826296133s ago: executing program 0 (id=72):
r0 = socket(0x2b, 0x80801, 0x1)
setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, 0x0, 0x0)
sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x20000004)

3.704794194s ago: executing program 1 (id=73):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000140)={0x76ea54f26d7c4765, 0x0, 0x0, 0x0, 0x0, 0x0})

3.148048521s ago: executing program 4 (id=74):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x7)

3.070908807s ago: executing program 2 (id=75):
syz_mount_image$minix(&(0x7f0000002580), &(0x7f0000000100)='./bus\x00', 0x2a14c1c, &(0x7f00000003c0)=ANY=[], 0x2, 0x233, &(0x7f0000000780)="$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")
mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2012024, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x275a, 0x0)

3.038663594s ago: executing program 0 (id=76):
r0 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r0, &(0x7f0000000000)=@abs={0x1}, 0x6e)
bind$unix(r0, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x2)

2.902725683s ago: executing program 3 (id=77):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f00000007c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',debug=f'])

2.750377839s ago: executing program 1 (id=78):
unshare(0x60480)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x4b)

2.47045655s ago: executing program 4 (id=79):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xc, 0x10, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="61df712bc884fed5722780b605a7", 0x0, 0x2f00, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.19342633s ago: executing program 0 (id=80):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3})
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, 0x0)

1.810536402s ago: executing program 1 (id=81):
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r0, 0x84, 0x7f, &(0x7f0000000000)="0000000009800089", 0x8)

1.810192658s ago: executing program 3 (id=82):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x20000805}, 0x4000040)

1.80987049s ago: executing program 2 (id=83):
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000400)='./file3\x00', 0x210048, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1d1, &(0x7f0000000440)="$eJzslj2v0lAYx//nlBQwGhNHFwdJ1MHSFjUuJLI4OZj4QhxMJFIJUsRAByEx6Cdwd3Nw9wuY6OqHMOiiC04615yXliOhCNwL3OQ+v4Sn/1POy9PnNP9TEARxbPn+7c8k/l39UQBwEiXk9f2f1qwPN/p/Lfx6+fnWzfqbh++/5CdOcdGccbz6+jkAn2oWonTsv6NL+noXPNX3wHFJ6zoYHK0fgeO+1gEYHmj91NA90d9xnrTDwHncC5tCuCJ4IvgiVObzm75maBr5MeP/wXDUaYRh0N+i+F/9pjWOqpGfuV8OVLauUT8PHJ7WFTDc0fo68kltVEmM5z+bm81vLX1+G9uuiEhljVFnTmVulQ1gszQAdlh7j1f6ld3mO5QhLEiR7OiOV9+BQO5IpLGG2GQvPt5QY5I78Vi1ZZ/TGRPG4xWXsLFR5VN/it8xXDD8SVnJW3nUlKPu8/JgOLrc7jZaQSt45vuVa+4V173ql6URqbjE/4rSn07M5l94JglsZuNFI4r6nopp21dxkeNy6X8cF8+rtnBTe27egqGZ/nF5ld7b+ZCZPUEQxP44ByY9WfpyIvRpAuNb9/YecyQIgiAIgiAIgiAI4mD8DQAA//80kEvd")
r0 = open(&(0x7f0000000000)='./file1\x00', 0x4000, 0x0)
read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020)

1.467356393s ago: executing program 0 (id=84):
r0 = socket(0x10, 0x803, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x49, [0x0, 0x3, 0x403, 0x100000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0xffffffff, 0x0, 0x0, 0x0, 0x3, 0x3, 0x10000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x1000000a, 0x0, 0x0, 0x80000007, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0xffffffff], [0x4, 0xa82, 0x0, 0x0, 0x2, 0x733, 0x3, 0xedc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2000000, 0x0, 0x0, 0x80000, 0x0, 0xfffffff8, 0x0, 0x0, 0x79, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x47, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x7fff0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x28220be6, 0x401, 0x0, 0x2, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x20], [0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0xffffffff, 0x89, 0x0, 0x800, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x80008000, 0x0, 0xfffffffe, 0xfffffffc, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x351e, 0x0, 0xd, 0x0, 0x0, 0x6492, 0x8], [0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xd2a, 0x200000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x804, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0x0, 0x4, 0x0, 0xfd32, 0x6, 0x0, 0x0, 0x0, 0x400, 0x5, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x0, 0x8000006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x1, 0x0, 0x0, 0x100000]}, 0x45c)
sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x40004010)

