last executing test programs:

29.599606848s ago: executing program 2 (id=612):
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000100)={0x0, 0xfffffb06}, 0x8)
r2 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000380), 0x8)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000300)=@assoc_value={0x0, 0xae43}, 0x8)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="02000000070000177d0009000000000000000000000000000200ff00000000000000000025a7bbe9f508a41c1a07a5c1b27bcf17f25168f5dda4cf98f1c18f52aa6f9246b1f80c32bd5b66a93d9e4043a2a848dbfdee17798debca428a0f136e14d5a3ef9b4c7f170fbdf724bd269eba9b34f04762bece7eacaaded9193123c12145c200afa75d192433e0458f9fa2594ce182cb5755bdabac38d02ff1e6ec9acb428daf2e57b05bb4b673fa3d266a1237"], 0x38}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000440)='./file2\x00', 0x0, &(0x7f0000000080), 0x1, 0x541, &(0x7f0000000fc0)="$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")
r3 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000001300e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310)
r4 = socket(0x11, 0x3, 0x0)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000000)=0x4457, 0x4)
sendto$packet(r4, &(0x7f00000000c0)="6a767354b3abc74d83a261d7d3b5", 0xe, 0x0, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001840)={0x14, 0x13, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x108)
r6 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00')
preadv(r6, 0x0, 0x0, 0xb4, 0x0)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54da0e13047e9f62fbb85ccc774b3ec4c81a1a985232d16d0d934460e920a59172e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9ae"], 0xfd, 0x274, &(0x7f0000000500)="$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")

28.319646615s ago: executing program 3 (id=615):
socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0xd6, 0x0, 0x32}, 0x9c)
bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
prctl$PR_SCHED_CORE(0x3e, 0x80000000000001, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000006c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000e80)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="25003300d0000000080211000001080211000000505050505050000003010000000100da0f000000"], 0x44}}, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_int(r4, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4)
sendto$inet(r4, &(0x7f0000001440)="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", 0x782, 0x2004c890, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r6 = syz_io_uring_setup(0x7279, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000180), &(0x7f00000001c0))
r7 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000200)={0x43, 0x18000000}, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r9, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x0, 0x0, 0xc1}}}}, 0x30}}, 0x0)
io_uring_enter(r6, 0x2def, 0x0, 0x0, 0x0, 0x0)
write$rfkill(r5, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)

27.102499118s ago: executing program 3 (id=617):
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000140)=@ethtool_cmd={0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x3c, r3, 0x1, 0xfffffeff, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x1e, 0x33, @disassoc={{{}, {0x3}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @void}}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @multicast1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='westwood\x00', 0x9)
connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={0x0, 0x43c}}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r9, @ANYBLOB="0a0034000202020202020000040067000400cc00040008010600660000000000"], 0x3c}}, 0x0)
syz_emit_ethernet(0x4f, &(0x7f0000000200)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cabf00", 0x19, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3, 0x1, "a78ce540065980"}]}}}}}}, 0x0)
write$binfmt_script(r6, &(0x7f0000000100), 0xfffffd9d)
r10 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000880)={'macvlan1\x00', <r11=>0x0})
sendto$packet(r10, 0x0, 0x64, 0x0, &(0x7f00000001c0)={0x11, 0x1, r11, 0x1, 0x0, 0x6, @remote}, 0x14)
sendmsg$NL80211_CMD_DEL_PMKSA(r6, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="44000000d52f1640e032945295759fb7ecc3052670e75bda915536f9ac493f793446afa557281b5a94f0d093ab8fd4fd71f49402f923bedc3f0c592fef987179a2740b2294f22c92bbaa13718ce44160c47983194c85d6ecee48e98298a6fe522c559364c9cbb3d1a32812554c5d3d939a66fa6298ce960dea24b85d9b284f0b839719e508e2c2aef2b84dbe30a8a85247ebe249a775b431ab25bf894f2916e866f7e94d5aa13c4e9e9c2d588c9f55f0e5e87fd6446ac6a77d", @ANYRES16=r8, @ANYBLOB="000125bd7000fbdbdf253500000008000300", @ANYRES32=r9, @ANYBLOB="0c009900000400002b0000000a000600ffffffffffff00000600fd00ffff00000500200100000000"], 0x44}, 0x1, 0x0, 0x0, 0x20000011}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
sendfile(r5, r6, 0x0, 0x8000002b)

26.475586531s ago: executing program 2 (id=618):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000040)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}]}, 0x3, 0x44a, &(0x7f0000000400)="$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")
chdir(&(0x7f0000000140)='./file0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='blkio.bfq.io_serviced_recursive\x00', 0x26e1, 0x0)
r4 = syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3810744, &(0x7f0000000700)={[{@noauto_da_alloc}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}, {@jqfmt_vfsv0}, {@delalloc}, {@usrjquota}, {@noauto_da_alloc}, {@test_dummy_encryption}]}, 0x1, 0x451, &(0x7f0000000d00)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f0000000340))
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)=0x2004091)
getsockname(r1, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80)
sendmsg$nl_route_sched(r0, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000009380)={0x0}}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_FRAME(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, r10, 0xb7a006d1969b963b, 0x0, 0x0, {{0x1d}, {@val={0x8, 0x3, r11}, @void}}}, 0x1c}}, 0x0)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c080}, 0x0)

24.167763439s ago: executing program 2 (id=621):
syz_emit_vhci(0x0, 0x22)
openat$uinput(0xffffff9c, &(0x7f0000000300), 0x2, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0)
ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000a00))
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, 0x0)
syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="04040a00000000000054679202ce9eaa48b326b038d97544c8b681bad547412afab3663029531077c8c4fa2f7501610d4eae6214096ae92430cd63486f07b04d9c519ab15a6e842e1352398f95ff35f5115a2c6c50f63336179b5e6b1f774a63506e8cb76bba42c6bee078240ec871a2bcf7dd5691833ac53a02f3614eae3afb9549df1b77ce0baebc9f630664"], 0xd)
syz_emit_vhci(&(0x7f0000000280)=ANY=[], 0x14)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000b80)=""/102386, 0x18ff2}], 0x1, 0x400000, 0x81)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="2d9d7ab861bd4d304d57ab9f4ed1108b1c6e2a9dc73e476201885496d59d8d3692555eb1d760a2048d6477942bf58cc712"], 0xe3)
socket$inet6(0xa, 0x6, 0x0)
syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYRES8=r0, @ANYRESDEC, @ANYRESOCT=r0], 0x1a)
ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f00000000c0)=0x1)
syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x0, 0x4}, {0x0, 0x10}}}}, 0x11)
ioctl$DRM_IOCTL_AGP_INFO(0xffffffffffffffff, 0x80386433, &(0x7f00000001c0)=""/2)
connect$inet(0xffffffffffffffff, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x10, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x19)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
writev(r3, &(0x7f0000000780)=[{&(0x7f00000004c0)='4', 0x1}], 0x1)
r4 = socket(0x1, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x33}})

24.165511909s ago: executing program 3 (id=622):
syz_open_dev$evdev(&(0x7f0000000a00), 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$EVIOCGRAB(r0, 0x400445a0, &(0x7f0000000440))
r1 = creat(0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000003c0001800c00028005000100010000002c00018014000300fc00000000000000000000000000000014000400fe8800000000000000000000000000013c0003800c00028005000100000000002c00018014000300fc00000000000000000000000000000014000400000000000000000000000000000000013c0002800c00028005000100000000002c00018014000300fe8000000000000000000000000000bb14000400ff020000000000000000000000000001dca434bda38c8debb471848e24273996e2a4ec02935b7ea8d361fbb01c76227bdd4d47049e886493583398d423b4633090904a7c31f64bd68c751592360c55f877cc16795ada1d90a2816d118cbaffbc3d5097910ce7fb88c17c609fb87d670d69ba84e3a6f843d978c8ccc6a54321c6b2c4707692b2da6564c48918495276ee184885c5f3357168b4d3aa97c14baf27e537446655354950883a471d94c4bb4abbdad3ab13731e400d5853cec460859b666f6f4cb427c3e16cfb3ba88c49021a768a6579482607f9625e8d071d2fe846948630b76f012c11d929163c0d49e212b59274cca6fabc8aa1591b8a440b22de9e1b232222b3a8b6618a0e92ef8f1e0fc29d1f251c81e79952a8ec10006335623bfb5f9370a87d881033f364d685255ac14b6c9cddd342406f82d2c21774ec27357856eed7ec90429e77531af246960266c754b0b50bfe228b289474041ca12f715db62b25970a5c8dc9bb90d4c359e1855e0de8d8d9"], 0xc8}}, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x45c, 0x0, &(0x7f0000000140)="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"})
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0xc0a85322, &(0x7f0000000100)={{0x0, 0x80}})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f00000006c0)=0x1, 0x4)
tkill(0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCDELDLCI(r4, 0x8981, &(0x7f0000000040)={'pimreg0\x00'})
r6 = socket(0x40000000015, 0x5, 0x0)
bind$inet6(r6, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x8800)
r7 = socket$inet6(0xa, 0x800000000000002, 0x0)
open(&(0x7f0000000740)='./file0\x00', 0x12000, 0x12)
sendto$inet6(r7, 0x0, 0x0, 0x400ad00, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c)
sendto$inet6(r7, 0x0, 0x2, 0x0, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x9a, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x88, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x9c4c}, [@call_mgmt={0x5}, @mdlm_detail={0x27, 0x24, 0x13, 0x0, "d9f62b8b787a06263152755fc26d0ffd3185cc6f4ec2b3ca3f875b6e356f9c5682cf3d"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x0, 0x1}}}}}}}]}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x10, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xbc}}, 0x4000004)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="0100cf3406c6d7796e183b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

22.235327771s ago: executing program 2 (id=625):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0, r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r4}, 0x18)
mkdirat(0xffffffffffffff9c, &(0x7f0000000d40)='./file0\x00', 0x0)
mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, 0x0, 0x0, 0x5088, 0x0)
ioprio_set$pid(0x0, 0x0, 0x6004)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00'}, 0x10)
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00')
lseek(r5, 0xd7, 0x0)
read$FUSE(r5, &(0x7f0000005fc0)={0x2020}, 0x2020)
r6 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
listen(r6, 0x0)
r7 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r7, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0)
accept4(r6, 0x0, 0x0, 0x0)

21.125675497s ago: executing program 2 (id=626):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00')
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1a, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r0, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000002d738b49b7a47faa98a2966cdee8b9753225ddb9c64b33e24af5328410c84b4abc5b5cdb341976a7e358f96b8b2854171c367bbbb6fdaadf3a0b861e7ab5763da1b78cc36ad7eec1913d6231ff697f305b613ca5f0e515378b5c1fd2e979d952ebdbadde4262d1178df9b7f0e08a9653db34395794e39022130602a0352d7e9b387aff3f7d1821a75d042d460338a18fc3eb2965d2bd67b9d93432"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = socket$inet(0x2, 0x802, 0x1)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_int(r3, 0x0, 0x0, &(0x7f0000000000)=0xfffffffe, 0x4)
write(r3, &(0x7f0000000080)="08008edf773c8000", 0xfd)
recvmmsg(r3, &(0x7f0000000340)=[{{0x0, 0x25, 0x0}}], 0x1f, 0x0, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000080)={{{@in=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x6, 0x0, 0xffffffffffff2525}, {0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x1, 0x1, 0xb7}}, 0xe8)
sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bca75fdc7accc038baafb8c2ab7a5293a3617fc6d0e1c4bf27815d1aac9532398f44b1eff1ab542be4f565be25e18ed496a00636417e9070defedfae05bc5ecb6a94f81f344e7dafaa368a62132d0a6aada1aac5c2f9", @ANYRES32=0x0, @ANYBLOB], 0x40}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x150}}, 0x0)

19.874688552s ago: executing program 3 (id=627):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r2=>0x0})
r3 = socket(0x10, 0x80002, 0x0)
r4 = creat(&(0x7f0000000080)='./file0\x00', 0x1de)
write$binfmt_script(r4, &(0x7f00000019c0)={'#! ', './file0', [{0x20, '\x06^-'}]}, 0xf)
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000180)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[], 0x9, 0x2a8, &(0x7f0000000500)="$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")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
close(r4)
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=[&(0x7f0000000340)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\f\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13mNP\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0=k\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xba\x87\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7*\xecl\xbfp\xc3x\xc3\xc1r\xbe7\xb5\xa3\xf11[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80=\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9oQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tr\xb4\xc4\x929\x01\xee\xe6\n\x8ba\xde\xdbsAzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44LB\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf)\xee\xab\xb3C\x92\x8e\x80\xb1\x01\x85\xb1v\xae*\xa7])n)+\xd9\xcf\xe9\x9ag\x8a*u\xe4e?\xf9\x93\x93u\xd2M\xfd\xa1\xc5\xff\xd9\x15-\xabH\x90\x04\xea\x88\"\xfe\v\x1d\xa5}H\xee\xc7\x94\xdb\x02\xf7\t\x92\t5\x1e\xd6~R\x9e\xb5NV)\xa6\x1ff\xde\xbf\x97V\x87\v\x94\xb4\xb0\x7f3\xa3\x85c=\xb0\x8ab\x06\xfa\xe9\xb3\x1d\xc9.\x8br\xf9\xde\xd6\xe6\x14O\xc8\xff3ZA\xea\xd4\xa9]7\xd8\xed\xc6\xdf\x01\xb3\n8\xbf\xbe\x1e\v\x18\xd9\xb3+X4\xb5S\xe7\xf6oO;\xc5\xc8-\x9e\xb5\xbe\x97\xb4k\xd2n\xfa\xd1\x82\x16\xea\x93\xc7\xb3?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\xf2K\xe9\xcf\xc6y\xb00\xe0\xa0\f\xef\x02\xd5 (S\xffhY\"\x83\x05M\x0f\v\xec0B\xa9\xd7\x80\xdaL\xa2Q\x8c\xde\x17* \xf5)tk\xb6\xb9\x86?\x1a\xff\xdc\xecP\xd1w1\xf4a\x00r\x06,\x86S\x11)\xf4\x16W\xd6\x86\x10\x02\x15mod\x854\xd4\'^\xb6\xe9f\xd6:\xfc5%\x16\xc5\xa5\xf1\x11k\xdd{\xaai\x8a\xde\xa6\x18,H\xd8\xe5\xf5g\xe7U\\(\x01\xc5\xde\x1d\x8acHf\x86`9qV|=\xbb\xd1\x95\x0f\x86\xffa\xb1\xdb\x82l\xc3\xcf\x88\xeeJ\xda\x8b0f\xac\xc2n\xd1\')\xf2\xaf\xc0\x06\x01\xb4b\xef\xa8!\xf9\n\xf7{C\xdc`h\b6>\x171\x16\x89\xa8\xe9OC\x7f\xb1\x1c\xd4\xd5\xa7\x7f\xfd\xa8Y\xf0s_\xfb\x00', 0x0, &(0x7f00000010c0)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13mNP\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0=k\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xba\x87\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7*\xecl\xbfp\xc3x\xc3\xc1r\xbe7\xb5\xa3\xf11[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80=\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9oQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tr\xb4\xc4\x929\x01\xee\xe6\n\x8ba\xde\xdbsAzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44LB\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf)\xee\xab\xb3C\x92\x8e\x80\xb1\x01\x85\xb1v\xae*\xa7])n)+\xd9\xcf\xe9\x9ag\x8a*u\xe4e?\xf9\x93\x93u\xd2M\xfd\xa1\xc5\xff\xd9\x15-\xabH\x90\x04\xea\x88\"\xfe\v\x1d\xa5}H\xee\xc7\x94\xdb\x02\xf7\t\x92\t5\x1e\xd6~R\x9e\xb5NV)\xa6\x1ff\xde\xbf\x97V\x87\v\x94\xb4\xb0\x7f3\xa3\x85c=\xb0\x8ab\x06\xfa\xe9\xb3\x1d\xc9.\x8br\xf9\xde\xd6\xe6\x14O\xc8\xff3ZA\xea\xd4\xa9]7\xd8\xed\xc6\xdf\x01\xb3\n8\xbf\xbe\x1e\v\x18\xd9\xb3+X4\xb5S\xe7\xf6oO;\xc5\xc8-\x9e\xb5\xbe\x97\xb4k\xd2n\xfa\xd1\x82\x16\xea\x93\xc7\xb3?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\xf2K\xe9\xcf\xc6y\xb00\xe0\xa0\f\xef\x02\xd5 (S\xffhY\"\x83\x05M\x0f\v\xec0B\xa9\xd7\x80\xdaL\xa2Q\x8c\xde\x17* \xf5)tk\xb6\xb9\x86?\x1a\xff\xdc\xecP\xd1w1\xf4a\x00r\x06,\x86S\x11)\xf4\x16W\xd6\x86\x10\x02\x15mod\x854\xd4\'^\xb6\xe9f\xd6:\xfc5%\x16\xc5\xa5\xf1\x11k\xdd{\xaai\x8a\xde\xa6\x18,H\xd8\xe5\xf5g\xe7U\\(\x01\xc5\xde\x1d\x8acHf\x86`9qV|=\xbb\xd1\x95\x0f\x86\xffa\xb1\xdb\x82l\xc3\xcf\x88\xeeJ\xda\x8b0f\xac\xc2n\xd1\')\xf2\xaf\xc0\x06\x01\xb4b\xef\xa8!\xf9\n\xf7{C\xdc`h\b6>\x171\x16\x89\xa8\xe9OC\x7f\xb1\x1c\xd4\xd5\xa7\x7f\xfd\xa8Y\xf0s_\xfb\x00', &(0x7f0000001540)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13mNP\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0=k\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xba\x87\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7*\xecl\xbfp\xc3x\xc3\xc1r\xbe7\xb5\xa3\xf11[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80=\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9oQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tr\xb4\xc4\x929\x01\xee\xe6\n\x8ba\xde\xdbsAzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44LB\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf)\xee\xab\xb3C\x92\x8e\x80\xb1\x01\x85\xb1v\xae*\xa7])n)+\xd9\xcf\xe9\x9ag\x8a*u\xe4e?\xf9\x93\x93u\xd2M\xfd\xa1\xc5\xff\xd9\x15-\xabH\x90\x04\xea\x88\"\xfe\v\x1d\xa5}H\xee\xc7\x94\xdb\x02\xf7\t\x92\t5\x1e\xd6~R\x9e\xb5NV)\xa6\x1ff\xde\xbf\x97V\x87\v\x94\xb4\xb0\x7f3\xa3\x85c=\xb0\x8ab\x06\xfa\xe9\xb3\x1d\xc9.\x8br\xf9\xde\xd6\xe6\x14O\xc8\xff3ZA\xea\xd4\xa9]7\xd8\xed\xc6\xdf\x01\xb3\n8\xbf\xbe\x1e\v\x18\xd9\xb3+X4\xb5S\xe7\xf6oO;\xc5\xc8-\x9e\xb5\xbe\x97\xb4k\xd2n\xfa\xd1\x82\x16\xea\x93\xc7\xb3?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\xf2K\xe9\xcf\xc6y\xb00\xe0\xa0\f\xef\x02\xd5 (S\xffhY\"\x83\x05M\x0f\v\xec0B\xa9\xd7\x80\xdaL\xa2Q\x8c\xde\x17* \xf5)tk\xb6\xb9\x86?\x1a\xff\xdc\xecP\xd1w1\xf4a\x00r\x06,\x86S\x11)\xf4\x16W\xd6\x86\x10\x02\x15mod\x854\xd4\'^\xb6\xe9f\xd6:\xfc5%\x16\xc5\xa5\xf1\x11k\xdd{\xaai\x8a\xde\xa6\x18,H\xd8\xe5\xf5g\xe7U\\(\x01\xc5\xde\x1d\x8acHf\x86`9qV|=\xbb\xd1\x95\x0f\x86\xffa\xb1\xdb\x82l\xc3\xcf\x88\xeeJ\xda\x8b0f\xac\xc2n\xd1\')\xf2\xaf\xc0\x06\x01\xb4b\xef\xa8!\xf9\n\xf7{C\xdc`h\b6>\x171\x16\x89\xa8\xe9OC\x7f\xb1\x1c\xd4\xd5\xa7\x7f\xfd\xa8Y\xf0s_\xfb\x00'], &(0x7f00000001c0)=[&(0x7f0000001e80)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13mNP\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0=k\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xba\x87\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7*\xecl\xbfp\xc3x\xc3\xc1r\xbe7\xb5\xa3\xf11[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80=\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9oQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tr\xb4\xc4\x929\x01\xee\xe6\n\x8ba\xde\xdbsAzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44LB\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf)\xee\xab\xb3C\x92\x8e\x80\xb1\x01\x85\xb1v\xae*\xa7])n)+\xd9\xcf\xe9\x9ag\x8a*u\xe4e?\xf9\x93\x93u\xd2M\xfd\xa1\xc5\xff\xd9\x15-\xabH\x90\x04\xea\x88\"\xfe\v\x1d\xa5}H\xee\xc7\x94\xdb\x02\xf7\t\x92\t5\x1e\xd6~R\x9e\xb5NV)\xa6\x1ff\xde\xbf\x97V\x87\v\x94\xb4\xb0\x7f3\xa3\x85c=\xb0\x8ab\x06\xfa\xe9\xb3\x1d\xc9.\x8br\xf9\xde\xd6\xe6\x14O\xc8\xff3ZA\xea\xd4\xa9]7\xd8\xed\xc6\xdf\x01\xb3\n8\xbf\xbe\x1e\v\x18\xd9\xb3+X4\xb5S\xe7\xf6oO;\xc5\xc8-\x9e\xb5\xbe\x97\xb4k\xd2n\xfa\xd1\x82\x16\xea\x93\xc7\xb3?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\xf2K\xe9\xcf\xc6y\xb00\xe0\xa0\f\xef\x02\xd5 (S\xffhY\"\x83\x05M\x0f\v\xec0B\xa9\xd7\x80\xdaL\xa2Q\x8c\xde\x17* \xf5)tk\xb6\xb9\x86?\x1a\xff\xdc\xecP\xd1w1\xf4a\x00r\x06,\x86S\x11)\xf4\x16W\xd6\x86\x10\x02\x15mod\x854\xd4\'^\xb6\xe9f\xd6:\xfc5%\x16\xc5\xa5\xf1\x11k\xdd{\xaai\x8a\xde\xa6\x18,H\xd8\xe5\xf5g\xe7U\\(\x01\xc5\xde\x1d\x8acHf\x86`9qV|=\xbb\xd1\x95\x0f\x86\xffa\xb1\xdb\x82l\xc3\xcf\x88\xeeJ\xda\x8b0f\xac\xc2n\xd1\')\xf2\xaf\xc0\x06\x01\xb4b\xef\xa8!\xf9\n\xf7{C\xdc`h\b6>\x171\x16\x89\xa8\xe9OC\x7f\xb1\x1c\xd4\xd5\xa7\x7f\xfd\xa8Y\xf0s_\xfb\x00'])
sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r3, @ANYRES32=r3], 0x44}}, 0x0)
r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCVHANGUP(r8, 0x5437, 0x0)
r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
mmap(&(0x7f0000af6000/0x4000)=nil, 0x4000, 0x1, 0x810, r9, 0xe0290000)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001a00)=ANY=[@ANYBLOB="000226bd7000ffdbdf25410000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f707300000000080001007063690011000200303030303a30303a31302e30000000000d000acc31535f64726f707300000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f7073000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073000000000e0001006e657464657673696d0000000f0002006e657464657677696d3000000d0087006c325f64726f707300000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f70730000000011000200303030303a30303a31302e30000000000d0087006c325f64726f7073000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073000000005020d8eed0caa7fa674b59c701c6d7747274572c47d8ffcab9c8d50435466c82bf2de85e98e74bd1cfa849982fac7dd13d1f36008a5cabc4e25678114e934d6e4447ddeedef26aa7a17625a8eb09ea9c65222b3424777592c891a1ce275682fc5db81236be7a5db991585e720fe4f9d9c88ac3ffd1c8ccdc4ce6e4bc45768901146b5f0b7c704126b3e851d5b6271fd390f20d405abb2c6d3b006ee021d506bd676035c8c7be0c1a8300"/553], 0x184}, 0x1, 0x0, 0x0, 0x24048014}, 0x0)

