last executing test programs:

21.251975831s ago: executing program 0 (id=240):
syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000000), 0x2, 0xbb8, &(0x7f00000017c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = fanotify_init(0x1, 0x800)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8)
fanotify_mark(r3, 0x441, 0x4800001a, r4, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x10)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
chdir(&(0x7f0000000300)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x58)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x121000, 0x0)
fcntl$notify(r6, 0x402, 0x91ea6c1af182532)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', r5, &(0x7f00000004c0)='./file0\x00', 0x2)
r7 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r7, 0x0, 0x4000880)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000040))

19.848918774s ago: executing program 4 (id=244):
r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14)
getpeername$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14)
ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f00000003c0)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@test_dummy_encryption_v1}, {@noload}, {@test_dummy_encryption_v1}, {@nodiscard}, {@data_err_ignore}, {@stripe={'stripe', 0x3d, 0x60f}}, {@journal_ioprio}, {@resuid}]}, 0x1, 0xbc1, &(0x7f00000043c0)="$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")
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)

18.872880835s ago: executing program 0 (id=245):
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x2204806, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xfa, 0x69f, &(0x7f0000000f00)="$eJzs3c9v2+Ydx/EP5V+yOwTFNhRBkB9PkhVwsEyR5MaBkQEtR1E2N0kUSHmwgQFF1thFEDndkg5YfOl82Q+gA3berZcddts/MKDn/he7bUCx3QZsBw4kRVmyRMlqHLdZ3y8jEUV++Txfkgq/oSU+EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAkOXUyuWKpYbX2t4x+Zxa4DcnLE9bW9CtdOLW1H4lK/6jYlEX01kXv328+I34rxu6nD67rGL8UNTha2+8fv9b84Vs/QkJfRGatcFnzw8fP+h2956eInZOMzf/ZVLhFEGbbssLfa9pb7rGC32zsb5evrNVD03da7jhbthxm8YJ3ELHD8yqc8tUNjbWjFva9bdbmzW74WYz732vWi6vmx8upQdaUil0trxGw2ttJjHx4jjmnvn4J2mAazeN2X/U3VublmQcVMlbWBgIqk5rqVquViuVarWyfnfj7r1yeX5kRjlmlfs0EnHmL1q8Ys7u5A28oEJc//9mSQ0V1dK2dmTG/jiqKZCvZs7ynqz+v3nHndjvYP3PqvxF6e3e4ktK6v/V9NnVvPqfk4uRSVYYt8TKmT/bz0KSkdEzPdehHuuBuupqT0/PoG0jc+1MWjmHn025aslTKF+emrKTOaY3x2hD61pXWe9qS3WFMqrLU0OuQu0qVEdu8opyFMiVrY58BTJalaNbMqpoQxtak5Grknbla1stbaomW/+Oomhfj5L9vjYhR2VBlZyApcGg6oSW8ur/Tz9KX6e9+l+m/n9dpa+DpfThs0kxwFdA1Lv+n9G1l5MNAAAAAAB4Gazkt+9W8t79FUmR6l7DLeevsHie2QEAAAAAgLNgKVrSZVnx9b+kK7KmXP8DAAAAAIBXjpXcY2dJWkk+1G8d3wl1ml8CzJ1DigAAAAAA4AUld/5fXZSiZNCKa7Jmuv4HAAAAAACvgN8OjLE/n42xG2Vv6xckhe0l66//XFKwYB21d75jHdjxEvtgrpCEjHwCoFO/ZIV/SAfqTcbrXZSUPHPcy1avt94gmP1xBz/fnzbWvxWcSGBxbrCBEwlc6K1txT2vz/ee6WNdf3so9uFhQcmStJeVutdwS47fuF+RbV8odNydzi+ePPqlFPS3c/9Rd6/03gfdh0kuR/Gso4M4j4+ydP6y2Nt1w7kkD/1c/hulpCtjt3hZ9azL37WaK1bSbznb/jnZB4XjY5S7/cN96te6kR6zGytp7Mphf8T9ePuL8fZXSskhG9r6YME6zqJycsvHHYicLIpJFjfTmJurN9OHLL+4nYJV/O6cVC2NHoOhLKqDWUzfF9a/RvbFpCx6+2ItzuLTuKGcLNZmy2LkiADAl2U/GfUnufMvGcR8pO5m5SE7qX2hujO9ur8zXN0//GNcGdP/Xsz33puY2EtR8Rl91Urq0KKSE+v8pZEzerY19oWics7o5ReobnFffz7+DqRe2iNZ/CeKovuVpN/fn6iqn8QrfJLbb9hId/udDw9+lgyAH3t/7/29J9Xq2nr5rXL5blULyWb0HuZE7QEAjJj+HTtTI6y3dD2NuP7wH2+mU0MV75v9jxSU9J4+UFcPtZB9hcC18a2uDHwM4XZ61aqBq1bzxuv3l6WTsRXdzr2qS2rpQGy1H7ugbJXhSn0cu/aSjwIAAOfrxpQ6PL7+F4fq/22tphGrl8Zedw/X8t7Vcf+SPi+2Mj35d856bwAA8PXgBp9bK53fWEHgtd+tbGxU7M6WawLf+ZEJvNqma7xWxw2cLbu16Zp24Hd8x2+YdqAlr+aGJtxut/2gY+p+YNp+6O0k3/xuel/9HrpNu9XxnLDdcO3QNY7f6thOx9S80DHt7R80vHDLDZKVw7breHXPsTue3zKhvx04bsmY0HUHAr2a2+p4dS+ebJl24DXtYNf82G9sN11Tc0Mn8NodP20w68tr1f2gmTRbUjTzFx0CAPD/6Nnzw8cPut29pycnluNL83TOkXJiRicWxzTIGEEAAHzFHJfrGVYq9qc+jV5KVgAAAAAAAAAAAAAAAAAAAAAAYND0W/pmnFgYd7Og1J/z8wu9OfqVjm8xHGnH0lknNstEYda1slsiDh9/NiF4uT8n2/2DMUfntoF//4b0WjJH6Zz5ccHF/Has6X0tTzi4p5yYi3fQaYO/v5/u0dyYeOHYRUv9YzF/9v8c4oknf8pZFEVRNHn1peF9uDhpA4cn5iU9XXyBQ3D+5yIA5+t/AQAA//+xxzz3")
r0 = syz_mount_image$ext4(&(0x7f0000000440)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@barrier}, {@dioread_lock}, {@init_itable_val={'init_itable', 0x3d, 0xb8f}}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@inlinecrypt}, {@usrjquota, 0x2e}, {@sb={'sb', 0x3d, 0x7}}, {@nodiscard}, {@dioread_lock}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3}}, {@nobarrier}], [], 0x2c}, 0x81, 0x463, &(0x7f0000000480)="$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")
open_by_handle_at(r0, &(0x7f0000000180)=ANY=[], 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x679, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x1}, 0x1c)
sendmmsg$inet6(r4, 0x0, 0x0, 0x1000)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ftruncate(r0, 0x800)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
r7 = accept4(r5, 0x0, 0x0, 0x0)
recvmmsg$unix(r7, &(0x7f00000053c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0xa32, 0x60, 0x0)