1.145686546s ago: executing program 4 (id=85):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x1, 0x0, 0x3, {0x37}}, 0x14}, 0x1, 0x0, 0x0, 0x48014}, 0x20000000)

822.894112ms ago: executing program 1 (id=86):
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x1)
capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000180)={0x0, 0x2, 0xffffffff, 0x4, 0x2ccd})
ioctl$SG_IO(r0, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x6, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="544b2702ca71", 0x0, 0x0, 0x0, 0x0, 0x0})

822.347745ms ago: executing program 3 (id=87):
r0 = socket$xdp(0x2c, 0x3, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000001f40), &(0x7f00000022c0)=0x30)

738.782134ms ago: executing program 2 (id=88):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x1, 0x0, 0x1000002, 0x4}, 0xa4ca, 0x0, 0x0, 0x6, 0x0, 0x98, 0xb, 0xe, 0x4, 0x9, {0x10001, 0x7, 0x2, 0x7, 0x2, 0x7fffffff}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x48801}, 0x0)

565.775492ms ago: executing program 0 (id=89):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100})
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000080)={0x1})

338.26787ms ago: executing program 4 (id=90):
r0 = io_uring_setup(0xad2, &(0x7f0000000100)={0x0, 0xcba9, 0x80})
close(r0)
clock_nanosleep(0x8, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe)