17.86097866s ago: executing program 2 (id=629):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000040))
setsockopt$sock_int(r1, 0x1, 0xb, &(0x7f0000000100)=0xfffb, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_type(r5, &(0x7f00000001c0), 0x2, 0x0)
write$cgroup_type(r6, &(0x7f0000000280), 0x9)
gettid()
r7 = openat$cgroup_procs(r5, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f0000000c40), 0x12)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x200002, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
syz_clone(0x24084200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40))
r9 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000000c0)={0x800}, 0x8)
read(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_int(r9, &(0x7f0000000200)=0x1, 0x12)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)

17.85480339s ago: executing program 3 (id=630):
io_setup(0x4, &(0x7f0000000000))
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYBLOB="d23c17f6ec95b3b820b1161ffa233394c6007d8285b061be4d1d842e4a63ec77a08347691f71d1e4132f09405a5b81867a01cf3df73c16fd31622d37a921bdbff76ef2fed6da828ab4e0f87928c18c0380050249fb6ab8e225d1"], 0xf, 0x2a0, &(0x7f0000000840)="$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")
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0xe, &(0x7f00000002c0)={[{@init_itable}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0xb59}}]}, 0x1, 0x454, &(0x7f0000000640)="$eJzs289vFFUcAPDvzHZLELAV8Qc/1CoaG38UC6gcOKjRxAMmJnrQ46YtBCnU0JoIaRSMwZMxJt6NR/8CEw9GL8Z4MvGKd0NCDBfA05rZnaG7292lrbss6X4+ycB7M2/63ndn3u5783YDGFoT2T9JxPaIuBwRY/Vsc4GJ+n83ri3P3Ly2PJNEtfrOP0mt3PVryzNF0eK8bXlmMo1IP09ib5t6F8+dP1WZn587m+cPLJ3+8MDiufPPnzxdOTF3Yu7MwSNHDh+afvmlgy/2JM6sTdf3fLKwb/eb73/91rEvm+JviaNHJrodfKpa7XF1g7WjIZ2MDLAhrEspIrLLVa71/7EoxcrFG4s3Phto44C+qlar1W2dD1+oAptYEs15XR6GRfFBn81/i611EPBK/4YfA3f11foEKIv7Rr7Vj4xEmpcpt8xve2kiIt678O+32Rb9eQ4BANDk52z881y78V8aDzaUuzdfGxqPiPsiYmdE3B8RuyLigYha2Yci4uF11t+6SLJ6/JNe2VBga5SN/47ma1vN479i9BfjpTy3oxZ/OTl+cn7uhfw1mYzyliw/3aWOX17/86tOx1bGfz9V6nuWZ4qxYN6OKyNbms+ZrSxVNhxwi6sXI/aMtIs/ubUSkETE7ojYs8E6Tj7z/b5OxxrHv9mW1d8cfxc9WGeqfhfxdP36X4iW+AtJ1/XJolRxV6z2+x+X3u5U//+Kvwey639P2/v/VvzjSeN67WLDyZfXVselv77oOKe5ffzt7//R5N1aejTf93FlaensdMRocqze6Mb9B1fOLfJF+Sz+yf3t+//OWHkl9kZEdhM/EhGPRsRjedsfj4gnImJ/l/h/e+3JDzYef39l8c+u6/qvJEajdU/7ROnUrz82VTq+Kv6b3a//4VpqMt+zlve/tbSr5W4GAACATSuNiO2RpFO30mk6NVX/vvyuiHR+YXHp2eMLH52Zrf9GYDzKafGka6zheeh0Pq2v5y9GRP2rBcXxQ/lz429KW2v5qZmF+dlBBw9DbluH/p/5uzTo1gF95/daMLz0fxhe+j8ML/0fhldr/784+8PRATUFuMPaff5/OoB2AHdeS/+37AdDxPwfhpf+D8NL/4ehtLg1bv8j+a6J4i9t8PRNm4jyXdGMviUivSuaIdGnxGDflwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHrlvwAAAP//n+LdEA==")
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = creat(&(0x7f0000000380)='./bus\x00', 0x0)
write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfd14)
r2 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r2, 0xc2604111, &(0x7f00000000c0)={0x0, [[0x0, 0xfffffffd]]})
fallocate(r1, 0x100000003, 0xc001, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='oom_score_adj\x00')
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]})
clock_gettime(0x0, 0x0)
pwritev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x0)
r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0)
r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0)
ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000280)=<r6=>0x0)
prlimit64(r6, 0x4, &(0x7f00000002c0)={0x3, 0x1}, &(0x7f0000000340))
dup3(r5, r4, 0x0)
io_setup(0x6, &(0x7f0000000240)=<r7=>0x0)
r8 = fanotify_init(0x20, 0x101000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000071120f00000000009500000000000000c2abc3d05d801eb355f0d9df9be5b9b52bdf048fda46d2edecb860d25720e9496ae92c24f1edee150702473d8173c7883e5c0e33e3368308"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r9, 0xfffff000, 0xe, 0x2000000, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28)
r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0x0, 0x0)
fanotify_mark(r8, 0x41, 0x8000000, r10, 0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r4, 0x0}])

17.848841311s ago: executing program 4 (id=632):
ioctl$sock_bt_hci(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e85"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x2, 0x1, 0x3, 0x0, 0xffffffffffffffff, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2, 0x1, @void, @value, @void, @value}, 0x48)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000340)={'ip6gre0\x00', <r4=>0x0, 0x4, 0x8c, 0x1, 0x0, 0x10, @local, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x8000, 0x0, 0x9}})
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x1, 0x8, 0x8, 0x2100, r3, 0x2, '\x00', r4, 0xffffffffffffffff, 0x4, 0x3, 0x0, 0xb, @void, @value, @void, @value}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='sys_enter\x00', r5}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
fcntl$lock(r6, 0x6, &(0x7f0000002000)={0x1})
fcntl$lock(r6, 0x26, &(0x7f00000031c0))
fcntl$lock(r6, 0x26, &(0x7f0000000080))
fcntl$lock(r6, 0x7, &(0x7f0000000040))
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000009e00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc)

15.054953121s ago: executing program 4 (id=634):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x4, <r6=>r4})
ioctl$DMA_BUF_SET_NAME_A(r6, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00')
pselect6(0x0, 0x0, &(0x7f0000000080)={0xea}, 0x0, 0x0, 0x0)
r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x0, 0x6, 0x8000, 0x6}, 0x1c)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011"], 0x7c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)

13.681209895s ago: executing program 4 (id=638):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7)
connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = open(0x0, 0x101000, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
fcntl$getownex(r0, 0x10, &(0x7f0000000040))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000b40), 0x2b842ac, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0x14, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
r4 = socket(0x840000000002, 0x3, 0x0)
sendmmsg$inet(r4, &(0x7f00000036c0)=[{{&(0x7f0000000380)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001b40)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}]}}}], 0x18}}], 0x1, 0x0)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x8, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {}, {0x7, 0x0, 0xb, 0x7}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x5}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000180000/0x4000)=nil)
mount$overlay(0x0, 0x0, &(0x7f0000000340), 0x0, 0x0)

13.643074818s ago: executing program 3 (id=639):
syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x800, &(0x7f0000000040)=ANY=[], 0x1, 0xda6, &(0x7f0000003c80)="$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")
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
setsockopt$rose(r0, 0x104, 0x4, &(0x7f0000000000)=0x4, 0x4)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000040), 0xfea0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
io_setup(0x20, &(0x7f0000001140))
r3 = io_uring_setup(0x3c7a, &(0x7f00000001c0)={0x0, 0x88cb, 0x40, 0x3})
io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000180), 0x4000000000000181)
unshare(0x6a040000)

8.449983903s ago: executing program 4 (id=641):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000000)={0x0})
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000180)={&(0x7f0000000340), 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000300)={r1})
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000280)=ANY=[], 0x18)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000040)=[{{&(0x7f0000000080)={0xa, 0x4f22, 0x0, @dev={0xfe, 0x80, '\x00', 0x80}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x400d0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
io_setup(0x1000061, 0x0)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
syz_open_dev$sg(0x0, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r5 = dup(r4)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bind$bt_sco(r2, &(0x7f0000000080), 0x8)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB], 0xd)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r6 = syz_open_dev$mouse(&(0x7f00000000c0), 0x7, 0x0)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)=@generic={&(0x7f0000000000)='./file0\x00', r6}, 0x18)
syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
r7 = socket(0xa, 0x801, 0x0)
getsockopt(r7, 0x29, 0x40, &(0x7f0000b3ffac)=""/84, &(0x7f0000001ffc)=0x54)

6.049907697s ago: executing program 0 (id=644):
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00'})
openat$nvram(0xffffffffffffff9c, &(0x7f0000000b40), 0x0, 0x0)
fstat(r0, &(0x7f0000000b80))
sendmsg$unix(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000004c0)="d06c22184fc03782fbaa34d300dfc30e8f89347359fda4e435044ff8b994f393913dd1667bdf08a74931035ed4b9411a899d794a0adb33263f4f0aa63c84f31c1b6144015f8dd4482a4758d31e8514d7934b1a057c0b8822a3d7fab225efc88b5f5e9a531bcab33304ad729b9228867a727434eb4cddd465d8871430a7be4e6833221009883883babcea9f84d25f96becb6df3b16cd3744fbd53a8", 0x9b}, {&(0x7f0000000580)="f049470ffbd947006e5eab9d183b9409e5922a99bf070fb31bb62614ba920047ea65905e9becb2d6048fb4c9b683a9e774bd4438d260f0ebf97237e870ab31af8bf77a3d59602d249f8a4153de9090780fdd0758b86a912559005a16d6fb96cf1d78776a6826f5a2", 0x68}, {0x0}, {&(0x7f0000000900)}, {&(0x7f0000000700)="0f9f864ea06a652a8e33a0979a0a597d350a37a0ec3ebcdc7259c26cbdf92edd27de844750f97bc5870741b15649b2207bb35e44eaed18448528f943adbb37ff9ca63a6f1937f105099d412f6933aaa8df2f", 0x52}, {&(0x7f0000000780)}, {&(0x7f0000000a00)="57eb4daab18af4f16b7e69ec38afe3b110de5c4936186a2d440a8019e959d5f218bbaa4cd5d5074801731a4f6c9a49b8defa8f4a67fd2432b72f4342a862851675bf24f2875662e165c167ecd696182642a23d6c399da2d9757f0ca4e651f348327848f21d8ff72722667fdd92babafc2f9161b6b801349c945630dedd93ab44bc287c81b33539f9e0c0", 0x8a}], 0x7, &(0x7f0000000c00)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee00}}}, @cred={{0x1c}}, @rights={{0x10}}], 0x50}, 0x10)
memfd_create(&(0x7f0000000100)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0)
syz_open_dev$dri(0x0, 0x0, 0x0)
pipe2$watch_queue(&(0x7f0000000280)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
r6 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe)
keyctl$KEYCTL_WATCH_KEY(0x20, r6, r4, 0x0)
pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r6, r7, 0x0)
keyctl$KEYCTL_WATCH_KEY(0x20, r6, r5, 0x0)
r8 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f00000002c0)={0x0, 0x0, 0x0, <r9=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000440)={r9, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x4]})

5.180553876s ago: executing program 1 (id=645):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c00000002060104000000000000000000000000050004000000090005000100060000000d000300686173683a6d61630000000005000500000000001400078008001240000500000500150040000000090002"], 0x5c}}, 0x0)
syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0x80100fc, @dev}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x32, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}}}}, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
setresgid(0x0, 0x0, 0x0)
stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setregid(0xffffffffffffffff, r5)
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]})