16.149450151s ago: executing program 4 (id=251):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000016c0))
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
syz_open_dev$video4linux(0x0, 0x2, 0x0)
r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3})
ioctl$VIDIOC_QUERYMENU(r3, 0xc008561c, 0x0)
syz_emit_vhci(0x0, 0x7)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x8, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mq_open(0x0, 0x0, 0x0, 0xffffffffffffffff)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
r4 = syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1b94468, 0x0, 0x1, 0x0, &(0x7f00000001c0))
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x80186e82, 0x0)
getpgid(0xffffffffffffffff)
fcntl$lock(r4, 0x24, 0x0)

15.478628452s ago: executing program 0 (id=252):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = openat$full(0xffffff9c, &(0x7f00000003c0), 0x8002, 0x0)
membarrier(0x2, 0x0)
r2 = io_uring_setup(0x6d87, &(0x7f00000007c0)={0x0, 0x76a, 0x1000, 0x5, 0x14c})
preadv2(r2, &(0x7f0000001980)=[{&(0x7f00000005c0)=""/230, 0xe6}, {&(0x7f00000006c0)=""/6, 0x6}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000001880)=""/85, 0x55}, {&(0x7f0000001900)=""/44, 0x2c}, {0x0}], 0x6, 0x6b3, 0x5, 0x41a6988b36f563b0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000002c80)={0x0, 0x5, 0x3, 0x1})
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f)
r4 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
ioctl$FE_SET_PROPERTY(r4, 0x40106f52, &(0x7f0000000100)={0x5, &(0x7f00000041c0)})
ftruncate(0xffffffffffffffff, 0xffffffffffffffff)
mount(&(0x7f0000000480)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000004c0)='cramfs\x00', 0x208000, 0x0)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000780), &(0x7f0000001940)=0x8)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x10000}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, 0xfffffffffffffffe, &(0x7f00000001c0)=0xffffffe3)
ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000001a00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
syz_io_uring_setup(0x111, &(0x7f0000000200)={0x0, 0xfec9, 0x400, 0x3, 0x3d4}, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000000))
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000340)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4, @loopback}, @in={0x2, 0x4000, @broadcast}}}, 0x118)
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10)
write$cgroup_int(r7, &(0x7f0000000180)=0xfe5f, 0x12)