0s ago: executing program 3 (id=91):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x0)
preadv(r0, &(0x7f00000014c0)=[{&(0x7f0000001200)=""/237, 0xed}, {0x0}], 0x2, 0x3ff, 0x8)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.71' (ED25519) to the list of known hosts.
[  203.005050][ T5787] cgroup: Unknown subsys name 'net'
[  203.160924][ T5787] cgroup: Unknown subsys name 'cpuset'
[  203.177822][ T5787] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[  229.679771][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[  229.686754][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[  256.980473][ T5787] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[  262.359937][ T5814] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  262.376339][ T5813] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  262.385355][ T5813] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  262.394235][ T5813] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  262.402852][ T5813] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  262.411369][ T5813] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  262.420590][ T5813] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  262.429912][ T5813] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  262.438011][ T5813] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  262.450268][ T5813] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  262.454281][ T5823] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  262.460270][ T5813] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  262.467548][ T5824] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  262.478368][ T5813] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  262.480865][ T5823] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  262.492783][ T5813] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  262.496872][ T5813] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  262.508394][ T5823] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  262.513698][ T5813] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  262.518049][ T5824] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  262.531459][ T5823] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  262.550981][   T49] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  262.556395][ T5823] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  262.567965][   T49] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  262.588416][   T49] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  264.317123][ T5817] chnl_net:caif_netlink_parms(): no params data found
[  264.554602][ T5811] chnl_net:caif_netlink_parms(): no params data found
[  264.620085][   T49] Bluetooth: hci3: command tx timeout
[  264.627081][ T5812] Bluetooth: hci4: command tx timeout
[  264.632762][ T5812] Bluetooth: hci0: command tx timeout
[  264.733267][ T5105] Bluetooth: hci2: command tx timeout
[  264.739164][ T5105] Bluetooth: hci1: command tx timeout
[  264.774591][ T5810] chnl_net:caif_netlink_parms(): no params data found
[  264.803593][ T5809] chnl_net:caif_netlink_parms(): no params data found
[  265.196188][ T5815] chnl_net:caif_netlink_parms(): no params data found
[  265.454541][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state
[  265.462462][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state
[  265.470642][ T5817] bridge_slave_0: entered allmulticast mode
[  265.480405][ T5817] bridge_slave_0: entered promiscuous mode
[  265.507762][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state
[  265.515623][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state
[  265.523395][ T5817] bridge_slave_1: entered allmulticast mode
[  265.533790][ T5817] bridge_slave_1: entered promiscuous mode
[  265.928481][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  266.009409][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state
[  266.018149][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state
[  266.026186][ T5811] bridge_slave_0: entered allmulticast mode
[  266.036305][ T5811] bridge_slave_0: entered promiscuous mode
[  266.063278][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  266.322010][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state
[  266.330461][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state
[  266.338455][ T5811] bridge_slave_1: entered allmulticast mode
[  266.348421][ T5811] bridge_slave_1: entered promiscuous mode
[  266.453303][ T5817] team0: Port device team_slave_0 added
[  266.600544][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state
[  266.608829][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state
[  266.617154][ T5810] bridge_slave_0: entered allmulticast mode
[  266.626650][ T5810] bridge_slave_0: entered promiscuous mode
[  266.648584][ T5817] team0: Port device team_slave_1 added
[  266.657146][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state
[  266.664775][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state
[  266.672766][ T5810] bridge_slave_1: entered allmulticast mode
[  266.682570][ T5810] bridge_slave_1: entered promiscuous mode
[  266.693455][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state