5.101193092s ago: executing program 0 (id=646):
r0 = syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x5, 0x357, &(0x7f0000000180)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00010, &(0x7f0000001040)=ANY=[@ANYRES16=r0], 0x1, 0xc43, &(0x7f00000001c0)="$eJzs3U9sHNd9B/DfGy3FldxWTOwqThoHm7ZIZcZy9S+mYhXuqqbZBpBlIhRzC8CVSKkLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBAhQIWMzsW3FJkbYskhIlfz429Z2deW/mvZn1jCzozQsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIOL3Xrl46nTaZsOhh9AYAOCBuDz21VNntnv+AwCPrSs7/f8/AAAAAAAAAAAAAABwUKQo4slIMXd5LU1Unzvql9p9t26PD49sX+1IqmoeqsqXP/XTZ86e+9ILQ+e7eak98wH199pn4rWxKxcbL8/enJufWliYmmyMz7SvzU5O3fMedlt/q8HqBDRuvn5r8vr1hcaZ589u2nx74P3+J44PXBh69uQz3bLjwyMjYxtF6r3la/fdkI6dRngcjiJORornvvfT1IqIInZ/LuoP9tpvdaTqxGDVifHhkaoj0+3WzGK5cbR7IoqIRk+lZvccbX8totb3QPuws2bEUtn8ssGDZffG5lrzravTU43R1vxie7E9OzOaOq0t+9OIIs6niOWIWO2/e3d9UUQtUnzn2Fq6mt/6UZ2HL1YDg3duR7GPfbwHZTsbfRHLxSNwzQ6w/iji1Ujxs3dOxLV8n6nuNV+IeLXMH0S8VeZLEan8YpyLeG+b7xGPploU8efl9b+wliar+0H3vnLpa42vzFyf7Snbva98xOfDXXeKh/R8OLIlH4wDfm+qRxGt6o6/lu7/NzsAAAAAAAAAAAAAAAAA7LUjUcSnI8Ur//ZH1bjiqMalH7sw9PsDv9w7ZvzpD9lPWfb5iFgq7m1M7uE8MHA0jab0kMcSf5zVo4g/zuP/vvWwGwMAAAAAAAAAAAAAAAAAAPCxVsRPIsWL755Iy9E7p3h75kbjSuvqdGdW2O7cv90509fX19cbqZPNnBM5l3Iu51zJuZozilw/ZzPnRM6lnMs5V3Ku5oxDuX7OZs6JnEs5l3Ou5FzNGbVcP2cz50TOpZzLOVdyruaMAzJ3LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA46SIIn4RKb79jbUUKSKaERPRyZX+h906AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDUn4r4fqRo/EHzzrpaRKTq344T5S/nonm4zE9Gc6jMl6J5MWerylrzWw+h/exOXyrix5Giv/72nQuer39f59Odr0G89c2NT5+pdfJQd+PA+/1PHD92YWjkc0/vtJy2a8DgpfbMrduN8eGRkbGe1bV89E/2rBvIxy32putExMIbb77emp6emr//hfIrsIvqj9BCqn1cemqhWojagWjGw+n7JvWHdYNiX5XP//cixW+/++/dB37n+V+PX+p8uvOEj5//ycbz/8WtO7rH539ta738/C+f6ds9/5/sWfdi/t1IXy2ivnhzru94RH3hjTdPtm+2bkzdmJo5d+rUl4eGvnz2VN/hiPr19vRUz9KenC4AAAAAAAAAAAAAAACABycV8buRovXjtdSIiNvVeK2BC0PPnnzmUByqxlttGrf92tiVi42XZ2/OzU8tLExNNsZn2tdmJ6fu9XD1arjX+PDIvnTmQx3Z5/Yfqb88O/fGfPvGHy5uu/1o/eLVhcX51rXtN8eRKCKavWsGqwaPD49UjZ5ut2aqqqPbDqb/6PpSEf8RKa6da6TP53V5/P/WEf6bxv8vbd3RHo7//9zRjfF/n+gpWh4zpSJ+Hil+6y+ejs9X7Twad52zXO5vIsXg+c/mcnG4LNdtQ+e9Ap2RgWXZ/4kU//CLzWW74yGf3Ch7+iOd3EdAef2PRYrv/9l349fzus3vf9j++h/duqN9ev/DUz3rjm56X8Guu06+/icjxUtPvh2/Ua35vw98/0f33RsnOoU33s+xT9f/V3vWDeTj/uZedR4AAAAAAAAAAOAR1peK+NtI8cORWnohr7uXv/83uXVH+/T3vz7Vs25yb+Yr+tCFXZ9UAAAAADgg+lIRP4kUNxbfvjOGevP4757xn7+zMf5zOG3ZWv05369U7w3Yyz//6zWQjzux+24DAAAAAAAAAAAAAAAAAADAgZJSES/k+dQnqvH8kzvOp74SKV75r+dyuXS8LNedB36g+rV+eXbm5MXp6dl6LLauTk81xuZa16bKuk9FirW//myuW1Tzq3fnm+/M8b4xF/t8pBj5u27Zzlzs3bnJn9ooe7os+4lI8Z9/v7lsnpo6zx1dlT1Tlv2rSPH1f9q+7PGNsmfLst+NFD/6eqNb9mhZtvt+1E9tlH3+2myxD1cFAAAAAAAAAAAAAAAAAACAj5u+VMSfRor/vrl8Zyx/nv+/r+dj5a1v9sz3v8Xtap7/gWr+/52W72f+/+q9Aks7HRUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5PKYp4M1LMXV5LK/3l5476pfbMrdvjwyPbVzuSqpqHqvLlT/30mbPnvvTC0PlufnD9vfbpeG3sysXGy7M35+anFhamJhvjM+1rs5NT97yH3dbfarA6AY2br9+avH59oXHm+bObNt8eeL//ieMDF4aePflMt+z48MjIWE+ZWt99H/0uaYf1h6OIv4wUz33vp+mH/RFF7P5cfMh3Z78dqToxWHVifHik6sh0uzWzWG4c7Z6IIqLRU6nZPUcP4FrsSjNiqWx+2eDBsntjc6351tXpqcZoa36xvdienRlNndaW/WlEEedTxHJErPbfvbu+KOL1SPGdY2vpn/sjDnXPwxcvj3311Jmd21HsYx/vQdnORl/EcvEIXLMDrD+K+MdI8bN3TsS/9EfUovMTX4h4tcwfRLwVneudyi/GuYj3tvke8WiqRRH/W17/C2vpnf7yftC9r1z6WuMrM9dne8p27yuP/PPhQTrg96Z6FPGj6o6/lv7Vf9cAAAAAAAAAAAAAAAAAB0gRvxYpXnz3RKrGB98ZU9yeudG40ro63RnW1x371x0zvb6+vt5InWzmnMi5lHM550rO1ZxR5Po5m2XW19cn8uelnMs5V3Ku5oxDuX7OZs6JnEs5l3Ou5FzNGbVcP2cz50TOpZzLOVdyruaMAzJ2DwAAAAAAAAAAAAAAAAAAeLwU1T8pvv2NtbTe35lfeiI6uWI+0Mfe/wcAAP//dsP5HA==")
ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x1, 0x81, 0x7fff, 0x3ff, 0x4, "1f147d935383bc209cb46a5bd478d5a8300089"})
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
socket(0x10, 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000000000007111a4f50bbc94009500a50500000000a782e4bf639f4523ef11a77ecc3db53e13b1522071"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
pipe2$9p(0x0, 0x0)
r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$setperm(0x5, r3, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x26441, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x0)
setresuid(0x0, r4, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, 0x0, 0x0, 0x0)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_pidfd_open(r6, 0x0)
keyctl$read(0x6, r3, 0x0, 0x0)

4.818719831s ago: executing program 4 (id=647):
syz_mount_image$jfs(&(0x7f0000000700), &(0x7f0000000000)='./bus\x00', 0x2000002, &(0x7f00000001c0)=ANY=[@ANYRES16=0x0, @ANYRES64=0x0], 0xfe, 0x60a1, &(0x7f0000001600)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000240), r4, 0x0, 0x2, 0x4}}, 0x20)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
openat$cgroup_ro(r5, 0x0, 0x275a, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)

3.331461803s ago: executing program 1 (id=649):
syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x800, &(0x7f0000000040)=ANY=[], 0x1, 0xda6, &(0x7f0000003c80)="$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")
setsockopt$rose(0xffffffffffffffff, 0x104, 0x4, &(0x7f0000000000)=0x4, 0x4)

2.603233443s ago: executing program 1 (id=650):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, ' \x00'})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCGETS2(r1, 0x5432, 0x0)
ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x2, 0x8}, {0x2, 0x8b8}, {0x40, 0x3}, {0x5, 0x2}, {0x6, 0x6d}, {0x3, 0xff}, {0x200, 0x400}]})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'})
prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8}, 0x0)
getpid()
open(&(0x7f0000000000)='./file0\x00', 0xc902, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x1)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x800, &(0x7f0000838000/0x1000)=nil)
shmat(r2, &(0x7f0000800000/0x800000)=nil, 0x4000)
shmat(r2, &(0x7f00007f8000/0x4000)=nil, 0x1000)
r3 = gettid()
shmat(r2, &(0x7f00007c9000/0x2000)=nil, 0x1000)
process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
process_vm_readv(r3, &(0x7f00000016c0)=[{&(0x7f00000002c0)=""/243, 0xf3}, {&(0x7f0000001c40)=""/67, 0x43}, {0x0}, {&(0x7f0000000200)=""/126, 0x7e}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/76, 0x4c}], 0x6, &(0x7f0000000480)=[{&(0x7f0000000180)=""/16, 0x10}, {&(0x7f0000001780)=""/21, 0x15}, {&(0x7f00000017c0)=""/68, 0x44}, {&(0x7f0000001840)=""/240, 0xf0}, {&(0x7f0000001940)=""/210, 0xd2}, {&(0x7f0000001ac0)=""/210, 0xd2}], 0x6, 0x0)
mprotect(&(0x7f0000455000/0x2000)=nil, 0x2000, 0x0)
mlock(&(0x7f0000bfc000/0x3000)=nil, 0x3000)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
mincore(&(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000001cc0)=""/184)
get_robust_list(0x0, 0x0, 0x0)
process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000400)=""/117, 0x75}, {&(0x7f00000001c0)=""/40, 0x28}], 0x2, 0x0)
shmget$private(0x0, 0x2000, 0x10, &(0x7f0000ffe000/0x2000)=nil)

2.443634133s ago: executing program 0 (id=651):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r6}, 0x10)
r7 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212"], 0x10}}, 0x0)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in=@local}}, 0xe8)
sendmmsg$inet6(r5, 0x0, 0x0, 0x0)
unshare(0x22020600)
pipe(&(0x7f0000000000))

1.484483239s ago: executing program 1 (id=653):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa8}, @call]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {0x0}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r3)
prlimit64(0x0, 0xe, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628)
sched_setscheduler(0x0, 0x6, 0x0)
setpriority(0x1, 0x2, 0x0)
setpriority(0x2, 0x0, 0x0)
setpriority(0x0, 0x6, 0x7)
setpriority(0x2, 0x3, 0x8)
setpriority(0x0, 0x0, 0x2)
setpriority(0x0, 0x8000, 0xff)
setpriority(0x0, 0x5, 0x0)
setpriority(0x0, 0x0, 0x0)
setpriority(0x2, 0x0, 0x671b)
setpriority(0x1, 0x401, 0x0)
setpriority(0x0, 0x0, 0x4)

1.435614462s ago: executing program 0 (id=654):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x4, <r6=>r4})
ioctl$DMA_BUF_SET_NAME_A(r6, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00')
pselect6(0x0, 0x0, &(0x7f0000000080)={0xea}, 0x0, 0x0, 0x0)
r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x0, 0x6, 0x8000, 0x6}, 0x1c)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011"], 0x7c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)

665.646134ms ago: executing program 1 (id=655):
r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@resgid={'resgid', 0x3d, 0xee00}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x444, &(0x7f0000000980)="$eJzs3MtvG8UfAPDv2nHS5y/5lfJoaCFQEBGPpEkf9MAFBBIHkJC4FHEKSVqFpg1qgkSrCAKHcESVuCOOSPwFnOCCgBMSV7ijShXKpYWT0dq7qZvYaZw4del+PtLGM96xZr67O/bsjJ0ACmso/ZNE7IuI3yOiv569vcBQ/eHmyuLk3yuLk0lUq2//ldTK3VhZnMyL5q/bW89Uq1m+r0m9y+9GTMzOTl/K8qMLFz4Ynb985YWZCxPnps9NXxw/ffrE8SO9p8ZPdiTONK4bgx/PHT70+jtX35w8c/W9n79N27sv298YR6cM1Y9uU09XOl1bd+1vSCc9XWwIbSlHRHq6KrX+3x/l2L26rz9e+6yrjQN2VLVarTb7fM4sVYH7WBLdbgHQHfkHfXr/m293aehxT7j+cv0GKI37ZrbV9/REKStTWXN/20lDEXFm6Z+v0i12aB4CAKDR9+n45/lm479SPNRQ7n/ZGspARPw/Ig5ExAMRcTAiHoyolX04Ih5ps/61KyTrxz+la1sKbJPS8d9L2drW7eO/fPQXA+Ust78WfyU5OzM7fSw7JsNR6UvzYxvU8cOrv33Ral/j+C/d0vrzsWDWjms9aybopiYWJrYTc6Prn0YM9jSLP4l8GSeJiEMRMbjFOmae/eZwq313jn8DHVhnqn4d8Uz9/C/FmvhzScv1ybEXT42fHN0Vs9PHRvOrYr1ffl1+q1X924q/A9Lzv6fp9b8a/0CyK2L+8pXztfXa+fbrWP7j85b3NFu7/mdWG9ebPX40sbBwaSyiN3lj/fPjt16b5/PyafzDR5v3/wNx60g8GhHpRXwkIh6LiMeztj8REU9GxNEN4v/plafebz/+DWblOyiNf+pO5z8az3/7ifL5H79rP/5cev5P1FLD2TObef/bbAO3c+wAAADgv6JU+w58UhpZTZdKIyP17/AfjD1LMTe/8NzZuQ8vTtW/Kz8QlVI+09XfMB86ls0N5/nxNfnj2bzxl+XdtfzI5NzsVLeDh4Lb26L/p/4sd7t1wI7zey0oLv0fikv/h+LS/6G49H8ormb9/5MutAO4+3z+Q3Hp/1Bc+j8Ul/4PhdTyt/Glbf3kf7uJpBuVSrSTiNI90Yz7P9Gz6X9mscVEX9Nd3X5nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6Ix/AwAA//+UFuN0")
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20)
r3 = accept4$alg(r2, 0x0, 0x0, 0x0)
read$alg(r3, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x5, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0xdb, &(0x7f00000002c0)=""/219, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
pwritev(r4, &(0x7f0000000600)=[{&(0x7f0000000240)="01000000", 0x28}, {&(0x7f0000000280)="f697079a161cfb7702311e629acda76933ddd0c24174eb4d4d28f9", 0x1b}, {&(0x7f0000000340)="527369587e0a4e47adce", 0xa}], 0x3, 0x0, 0x0)
r5 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
finit_module(r5, &(0x7f00000000c0)='\x00', 0x5)
r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000006c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r8, @ANYBLOB="01000000aeff000000001e00000004000180"], 0x18}}, 0x0)
r9 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
sendmsg(r10, &(0x7f0000000440)={&(0x7f0000000300)=@un=@file={0x1, './file0\x00'}, 0x80, 0x0, 0x0, &(0x7f0000001280)=ANY=[@ANYRESOCT=r0, @ANYRES64, @ANYRESDEC=r9, @ANYRESDEC=r11], 0x180}, 0x1)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0x400000)
sendfile(0xffffffffffffffff, r6, 0x0, 0x0)

663.186535ms ago: executing program 4 (id=656):
openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x822942, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
r3 = dup(r2)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x6)
r4 = getpid()
getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, 0x0)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r5 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r5, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r6 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r5, 0x5)
setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
sendmmsg(r6, &(0x7f0000002980), 0x400000000000239, 0x0)
close_range(r5, 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r7, 0xc01064c8, &(0x7f0000000080)={0x1, 0x0, &(0x7f0000000040)=[<r8=>0x0]})
ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, &(0x7f0000000300)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040))
ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000080))

510.415826ms ago: executing program 0 (id=657):
madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19)

99.988844ms ago: executing program 0 (id=658):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8048a967d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255"], 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000008c0)=r0, 0x4)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0xd6, 0x0, 0x32}, 0x9c)
bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
prctl$PR_SCHED_CORE(0x3e, 0x80000000000001, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000006c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000e80)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="25003300d0000000080211000001080211000000505050505050000003010000000100da0f000000"], 0x44}}, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_int(r5, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4)
sendto$inet(r5, &(0x7f0000001440)="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", 0x782, 0x2004c890, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r7 = syz_io_uring_setup(0x7279, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000180), &(0x7f00000001c0))
r8 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000200)={0x43, 0x18000000}, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r10, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x0, 0x0, 0xc1}}}}, 0x30}}, 0x0)
io_uring_enter(r7, 0x2def, 0x0, 0x0, 0x0, 0x0)
write$rfkill(r6, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)