13.696882388s ago: executing program 0 (id=255):
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x24, 0x9, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x80)
syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000000000)='./bus\x00', 0x810, &(0x7f0000000180)={[{@discard}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@discard_async}, {@usebackuproot}, {@skip_balance}, {@autodefrag}, {@commit={'commit', 0x3d, 0x9}}, {@acl}]}, 0xff, 0x5122, &(0x7f0000006440)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x101142, 0xeaff)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000088ab00", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf"], 0x0, 0x80000001, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, 0x25, r0}, 0x94)
write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0x29f)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r0}, 0x0, 0x0, 0x100000})

11.75272793s ago: executing program 1 (id=260):
syz_emit_ethernet(0x4e, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffff0000000000003a935c5ae399bdc73afffe880000000000000000000000000201ff02000000000000000000000000000186009078ff02020001000000f6ffffff0501c89600000500b6da89dfeee5b5a4ff729cd8a09075d8f46096cf5a7c5bcba72b180d7ec95b661aa7c845a1b8230641277349e7f8add15af861c5e8cca4262e24c1fed8c0f65b528f"], 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a0b04000000000000000002000000480004802c0001800b000100736f636b657400001c000280080002400000000b080001400000000308000300000000891800018008000100647570000c000280080001400000000c0900010073797a30000000000900020073797a3200000000140000001100010000000000000000d1bc20497485d812266bc695c8000000000a"], 0x9c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x29, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x5f0}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
shmget(0x1, 0x3000, 0x200, &(0x7f0000ffd000/0x3000)=nil)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r5)
sendmsg$NL80211_CMD_GET_MPATH(r5, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, r6, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x65}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x440d0}, 0x8)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r5)
r7 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge0\x00'})
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f0000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680))

10.707745373s ago: executing program 1 (id=262):
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x2204806, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xfa, 0x69f, &(0x7f0000000f00)="$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")
r0 = syz_mount_image$ext4(&(0x7f0000000440)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@barrier}, {@dioread_lock}, {@init_itable_val={'init_itable', 0x3d, 0xb8f}}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@inlinecrypt}, {@usrjquota, 0x2e}, {@sb={'sb', 0x3d, 0x7}}, {@nodiscard}, {@dioread_lock}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3}}, {@nobarrier}], [], 0x2c}, 0x81, 0x463, &(0x7f0000000480)="$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")
open_by_handle_at(r0, &(0x7f0000000180)=ANY=[], 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x679, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x1}, 0x1c)
sendmmsg$inet6(r4, 0x0, 0x0, 0x1000)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ftruncate(r0, 0x800)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10)
recvmmsg$unix(0xffffffffffffffff, &(0x7f00000053c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0xa32, 0x60, 0x0)

10.090541552s ago: executing program 2 (id=263):
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, 0x0, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000680), 0x1, 0x5cb, &(0x7f00000006c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
connect$pptp(r0, &(0x7f0000002340)={0x18, 0x2, {0x3, @broadcast}}, 0x1e)

9.372410835s ago: executing program 1 (id=264):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6)
ptrace(0x10, 0x1)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000002d80)={&(0x7f0000000280)={0x3c, 0x3, 0x1, 0x201, 0x0, 0x0, {0xa}, [@CTA_FILTER={0x4}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x44080)

9.076863734s ago: executing program 4 (id=265):
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xb, 0xc9}}}, 0x7)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000140)=0x7fc, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
r4 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xfd}}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d7000000"], 0x10b8}, 0xff4c)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCFLSH(r6, 0x4b63, 0x3)
close_range(r5, 0xffffffffffffffff, 0x0)