[  266.700964][ T5812] Bluetooth: hci0: command tx timeout
[  266.701081][ T5812] Bluetooth: hci3: command tx timeout
[  266.706953][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state
[  266.714389][ T5812] Bluetooth: hci4: command tx timeout
[  266.720035][ T5809] bridge_slave_0: entered allmulticast mode
[  266.735270][ T5809] bridge_slave_0: entered promiscuous mode
[  266.794013][ T5105] Bluetooth: hci1: command tx timeout
[  266.800024][ T5105] Bluetooth: hci2: command tx timeout
[  266.828378][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state
[  266.836243][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state
[  266.843973][ T5815] bridge_slave_0: entered allmulticast mode
[  266.854076][ T5815] bridge_slave_0: entered promiscuous mode
[  266.949347][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state
[  266.957416][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state
[  266.965359][ T5809] bridge_slave_1: entered allmulticast mode
[  266.974212][ T5809] bridge_slave_1: entered promiscuous mode
[  266.995590][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  267.016327][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state
[  267.023840][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state
[  267.031912][ T5815] bridge_slave_1: entered allmulticast mode
[  267.041593][ T5815] bridge_slave_1: entered promiscuous mode
[  267.175352][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  267.232705][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0
[  267.240192][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  267.267637][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  267.292299][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  267.307027][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1
[  267.314515][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  267.341498][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  267.477491][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  267.560537][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  267.625626][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  267.643437][ T5811] team0: Port device team_slave_0 added
[  267.708859][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  267.731355][ T5810] team0: Port device team_slave_0 added
[  267.752865][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  267.811985][ T5811] team0: Port device team_slave_1 added
[  267.909451][ T5810] team0: Port device team_slave_1 added
[  267.933173][ T5817] hsr_slave_0: entered promiscuous mode
[  267.944454][ T5817] hsr_slave_1: entered promiscuous mode
[  268.208702][ T5809] team0: Port device team_slave_0 added
[  268.278822][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0
[  268.286515][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  268.313343][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  268.333414][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0
[  268.340827][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  268.368764][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  268.390928][ T5815] team0: Port device team_slave_0 added
[  268.401525][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1
[  268.409191][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  268.435907][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  268.457096][ T5809] team0: Port device team_slave_1 added
[  268.503238][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1
[  268.510902][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  268.537704][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  268.558962][ T5815] team0: Port device team_slave_1 added
[  268.775140][ T5812] Bluetooth: hci4: command tx timeout
[  268.781070][ T5105] Bluetooth: hci3: command tx timeout
[  268.786992][   T49] Bluetooth: hci0: command tx timeout
[  268.801682][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0
[  268.809161][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  268.836066][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  268.856307][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1
[  268.863535][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  268.890112][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  268.895703][ T5812] Bluetooth: hci2: command tx timeout
[  268.903082][ T5105] Bluetooth: hci1: command tx timeout
[  269.112053][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0
[  269.119381][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  269.146948][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  269.228949][ T5810] hsr_slave_0: entered promiscuous mode
[  269.239645][ T5810] hsr_slave_1: entered promiscuous mode
[  269.248830][ T5810] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  269.256906][ T5810] Cannot create hsr debugfs directory
[  269.292153][ T5811] hsr_slave_0: entered promiscuous mode
[  269.301744][ T5811] hsr_slave_1: entered promiscuous mode
[  269.311139][ T5811] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  269.319017][ T5811] Cannot create hsr debugfs directory
[  269.328453][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1