0s ago: executing program 1 (id=659):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[], 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000008c0)=r1, 0x4)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0xd6, 0x0, 0x32}, 0x9c)
bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
prctl$PR_SCHED_CORE(0x3e, 0x80000000000001, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000006c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000e80)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="25003300d0000000080211000001080211000000505050505050000003010000000100da0f000000"], 0x44}}, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_int(r6, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4)
sendto$inet(r6, &(0x7f0000001440)="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", 0x782, 0x2004c890, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r8 = syz_io_uring_setup(0x7279, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000180), &(0x7f00000001c0))
r9 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000200)={0x43, 0x18000000}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
io_uring_enter(r8, 0x2def, 0x0, 0x0, 0x0, 0x0)
write$rfkill(r7, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)

kernel console output (not intermixed with test programs):

ber 8 using dummy_hcd
[  284.828745][ T5773] loop4: p3 start 4294901760 is beyond EOD, truncated
[  284.869240][ T5769] device bridge_slave_1 entered promiscuous mode
[  284.877704][ T5773] loop4: p4 size 50331648 extends beyond EOD, truncated
[  284.914017][ T5827] loop3: detected capacity change from 0 to 128
[  285.099368][  T946] usb 5-1: device descriptor read/64, error -32
[  285.984735][ T3645] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  285.994856][ T3645] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  286.004196][ T3645] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  286.015019][ T3645] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  286.024264][ T3645] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  286.031983][ T3645] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  286.108075][  T946] usb 5-1: reset high-speed USB device number 8 using dummy_hcd
[  286.188108][  T946] usb 5-1: device descriptor read/8, error -71
[  286.362649][ T5204] udevd[5204]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  286.403006][ T5630] udevd[5630]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  286.442016][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  286.505687][ T3645] Bluetooth: hci3: command tx timeout
[  286.595863][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  287.502367][ T5853] xt_hashlimit: overflow, try lower: 2647300743266041856/8
[  287.567361][ T5769] team0: Port device team_slave_0 added
[  287.896379][   T41] usb 5-1: USB disconnect, device number 8
[  288.088498][   T26] audit: type=1326 audit(1726369912.974:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5855 comm="syz.3.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e6dd7def9 code=0x7ffc0000
[  288.119536][ T3648] Bluetooth: hci2: command tx timeout
[  288.516158][ T5769] team0: Port device team_slave_1 added
[  288.578074][ T3648] Bluetooth: hci3: command tx timeout
[  288.587791][   T26] audit: type=1326 audit(1726369912.974:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5855 comm="syz.3.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e6dd7def9 code=0x7ffc0000
[  289.805709][   T26] audit: type=1326 audit(1726369912.974:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5855 comm="syz.3.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e6dd7def9 code=0x7ffc0000
[  289.830309][   T26] audit: type=1326 audit(1726369912.974:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5855 comm="syz.3.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e6dd7def9 code=0x7ffc0000
[  289.877590][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0
[  289.898011][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  289.900441][   T26] audit: type=1326 audit(1726369912.974:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5855 comm="syz.3.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e6dd7def9 code=0x7ffc0000
[  289.923928][    C1] vkms_vblank_simulate: vblank timer overrun
[  289.993916][   T26] audit: type=1326 audit(1726369912.974:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5855 comm="syz.3.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e6dd7def9 code=0x7ffc0000
[  290.034676][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  290.034710][   T26] audit: type=1326 audit(1726369912.984:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5855 comm="syz.3.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e6dd7def9 code=0x7ffc0000
[  290.072797][   T26] audit: type=1326 audit(1726369912.984:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5855 comm="syz.3.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e6dd7def9 code=0x7ffc0000
[  290.121254][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1
[  290.134362][   T26] audit: type=1326 audit(1726369912.984:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5855 comm="syz.3.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e6dd7def9 code=0x7ffc0000
[  290.138680][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  290.184663][   T26] audit: type=1326 audit(1726369912.984:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5855 comm="syz.3.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e6dd7def9 code=0x7ffc0000
[  290.184681][ T3648] Bluetooth: hci2: command tx timeout
[  290.264700][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  290.298276][ T5863] netlink: 12 bytes leftover after parsing attributes in process `syz.4.306'.
[  290.737875][ T5885] loop4: detected capacity change from 0 to 512
[  290.744804][ T5885] ext3: Unknown parameter 'fsname'
[  291.750594][ T5202] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  292.259167][ T3648] Bluetooth: hci2: command tx timeout
[  292.386883][ T5769] device hsr_slave_0 entered promiscuous mode
[  292.421775][ T5769] device hsr_slave_1 entered promiscuous mode
[  292.461359][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  292.477642][ T5769] Cannot create hsr debugfs directory
[  292.965718][ T5833] chnl_net:caif_netlink_parms(): no params data found
[  293.107102][   T46] device hsr_slave_0 left promiscuous mode
[  293.129407][   T46] device hsr_slave_1 left promiscuous mode
[  293.144128][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  293.155198][   T46] batman_adv: batadv0: Removing interface: batadv_slave_0
[  293.181964][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  293.218742][   T46] batman_adv: batadv0: Removing interface: batadv_slave_1
[  293.231916][   T46] device bridge_slave_1 left promiscuous mode
[  293.245192][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[  293.259162][   T46] device bridge_slave_0 left promiscuous mode
[  293.281526][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[  293.323256][ T5908] loop2: detected capacity change from 0 to 512
[  293.367455][ T5908] EXT4-fs (loop2): failed to initialize system zone (-117)
[  293.378721][   T46] device veth1_macvtap left promiscuous mode
[  293.384789][   T46] device veth0_macvtap left promiscuous mode
[  293.400525][   T46] device veth1_vlan left promiscuous mode
[  293.406392][   T46] device veth0_vlan left promiscuous mode
[  293.435308][ T5908] EXT4-fs (loop2): mount failed
[  293.493910][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  294.338101][ T3648] Bluetooth: hci2: command tx timeout
[  295.344145][ T5930] loop2: detected capacity change from 0 to 512
[  295.447169][   T46] team0 (unregistering): Port device team_slave_1 removed
[  295.538922][   T46] team0 (unregistering): Port device team_slave_0 removed
[  295.614204][   T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  295.656404][   T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  295.809806][ T5932] loop2: detected capacity change from 0 to 2048
[  295.835145][ T5932] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[  295.859719][ T5932] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  296.296694][ T4504] UDF-fs: error (device loop2): udf_read_inode: (ino 1317) failed !bh
[  296.310477][ T4504] UDF-fs: error (device loop2): udf_read_inode: (ino 1317) failed !bh
[  296.656658][   T46] bond0 (unregistering): Released all slaves
[  296.733214][ T5917] device bridge_slave_0 left promiscuous mode
[  296.741717][ T5917] bridge0: port 1(bridge_slave_0) entered disabled state
[  296.753106][ T5917] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  296.770212][ T5922] tipc: Started in network mode
[  296.775094][ T5922] tipc: Node identity , cluster identity 4711
[  296.788236][ T5922] tipc: Failed to set node id, please configure manually
[  296.808081][ T5922] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  297.007134][ T5938] netlink: 12 bytes leftover after parsing attributes in process `syz.4.320'.
[  297.304378][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[  297.322672][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[  297.407128][ T5833] device bridge_slave_0 entered promiscuous mode
[  297.503137][ T5951] loop4: detected capacity change from 0 to 512
[  297.582173][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[  297.590633][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[  297.629333][ T5833] device bridge_slave_1 entered promiscuous mode
[  297.671780][ T5951] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  297.698339][ T5951] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038 (0x7fffffff)
[  297.747078][ T5951] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.323: Directory hole found for htree leaf block 0
[  298.039431][ T5962] xt_hashlimit: overflow, try lower: 0/0
[  298.073774][ T5962] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.323: Directory hole found for htree leaf block 0
[  298.239022][ T5963] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.323: Directory hole found for htree leaf block 0
[  298.323581][ T5964] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.323: Directory hole found for htree leaf block 0
[  298.544344][ T3645] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  298.554363][ T3645] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  298.566139][ T3645] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  298.574405][ T3645] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  298.582787][ T3645] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  298.590518][ T5163] EXT4-fs (loop4): unmounting filesystem.
[  298.601730][ T3645] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  298.681412][ T3648] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  298.690667][ T3648] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  298.699361][ T3648] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  298.707179][ T3648] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  298.716682][ T3648] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  298.724072][ T3648] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  298.824632][ T5975] netlink: 28 bytes leftover after parsing attributes in process `syz.4.325'.
[  298.837239][ T5975] tipc: Started in network mode
[  298.842786][ T5975] tipc: Node identity aaaaaaaaaa32, cluster identity 4711
[  298.850620][ T5975] tipc: Enabled bearer <eth:vlan0>, priority 10
[  298.870109][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  298.881895][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  298.970370][ T5975] tipc: Resetting bearer <eth:vlan0>
[  299.532467][ T5975] tipc: Disabling bearer <eth:vlan0>
[  299.594814][ T5833] team0: Port device team_slave_0 added
[  299.612540][ T5833] team0: Port device team_slave_1 added
[  299.761894][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[  299.771119][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  299.833022][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  299.975237][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[  299.988972][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  300.023398][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  300.114011][ T5988] serio: Serial port pts0
[  300.752036][   T46] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.818110][ T3648] Bluetooth: hci1: command tx timeout
[  300.832048][ T5769] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  300.899137][   T46] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.917351][ T5833] device hsr_slave_0 entered promiscuous mode
[  301.004736][ T5833] device hsr_slave_1 entered promiscuous mode
[  301.138808][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  301.155415][ T5833] Cannot create hsr debugfs directory
[  301.174686][ T5769] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  301.388679][ T5992] xt_hashlimit: max too large, truncated to 1048576
[  301.427726][   T46] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.489833][ T5769] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  301.539967][   T46] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.691976][ T5769] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  301.965513][ T5961] chnl_net:caif_netlink_parms(): no params data found
[  302.097720][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0
[  302.394186][ T5833] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  302.905124][ T5833] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  302.919533][ T3648] Bluetooth: hci1: command tx timeout
[  303.350308][ T5833] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  303.375682][ T5961] bridge0: port 1(bridge_slave_0) entered blocking state
[  303.388395][ T5961] bridge0: port 1(bridge_slave_0) entered disabled state
[  303.414911][ T5961] device bridge_slave_0 entered promiscuous mode
[  303.429537][ T5961] bridge0: port 2(bridge_slave_1) entered blocking state
[  303.456962][ T5961] bridge0: port 2(bridge_slave_1) entered disabled state
[  303.511054][ T5961] device bridge_slave_1 entered promiscuous mode
[  303.522604][ T6030] loop3: detected capacity change from 0 to 512
[  303.545076][ T6030] EXT4-fs: Ignoring removed nomblk_io_submit option
[  303.584563][ T6030] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  303.597147][ T6030] ext4 filesystem being mounted at /16/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[  303.598258][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  303.636683][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  303.680883][ T5769] 8021q: adding VLAN 0 to HW filter on device team0
[  303.791170][ T5769] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  303.824110][ T5769] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  303.981671][ T6042] EXT4-fs warning (device loop3): verify_group_input:169: Last group not full
[  304.092672][ T5833] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  304.662575][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  304.682607][ T5466] EXT4-fs (loop3): unmounting filesystem.
[  304.683415][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  304.703511][ T4896] bridge0: port 1(bridge_slave_0) entered blocking state
[  304.710660][ T4896] bridge0: port 1(bridge_slave_0) entered forwarding state
[  304.719279][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  304.853055][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  304.870300][ T4896] bridge0: port 2(bridge_slave_1) entered blocking state
[  304.877496][ T4896] bridge0: port 2(bridge_slave_1) entered forwarding state
[  304.928684][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  304.947862][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  304.978142][ T3649] Bluetooth: hci1: command tx timeout
[  305.166576][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  305.196571][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  305.255952][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  305.802932][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  305.861626][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  305.879239][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  305.897727][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  305.924185][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  306.041681][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  306.053074][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  306.070876][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  306.096288][ T5961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  306.141094][ T5961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  306.399822][ T5961] team0: Port device team_slave_0 added
[  306.516330][ T5961] team0: Port device team_slave_1 added
[  306.557299][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  306.571828][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  306.807167][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0
[  306.925313][ T5961] batman_adv: batadv0: Adding interface: batadv_slave_0
[  306.933498][ T5961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  307.010448][ T5961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  307.151415][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  307.170661][ T5961] batman_adv: batadv0: Adding interface: batadv_slave_1
[  307.189842][ T6085] netlink: 'syz.4.338': attribute type 2 has an invalid length.
[  307.199082][ T5961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  307.203945][ T6085] loop4: detected capacity change from 0 to 256
[  307.256540][ T5961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  307.287416][ T5961] device hsr_slave_0 entered promiscuous mode
[  307.344876][ T5961] device hsr_slave_1 entered promiscuous mode
[  307.353299][ T5961] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  307.361460][ T5961] Cannot create hsr debugfs directory
[  307.377881][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  307.638430][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  307.661493][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  307.679989][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  307.706925][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  307.837784][ T5769] device veth0_vlan entered promiscuous mode
[  307.983134][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  307.999685][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  308.031391][ T5769] device veth1_vlan entered promiscuous mode
[  308.109206][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  308.117087][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  308.140040][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  309.089090][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  309.142693][ T5769] device veth0_macvtap entered promiscuous mode
[  309.171962][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  309.182792][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  309.359229][ T6118] xt_ecn: cannot match TCP bits for non-tcp packets
[  310.021622][ T5769] device veth1_macvtap entered promiscuous mode
[  310.078410][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  310.086858][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  310.334302][ T6126] ieee802154 phy0 wpan0: encryption failed: -22
[  310.983087][   T46] device hsr_slave_0 left promiscuous mode
[  310.990320][   T46] device hsr_slave_1 left promiscuous mode
[  310.999150][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  311.006750][   T46] batman_adv: batadv0: Removing interface: batadv_slave_0
[  311.022616][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  311.030390][   T46] batman_adv: batadv0: Removing interface: batadv_slave_1
[  311.046340][   T46] device bridge_slave_1 left promiscuous mode
[  311.054410][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[  311.071221][   T46] device bridge_slave_0 left promiscuous mode
[  311.088912][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[  311.139690][   T46] device hsr_slave_0 left promiscuous mode
[  311.168207][   T46] device hsr_slave_1 left promiscuous mode
[  311.196288][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  311.215753][   T46] batman_adv: batadv0: Removing interface: batadv_slave_0
[  311.248589][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  311.266609][   T46] batman_adv: batadv0: Removing interface: batadv_slave_1
[  311.295944][   T46] device bridge_slave_1 left promiscuous mode
[  311.305944][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[  311.323824][   T46] device bridge_slave_0 left promiscuous mode
[  311.330774][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[  311.404328][   T46] device veth1_macvtap left promiscuous mode
[  311.410616][   T46] device veth0_macvtap left promiscuous mode
[  311.417048][   T46] device veth1_vlan left promiscuous mode
[  311.424505][   T46] device veth0_vlan left promiscuous mode
[  311.449565][   T46] device veth1_macvtap left promiscuous mode
[  311.455899][   T46] device veth0_macvtap left promiscuous mode
[  311.463050][   T46] device veth1_vlan left promiscuous mode
[  311.469348][   T46] device veth0_vlan left promiscuous mode
[  312.267621][ T6143] loop4: detected capacity change from 0 to 32768
[  312.288110][ T6143] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.344 (6143)
[  312.330945][ T6143] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  312.341234][ T6143] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  312.349969][ T6143] BTRFS info (device loop4): using free space tree
[  312.548088][ T6143] BTRFS info (device loop4): enabling ssd optimizations
[  313.022862][   T46] team0 (unregistering): Port device team_slave_1 removed
[  313.067687][ T5163] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  313.097466][   T46] team0 (unregistering): Port device team_slave_0 removed
[  313.283940][   T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  313.338667][   T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  314.356516][   T46] bond0 (unregistering): Released all slaves
[  314.914477][   T46] team0 (unregistering): Port device team_slave_1 removed
[  314.954430][   T46] team0 (unregistering): Port device team_slave_0 removed
[  314.993666][   T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  315.036726][   T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  315.477327][   T46] bond0 (unregistering): Released all slaves
[  315.557461][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  315.568083][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  315.577894][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  315.590635][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  315.600501][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  315.611774][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  315.622862][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0
[  315.643721][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  315.674888][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  315.687412][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  315.708817][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  315.728510][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  315.753096][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  315.773528][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1
[  315.784187][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  315.794123][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  315.806556][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  315.825453][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  315.854530][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[  315.900010][ T5769] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  316.003577][ T5769] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  316.038722][ T5769] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  316.076229][ T5769] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  316.122740][ T6187] loop4: detected capacity change from 0 to 512