6.588494332s ago: executing program 1 (id=266):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = openat$full(0xffffff9c, &(0x7f00000003c0), 0x8002, 0x0)
membarrier(0x2, 0x0)
r2 = io_uring_setup(0x6d87, &(0x7f00000007c0)={0x0, 0x76a, 0x1000, 0x5, 0x14c})
preadv2(r2, &(0x7f0000001980)=[{&(0x7f00000005c0)=""/230, 0xe6}, {&(0x7f00000006c0)=""/6, 0x6}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000001880)=""/85, 0x55}, {&(0x7f0000001900)=""/44, 0x2c}, {0x0}], 0x6, 0x6b3, 0x5, 0x41a6988b36f563b0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000002c80)={0x0, 0x5, 0x3, 0x1})
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f)
r4 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
ioctl$FE_SET_PROPERTY(r4, 0x40106f52, &(0x7f0000000100)={0x5, &(0x7f00000041c0)})
ftruncate(0xffffffffffffffff, 0xffffffffffffffff)
mount(&(0x7f0000000480)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000004c0)='cramfs\x00', 0x208000, 0x0)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000780), &(0x7f0000001940)=0x8)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x10000}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, 0xfffffffffffffffe, &(0x7f00000001c0)=0xffffffe3)
ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000001a00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
syz_io_uring_setup(0x111, &(0x7f0000000200)={0x0, 0xfec9, 0x400, 0x3, 0x3d4}, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000000))
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000340)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4, @loopback}, @in={0x2, 0x4000, @broadcast}}}, 0x118)
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10)
write$cgroup_int(r7, &(0x7f0000000180)=0xfe5f, 0x12)

6.584262183s ago: executing program 3 (id=267):
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)="13000000010203fe7a", 0x9}], 0x1)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910900000000000730ae8ff"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc004058}, 0x48004)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1c3)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
openat2$dir(0xffffff9c, 0x0, &(0x7f00000001c0)={0x8000, 0x7e, 0x6}, 0x18)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

6.582406403s ago: executing program 3 (id=268):
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xb, 0xc9}}}, 0x7)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000140)=0x7fc, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
r4 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xfd}}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61"], 0x10b8}, 0xff4c)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCFLSH(r6, 0x4b63, 0x3)
close_range(r5, 0xffffffffffffffff, 0x0)

6.527548624s ago: executing program 4 (id=269):
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32)
ftruncate(r0, 0x6000000)
copy_file_range(r0, 0x0, r0, &(0x7f00000004c0)=0x100, 0x9, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000400)='./bus\x00', 0x3000019, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200))
chdir(&(0x7f00000003c0)='./bus\x00')
truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd)

5.213862736s ago: executing program 2 (id=270):
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xb, 0xc9}}}, 0x7)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000140)=0x7fc, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
r4 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xfd}}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d7000000"], 0x10b8}, 0xff4c)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCFLSH(r6, 0x4b63, 0x3)
close_range(r5, 0xffffffffffffffff, 0x0)

5.208075386s ago: executing program 3 (id=271):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f00000005c0)={0xa, 0x4e22, 0x2, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
clock_getres(0x8, 0x0)

5.144754598s ago: executing program 1 (id=272):
syz_emit_ethernet(0x4e, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffff0000000000003a935c5ae399bdc73afffe880000000000000000000000000201ff02000000000000000000000000000186009078ff02020001000000f6ffffff0501c89600000500b6da89dfeee5b5a4ff729cd8a09075d8f46096cf5a7c5bcba72b180d7ec95b661aa7c845a1b8230641277349e7f8add15af861c5e8cca4262e24c1fed8c0f65b528f"], 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, 0x0, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a0b04000000000000000002000000480004802c0001800b000100736f636b657400001c000280080002400000000b080001400000000308000300000000891800018008000100647570000c000280080001400000000c0900010073797a30000000000900020073797a3200000000140000001100010000000000000000d1bc20497485d812266bc695c8000000000a"], 0x9c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x29, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x5f0}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
shmget(0x1, 0x3000, 0x200, &(0x7f0000ffd000/0x3000)=nil)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r5)
sendmsg$NL80211_CMD_GET_MPATH(r5, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, r6, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x65}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x440d0}, 0x8)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r5)
r7 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge0\x00'})
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f0000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680))

5.144322428s ago: executing program 0 (id=273):
syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000000), 0x2, 0xbb8, &(0x7f00000017c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = fanotify_init(0x1, 0x800)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8)
fanotify_mark(r3, 0x441, 0x4800001a, r4, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x10)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
chdir(&(0x7f0000000300)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x58)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x121000, 0x0)
fcntl$notify(r5, 0x402, 0x91ea6c1af182532)