[  269.335853][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  269.362332][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  269.785394][ T5809] hsr_slave_0: entered promiscuous mode
[  269.796369][ T5809] hsr_slave_1: entered promiscuous mode
[  269.806860][ T5809] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  269.814698][ T5809] Cannot create hsr debugfs directory
[  269.851409][ T5815] hsr_slave_0: entered promiscuous mode
[  269.860634][ T5815] hsr_slave_1: entered promiscuous mode
[  269.869304][ T5815] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  269.877290][ T5815] Cannot create hsr debugfs directory
[  270.855462][ T5105] Bluetooth: hci4: command tx timeout
[  270.857545][ T5812] Bluetooth: hci3: command tx timeout
[  270.861116][   T49] Bluetooth: hci0: command tx timeout
[  270.936620][   T49] Bluetooth: hci2: command tx timeout
[  270.942359][   T49] Bluetooth: hci1: command tx timeout
[  271.254591][ T5817] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  271.306376][ T5817] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  271.386705][ T5817] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  271.411783][ T5817] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  271.446240][ T5810] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  271.512604][ T5810] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  271.613288][ T5810] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  271.648333][ T5810] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  271.794418][ T5811] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  271.923611][ T5811] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  271.977306][ T5811] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  272.011849][ T5811] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  272.066175][ T5815] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  272.107015][ T5815] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  272.145261][ T5815] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  272.280244][ T5815] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  272.430573][ T5809] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  272.493958][ T5809] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  272.560837][ T5809] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  272.637466][ T5809] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  273.210998][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0
[  273.408707][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0
[  273.495830][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0
[  273.519735][ T5817] 8021q: adding VLAN 0 to HW filter on device team0
[  273.629321][ T5811] 8021q: adding VLAN 0 to HW filter on device team0
[  273.712270][   T77] bridge0: port 1(bridge_slave_0) entered blocking state
[  273.720039][   T77] bridge0: port 1(bridge_slave_0) entered forwarding state
[  273.767117][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0
[  273.784786][   T77] bridge0: port 2(bridge_slave_1) entered blocking state
[  273.792700][   T77] bridge0: port 2(bridge_slave_1) entered forwarding state
[  273.810500][   T77] bridge0: port 1(bridge_slave_0) entered blocking state
[  273.818453][   T77] bridge0: port 1(bridge_slave_0) entered forwarding state
[  273.855687][ T5810] 8021q: adding VLAN 0 to HW filter on device team0
[  273.991606][   T77] bridge0: port 2(bridge_slave_1) entered blocking state
[  273.999360][   T77] bridge0: port 2(bridge_slave_1) entered forwarding state
[  274.021086][   T77] bridge0: port 1(bridge_slave_0) entered blocking state
[  274.028865][   T77] bridge0: port 1(bridge_slave_0) entered forwarding state
[  274.148652][ T5815] 8021q: adding VLAN 0 to HW filter on device team0
[  274.207286][   T77] bridge0: port 2(bridge_slave_1) entered blocking state
[  274.215191][   T77] bridge0: port 2(bridge_slave_1) entered forwarding state
[  274.368854][   T77] bridge0: port 1(bridge_slave_0) entered blocking state
[  274.376702][   T77] bridge0: port 1(bridge_slave_0) entered forwarding state
[  274.504784][ T5817] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  274.603764][   T77] bridge0: port 2(bridge_slave_1) entered blocking state
[  274.611526][   T77] bridge0: port 2(bridge_slave_1) entered forwarding state
[  274.897926][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0
[  275.088575][ T5809] 8021q: adding VLAN 0 to HW filter on device team0
[  275.227465][ T3592] bridge0: port 1(bridge_slave_0) entered blocking state
[  275.235498][ T3592] bridge0: port 1(bridge_slave_0) entered forwarding state
[  275.319327][ T3592] bridge0: port 2(bridge_slave_1) entered blocking state
[  275.327098][ T3592] bridge0: port 2(bridge_slave_1) entered forwarding state
[  276.783646][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0
[  276.992067][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0
[  277.064171][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0
[  277.493457][ T5817] veth0_vlan: entered promiscuous mode
[  277.621438][ T5817] veth1_vlan: entered promiscuous mode
[  277.650833][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0