[  316.150867][ T6187] ext4: Unknown parameter 'measure'
[  316.205208][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[  316.212834][ T5202] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  316.271085][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  316.317118][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  316.325707][ T6187] x_tables: ip_tables: hashlimit.2 match: invalid size 304 (kernel) != (user) 312
[  316.387695][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  316.413736][ T6187] loop4: detected capacity change from 0 to 512
[  316.423480][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  316.451682][ T3694] bridge0: port 1(bridge_slave_0) entered blocking state
[  316.458873][ T3694] bridge0: port 1(bridge_slave_0) entered forwarding state
[  316.540187][ T6187] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2808: Unable to expand inode 17. Delete some EAs or run e2fsck.
[  316.567721][ T6187] EXT4-fs (loop4): 1 truncate cleaned up
[  316.576250][ T6187] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  316.609346][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  316.632864][ T6186] EXT4-fs error (device loop4): ext4_find_dest_de:2113: inode #2: block 13: comm syz.4.349: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0
[  316.672190][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  316.797914][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  316.816847][ T3694] bridge0: port 2(bridge_slave_1) entered blocking state
[  316.823995][ T3694] bridge0: port 2(bridge_slave_1) entered forwarding state
[  316.992336][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[  317.004849][ T1268] ieee802154 phy1 wpan1: encryption failed: -22
[  317.043114][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  317.713380][ T6195] loop3: detected capacity change from 0 to 4096
[  317.740167][ T6195] EXT4-fs: Ignoring removed oldalloc option
[  317.766006][ T5833] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  317.780483][ T5833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  317.812483][ T6195] EXT4-fs (loop3): Test dummy encryption mode enabled
[  317.866721][ T6195] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  317.899080][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  317.907907][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  317.943015][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  318.002815][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  318.071059][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  318.109218][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  318.117873][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  318.179375][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  318.203777][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  318.214018][ T5163] EXT4-fs (loop4): unmounting filesystem.
[  318.218703][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  318.227894][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  318.281080][ T3714] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  318.331675][ T3866] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  318.376139][ T3866] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  318.383717][ T3714] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  318.420913][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  318.500362][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  320.397005][ T5961] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  320.434507][ T5961] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  320.481731][ T5961] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  320.551038][ T6222] netlink: 76 bytes leftover after parsing attributes in process `syz.1.354'.
[  320.575360][ T5961] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  320.694838][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  320.732867][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  320.760243][ T6228] EXT4-fs error (device loop3): __ext4_get_inode_loc:4506: comm syz.3.351: Invalid inode table block 16067239356453746873 in block_group 0
[  320.780963][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[  320.812512][ T6228] EXT4-fs (loop3): Remounting filesystem read-only
[  320.949439][ T6228] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5882: Corrupt filesystem
[  320.961989][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  320.972948][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  320.983376][ T6228] EXT4-fs error (device loop3): ext4_dirty_inode:6086: inode #18: comm syz.3.351: mark_inode_dirty error
[  321.619470][ T6229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  321.899679][ T6236] usb usb8: usbfs: interface 0 claimed by hub while 'syz.4.353' resets device
[  322.251649][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  322.266450][ T5466] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /25/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=3679676137, rec_len=61381, size=4096 fake=0
[  322.289256][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  322.308941][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  322.327113][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  322.387649][ T5466] EXT4-fs (loop3): unmounting filesystem.
[  322.402578][ T5961] 8021q: adding VLAN 0 to HW filter on device bond0
[  322.432765][ T5833] device veth0_vlan entered promiscuous mode
[  322.465597][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  322.489812][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  322.530750][ T5833] device veth1_vlan entered promiscuous mode
[  322.583588][ T5961] 8021q: adding VLAN 0 to HW filter on device team0
[  322.630304][ T6244] loop4: detected capacity change from 0 to 1024
[  322.686945][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  322.711265][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  322.731055][ T6244] bpf: Bad value for 'mode'
[  322.731182][ T3694] bridge0: port 1(bridge_slave_0) entered blocking state
[  322.742770][ T3694] bridge0: port 1(bridge_slave_0) entered forwarding state
[  322.768416][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  322.787404][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  322.808646][ T3694] bridge0: port 2(bridge_slave_1) entered blocking state
[  322.815797][ T3694] bridge0: port 2(bridge_slave_1) entered forwarding state
[  322.828261][ T6244] loop4: detected capacity change from 0 to 2048
[  322.869227][ T6244] EXT4-fs: quotafile must be on filesystem root
[  322.882152][ T6246] netlink: 'syz.1.359': attribute type 21 has an invalid length.
[  322.909695][ T6246] netlink: 152 bytes leftover after parsing attributes in process `syz.1.359'.
[  322.918566][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  322.919241][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  322.919928][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  322.920646][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  322.921588][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  322.937900][ T5833] device veth0_macvtap entered promiscuous mode
[  322.954749][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  322.955492][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  322.956105][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  322.956618][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  322.959393][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  322.961305][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  323.056784][   T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.075792][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  323.076448][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  323.087402][ T5833] device veth1_macvtap entered promiscuous mode
[  323.095981][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  323.096002][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  323.096013][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  323.096025][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  323.096034][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  323.096046][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  323.096055][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  323.096067][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  323.097243][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[  323.106762][ T6245] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  323.112133][ T5961] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  323.112960][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  323.157385][   T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.161355][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  323.163040][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  323.163554][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  323.164048][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  323.164555][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  323.166987][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  323.167005][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  323.167015][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  323.167028][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  323.167037][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  323.167049][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  323.167058][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  323.167070][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  323.168288][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[  323.176286][ T5833] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  323.550950][ T5833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  323.560100][ T5833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  323.578638][ T5833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  323.613473][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  323.639262][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  323.739495][   T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.829873][ T3648] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  323.848254][ T3648] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  323.857879][ T3648] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  323.872808][ T3648] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  323.892566][ T3648] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  323.911250][ T3648] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  323.997007][   T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  324.954578][ T5961] 8021q: adding VLAN 0 to HW filter on device batadv0
[  324.989246][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  324.996750][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  325.167436][ T3714] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  325.237107][ T6282] fuse: Bad value for 'fd'
[  325.237978][ T3714] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  325.273787][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  325.466092][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  325.613139][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  325.938493][ T3648] Bluetooth: hci0: command tx timeout
[  325.964095][ T6282] loop4: detected capacity change from 0 to 64
[  326.127068][   T26] kauditd_printk_skb: 16 callbacks suppressed
[  326.127083][   T26] audit: type=1800 audit(1726369951.291:72): pid=6282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.366" name="bus" dev="loop4" ino=9 res=0 errno=0
[  326.227349][ T3714] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  326.241591][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  326.267181][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  326.288745][ T3714] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  326.317265][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  326.333992][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  326.433716][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  326.453550][ T5961] device veth0_vlan entered promiscuous mode
[  326.476937][ T6264] chnl_net:caif_netlink_parms(): no params data found
[  326.650957][ T5961] device veth1_vlan entered promiscuous mode
[  326.807141][ T6303] loop4: detected capacity change from 0 to 128
[  326.858510][ T6303] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  326.883096][ T6303] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  327.122881][   T26] audit: type=1326 audit(1726369952.171:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6299 comm="syz.0.296" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd7c3f7def9 code=0x0
[  327.856987][ T6314] loop0: detected capacity change from 0 to 256
[  327.892946][ T6264] bridge0: port 1(bridge_slave_0) entered blocking state
[  327.940289][ T6264] bridge0: port 1(bridge_slave_0) entered disabled state
[  327.963118][ T6264] device bridge_slave_0 entered promiscuous mode
[  328.018186][ T3648] Bluetooth: hci0: command tx timeout
[  329.063167][ T6264] bridge0: port 2(bridge_slave_1) entered blocking state
[  329.080133][ T6332] loop4: detected capacity change from 0 to 512
[  329.092852][ T6264] bridge0: port 2(bridge_slave_1) entered disabled state
[  329.109668][ T6264] device bridge_slave_1 entered promiscuous mode
[  329.875380][ T6332] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  329.904018][ T6332] ext4 filesystem being mounted at /41/bus supports timestamps until 2038 (0x7fffffff)
[  329.942102][ T3732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  329.986110][ T3732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  330.004301][ T6332] EXT4-fs warning (device loop4): ext4_group_extend:1894: will only finish group (16384 blocks, 16256 new)
[  330.017784][ T5961] device veth0_macvtap entered promiscuous mode
[  330.060342][ T6332] EXT4-fs warning (device loop4): ext4_group_extend:1899: can't read last block, resize aborted
[  330.098680][ T3649] Bluetooth: hci0: command tx timeout
[  330.447331][ T6344] loop0: detected capacity change from 0 to 736
[  330.541640][ T5202] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  330.721913][ T6345] netlink: 'syz.0.374': attribute type 1 has an invalid length.
[  330.729746][ T6345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.374'.
[  330.897507][ T6264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  330.921595][ T5961] device veth1_macvtap entered promiscuous mode
[  330.931882][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  330.938520][ T5163] EXT4-fs (loop4): unmounting filesystem.
[  330.955160][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  331.202357][ T6264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  331.881717][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  331.922990][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  331.940440][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  331.956607][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  331.967955][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  331.984078][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  331.996190][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  332.006957][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  332.017083][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  332.028148][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  332.206209][ T5961] batman_adv: batadv0: Interface activated: batadv_slave_0
[  332.229930][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  334.214916][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  334.301520][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  334.333342][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  334.354071][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  334.372474][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  334.384813][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  334.402989][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  334.498488][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  334.509443][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  334.519927][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  334.531323][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  335.017898][   T26] audit: type=1326 audit(1726369960.181:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6364 comm="syz.1.378" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa8a6d7def9 code=0x0
[  336.008755][ T5961] batman_adv: batadv0: Interface activated: batadv_slave_1
[  336.042085][ T6264] team0: Port device team_slave_0 added
[  336.212800][ T6264] team0: Port device team_slave_1 added
[  336.306071][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  336.315411][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  336.525103][ T5961] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  336.544766][ T5961] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  336.557098][ T5961] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  336.572664][ T5961] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  336.645775][ T6264] batman_adv: batadv0: Adding interface: batadv_slave_0
[  336.662918][ T6264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  336.790986][ T6397] devpts: called with bogus options
[  336.858245][ T6389] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10)
[  336.865408][ T6389] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  337.274887][ T6393] vhci_hcd: connection closed
[  337.283877][ T6391] netlink: 'syz.0.383': attribute type 1 has an invalid length.
[  337.317034][ T6389] vhci_hcd vhci_hcd.0: Device attached
[  337.323216][ T6264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  337.351012][ T3714] vhci_hcd: stop threads
[  337.356282][ T3714] vhci_hcd: release socket
[  337.398450][ T6165] usb 18-1: SetAddress Request (2) to port 0
[  337.404820][ T6165] usb 18-1: new SuperSpeed USB device number 2 using vhci_hcd
[  337.442881][ T6264] batman_adv: batadv0: Adding interface: batadv_slave_1
[  337.449772][ T3714] vhci_hcd: disconnect device
[  337.478047][ T6264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  337.506610][ T6165] usb 18-1: enqueue for inactive port 0
[  337.545024][ T6264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  337.938831][ T6165] usb usb18-port1: attempt power cycle
[  337.970384][ T6264] device hsr_slave_0 entered promiscuous mode
[  338.004572][ T6264] device hsr_slave_1 entered promiscuous mode
[  338.140211][ T6264] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  338.147814][ T6264] Cannot create hsr debugfs directory
[  339.082257][   T11] device hsr_slave_0 left promiscuous mode
[  339.113714][   T11] device hsr_slave_1 left promiscuous mode
[  339.158163][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  339.169061][ T6165] usb usb18-port1: unable to enumerate USB device
[  339.185097][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  339.194302][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  339.202079][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  339.212772][   T11] device bridge_slave_1 left promiscuous mode
[  339.220679][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  339.250144][   T11] device veth1_macvtap left promiscuous mode
[  339.263625][   T11] device veth0_macvtap left promiscuous mode
[  339.282570][   T11] device veth1_vlan left promiscuous mode
[  339.291288][   T11] device veth0_vlan left promiscuous mode
[  339.321782][ T6430] block nbd0: shutting down sockets
[  339.937124][   T11] team0 (unregistering): Port device team_slave_1 removed
[  339.995025][   T11] team0 (unregistering): Port device team_slave_0 removed
[  340.043197][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  340.091666][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  340.534766][   T11] bond0 (unregistering): Released all slaves
[  340.779723][ T6434] loop7: detected capacity change from 0 to 16384
[  340.912923][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  342.094502][   T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  342.215285][ T6264] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  342.305666][   T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  342.327807][ T6264] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  342.350637][ T6264] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  342.397861][   T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  342.421921][ T6264] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  342.531290][   T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  342.539280][ T3648] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  342.554674][ T3648] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  342.565358][ T3648] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  342.573263][ T3648] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  342.584293][ T3648] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  342.594420][ T3648] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  342.624915][ T3649] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  342.637510][ T3649] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  342.647700][ T3649] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  342.656172][ T3649] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  342.665500][ T3649] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  342.675199][ T3649] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  342.950062][ T6264] 8021q: adding VLAN 0 to HW filter on device bond0
[  343.225869][ T6465] netlink: 28 bytes leftover after parsing attributes in process `syz.0.401'.
[  343.293474][ T6475] syz.1.392[6475] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  343.293928][ T6475] syz.1.392[6475] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  343.447814][   T26] audit: type=1326 audit(1726369968.591:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6468 comm="syz.4.391" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feffcb7def9 code=0x0
[  344.739428][ T3649] Bluetooth: hci1: command tx timeout
[  345.258266][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  345.316637][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  345.319364][ T6482] dns_resolver: Unsupported server list version (0)
[  345.334774][ T6264] 8021q: adding VLAN 0 to HW filter on device team0
[  345.514790][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  345.534002][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  345.622353][ T6499] Cannot find add_set index 0 as target
[  346.438521][ T3866] bridge0: port 1(bridge_slave_0) entered blocking state
[  346.445645][ T3866] bridge0: port 1(bridge_slave_0) entered forwarding state
[  346.472058][ T6492] loop4: detected capacity change from 0 to 2048
[  346.478844][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  346.524738][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  346.546471][ T3866] bridge0: port 2(bridge_slave_1) entered blocking state
[  346.553681][ T3866] bridge0: port 2(bridge_slave_1) entered forwarding state
[  346.562616][ T6492] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  346.593144][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  346.687614][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  346.770027][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  346.811583][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  346.819966][ T3648] Bluetooth: hci1: command tx timeout
[  346.919498][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  346.995931][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  347.017023][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  347.149096][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  347.164997][ T6264] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  347.175936][ T6264] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  347.380957][ T6516] netlink: 'syz.0.400': attribute type 16 has an invalid length.