4.967966774s ago: executing program 4 (id=274):
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x2204806, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xfa, 0x69f, &(0x7f0000000f00)="$eJzs3c9v2+Ydx/EP5V+yOwTFNhRBkB9PkhVwsEyR5MaBkQEtR1E2N0kUSHmwgQFF1thFEDndkg5YfOl82Q+gA3berZcddts/MKDn/he7bUCx3QZsBw4kRVmyRMlqHLdZ3y8jEUV++Txfkgq/oSU+EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAkOXUyuWKpYbX2t4x+Zxa4DcnLE9bW9CtdOLW1H4lK/6jYlEX01kXv328+I34rxu6nD67rGL8UNTha2+8fv9b84Vs/QkJfRGatcFnzw8fP+h2956eInZOMzf/ZVLhFEGbbssLfa9pb7rGC32zsb5evrNVD03da7jhbthxm8YJ3ELHD8yqc8tUNjbWjFva9bdbmzW74WYz732vWi6vmx8upQdaUil0trxGw2ttJjHx4jjmnvn4J2mAazeN2X/U3VublmQcVMlbWBgIqk5rqVquViuVarWyfnfj7r1yeX5kRjlmlfs0EnHmL1q8Ys7u5A28oEJc//9mSQ0V1dK2dmTG/jiqKZCvZs7ynqz+v3nHndjvYP3PqvxF6e3e4ktK6v/V9NnVvPqfk4uRSVYYt8TKmT/bz0KSkdEzPdehHuuBuupqT0/PoG0jc+1MWjmHn025aslTKF+emrKTOaY3x2hD61pXWe9qS3WFMqrLU0OuQu0qVEdu8opyFMiVrY58BTJalaNbMqpoQxtak5Grknbla1stbaomW/+Oomhfj5L9vjYhR2VBlZyApcGg6oSW8ur/Tz9KX6e9+l+m/n9dpa+DpfThs0kxwFdA1Lv+n9G1l5MNAAAAAAB4Gazkt+9W8t79FUmR6l7DLeevsHie2QEAAAAAgLNgKVrSZVnx9b+kK7KmXP8DAAAAAIBXjpXcY2dJWkk+1G8d3wl1ml8CzJ1DigAAAAAA4AUld/5fXZSiZNCKa7Jmuv4HAAAAAACvgN8OjLE/n42xG2Vv6xckhe0l66//XFKwYB21d75jHdjxEvtgrpCEjHwCoFO/ZIV/SAfqTcbrXZSUPHPcy1avt94gmP1xBz/fnzbWvxWcSGBxbrCBEwlc6K1txT2vz/ee6WNdf3so9uFhQcmStJeVutdwS47fuF+RbV8odNydzi+ePPqlFPS3c/9Rd6/03gfdh0kuR/Gso4M4j4+ydP6y2Nt1w7kkD/1c/hulpCtjt3hZ9azL37WaK1bSbznb/jnZB4XjY5S7/cN96te6kR6zGytp7Mphf8T9ePuL8fZXSskhG9r6YME6zqJycsvHHYicLIpJFjfTmJurN9OHLL+4nYJV/O6cVC2NHoOhLKqDWUzfF9a/RvbFpCx6+2ItzuLTuKGcLNZmy2LkiADAl2U/GfUnufMvGcR8pO5m5SE7qX2hujO9ur8zXN0//GNcGdP/Xsz33puY2EtR8Rl91Urq0KKSE+v8pZEzerY19oWics7o5ReobnFffz7+DqRe2iNZ/CeKovuVpN/fn6iqn8QrfJLbb9hId/udDw9+lgyAH3t/7/29J9Xq2nr5rXL5blULyWb0HuZE7QEAjJj+HTtTI6y3dD2NuP7wH2+mU0MV75v9jxSU9J4+UFcPtZB9hcC18a2uDHwM4XZ61aqBq1bzxuv3l6WTsRXdzr2qS2rpQGy1H7ugbJXhSn0cu/aSjwIAAOfrxpQ6PL7+F4fq/22tphGrl8Zedw/X8t7Vcf+SPi+2Mj35d856bwAA8PXgBp9bK53fWEHgtd+tbGxU7M6WawLf+ZEJvNqma7xWxw2cLbu16Zp24Hd8x2+YdqAlr+aGJtxut/2gY+p+YNp+6O0k3/xuel/9HrpNu9XxnLDdcO3QNY7f6thOx9S80DHt7R80vHDLDZKVw7breHXPsTue3zKhvx04bsmY0HUHAr2a2+p4dS+ebJl24DXtYNf82G9sN11Tc0Mn8NodP20w68tr1f2gmTRbUjTzFx0CAPD/6Nnzw8cPut29pycnluNL83TOkXJiRicWxzTIGEEAAHzFHJfrGVYq9qc+jV5KVgAAAAAAAAAAAAAAAAAAAAAAYND0W/pmnFgYd7Og1J/z8wu9OfqVjm8xHGnH0lknNstEYda1slsiDh9/NiF4uT8n2/2DMUfntoF//4b0WjJH6Zz5ccHF/Has6X0tTzi4p5yYi3fQaYO/v5/u0dyYeOHYRUv9YzF/9v8c4oknf8pZFEVRNHn1peF9uDhpA4cn5iU9XXyBQ3D+5yIA5+t/AQAA//+xxzz3")
r0 = syz_mount_image$ext4(&(0x7f0000000440)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@barrier}, {@dioread_lock}, {@init_itable_val={'init_itable', 0x3d, 0xb8f}}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@inlinecrypt}, {@usrjquota, 0x2e}, {@sb={'sb', 0x3d, 0x7}}, {@nodiscard}, {@dioread_lock}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3}}, {@nobarrier}], [], 0x2c}, 0x81, 0x463, &(0x7f0000000480)="$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")
open_by_handle_at(r0, &(0x7f0000000180)=ANY=[], 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x679, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x1}, 0x1c)
sendmmsg$inet6(r4, 0x0, 0x0, 0x1000)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ftruncate(r0, 0x800)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10)
recvmmsg$unix(0xffffffffffffffff, &(0x7f00000053c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0xa32, 0x60, 0x0)