[  277.739893][ T5811] veth0_vlan: entered promiscuous mode
[  277.827050][ T5810] veth0_vlan: entered promiscuous mode
[  277.885999][ T5811] veth1_vlan: entered promiscuous mode
[  278.026058][ T5817] veth0_macvtap: entered promiscuous mode
[  278.087224][ T5810] veth1_vlan: entered promiscuous mode
[  278.150934][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0
[  278.167102][ T5817] veth1_macvtap: entered promiscuous mode
[  278.379272][ T5811] veth0_macvtap: entered promiscuous mode
[  278.437260][ T5815] veth0_vlan: entered promiscuous mode
[  278.464113][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0
[  278.517792][ T5811] veth1_macvtap: entered promiscuous mode
[  278.540259][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1
[  278.554260][ T5810] veth0_macvtap: entered promiscuous mode
[  278.656389][ T5810] veth1_macvtap: entered promiscuous mode
[  278.687079][ T5817] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  278.696528][ T5817] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  278.705803][ T5817] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  278.715115][ T5817] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  278.760270][ T5815] veth1_vlan: entered promiscuous mode
[  278.833046][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0
[  278.957625][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1
[  279.026893][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0
[  279.109799][ T5811] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  279.119325][ T5811] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  279.128611][ T5811] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  279.137883][ T5811] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  279.171434][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1
[  279.214398][ T5815] veth0_macvtap: entered promiscuous mode
[  279.263977][ T5810] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  279.274433][ T5810] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  279.283775][ T5810] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  279.293020][ T5810] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  279.339851][ T5815] veth1_macvtap: entered promiscuous mode
[  279.551279][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0
[  279.687333][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1
[  279.788735][ T5815] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  279.801048][ T5815] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  279.810407][ T5815] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  279.819695][ T5815] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  281.414595][ T5809] veth0_vlan: entered promiscuous mode
[  281.542002][ T5809] veth1_vlan: entered promiscuous mode
[  281.907698][ T5809] veth0_macvtap: entered promiscuous mode
[  282.053692][ T5809] veth1_macvtap: entered promiscuous mode
[  282.292762][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0
[  282.411255][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1
[  282.521363][ T5809] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  282.532196][ T5809] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  282.541607][ T5809] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  282.551000][ T5809] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  286.536757][   T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  286.545131][   T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  286.821414][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  286.829867][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  286.991357][ T4068] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  286.999850][ T4068] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  287.184572][ T3656] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  287.193743][ T3656] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  287.397363][ T5817] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  287.402779][ T3656] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  287.423280][ T3656] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  287.581973][ T4068] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  287.591964][ T4068] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  287.851573][ T4068] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  287.859942][ T4068] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  288.197150][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  288.205673][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  290.560608][ T3696] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  290.568849][ T3696] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  290.902492][ T3696] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  290.911522][ T3696] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  291.147891][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[  291.154655][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[  291.479006][ T6026] loop3: detected capacity change from 0 to 128
[  291.548139][ T6026] =======================================================