[  347.388774][ T6516] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.400'.
[  348.127991][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  348.232909][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  348.280664][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  348.417517][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  348.615886][ T6535] loop0: detected capacity change from 0 to 256
[  349.221443][ T6535] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  349.317792][ T6460] chnl_net:caif_netlink_parms(): no params data found
[  349.389213][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  349.534580][ T6537] netlink: 104 bytes leftover after parsing attributes in process `syz.1.404'.
[  349.825386][   T11] device hsr_slave_0 left promiscuous mode
[  349.876849][   T11] device hsr_slave_1 left promiscuous mode
[  349.892807][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  349.928362][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  349.973672][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  350.005227][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  350.022616][   T11] device bridge_slave_1 left promiscuous mode
[  350.036061][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  350.155181][   T11] device bridge_slave_0 left promiscuous mode
[  350.162151][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  350.205137][   T11] device veth1_macvtap left promiscuous mode
[  350.211272][   T11] device veth0_macvtap left promiscuous mode
[  350.217473][   T11] device veth1_vlan left promiscuous mode
[  350.223550][   T11] device veth0_vlan left promiscuous mode
[  350.378204][   T26] audit: type=1326 audit(1726369975.471:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6553 comm="syz.0.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7c3f7def9 code=0x7ffc0000
[  351.048839][   T26] audit: type=1326 audit(1726369975.471:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6553 comm="syz.0.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7c3f7def9 code=0x7ffc0000
[  351.075010][   T26] audit: type=1326 audit(1726369975.471:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6553 comm="syz.0.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7fd7c3f7def9 code=0x7ffc0000
[  351.112021][   T26] audit: type=1326 audit(1726369975.471:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6553 comm="syz.0.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7c3f7def9 code=0x7ffc0000
[  351.145962][   T26] audit: type=1326 audit(1726369975.471:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6553 comm="syz.0.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7c3f7def9 code=0x7ffc0000
[  351.196246][   T26] audit: type=1326 audit(1726369975.471:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6553 comm="syz.0.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7fd7c3f7def9 code=0x7ffc0000
[  351.227502][   T26] audit: type=1326 audit(1726369975.471:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6553 comm="syz.0.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7c3f7def9 code=0x7ffc0000
[  351.264534][   T26] audit: type=1326 audit(1726369975.471:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6553 comm="syz.0.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7c3f7def9 code=0x7ffc0000
[  351.288465][   T26] audit: type=1326 audit(1726369975.471:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6553 comm="syz.0.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7fd7c3f7def9 code=0x7ffc0000
[  351.313149][   T26] audit: type=1326 audit(1726369975.471:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6553 comm="syz.0.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7c3f7def9 code=0x7ffc0000
[  351.387141][ T6564] loop0: detected capacity change from 0 to 128
[  351.406088][ T6564] FAT-fs (loop0): Unrecognized mount option "shortnamelower" or missing value
[  351.984838][   T11] team0 (unregistering): Port device team_slave_1 removed
[  352.045985][   T11] team0 (unregistering): Port device team_slave_0 removed
[  352.112831][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  352.166185][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  352.806498][ T6572] ALSA: mixer_oss: invalid OSS volume ''
[  353.334493][   T11] bond0 (unregistering): Released all slaves
[  353.358166][ T6569] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  354.594108][ T6576] loop4: detected capacity change from 0 to 32768
[  354.622939][ T6576] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.410 (6576)
[  354.644829][ T6576] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  354.655113][ T6576] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  354.663922][ T6576] BTRFS info (device loop4): force clearing of disk cache
[  354.671099][ T6576] BTRFS info (device loop4): using free space tree
[  354.919275][ T6576] BTRFS info (device loop4): enabling ssd optimizations
[  354.935314][ T6576] BTRFS info (device loop4): rebuilding free space tree
[  355.089840][ T5163] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  357.198985][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  357.206720][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  357.268300][ T6264] 8021q: adding VLAN 0 to HW filter on device batadv0
[  357.299548][ T6460] bridge0: port 1(bridge_slave_0) entered blocking state
[  357.338058][ T6460] bridge0: port 1(bridge_slave_0) entered disabled state
[  357.347242][ T6460] device bridge_slave_0 entered promiscuous mode
[  357.429161][ T6460] bridge0: port 2(bridge_slave_1) entered blocking state
[  357.436286][ T6460] bridge0: port 2(bridge_slave_1) entered disabled state
[  357.505952][ T6460] device bridge_slave_1 entered promiscuous mode
[  358.288593][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  358.318714][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  358.329416][ T6619] loop4: detected capacity change from 0 to 512
[  358.373021][ T6460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  358.394982][ T6460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  358.467822][ T6619] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.414: inode #1: comm syz.4.414: iget: illegal inode #
[  358.495889][ T6619] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.414: error while reading EA inode 1 err=-117
[  358.517114][ T6619] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.414: inode #1: comm syz.4.414: iget: illegal inode #
[  358.558919][ T6619] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.414: error while reading EA inode 1 err=-117
[  358.584499][ T6619] EXT4-fs (loop4): 1 orphan inode deleted
[  358.593589][ T6619] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  358.724940][ T6460] team0: Port device team_slave_0 added
[  359.017262][ T6460] team0: Port device team_slave_1 added
[  359.940532][ T6264] device veth0_vlan entered promiscuous mode
[  360.039381][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  360.066940][ T5163] EXT4-fs (loop4): unmounting filesystem.
[  360.086064][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  360.154103][ T6460] batman_adv: batadv0: Adding interface: batadv_slave_0
[  360.166626][ T6460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  360.263864][ T6460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  360.290974][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  360.302694][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  360.318658][ T6264] device veth1_vlan entered promiscuous mode
[  360.325395][ T6632] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  360.330206][ T6460] batman_adv: batadv0: Adding interface: batadv_slave_1
[  360.350537][ T6460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  360.411754][ T6460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  360.487311][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  360.517071][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  360.542262][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  360.565205][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  360.581136][ T6264] device veth0_macvtap entered promiscuous mode
[  360.630529][ T6460] device hsr_slave_0 entered promiscuous mode
[  360.641764][ T6460] device hsr_slave_1 entered promiscuous mode
[  360.791187][ T6264] device veth1_macvtap entered promiscuous mode
[  361.697386][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  361.728429][ T6264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  361.759487][ T6264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  361.797694][ T6264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  361.815184][ T6264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  361.825706][ T6264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  362.010079][ T6264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  362.168827][ T6264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  362.334081][ T6264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  362.524060][ T6264] batman_adv: batadv0: Interface activated: batadv_slave_0
[  362.533833][ T6668] netlink: 'syz.0.422': attribute type 13 has an invalid length.
[  362.562248][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  362.590329][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  362.684188][ T6686] loop4: detected capacity change from 0 to 512
[  362.692548][ T6264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  362.723500][ T6264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  362.758229][ T6264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  362.793476][ T6686] EXT4-fs (loop4): 1 truncate cleaned up
[  362.823531][ T6686] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  362.843399][ T6264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  362.917965][ T6264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  363.190801][ T6264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.468022][ T6264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  364.519176][ T6264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.588282][ T6264] batman_adv: batadv0: Interface activated: batadv_slave_1
[  364.656404][ T6264] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  364.700109][ T6264] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  364.720195][ T6264] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  364.736079][ T6264] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  364.783252][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  364.785646][ T5163] EXT4-fs (loop4): unmounting filesystem.
[  364.792531][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  365.149360][ T3732] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  365.258257][ T3732] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  365.382048][ T6716] 9pnet: Could not find request transport: ±T‡fdno=8_­ï"fDƒSð†5^G�a(-¾ŒéyÒãmˆ0x000000000000000c
[  365.668393][ T3732] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  365.780284][ T4896] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  365.836440][ T4896] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  365.897512][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  366.276111][ T6732] loop3: detected capacity change from 0 to 2048
[  367.077160][ T3091] Alternate GPT is invalid, using primary GPT.
[  367.093848][ T3091]  loop3: p1 p2 p3
[  367.226701][ T6460] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  367.259637][ T5202] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  367.341271][ T6460] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  367.355499][ T5630] udevd[5630]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  367.367360][ T5110] udevd[5110]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  367.411892][ T5202] udevd[5202]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  367.434332][ T6460] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  367.665939][ T6460] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  367.773334][ T6745] loop3: detected capacity change from 0 to 16
[  367.781007][ T6745] erofs: Unknown parameter 'ÕÐÂp¶X]Ê°b-xT/uçGGî•ÏnK¿ÿˆ_jÞõ…‘—o±èz÷Ìh`ÙvtцSØAC¿Y¹ÿôK›šApâÚõ[mòõOÜ/\ÕÌõ ¦Ã#6kþÜàšÿÛm!ž7N�å(Ñ’E¢"’ÿ¶v>z«½u:¹�_ã	†~nM�/y+ʶõŽ À-÷Mò–K¦WªÛS·™7[9æ7¤¬&	Àmš÷B¦<'
[  369.634382][ T6757] loop3: detected capacity change from 0 to 512
[  369.737752][ T6460] 8021q: adding VLAN 0 to HW filter on device bond0
[  369.755786][ T6460] 8021q: adding VLAN 0 to HW filter on device team0
[  369.790586][ T6460] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  369.829381][ T6460] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  369.863330][ T6757] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz.3.436: casefold flag without casefold feature
[  369.871594][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  369.908353][ T6757] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.436: couldn't read orphan inode 15 (err -117)
[  369.917666][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  369.948459][ T6757] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  369.961649][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  370.087156][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  370.097483][ T3845] bridge0: port 1(bridge_slave_0) entered blocking state
[  370.104600][ T3845] bridge0: port 1(bridge_slave_0) entered forwarding state
[  370.115537][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  370.124741][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  370.133835][ T3845] bridge0: port 2(bridge_slave_1) entered blocking state
[  370.141075][ T3845] bridge0: port 2(bridge_slave_1) entered forwarding state
[  371.015288][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  371.522761][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  371.611048][ T6776] xt_TPROXY: Can be used only with -p tcp or -p udp
[  371.665196][   T26] kauditd_printk_skb: 21 callbacks suppressed
[  371.665231][   T26] audit: type=1804 audit(1726369996.821:107): pid=6776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.436" name="/newroot/2/file0/bus" dev="loop3" ino=18 res=1 errno=0
[  371.940317][ T6264] EXT4-fs (loop3): unmounting filesystem.
[  371.950376][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  371.961024][ T6774] loop0: detected capacity change from 0 to 512
[  372.048363][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  372.075656][ T6774] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  372.126574][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  372.171462][ T6782] loop3: detected capacity change from 0 to 1024
[  372.284740][ T6774] EXT4-fs (loop0): invalid journal inode
[  373.750818][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  373.763308][ T6774] EXT4-fs (loop0): can't get journal size
[  373.781904][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  373.803518][ T6774] EXT4-fs: failed to create workqueue
[  373.810017][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  373.824284][ T6774] EXT4-fs (loop0): mount failed
[  373.915246][ T6792] autofs4:pid:6792:autofs_fill_super: called with bogus options
[  374.614389][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  374.721297][ T6795] loop3: detected capacity change from 0 to 256
[  374.739206][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  374.803502][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  374.823513][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  374.913436][ T6796] loop3: detected capacity change from 0 to 128
[  374.947373][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  374.972613][ T6796] VFS: Found a Xenix FS (block size = 512) on device loop3
[  374.992127][ T6796] sysv_free_block: trying to free block not in datazone
[  375.765436][ T6796] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  377.264127][ T6796] loop3: detected capacity change from 0 to 512
[  377.332626][ T6796] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[  377.342153][ T6796] UDF-fs: Scanning with blocksize 512 failed
[  377.377622][ T6796] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[  377.393765][ T6796] UDF-fs: Scanning with blocksize 1024 failed
[  377.426922][ T6796] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[  377.436020][ T6796] UDF-fs: Scanning with blocksize 2048 failed
[  377.445332][ T6796] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  377.523714][ T6796] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  378.423024][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[  378.429392][ T1268] ieee802154 phy1 wpan1: encryption failed: -22
[  378.970004][ T6841] loop0: detected capacity change from 0 to 1024
[  379.562048][ T6841] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  379.818832][ T5833] EXT4-fs (loop0): unmounting filesystem.
[  380.012253][ T6853] Cannot find add_set index 0 as target
[  380.328195][ T6597] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  380.520074][ T6852] xt_CT: No such helper "syz0"
[  380.616617][ T6460] 8021q: adding VLAN 0 to HW filter on device batadv0
[  380.639985][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  380.647564][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  380.669797][ T6857] loop0: detected capacity change from 0 to 256
[  380.718209][ T6597] usb 5-1: Using ep0 maxpacket: 16
[  380.761781][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  380.798415][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  380.934327][ T6864] loop3: detected capacity change from 0 to 1024
[  380.941619][ T6864] hfsplus: unable to parse mount options
[  380.996752][ T3732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  381.115809][   T26] audit: type=1804 audit(1726370006.261:108): pid=6867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.452" name="/newroot/30/bus/bus" dev="loop0" ino=1048666 res=1 errno=0
[  381.151659][ T5202] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  381.251440][ T3732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  381.786594][ T3732] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  381.908970][ T6597] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  381.935059][   T26] audit: type=1800 audit(1726370006.271:109): pid=6867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.452" name="bus" dev="loop0" ino=1048666 res=0 errno=0
[  381.987216][ T6597] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  382.181814][ T3732] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  382.221639][ T6597] usb 5-1: Product: syz
[  382.225840][ T6597] usb 5-1: Manufacturer: syz
[  382.262190][ T6597] usb 5-1: SerialNumber: syz
[  382.299932][ T6597] usb 5-1: config 0 descriptor??
[  382.327430][ T6460] device veth0_vlan entered promiscuous mode
[  382.342258][ T6460] device veth1_vlan entered promiscuous mode
[  382.355920][ T6597] visor 5-1:0.0: Sony Clie 3.5 converter detected
[  382.871724][ T6597] usb 5-1: clie_3_5_startup: get interface number failed: -32
[  382.883651][ T6597] visor: probe of 5-1:0.0 failed with error -32
[  385.572134][ T4310] usb 5-1: USB disconnect, device number 9
[  385.748177][ T6889] loop3: detected capacity change from 0 to 512
[  386.915850][ T6460] device veth0_macvtap entered promiscuous mode
[  386.926961][ T6460] device veth1_macvtap entered promiscuous mode
[  386.938555][ T6889] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  386.948777][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  386.957387][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  387.104311][ T6889] EXT4-fs (loop3): 1 truncate cleaned up
[  387.110204][ T6889] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  388.055982][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  388.087971][ T6264] EXT4-fs (loop3): unmounting filesystem.
[  388.094488][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  388.397437][ T6899] loop4: detected capacity change from 0 to 1024
[  388.565914][ T6899] hfsplus: unable to parse mount options
[  388.895619][ T6460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  388.945437][ T6460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  388.955723][ T6460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  388.966892][ T6460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  388.982954][ T6460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  389.002772][ T6460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  389.017155][ T6460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  389.036105][ T6460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  389.046456][ T6460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  389.063313][ T6460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  389.079530][ T6460] batman_adv: batadv0: Interface activated: batadv_slave_0
[  389.268026][ T5202] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  389.837755][ T6913] can: request_module (can-proto-0) failed.
[  389.847290][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  389.891013][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  389.921816][ T6899] loop4: detected capacity change from 0 to 512
[  389.960781][ T6899] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found
[  389.989712][ T6899] UDF-fs: Scanning with blocksize 512 failed
[  390.018796][ T6460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  390.147871][ T6460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  390.159424][ T6899] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found
[  390.167617][ T6899] UDF-fs: Scanning with blocksize 1024 failed
[  390.175334][ T6460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  390.178120][ T6899] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found
[  390.186456][ T6460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  390.757157][ T6460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  390.772502][ T6899] UDF-fs: Scanning with blocksize 2048 failed
[  390.781205][ T6899] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  390.799528][ T6460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  390.923574][ T6899] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  391.628871][ T6460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  391.673084][ T6460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  391.688044][ T6460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  391.699019][ T6460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  391.710802][ T6460] batman_adv: batadv0: Interface activated: batadv_slave_1
[  391.847642][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  391.867761][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  391.895051][ T6460] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  391.914505][ T6460] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  391.950152][ T6460] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  391.970014][ T6460] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  392.831922][ T6938] netlink: 4 bytes leftover after parsing attributes in process `syz.3.469'.
[  392.841441][ T6938] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address.
[  392.850292][ T6938] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (11)
[  392.982869][ T6941] loop4: detected capacity change from 0 to 512
[  393.015427][ T6943] loop3: detected capacity change from 0 to 1024
[  394.075118][ T6941] EXT4-fs (loop4): Test dummy encryption mode enabled
[  394.091361][ T6946] syz.0.472 (6946): drop_caches: 2
[  394.106957][ T6946] syz.0.472 (6946): drop_caches: 2
[  394.163521][ T6946] syz.0.472 (6946): drop_caches: 2
[  394.226688][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  394.270184][ T6941] EXT4-fs error (device loop4): __ext4_iget:5055: inode #11: block 1: comm syz.4.470: invalid block
[  394.299152][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  394.315351][ T6941] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.470: couldn't read orphan inode 11 (err -117)