4.316960874s ago: executing program 1 (id=275):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000016c0))
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
syz_open_dev$video4linux(0x0, 0x2, 0x0)
r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3})
ioctl$VIDIOC_QUERYMENU(r3, 0xc008561c, 0x0)
syz_emit_vhci(0x0, 0x7)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x8, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mq_open(0x0, 0x0, 0x0, 0xffffffffffffffff)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
r4 = syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1b94468, 0x0, 0x1, 0x0, &(0x7f00000001c0))
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x80186e82, 0x0)
getpgid(0xffffffffffffffff)
fcntl$lock(r4, 0x24, 0x0)

3.771326261s ago: executing program 2 (id=276):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002940)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x4f0d, 0x5, 0x10001, 0x8, 0x10000, 0x80, 0x288, 0x9, 0x9, 0x2, 0xfff, 0xdfd, 0x1, 0x7887, 0x5, 0xdd16, 0x392, 0x31aa, 0x7fff, 0x2, 0xfffff98c, 0x4, 0x4e, 0x100, 0xa, 0x9, 0x2, 0x11, 0xffffffff, 0x3, 0x4, 0x1000, 0x800, 0x7, 0x1, 0x9, 0xd, 0x7, 0xa4f, 0x2, 0xc, 0x3, 0x0, 0xffffffef, 0x74, 0x4, 0x4, 0xffffffff, 0x6, 0x3, 0x1000, 0x6, 0x5, 0x71d, 0x2, 0xffff, 0x6, 0x6, 0x80000000, 0xce0, 0x9, 0xea5, 0x8, 0x200, 0x4, 0x8001, 0xa8, 0x9, 0x10, 0x9, 0x10000, 0x2, 0x7fff, 0xc, 0x7, 0x4800, 0x8, 0x6, 0xe87, 0x7f, 0x6, 0x0, 0x4800, 0x1, 0x12, 0x18b, 0x6, 0x2, 0x5, 0x1, 0x40, 0x5, 0x1, 0x0, 0x1da35084, 0x4, 0x1, 0x9, 0x7, 0x0, 0x4, 0x8, 0x4, 0x2, 0x0, 0x7, 0x200, 0x3, 0x8001, 0xa000, 0x0, 0x7a69, 0x764064d2, 0x92, 0x2, 0xbdc9, 0x3, 0xff, 0x2, 0x10, 0x5, 0x10000, 0x100, 0x5, 0x1022075d, 0x8, 0x5, 0x5, 0xfffffffe, 0x7f, 0x101, 0x4, 0xb, 0x9, 0x27, 0xff, 0x1, 0xf64a, 0xa78c, 0x5, 0x6, 0x7, 0xffff4fc5, 0x8, 0x7f, 0x385, 0x400, 0x100, 0x2, 0x5, 0x4, 0x7, 0x2, 0x7, 0x1, 0xb8, 0xffffff2a, 0x6, 0x8001, 0x6, 0x8, 0x3ff, 0x2, 0x6, 0x0, 0x6, 0x7fff, 0x80, 0x2, 0x5aeb, 0xe, 0x80000001, 0x39, 0x5, 0xa05, 0x3, 0x9, 0x72, 0x5, 0x4, 0x9, 0xba, 0x3, 0xc3, 0x8, 0x6, 