[  291.548139][ T6026] WARNING: The mand mount option has been deprecated and
[  291.548139][ T6026]          and is ignored by this kernel. Remove the mand
[  291.548139][ T6026]          option from the mount to silence this warning.
[  291.548139][ T6026] =======================================================
[  292.940991][ T6026] EXT4-fs (loop3): Test dummy encryption mode enabled
[  293.060083][ T6026] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  293.134393][ T6026] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  293.683398][ T6048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20'.
[  293.916736][ T6026] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[  294.091037][ T6026] EXT4-fs (loop3): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 ro.
[  294.382421][ T5811] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  295.280749][ T6064] loop0: detected capacity change from 0 to 1024
[  297.244401][ T6086] loop4: detected capacity change from 0 to 2048
[  297.368452][ T6086] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  297.378723][ T6086] NILFS (loop4): mounting unchecked fs
[  297.552258][ T6086] NILFS (loop4): recovery complete
[  297.580738][ T6090] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  298.459110][ T6097] capability: warning: `syz.1.41' uses deprecated v2 capabilities in a way that may be insecure
[  298.552386][ T6101] netlink: 'syz.3.44': attribute type 30 has an invalid length.
[  299.269168][ T6108] overlayfs: disabling nfs_export due to verity=on
[  299.276696][ T6108] overlayfs: missing 'lowerdir'
[  300.803412][ T6117] loop3: detected capacity change from 0 to 256
[  301.149882][ T6123] netlink: 264 bytes leftover after parsing attributes in process `syz.2.53'.
[  301.175032][ T6121] loop4: detected capacity change from 0 to 1024
[  301.748653][   T58] hfsplus: b-tree write err: -5, ino 4
[  301.926073][ T6117] FAT-fs (loop3): Directory bread(block 64) failed
[  301.932939][ T6117] FAT-fs (loop3): Directory bread(block 65) failed
[  301.940383][ T6117] FAT-fs (loop3): Directory bread(block 66) failed
[  301.947467][ T6117] FAT-fs (loop3): Directory bread(block 67) failed
[  301.954473][ T6117] FAT-fs (loop3): Directory bread(block 68) failed
[  301.961478][ T6117] FAT-fs (loop3): Directory bread(block 69) failed
[  301.969119][ T6117] FAT-fs (loop3): Directory bread(block 70) failed
[  301.982238][ T6117] FAT-fs (loop3): Directory bread(block 71) failed
[  301.989971][ T6117] FAT-fs (loop3): Directory bread(block 72) failed
[  301.997180][ T6117] FAT-fs (loop3): Directory bread(block 73) failed
[  303.429403][    T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  303.706331][    T9] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  303.715975][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  303.725638][    T9] usb 4-1: Product: syz
[  303.730352][    T9] usb 4-1: Manufacturer: syz
[  303.735608][    T9] usb 4-1: SerialNumber: syz
[  303.806584][ T6141] RDS: rds_bind could not find a transport for 4:80::, load rds_tcp or rds_rdma?
[  303.830004][    T9] usb 4-1: config 0 descriptor??
[  303.887592][    T9] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  304.722742][    T9] gspca_sunplus: reg_r err -71
[  304.728326][    T9] sunplus 4-1:0.0: probe with driver sunplus failed with error -71
[  304.783786][    T9] usb 4-1: USB disconnect, device number 2
[  306.792533][ T6171] loop2: detected capacity change from 0 to 64
[  306.994425][ T6171] syz.2.75: attempt to access beyond end of device
[  306.994425][ T6171] loop2: rw=0, sector=1024, nr_sectors = 2 limit=64
[  307.012148][ T6171] Buffer I/O error on dev loop2, logical block 512, async page read
[  307.021149][ T6171] syz.2.75: attempt to access beyond end of device
[  307.021149][ T6171] loop2: rw=0, sector=113152, nr_sectors = 2 limit=64
[  307.040321][ T6171] Buffer I/O error on dev loop2, logical block 56576, async page read
[  308.214042][ T6187] loop2: detected capacity change from 0 to 16
[  308.298616][ T6187] erofs (device loop2): mounted with root inode @ nid 36.
[  308.445302][   T30] audit: type=1800 audit(1749242228.186:2): pid=6187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.83" name="file1" dev="loop2" ino=86 res=0 errno=0
[  309.155563][ T6196] capability: warning: `syz.1.86' uses 32-bit capabilities (legacy support in use)
[  309.460937][ T6203] binder: 6201:6203 ioctl c018620c 80000080 returned -22
[  309.521846][ T3927] =====================================================
[  309.529666][ T3927] BUG: KMSAN: uninit-value in xas_load+0xd20/0xd70
[  309.537141][ T3927]  xas_load+0xd20/0xd70
[  309.541639][ T3927]  xas_find+0x2c8/0xd40
[  309.546225][ T3927]  xa_find+0x15a/0x2a0
[  309.550572][ T3927]  io_unregister_zcrx_ifqs+0x75/0x1d0
[  309.556347][ T3927]  io_ring_ctx_free+0x61/0x740
[  309.561400][ T3927]  io_ring_exit_work+0xdec/0xe20
[  309.566758][ T3927]  process_scheduled_works+0xb8e/0x1d80
[  309.572657][ T3927]  worker_thread+0xedf/0x1590
[  309.578458][ T3927]  kthread+0xd5c/0xf00
[  309.582824][ T3927]  ret_from_fork+0x1e3/0x310
[  309.588405][ T3927]  ret_from_fork_asm+0x1a/0x30
[  309.593458][ T3927] 