[  394.332879][ T6955] loop3: detected capacity change from 0 to 1024
[  394.364667][ T6941] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  394.368820][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  394.588656][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  394.597636][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  394.681631][ T6957] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.470: Directory hole found for htree leaf block 0
[  395.365379][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  395.423432][ T6945] syz.0.472 (6945): drop_caches: 2
[  395.428795][ T6945] syz.0.472 (6945): drop_caches: 2
[  395.503332][ T5163] EXT4-fs (loop4): unmounting filesystem.
[  395.548561][ T6946] syz.0.472 (6946): drop_caches: 2
[  395.625517][ T6955] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  396.169595][ T3866] device hsr_slave_0 left promiscuous mode
[  396.199982][ T3866] device hsr_slave_1 left promiscuous mode
[  396.331685][ T3866] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  396.374510][ T3866] batman_adv: batadv0: Removing interface: batadv_slave_0
[  396.399088][ T3866] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  396.415500][ T3866] batman_adv: batadv0: Removing interface: batadv_slave_1
[  396.424843][ T3866] device bridge_slave_1 left promiscuous mode
[  396.910518][ T3866] bridge0: port 2(bridge_slave_1) entered disabled state
[  396.983928][ T3866] device bridge_slave_0 left promiscuous mode
[  397.012780][ T3866] bridge0: port 1(bridge_slave_0) entered disabled state
[  397.126045][ T3866] device veth1_macvtap left promiscuous mode
[  397.250413][ T3866] device veth0_macvtap left promiscuous mode
[  397.284998][ T3866] device veth1_vlan left promiscuous mode
[  397.414842][ T6982] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  397.424502][ T6982] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  397.495174][ T3866] device veth0_vlan left promiscuous mode
[  398.161673][ T6984] loop3: detected capacity change from 0 to 4096
[  400.695557][   T26] audit: type=1326 audit(1726370025.461:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7002 comm="syz.3.481" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb3f17def9 code=0x0
[  402.243669][ T6165] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  402.335312][ T3866] team0 (unregistering): Port device team_slave_1 removed
[  402.379158][ T3866] team0 (unregistering): Port device team_slave_0 removed
[  402.444293][ T3866] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  402.492902][ T6165] usb 2-1: Using ep0 maxpacket: 8
[  402.535274][ T3866] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  402.638254][ T6165] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  402.660592][ T6165] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  402.684753][ T6165] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00
[  402.694270][ T6165] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  402.729628][ T6165] usb 2-1: config 0 descriptor??
[  403.503961][ T6165] ryos 0003:1E7D:3232.0003: unknown main item tag 0x0
[  403.514464][ T6165] ryos 0003:1E7D:3232.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:3232] on usb-dummy_hcd.1-1/input0
[  403.635776][ T3866] bond0 (unregistering): Released all slaves
[  403.825141][ T6971] tap0: tun_chr_ioctl cmd 1074025677
[  403.852642][ T6971] tap0: linktype set to 512
[  403.875905][ T6165] usb 2-1: USB disconnect, device number 6
[  404.124693][ T7031] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  404.190909][ T7035] loop2: detected capacity change from 0 to 256
[  404.350021][ T7035] exFAT-fs (loop2): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1119acf0)
[  404.374930][ T7035] exFAT-fs (loop2): invalid boot region
[  404.389045][ T7035] exFAT-fs (loop2): failed to recognize exfat type
[  404.577836][ T7037] loop3: detected capacity change from 0 to 512
[  404.589697][ T7037] EXT4-fs: Ignoring removed nomblk_io_submit option
[  404.883883][ T7037] EXT4-fs (loop3): Test dummy encryption mode enabled
[  405.004795][ T7037] EXT4-fs (loop3): 1 truncate cleaned up
[  405.011308][ T7037] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  405.160893][ T7041] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 7: invalid block bitmap
[  405.705071][ T7052] loop4: detected capacity change from 0 to 1024
[  405.824792][ T7052] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  405.992014][ T6264] EXT4-fs (loop3): unmounting filesystem.
[  406.568947][ T7058] Bluetooth: MGMT ver 1.22
[  409.320680][ T7068] xt_TPROXY: Can be used only with -p tcp or -p udp
[  409.403403][   T26] audit: type=1326 audit(1726370034.561:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7069 comm="syz.3.499" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb3f17def9 code=0x0
[  409.507297][ T7073] netlink: 'syz.0.500': attribute type 1 has an invalid length.
[  409.575581][ T7073] netlink: 92 bytes leftover after parsing attributes in process `syz.0.500'.
[  410.492652][ T7080] loop4: detected capacity change from 0 to 512
[  410.685364][ T7080] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  410.694674][ T7080] ext4 filesystem being mounted at /72/bus supports timestamps until 2038 (0x7fffffff)
[  412.083194][ T5163] EXT4-fs (loop4): unmounting filesystem.
[  414.142548][ T7101] loop3: detected capacity change from 0 to 2048
[  414.168837][ T7111] loop4: detected capacity change from 0 to 512
[  414.201588][ T7101]  loop3: p2 < >
[  414.230617][ T7111] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  414.250018][    C0] operation not supported error, dev loop3, sector 0 op 0x9:(WRITE_ZEROES) flags 0x8000800 phys_seg 0 prio class 2
[  414.365696][ T7111] EXT4-fs (loop4): 1 truncate cleaned up
[  414.385513][ T7111] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  416.742243][ T5163] EXT4-fs (loop4): unmounting filesystem.
[  419.686770][ T7152] loop3: detected capacity change from 0 to 256
[  420.284692][ T7157] loop2: detected capacity change from 0 to 16
[  420.375562][ T7157] erofs: (device loop2): mounted with root inode @ nid 36.
[  420.769984][ T7163] serio: Serial port ptm0
[  422.076668][ T4896] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  422.088547][ T4896] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  422.107306][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  422.177358][ T7171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  422.236156][ T7177] syz.0.522[7177] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  422.236252][ T7177] syz.0.522[7177] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  423.762264][ T7189] loop2: detected capacity change from 0 to 512
[  423.873943][ T7189] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  423.938385][ T7189] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038 (0x7fffffff)
[  426.149582][ T6460] EXT4-fs (loop2): unmounting filesystem.
[  426.475569][ T7217] netlink: 20 bytes leftover after parsing attributes in process `syz.4.534'.
[  426.485002][ T7217] netlink: 248 bytes leftover after parsing attributes in process `syz.4.534'.
[  427.367975][ T6597] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  427.618058][ T6597] usb 2-1: Using ep0 maxpacket: 16
[  428.411668][ T6597] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[  428.462760][ T6597] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  428.493907][ T6597] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  428.590608][ T6597] usb 2-1: config 0 descriptor??
[  428.948085][ T7236] loop4: detected capacity change from 0 to 128
[  429.533489][ T7238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  429.625375][ T5163] FAT-fs (loop4): error, invalid access to FAT (entry 0xffff0000)
[  429.647966][ T5163] FAT-fs (loop4): Filesystem has been set read-only
[  429.662883][ T7238] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  429.781360][ T5163] FAT-fs (loop4): error, corrupted directory (invalid entries)
[  429.819029][ T6597] hid (null): nested delimiters
[  429.823905][ T6597] hid (null): nested delimiters
[  429.834656][ T5163] FAT-fs (loop4): error, corrupted directory (invalid entries)
[  429.856417][ T6597] hid (null): nested delimiters
[  429.869180][ T6597] hid (null): report_id 24797 is invalid
[  429.875219][ T6597] hid (null): bogus close delimiter
[  429.882405][ T6597] hid (null): unknown global tag 0xd
[  429.891817][ T6597] hid (null): report_id 2838798905 is invalid
[  429.898230][ T6597] hid (null): unknown global tag 0xc
[  429.903848][ T6597] hid (null): unknown global tag 0xc
[  429.917200][ T6597] hid-generic 0003:0158:0100.0004: unknown main item tag 0x1
[  429.925005][ T6597] hid-generic 0003:0158:0100.0004: unexpected long global item
[  429.936282][ T6597] hid-generic: probe of 0003:0158:0100.0004 failed with error -22
[  430.240522][ T6171] usb 2-1: USB disconnect, device number 7
[  430.596839][ T3762] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  430.765903][ T3762] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  430.931527][ T3762] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  431.037853][ T7248] netlink: 28 bytes leftover after parsing attributes in process `syz.1.544'.
[  431.103696][ T3762] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  431.160933][ T7248] netlink: 28 bytes leftover after parsing attributes in process `syz.1.544'.
[  431.229492][ T3649] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  431.239521][ T3649] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  431.247325][ T3649] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  431.263606][ T3649] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  431.274213][ T3649] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  431.282154][ T3649] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  431.318374][ T3648] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  431.332288][ T7249] netdevsim netdevsim3: Direct firmware load for ng failed with error -2
[  431.340958][ T7249] netdevsim netdevsim3: Falling back to sysfs fallback for: ng
[  431.356142][ T3648] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  431.396509][ T3648] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  431.406397][ T3648] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  431.414343][ T3648] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  431.421887][ T3648] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  431.431224][ T7254] Bluetooth: hci4: Opcode 0x0c1a failed: -19
[  431.595075][ T3762] tipc: Left network mode
[  432.180087][ T7270] xt_recent: hitcount (718) is larger than allowed maximum (255)
[  438.289273][ T3649] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  438.301642][ T3649] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  438.312332][ T3649] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  438.322901][ T3649] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  438.330608][ T3649] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  438.342180][ T3649] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  438.359052][ T3648] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  438.366216][ T3648] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  438.378053][ T3648] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  438.385530][ T3648] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  438.393076][ T3648] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  438.400283][ T3648] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  438.437240][ T7305] netlink: 12 bytes leftover after parsing attributes in process `syz.3.555'.
[  439.861144][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[  439.867521][ T1268] ieee802154 phy1 wpan1: encryption failed: -22
[  440.701283][ T3648] Bluetooth: hci4: command tx timeout
[  440.721108][ T7323] loop3: detected capacity change from 0 to 64
[  440.749020][ T7323] overlayfs: upper fs needs to support d_type.
[  440.757472][ T7323] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  440.764547][ T7323] overlayfs: failed to set xattr on upper
[  440.770339][ T7323] overlayfs: ...falling back to index=off,metacopy=off.
[  440.956705][ T6264] Trying to free block not in datazone
[  441.010444][ T6264] Trying to free block not in datazone
[  441.015937][ T6264] Trying to free block not in datazone
[  441.058019][ T6264] Trying to free block not in datazone
[  441.063796][ T6264] Trying to free block not in datazone
[  441.120781][ T6264] minix_free_block (loop3:6): bit already cleared
[  441.147559][ T6264] Trying to free block not in datazone
[  441.197982][ T6264] Trying to free block not in datazone
[  441.806450][ T7357] loop3: detected capacity change from 0 to 128
[  442.722859][ T7357] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  442.731672][ T7357] ext4 filesystem being mounted at /31/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[  443.064183][ T6264] EXT4-fs (loop3): unmounting filesystem.
[  443.261347][ T3762] device hsr_slave_0 left promiscuous mode
[  443.294754][ T3762] device hsr_slave_1 left promiscuous mode
[  443.336218][ T3762] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  443.371125][ T3762] batman_adv: batadv0: Removing interface: batadv_slave_0
[  443.395146][ T3762] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  443.416196][ T3762] batman_adv: batadv0: Removing interface: batadv_slave_1
[  443.488109][ T3762] device bridge_slave_1 left promiscuous mode
[  443.522786][ T3762] bridge0: port 2(bridge_slave_1) entered disabled state
[  443.533227][ T7376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.565'.
[  443.608995][ T3762] device bridge_slave_0 left promiscuous mode
[  443.623403][ T3762] bridge0: port 1(bridge_slave_0) entered disabled state
[  443.753105][ T3762] device veth1_macvtap left promiscuous mode
[  443.781656][ T3762] device veth0_macvtap left promiscuous mode
[  443.801517][ T3762] device veth1_vlan left promiscuous mode
[  443.849089][ T3762] device veth0_vlan left promiscuous mode
[  448.314674][   T26] audit: type=1326 audit(1726370070.291:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7390 comm="syz.0.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7c3f7def9 code=0x7ffc0000
[  449.353734][   T26] audit: type=1326 audit(1726370070.291:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7390 comm="syz.0.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7c3f7def9 code=0x7ffc0000
[  449.518557][   T26] audit: type=1326 audit(1726370070.391:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7390 comm="syz.0.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd7c3f7def9 code=0x7ffc0000
[  450.043151][   T26] audit: type=1326 audit(1726370070.391:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7390 comm="syz.0.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7c3f7def9 code=0x7ffc0000
[  450.087622][   T26] audit: type=1326 audit(1726370070.401:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7390 comm="syz.0.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7c3f7def9 code=0x7ffc0000
[  450.222781][   T26] audit: type=1326 audit(1726370070.501:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7390 comm="syz.0.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd7c3f7def9 code=0x7ffc0000
[  450.288447][   T26] audit: type=1326 audit(1726370070.511:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7390 comm="syz.0.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7c3f7def9 code=0x7ffc0000
[  450.325940][   T26] audit: type=1326 audit(1726370070.511:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7390 comm="syz.0.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7c3f7def9 code=0x7ffc0000
[  450.386482][   T26] audit: type=1326 audit(1726370070.681:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7390 comm="syz.0.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd7c3f7def9 code=0x7ffc0000
[  450.426087][   T26] audit: type=1326 audit(1726370070.681:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7390 comm="syz.0.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7c3f7def9 code=0x7ffc0000
[  450.920468][ T3762] team0 (unregistering): Port device team_slave_1 removed
[  451.004898][ T3762] team0 (unregistering): Port device team_slave_0 removed
[  451.082909][ T3762] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  451.167750][ T3762] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  452.200747][ T3762] bond0 (unregistering): Released all slaves
[  452.418708][ T7309] chnl_net:caif_netlink_parms(): no params data found
[  452.492053][ T7402] sp0: Synchronizing with TNC
[  453.935568][ T7309] bridge0: port 1(bridge_slave_0) entered blocking state
[  453.974738][ T7309] bridge0: port 1(bridge_slave_0) entered disabled state
[  454.009616][ T7434] loop2: detected capacity change from 0 to 16
[  454.038659][ T7309] device bridge_slave_0 entered promiscuous mode
[  454.067511][ T7309] bridge0: port 2(bridge_slave_1) entered blocking state
[  454.085156][ T7309] bridge0: port 2(bridge_slave_1) entered disabled state
[  454.143022][ T7309] device bridge_slave_1 entered promiscuous mode
[  454.221775][ T7437] syz.3.576 (7437): drop_caches: 2
[  454.266483][ T7437] syz.3.576 (7437): drop_caches: 2
[  454.292876][ T7309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  454.357688][ T7309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  454.531755][ T7309] team0: Port device team_slave_0 added
[  454.603692][ T7309] team0: Port device team_slave_1 added
[  454.970728][ T7309] batman_adv: batadv0: Adding interface: batadv_slave_0
[  455.648037][ T7309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  455.786681][ T7309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  456.054235][ T7309] batman_adv: batadv0: Adding interface: batadv_slave_1
[  456.067709][ T7309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  456.162633][ T7435] syz.3.576 (7435): drop_caches: 2
[  456.303412][ T7309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  456.417589][ T7434] erofs: (device loop2): mounted with root inode @ nid 36.
[  456.579808][ T7431] syz.3.576 (7431): drop_caches: 2
[  456.874490][ T7309] device hsr_slave_0 entered promiscuous mode
[  456.976209][ T7309] device hsr_slave_1 entered promiscuous mode
[  457.152991][ T7309] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  457.901000][ T7309] Cannot create hsr debugfs directory
[  458.576771][ T7477] serio: Serial port pts0
[  459.084278][ T7476] loop2: detected capacity change from 0 to 512
[  459.207655][ T7476] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  459.217056][ T7476] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038 (0x7fffffff)
[  459.284832][ T7476] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.582: Directory hole found for htree leaf block 0
[  459.767647][ T7494] xt_hashlimit: overflow, try lower: 0/0
[  459.860218][ T7494] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.582: Directory hole found for htree leaf block 0
[  459.885204][ T7494] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.582: Directory hole found for htree leaf block 0
[  459.907112][ T7494] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.582: Directory hole found for htree leaf block 0
[  460.520516][ T6460] EXT4-fs (loop2): unmounting filesystem.
[  461.486990][ T7309] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  461.871130][ T7514] serio: Serial port ptm0
[  462.371801][ T7309] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  462.501407][ T7309] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  462.520525][ T7519] loop2: detected capacity change from 0 to 64
[  462.530255][ T7309] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  462.618947][ T7519] hfs: unable to parse mount options
[  462.709703][ T7407] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  463.678572][ T7536] loop2: detected capacity change from 0 to 65
[  463.700942][ T7536] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop2
[  464.354959][ T7524] DRBG: could not allocate CTR cipher TFM handle: ctr(aes)
[  464.710883][ T7309] 8021q: adding VLAN 0 to HW filter on device bond0
[  464.732479][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  464.746982][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  464.761337][ T7309] 8021q: adding VLAN 0 to HW filter on device team0
[  466.795684][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  466.833700][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  466.864571][ T3866] bridge0: port 1(bridge_slave_0) entered blocking state
[  466.871823][ T3866] bridge0: port 1(bridge_slave_0) entered forwarding state
[  467.172225][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  468.662866][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  468.698707][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  468.728255][ T3866] bridge0: port 2(bridge_slave_1) entered blocking state
[  468.735398][ T3866] bridge0: port 2(bridge_slave_1) entered forwarding state
[  469.351333][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  469.381600][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  469.391971][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  469.402678][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  469.411855][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  469.457677][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  469.467240][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  469.501067][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  469.540951][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  469.566146][ T7309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  469.708299][ T7309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  469.719478][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  469.750146][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  469.769916][ T7595] loop3: detected capacity change from 0 to 512
[  469.963915][ T7595] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  469.997536][ T7595] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038 (0x7fffffff)
[  471.040568][ T7598] netdevsim netdevsim1: Direct firmware load for ng failed with error -2
[  471.121866][ T6264] EXT4-fs (loop3): unmounting filesystem.
[  471.128808][ T7598] netdevsim netdevsim1: Falling back to sysfs fallback for: ng
[  471.311402][ T7614] loop3: detected capacity change from 0 to 512
[  471.329005][ T7614] EXT4-fs: Ignoring removed mblk_io_submit option
[  471.492865][ T7614] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #12: comm syz.3.605: inline data xattr refers to an external xattr inode
[  471.684894][ T7614] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.605: couldn't read orphan inode 12 (err -117)
[  471.791207][ T7614] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  473.215166][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  473.274292][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  474.022964][ T7309] 8021q: adding VLAN 0 to HW filter on device batadv0
[  474.038842][ T7621] syz.2.604 (7621): drop_caches: 2
[  474.062100][ T7621] syz.2.604 (7621): drop_caches: 2
[  474.183182][ T6264] EXT4-fs (loop3): unmounting filesystem.
[  474.206549][ T7624] syz.2.604 (7624): drop_caches: 2
[  474.382767][ T7657] loop3: detected capacity change from 0 to 512
[  474.436347][ T7648] input: syz0 as /devices/virtual/input/input10
[  474.444943][ T7657] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002]
[  474.456927][ T7657] System zones: 0-2, 18-18, 34-35
[  474.470675][ T7657] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  474.480978][ T7657] ext4 filesystem being mounted at /43/file0/file0 supports timestamps until 2038 (0x7fffffff)
[  475.448802][ T7669] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.608: Directory hole found for htree leaf block 0
[  475.571864][ T6264] EXT4-fs (loop3): unmounting filesystem.
[  476.672838][ T7685] loop3: detected capacity change from 0 to 512