0x7f, 0x5, 0xe8f0, 0x55, 0x8, 0x0, 0x7, 0x2, 0x8, 0x410, 0xffff03a4, 0xa8, 0x39b5, 0x8, 0xf3, 0x4, 0x10001, 0x0, 0x7f, 0x2, 0x7fff, 0x7, 0x401, 0x4, 0x0, 0x8, 0x2, 0x7, 0x2, 0x1, 0x2, 0x8, 0xffff, 0x0, 0x9, 0xc0e, 0x41, 0xf, 0xffff, 0xfffffff7, 0xffffff26, 0x7, 0x32a, 0xad95, 0x776, 0x9, 0xfffffffd, 0x8, 0x3, 0xa4c9, 0x1, 0x6, 0xb, 0x3, 0x101, 0x1, 0x0, 0x2, 0x3, 0x4, 0x0, 0x80000000, 0xfffffff8, 0x400, 0x5, 0x2, 0x40, 0xfffeffff, 0x541b]}, @TCA_TBF_RTAB={0x404, 0x2, [0x9, 0x100, 0x2, 0xc91, 0x5, 0x400, 0x1000, 0x2, 0x5, 0x3ff, 0x2, 0x200, 0x7, 0x2, 0x6, 0xdb6, 0x401, 0x6, 0xf, 0x100, 0x3, 0xb, 0x5, 0x77dedf80, 0x100, 0x7, 0x2, 0x4, 0x1, 0x5, 0x5, 0x5, 0x4, 0x7, 0x6, 0x6, 0x4, 0x0, 0x0, 0x3, 0x5, 0x2, 0x10, 0x101, 0x8, 0xd6, 0x8, 0x800, 0x3, 0x4, 0x10001, 0x66a, 0x7, 0x7, 0x6c, 0xa6d, 0x4, 0x6, 0x3, 0x8, 0x2, 0x3d, 0x4, 0x80000000, 0xc, 0x2, 0x40, 0x7, 0x2, 0x4, 0xffffffff, 0x2, 0x4, 0xb0, 0xe7, 0x8, 0x8001, 0x7, 0xb, 0x4, 0x3, 0x2, 0x6, 0x1, 0x5, 0x10001, 0x3, 0x4, 0xffffffff, 0x5, 0x4, 0x7, 0x5, 0x3, 0x8, 0x8, 0x0, 0x374, 0x2, 0x4, 0x7, 0x81, 0x8, 0x7f, 0x9, 0x0, 0x4, 0x6, 0x2, 0xa08d, 0x100, 0x5, 0xffff248d, 0x5, 0x7, 0xa, 0x0, 0x671, 0x3, 0x10000, 0x8c, 0x2ea, 0xd6, 0x79, 0x9, 0x9, 0xc, 0xccf, 0x2, 0xb, 0x5, 0x100, 0x158, 0x4, 0x2, 0x7, 0x1, 0x401, 0x6, 0x5, 0xfffffffb, 0xffffffff, 0x6, 0x80000001, 0x2, 0x7, 0x5, 0xab7, 0x6f18f07b, 0x80000001, 0x0, 0x9, 0xc1, 0x5, 0x4, 0x8, 0x7, 0x3, 0x8, 0x3ff, 0x0, 0x9, 0x203a, 0x3, 0x0, 0x8, 0x2, 0x7, 0x7, 0x8, 0x0, 0x4, 0x7ff, 0x4, 0x9, 0x2, 0x5, 0x8000, 0x200, 0x0, 0x1, 0xfffffff6, 0x0, 0x7b, 0xfd, 0x5b653309, 0xe5, 0x14f, 0x6, 0x10001, 0x1, 0x7, 0x2, 0xffffffff, 0x0, 0x40100, 0x197, 0x3ff, 0x9, 0x4, 0x200, 0xcbf, 0x1ff, 0x80, 0x9, 0x2f74, 0x4, 0x1, 0x9, 0x0, 0x4, 0x8, 0x8000, 0x5, 0x8, 0xf, 0x9, 0x6057, 0x101, 0x8001, 0xad, 0x4, 0x7, 0x7, 0x2, 0x80000001, 0x8c6b, 0xd87, 0x82, 0x100, 0x0, 0x80000000, 0x0, 0x9a, 0x9, 0xfc3, 0x89, 0xa, 0x80000001, 0x2, 0x1, 0xffffffff, 0x4, 0x8000, 0x2, 0x3, 0x10000, 0x8486, 0x3, 0x8, 0x6, 0x0, 0x1, 0x3, 0x2, 0x9]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0)