[  309.600770][ T3927] Uninit was stored to memory at:
[  309.607760][ T3927]  xa_find+0x26c/0x2a0
[  309.612100][ T3927]  io_unregister_zcrx_ifqs+0x75/0x1d0
[  309.617892][ T3927]  io_ring_ctx_free+0x61/0x740
[  309.622986][ T3927]  io_ring_exit_work+0xdec/0xe20
[  309.628324][ T3927]  process_scheduled_works+0xb8e/0x1d80
[  309.634271][ T3927]  worker_thread+0xedf/0x1590
[  309.640879][ T3927]  kthread+0xd5c/0xf00
[  309.645591][ T3927]  ret_from_fork+0x1e3/0x310
[  309.650415][ T3927]  ret_from_fork_asm+0x1a/0x30
[  309.659564][ T3927] 
[  309.662040][ T3927] Local variable id created at:
[  309.669496][ T3927]  io_unregister_zcrx_ifqs+0x3d/0x1d0
[  309.675328][ T3927]  io_ring_ctx_free+0x61/0x740
[  309.680354][ T3927] 
[  309.682865][ T3927] CPU: 0 UID: 0 PID: 3927 Comm: kworker/u8:24 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(undef) 
[  309.700122][ T3927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  309.712179][ T3927] Workqueue: iou_exit io_ring_exit_work
[  309.718275][ T3927] =====================================================
[  309.725515][ T3927] Disabling lock debugging due to kernel taint
[  309.731865][ T3927] Kernel panic - not syncing: kmsan.panic set ...
[  309.738486][ T3927] CPU: 0 UID: 0 PID: 3927 Comm: kworker/u8:24 Tainted: G    B               6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(undef) 
[  309.752296][ T3927] Tainted: [B]=BAD_PAGE
[  309.756587][ T3927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  309.766832][ T3927] Workqueue: iou_exit io_ring_exit_work
[  309.772647][ T3927] Call Trace:
[  309.776059][ T3927]  <TASK>
[  309.779144][ T3927]  __dump_stack+0x26/0x30
[  309.783692][ T3927]  dump_stack_lvl+0x53/0x270
[  309.788507][ T3927]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  309.794613][ T3927]  dump_stack+0x1e/0x25
[  309.799011][ T3927]  panic+0x4bd/0xd50
[  309.803193][ T3927]  kmsan_report+0x31c/0x320
[  309.807951][ T3927]  ? __msan_warning+0x1b/0x30
[  309.812858][ T3927]  ? xas_load+0xd20/0xd70
[  309.817402][ T3927]  ? xas_find+0x2c8/0xd40
[  309.821954][ T3927]  ? xa_find+0x15a/0x2a0
[  309.826420][ T3927]  ? io_unregister_zcrx_ifqs+0x75/0x1d0
[  309.832195][ T3927]  ? io_ring_ctx_free+0x61/0x740
[  309.837366][ T3927]  ? io_ring_exit_work+0xdec/0xe20
[  309.842706][ T3927]  ? process_scheduled_works+0xb8e/0x1d80
[  309.848683][ T3927]  ? worker_thread+0xedf/0x1590
[  309.853801][ T3927]  ? kthread+0xd5c/0xf00
[  309.858247][ T3927]  ? ret_from_fork+0x1e3/0x310
[  309.863205][ T3927]  ? ret_from_fork_asm+0x1a/0x30
[  309.868397][ T3927]  ? _raw_spin_unlock_irqrestore+0x3f/0x60
[  309.874419][ T3927]  ? stack_depot_save_flags+0x60f/0x7b0
[  309.880207][ T3927]  ? stack_depot_save+0x12/0x20
[  309.885442][ T3927]  ? kmsan_internal_chain_origin+0xb6/0xd0
[  309.891502][ T3927]  ? kmsan_internal_chain_origin+0x5d/0xd0
[  309.897594][ T3927]  ? __msan_chain_origin+0xc3/0x140
[  309.903056][ T3927]  ? xa_find+0x26c/0x2a0
[  309.907534][ T3927]  ? io_unregister_zcrx_ifqs+0x75/0x1d0
[  309.913305][ T3927]  ? io_ring_ctx_free+0x61/0x740
[  309.918471][ T3927]  ? io_ring_exit_work+0xdec/0xe20
[  309.923849][ T3927]  ? process_scheduled_works+0xb8e/0x1d80
[  309.929825][ T3927]  ? worker_thread+0xedf/0x1590
[  309.934937][ T3927]  ? kthread+0xd5c/0xf00
[  309.939385][ T3927]  ? ret_from_fork+0x1e3/0x310
[  309.944360][ T3927]  ? ret_from_fork_asm+0x1a/0x30
[  309.949668][ T3927]  ? kmsan_get_metadata+0xfb/0x160
[  309.955229][ T3927]  ? io_sqe_files_unregister+0xea/0x120
[  309.961013][ T3927]  __msan_warning+0x1b/0x30
[  309.965758][ T3927]  xas_load+0xd20/0xd70
[  309.970130][ T3927]  ? kmsan_internal_unpoison_memory+0x14/0x20
[  309.976432][ T3927]  ? kmsan_get_metadata+0xfb/0x160
[  309.981813][ T3927]  ? io_sqe_files_unregister+0xea/0x120
[  309.987600][ T3927]  ? io_sqe_files_unregister+0xea/0x120
[  309.993392][ T3927]  xas_find+0x2c8/0xd40
[  309.997965][ T3927]  ? kmsan_get_metadata+0xfb/0x160
[  310.003360][ T3927]  ? kmsan_get_metadata+0xfb/0x160
[  310.008827][ T3927]  ? io_sqe_files_unregister+0xea/0x120
[  310.014635][ T3927]  ? io_sqe_files_unregister+0xea/0x120
[  310.020414][ T3927]  xa_find+0x15a/0x2a0
[  310.024824][ T3927]  ? io_sqe_files_unregister+0xea/0x120
[  310.030631][ T3927]  io_unregister_zcrx_ifqs+0x75/0x1d0
[  310.036236][ T3927]  ? io_sqe_files_unregister+0xea/0x120
[  310.042021][ T3927]  io_ring_ctx_free+0x61/0x740
[  310.047018][ T3927]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  310.053103][ T3927]  io_ring_exit_work+0xdec/0xe20
[  310.058272][ T3927]  ? __pfx_io_tctx_exit_cb+0x10/0x10
[  310.063827][ T3927]  ? __pfx_io_ring_exit_work+0x10/0x10
[  310.069520][ T3927]  process_scheduled_works+0xb8e/0x1d80
[  310.075353][ T3927]  worker_thread+0xedf/0x1590
[  310.080321][ T3927]  kthread+0xd5c/0xf00
[  310.084592][ T3927]  ? __pfx_worker_thread+0x10/0x10
[  310.089978][ T3927]  ? __pfx_kthread+0x10/0x10
[  310.094775][ T3927]  ret_from_fork+0x1e3/0x310
[  310.099586][ T3927]  ? __pfx_kthread+0x10/0x10
[  310.104398][ T3927]  ret_from_fork_asm+0x1a/0x30
[  310.109469][ T3927]  </TASK>
[  310.112972][ T3927] Kernel Offset: disabled
[  310.117432][ T3927] Rebooting in 86400 seconds..