[  476.751728][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  476.760384][ T7407] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  476.807793][ T7686] sctp: [Deprecated]: syz.2.612 (pid 7686) Use of struct sctp_assoc_value in delayed_ack socket option.
[  476.807793][ T7686] Use struct sctp_sack_info instead
[  476.853516][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  476.975509][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  477.005159][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  477.060029][ T7309] device veth0_vlan entered promiscuous mode
[  477.087433][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  477.120854][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  477.133362][ T7686] loop2: detected capacity change from 0 to 512
[  477.177609][ T7309] device veth1_vlan entered promiscuous mode
[  477.228858][   T14] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  477.261547][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  477.277362][ T7686] EXT4-fs (loop2): too many log groups per flexible block group
[  477.301060][ T7686] EXT4-fs (loop2): failed to initialize mballoc (-12)
[  477.310621][ T7686] EXT4-fs (loop2): mount failed
[  477.316376][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  477.342531][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  477.397435][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  477.453499][ T7309] device veth0_macvtap entered promiscuous mode
[  477.508174][   T14] usb 2-1: Using ep0 maxpacket: 32
[  477.538876][ T7309] device veth1_macvtap entered promiscuous mode
[  477.597650][ T7686] loop2: detected capacity change from 0 to 128
[  477.638080][   T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  477.660645][ T7309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  477.683404][   T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  477.717162][ T7309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  477.734997][   T14] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  477.772042][   T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  477.786903][ T7309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  477.858988][   T14] usb 2-1: config 0 descriptor??
[  477.872470][ T7309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  477.923553][ T7309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  477.939042][   T14] hub 2-1:0.0: USB hub found
[  477.984147][ T7309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  478.030507][ T7309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  478.076607][ T7309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  478.139537][ T7309] batman_adv: batadv0: Interface activated: batadv_slave_0
[  478.147265][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  478.168101][   T14] hub 2-1:0.0: 1 port detected
[  478.186275][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  478.250718][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  478.268469][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  478.304997][ T7309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  478.340209][ T7309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  478.368784][ T7309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  478.383629][ T7309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  478.394684][ T7309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  478.424586][ T7309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  478.465474][ T7309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  478.496573][ T7309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  478.522801][ T7309] batman_adv: batadv0: Interface activated: batadv_slave_1
[  478.539229][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  478.559453][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  478.574643][ T7712] netlink: 'syz.3.617': attribute type 13 has an invalid length.
[  478.594532][ T7309] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  478.604955][ T7309] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  478.637999][ T7309] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  478.657495][ T7309] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  478.848288][ T3727] hub 2-1:0.0: activate --> -90
[  478.942813][ T3762] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  478.977132][ T3762] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  479.006570][ T4896] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  479.016884][ T3762] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  479.035208][ T7721] loop2: detected capacity change from 0 to 512
[  479.037082][ T4896] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  479.132363][ T7721] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.618: inode #1: comm syz.2.618: iget: illegal inode #
[  479.221586][ T7721] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.618: error while reading EA inode 1 err=-117
[  479.247508][ T6168] usb 2-1: USB disconnect, device number 8
[  479.258121][ T3727] hub 2-1:0.0: hub_ext_port_status failed (err = -71)
[  479.336708][ T7721] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.618: inode #1: comm syz.2.618: iget: illegal inode #
[  479.376440][ T7721] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.618: error while reading EA inode 1 err=-117
[  479.418447][ T7721] EXT4-fs (loop2): 1 orphan inode deleted
[  479.434494][ T7721] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  480.183100][ T7738] serio: Serial port ptm0
[  481.084504][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  481.164787][ T6460] EXT4-fs (loop2): unmounting filesystem.
[  482.462498][ T7760] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  482.738451][ T3727] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  482.773382][ T7754] netdevsim netdevsim2: Direct firmware load for ng failed with error -2
[  482.821732][ T7754] netdevsim netdevsim2: Falling back to sysfs fallback for: ng
[  482.859855][ T6168] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  483.028121][ T3727] usb 5-1: Using ep0 maxpacket: 8
[  483.118067][ T6168] usb 4-1: Using ep0 maxpacket: 32
[  483.180367][ T3727] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  483.297160][ T3727] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  483.307969][ T3727] usb 5-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00
[  483.317147][ T3727] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  483.448141][ T6168] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  483.456913][ T3727] usb 5-1: config 0 descriptor??
[  483.582973][ T6168] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  483.595012][ T6168] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  483.605362][ T6168] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  483.615632][ T6168] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8
[  483.778485][ T6168] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  483.793546][ T6168] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  483.871877][ T6168] usb 4-1: Product: syz
[  484.102413][ T6168] usb 4-1: Manufacturer: syz
[  484.107281][ T6168] usb 4-1: SerialNumber: syz
[  484.345100][ T3727] ryos 0003:1E7D:3232.0005: unknown main item tag 0x0
[  485.014900][ T7790] device wireguard0 entered promiscuous mode
[  485.172747][ T3727] ryos 0003:1E7D:3232.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:3232] on usb-dummy_hcd.4-1/input0
[  485.198186][ T3727] usb 5-1: USB disconnect, device number 10
[  485.279206][ T6168] cdc_ncm 4-1:1.0: bind() failure
[  485.328442][ T6168] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[  485.335278][ T6168] cdc_ncm 4-1:1.1: bind() failure
[  485.386764][ T6168] usb 4-1: USB disconnect, device number 3
[  485.510161][ T7797] loop3: detected capacity change from 0 to 128
[  487.518907][ T7817] loop3: detected capacity change from 0 to 256
[  487.890639][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  490.213546][   T26] kauditd_printk_skb: 16 callbacks suppressed
[  490.213563][   T26] audit: type=1326 audit(1726370115.256:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7816 comm="syz.3.630" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb3f17def9 code=0x0
[  490.591582][   T26] audit: type=1804 audit(1726370115.416:139): pid=7827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.630" name="/newroot/49/file0/bus" dev="loop3" ino=1048691 res=1 errno=0
[  490.927538][   T26] audit: type=1804 audit(1726370115.416:140): pid=7827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.630" name="/newroot/49/file0/bus" dev="loop3" ino=1048691 res=1 errno=0
[  496.836507][ T7865] loop3: detected capacity change from 0 to 4096
[  496.974866][ T7865] NILFS (loop3): invalid segment: Checksum error in segment payload
[  496.997401][ T7865] NILFS (loop3): trying rollback from an earlier position
[  497.066401][ T7865] NILFS (loop3): recovery complete
[  497.225515][ T7880] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  501.281522][   T26] audit: type=1326 audit(1726370125.776:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7901 comm="syz.1.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8a6d7def9 code=0x7ffc0000
[  501.305687][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[  501.311974][ T1268] ieee802154 phy1 wpan1: encryption failed: -22
[  501.437788][   T26] audit: type=1326 audit(1726370125.776:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7901 comm="syz.1.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8a6d7def9 code=0x7ffc0000
[  501.518950][ T3648] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  501.530919][ T3648] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  501.539509][ T3648] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  501.547901][ T3648] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  501.568063][ T3648] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  501.575821][ T3648] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  501.666032][   T26] audit: type=1326 audit(1726370125.776:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7901 comm="syz.1.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7fa8a6d7def9 code=0x7ffc0000
[  501.788023][   T26] audit: type=1326 audit(1726370125.776:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7901 comm="syz.1.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8a6d7def9 code=0x7ffc0000
[  501.888174][   T26] audit: type=1326 audit(1726370125.776:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7901 comm="syz.1.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8a6d7def9 code=0x7ffc0000
[  502.053178][   T26] audit: type=1326 audit(1726370125.776:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7901 comm="syz.1.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7fa8a6d7def9 code=0x7ffc0000
[  502.338188][   T26] audit: type=1326 audit(1726370125.776:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7901 comm="syz.1.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8a6d7def9 code=0x7ffc0000
[  502.487927][   T26] audit: type=1326 audit(1726370125.776:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7901 comm="syz.1.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8a6d7def9 code=0x7ffc0000
[  502.648689][   T26] audit: type=1326 audit(1726370125.776:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7901 comm="syz.1.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7fa8a6d7def9 code=0x7ffc0000
[  502.670850][    C1] vkms_vblank_simulate: vblank timer overrun
[  502.739737][   T26] audit: type=1326 audit(1726370125.776:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7901 comm="syz.1.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8a6d7def9 code=0x7ffc0000
[  502.890029][ T7913] chnl_net:caif_netlink_parms(): no params data found
[  503.082786][ T3649] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  503.093274][ T3649] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  503.109094][ T3649] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  503.116891][ T3649] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  503.127552][ T3649] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  503.201981][ T7941] syz.0.651[7941] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  503.202421][ T7941] syz.0.651[7941] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  503.305680][ T3649] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  503.619824][ T3649] Bluetooth: hci5: command tx timeout
[  503.742062][ T7918] loop4: detected capacity change from 0 to 32768
[  504.450614][ T7953] find_entry called with index >= next_index
[  504.457112][ T7953] find_entry called with index >= next_index
[  504.463150][ T7953] find_entry called with index >= next_index
[  504.539773][ T7913] bridge0: port 1(bridge_slave_0) entered blocking state
[  504.547214][ T7913] bridge0: port 1(bridge_slave_0) entered disabled state
[  504.562286][ T7913] device bridge_slave_0 entered promiscuous mode
[  504.580893][ T7913] bridge0: port 2(bridge_slave_1) entered blocking state
[  504.646087][ T7913] bridge0: port 2(bridge_slave_1) entered disabled state
[  504.675692][ T7913] device bridge_slave_1 entered promiscuous mode
[  505.299441][ T7913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  505.335497][ T7913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  505.458038][ T3649] Bluetooth: hci0: command tx timeout
[  505.515007][ T7913] team0: Port device team_slave_0 added
[  505.571096][ T7913] team0: Port device team_slave_1 added
[  505.697956][    C1] ------------[ cut here ]------------
[  505.703919][    C1] WARNING: CPU: 1 PID: 3866 at kernel/workqueue.c:1441 __queue_work+0xddc/0xf90
[  505.712950][    C1] Modules linked in:
[  505.716841][    C1] CPU: 1 PID: 3866 Comm: kworker/u4:15 Not tainted 6.1.110-syzkaller #0
[  505.725151][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  505.735184][    C1] Workqueue: netns cleanup_net
[  505.739944][    C1] RIP: 0010:__queue_work+0xddc/0xf90
[  505.745208][    C1] Code: 8b 3c 24 e8 46 a0 88 00 e9 d9 fc ff ff e8 6c 1e 31 00 89 ee 48 c7 c7 80 99 1d 8d e8 5e 20 0b 03 e9 1e fc ff ff e8 54 1e 31 00 <0f> 0b 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 3e 1e 31 00
[  505.764801][    C1] RSP: 0018:ffffc900001e0af8 EFLAGS: 00010046
[  505.770850][    C1] RAX: ffffffff815990ec RBX: 00000000000b0012 RCX: ffff8880254f5940
[  505.778801][    C1] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000
[  505.786756][    C1] RBP: 0000000000010000 R08: ffffffff815a7e95 R09: fffffbfff1d33c96
[  505.794711][    C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
[  505.802681][    C1] R13: dffffc0000000000 R14: 0000000000000008 R15: ffff8880770d3800
[  505.810660][    C1] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  505.819669][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  505.826240][    C1] CR2: 00007fa8a7b7efb8 CR3: 0000000061268000 CR4: 00000000003526e0
[  505.834205][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  505.842170][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  505.850124][    C1] Call Trace:
[  505.853386][    C1]  <IRQ>
[  505.856214][    C1]  ? __warn+0x15a/0x520
[  505.860354][    C1]  ? __queue_work+0xddc/0xf90
[  505.865015][    C1]  ? report_bug+0x2af/0x500
[  505.869521][    C1]  ? __queue_work+0xddc/0xf90
[  505.874206][    C1]  ? handle_bug+0x3d/0x70
[  505.878538][    C1]  ? exc_invalid_op+0x16/0x40
[  505.883198][    C1]  ? asm_exc_invalid_op+0x16/0x20
[  505.888210][    C1]  ? is_chained_work+0x25/0x100
[  505.893052][    C1]  ? __queue_work+0xddc/0xf90
[  505.897730][    C1]  ? __queue_work+0xddc/0xf90
[  505.902394][    C1]  ? __queue_work+0xddc/0xf90
[  505.907077][    C1]  call_timer_fn+0x1ad/0x6b0
[  505.911653][    C1]  ? queue_work_node+0x460/0x460
[  505.916571][    C1]  ? call_timer_fn+0xc2/0x6b0
[  505.921230][    C1]  ? __run_timers+0x890/0x890
[  505.925890][    C1]  ? do_raw_spin_unlock+0x137/0x8a0
[  505.931091][    C1]  ? rcu_is_watching+0x11/0xb0
[  505.935845][    C1]  ? queue_work_node+0x460/0x460
[  505.940784][    C1]  __run_timers+0x6a8/0x890
[  505.945278][    C1]  ? detach_timer+0x380/0x380
[  505.949984][    C1]  ? print_irqtrace_events+0x210/0x210
[  505.955432][    C1]  ? seqcount_lockdep_reader_access+0x1bd/0x220
[  505.961661][    C1]  run_timer_softirq+0x63/0xf0
[  505.966410][    C1]  handle_softirqs+0x2ee/0xa40
[  505.971161][    C1]  ? __irq_exit_rcu+0x157/0x240
[  505.975997][    C1]  ? do_softirq+0x240/0x240
[  505.980480][    C1]  ? hrtimer_interrupt+0x76b/0x980
[  505.985575][    C1]  ? irqtime_account_irq+0xd0/0x1e0
[  505.990754][    C1]  __irq_exit_rcu+0x157/0x240
[  505.995411][    C1]  ? irq_exit_rcu+0x20/0x20
[  505.999922][    C1]  irq_exit_rcu+0x5/0x20
[  506.004157][    C1]  sysvec_apic_timer_interrupt+0x91/0xb0
[  506.009774][    C1]  </IRQ>
[  506.012685][    C1]  <TASK>
[  506.015598][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  506.021569][    C1] RIP: 0010:__local_bh_enable_ip+0x16c/0x1f0
[  506.027560][    C1] Code: 8b e8 58 c3 52 09 65 66 8b 05 d0 6d af 7e 66 85 c0 75 57 bf 01 00 00 00 e8 f1 45 0a 00 e8 9c 40 3d 00 fb 65 8b 05 bc 3d ae 7e <85> c0 75 05 e8 6b 61 ac ff 48 c7 44 24 20 0e 36 e0 45 49 c7 04 1c
[  506.047150][    C1] RSP: 0018:ffffc90004a67a80 EFLAGS: 00000282
[  506.053198][    C1] RAX: 0000000080000000 RBX: 1ffff9200094cf54 RCX: ffffffff816af0fa
[  506.061149][    C1] RDX: dffffc0000000000 RSI: ffffffff8b0c0340 RDI: ffffffff8b5d6dc0
[  506.069104][    C1] RBP: ffffc90004a67b28 R08: dffffc0000000000 R09: fffffbfff223b846
[  506.077060][    C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
[  506.085010][    C1] R13: 1ffff9200094cf58 R14: ffffc90004a67ac0 R15: 0000000000000201
[  506.092965][    C1]  ? mark_lock+0x9a/0x340
[  506.097490][    C1]  ? tcp_metrics_flush_all+0x27d/0x330
[  506.102949][    C1]  ? _local_bh_enable+0xa0/0xa0
[  506.107818][    C1]  ? do_raw_spin_unlock+0x137/0x8a0
[  506.113006][    C1]  tcp_metrics_flush_all+0x27d/0x330
[  506.118297][    C1]  ? tcp_net_metrics_init+0x150/0x150
[  506.123651][    C1]  cleanup_net+0x763/0xb60
[  506.128064][    C1]  ? ops_free_list+0x3b0/0x3b0
[  506.132819][    C1]  ? process_one_work+0x7a9/0x11d0
[  506.137918][    C1]  process_one_work+0x8a9/0x11d0
[  506.142847][    C1]  ? worker_detach_from_pool+0x260/0x260
[  506.148464][    C1]  ? _raw_spin_lock_irqsave+0x120/0x120
[  506.153990][    C1]  ? kthread_data+0x4e/0xc0
[  506.158484][    C1]  ? wq_worker_running+0x97/0x190
[  506.163488][    C1]  worker_thread+0xa47/0x1200
[  506.168153][    C1]  ? _raw_spin_unlock+0x40/0x40
[  506.172987][    C1]  kthread+0x28d/0x320
[  506.177032][    C1]  ? worker_clr_flags+0x190/0x190
[  506.182044][    C1]  ? kthread_blkcg+0xd0/0xd0
[  506.186612][    C1]  ret_from_fork+0x1f/0x30
[  506.191024][    C1]  </TASK>
[  506.194032][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  506.201304][    C1] CPU: 1 PID: 3866 Comm: kworker/u4:15 Not tainted 6.1.110-syzkaller #0
[  506.209620][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  506.219672][    C1] Workqueue: netns cleanup_net
[  506.224421][    C1] Call Trace:
[  506.227676][    C1]  <IRQ>
[  506.230674][    C1]  dump_stack_lvl+0x1e3/0x2cb
[  506.235332][    C1]  ? nf_tcp_handle_invalid+0x642/0x642
[  506.240769][    C1]  ? panic+0x764/0x764
[  506.244813][    C1]  ? vscnprintf+0x59/0x80
[  506.249122][    C1]  panic+0x318/0x764
[  506.253011][    C1]  ? __warn+0x169/0x520
[  506.257144][    C1]  ? memcpy_page_flushcache+0xfc/0xfc
[  506.262494][    C1]  ? ret_from_fork+0x1f/0x30
[  506.267062][    C1]  __warn+0x348/0x520
[  506.271022][    C1]  ? __queue_work+0xddc/0xf90
[  506.275673][    C1]  report_bug+0x2af/0x500
[  506.279977][    C1]  ? __queue_work+0xddc/0xf90
[  506.284646][    C1]  handle_bug+0x3d/0x70
[  506.288776][    C1]  exc_invalid_op+0x16/0x40
[  506.293250][    C1]  asm_exc_invalid_op+0x16/0x20
[  506.298082][    C1] RIP: 0010:__queue_work+0xddc/0xf90
[  506.303361][    C1] Code: 8b 3c 24 e8 46 a0 88 00 e9 d9 fc ff ff e8 6c 1e 31 00 89 ee 48 c7 c7 80 99 1d 8d e8 5e 20 0b 03 e9 1e fc ff ff e8 54 1e 31 00 <0f> 0b 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 3e 1e 31 00
[  506.322958][    C1] RSP: 0018:ffffc900001e0af8 EFLAGS: 00010046
[  506.329162][    C1] RAX: ffffffff815990ec RBX: 00000000000b0012 RCX: ffff8880254f5940
[  506.337145][    C1] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000
[  506.345097][    C1] RBP: 0000000000010000 R08: ffffffff815a7e95 R09: fffffbfff1d33c96
[  506.353055][    C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
[  506.361014][    C1] R13: dffffc0000000000 R14: 0000000000000008 R15: ffff8880770d3800
[  506.368971][    C1]  ? is_chained_work+0x25/0x100
[  506.373806][    C1]  ? __queue_work+0xddc/0xf90
[  506.378464][    C1]  ? __queue_work+0xddc/0xf90
[  506.383125][    C1]  call_timer_fn+0x1ad/0x6b0
[  506.387694][    C1]  ? queue_work_node+0x460/0x460
[  506.392623][    C1]  ? call_timer_fn+0xc2/0x6b0
[  506.397293][    C1]  ? __run_timers+0x890/0x890
[  506.401959][    C1]  ? do_raw_spin_unlock+0x137/0x8a0
[  506.407138][    C1]  ? rcu_is_watching+0x11/0xb0
[  506.411887][    C1]  ? queue_work_node+0x460/0x460
[  506.416803][    C1]  __run_timers+0x6a8/0x890
[  506.421292][    C1]  ? detach_timer+0x380/0x380
[  506.425947][    C1]  ? print_irqtrace_events+0x210/0x210
[  506.431383][    C1]  ? seqcount_lockdep_reader_access+0x1bd/0x220
[  506.437603][    C1]  run_timer_softirq+0x63/0xf0
[  506.442357][    C1]  handle_softirqs+0x2ee/0xa40
[  506.447103][    C1]  ? __irq_exit_rcu+0x157/0x240
[  506.451943][    C1]  ? do_softirq+0x240/0x240
[  506.456432][    C1]  ? hrtimer_interrupt+0x76b/0x980
[  506.461523][    C1]  ? irqtime_account_irq+0xd0/0x1e0
[  506.466699][    C1]  __irq_exit_rcu+0x157/0x240
[  506.471357][    C1]  ? irq_exit_rcu+0x20/0x20
[  506.475842][    C1]  irq_exit_rcu+0x5/0x20
[  506.480063][    C1]  sysvec_apic_timer_interrupt+0x91/0xb0
[  506.485676][    C1]  </IRQ>
[  506.488585][    C1]  <TASK>
[  506.491492][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  506.497449][    C1] RIP: 0010:__local_bh_enable_ip+0x16c/0x1f0
[  506.503410][    C1] Code: 8b e8 58 c3 52 09 65 66 8b 05 d0 6d af 7e 66 85 c0 75 57 bf 01 00 00 00 e8 f1 45 0a 00 e8 9c 40 3d 00 fb 65 8b 05 bc 3d ae 7e <85> c0 75 05 e8 6b 61 ac ff 48 c7 44 24 20 0e 36 e0 45 49 c7 04 1c
[  506.522995][    C1] RSP: 0018:ffffc90004a67a80 EFLAGS: 00000282
[  506.529040][    C1] RAX: 0000000080000000 RBX: 1ffff9200094cf54 RCX: ffffffff816af0fa
[  506.536988][    C1] RDX: dffffc0000000000 RSI: ffffffff8b0c0340 RDI: ffffffff8b5d6dc0
[  506.544954][    C1] RBP: ffffc90004a67b28 R08: dffffc0000000000 R09: fffffbfff223b846
[  506.552903][    C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
[  506.560851][    C1] R13: 1ffff9200094cf58 R14: ffffc90004a67ac0 R15: 0000000000000201
[  506.568803][    C1]  ? mark_lock+0x9a/0x340
[  506.573117][    C1]  ? tcp_metrics_flush_all+0x27d/0x330
[  506.578555][    C1]  ? _local_bh_enable+0xa0/0xa0
[  506.583381][    C1]  ? do_raw_spin_unlock+0x137/0x8a0
[  506.588560][    C1]  tcp_metrics_flush_all+0x27d/0x330
[  506.593822][    C1]  ? tcp_net_metrics_init+0x150/0x150
[  506.599172][    C1]  cleanup_net+0x763/0xb60
[  506.603567][    C1]  ? ops_free_list+0x3b0/0x3b0
[  506.608311][    C1]  ? process_one_work+0x7a9/0x11d0
[  506.613397][    C1]  process_one_work+0x8a9/0x11d0
[  506.618319][    C1]  ? worker_detach_from_pool+0x260/0x260
[  506.623937][    C1]  ? _raw_spin_lock_irqsave+0x120/0x120
[  506.629458][    C1]  ? kthread_data+0x4e/0xc0
[  506.633941][    C1]  ? wq_worker_running+0x97/0x190
[  506.638967][    C1]  worker_thread+0xa47/0x1200
[  506.643632][    C1]  ? _raw_spin_unlock+0x40/0x40
[  506.648469][    C1]  kthread+0x28d/0x320
[  506.652512][    C1]  ? worker_clr_flags+0x190/0x190
[  506.657509][    C1]  ? kthread_blkcg+0xd0/0xd0
[  506.662075][    C1]  ret_from_fork+0x1f/0x30
[  506.666473][    C1]  </TASK>
[  506.669607][    C1] Kernel Offset: disabled
[  506.674001][    C1] Rebooting in 86400 seconds..