2.666305166s ago: executing program 3 (id=277):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6)
ptrace(0x10, 0x1)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000002d80)={&(0x7f0000000280)={0x3c, 0x3, 0x1, 0x201, 0x0, 0x0, {0xa}, [@CTA_FILTER={0x4}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x44080)

2.666020316s ago: executing program 4 (id=278):
r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000000000008700cb6f000000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000e80)={0x2c, &(0x7f0000000400)={0x0, 0x23, 0x9, {0x9, 0x5, "d87252c9544c3d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

2.626952887s ago: executing program 2 (id=279):
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xb, 0xc9}}}, 0x7)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000140)=0x7fc, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
r4 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xfd}}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d7000000"], 0x10b8}, 0xff4c)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCFLSH(r6, 0x4b63, 0x3)
close_range(r5, 0xffffffffffffffff, 0x0)

2.035367636s ago: executing program 0 (id=280):
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0xffff, @dev={0xac, 0x14, 0x14, 0x1b}}}, 0x1e)
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000680), 0x1, 0x5cb, &(0x7f00000006c0)="$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")
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
connect$pptp(r0, &(0x7f0000002340)={0x18, 0x2, {0x3, @broadcast}}, 0x1e)

1.335207098s ago: executing program 3 (id=281):
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xb, 0xc9}}}, 0x7)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000140)=0x7fc, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
r4 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xfd}}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61"], 0x10b8}, 0xff4c)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCFLSH(r6, 0x4b63, 0x3)
close_range(r5, 0xffffffffffffffff, 0x0)

838.368113ms ago: executing program 2 (id=282):
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)="13000000010203fe7a", 0x9}], 0x1)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910900000000000730ae8ff"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc004058}, 0x48004)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1c3)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
openat2$dir(0xffffff9c, 0x0, &(0x7f00000001c0)={0x8000, 0x7e, 0x6}, 0x18)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.62887ms ago: executing program 2 (id=283):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = openat$full(0xffffff9c, &(0x7f00000003c0), 0x8002, 0x0)
membarrier(0x2, 0x0)
r2 = io_uring_setup(0x6d87, &(0x7f00000007c0)={0x0, 0x76a, 0x1000, 0x5, 0x14c})
preadv2(r2, &(0x7f0000001980)=[{&(0x7f00000005c0)=""/230, 0xe6}, {&(0x7f00000006c0)=""/6, 0x6}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000001880)=""/85, 0x55}, {&(0x7f0000001900)=""/44, 0x2c}, {0x0}], 0x6, 0x6b3, 0x5, 0x41a6988b36f563b0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000002c80)={0x0, 0x5, 0x3, 0x1})
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f)
r4 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
ioctl$FE_SET_PROPERTY(r4, 0x40106f52, &(0x7f0000000100)={0x5, &(0x7f00000041c0)})
ftruncate(0xffffffffffffffff, 0xffffffffffffffff)
mount(&(0x7f0000000480)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000004c0)='cramfs\x00', 0x208000, 0x0)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000780), &(0x7f0000001940)=0x8)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x10000}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, 0xfffffffffffffffe, &(0x7f00000001c0)=0xffffffe3)
ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000001a00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
syz_io_uring_setup(0x111, &(0x7f0000000200)={0x0, 0xfec9, 0x400, 0x3, 0x3d4}, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000000))
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000340)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4, @loopback}, @in={0x2, 0x4000, @broadcast}}}, 0x118)
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10)
write$cgroup_int(r7, &(0x7f0000000180)=0xfe5f, 0x12)

0s ago: executing program 3 (id=284):
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32)
ftruncate(r0, 0x6000000)
copy_file_range(r0, 0x0, r0, &(0x7f00000004c0)=0x100, 0x9, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000400)='./bus\x00', 0x3000019, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.228' (ED25519) to the list of known hosts.
[   60.921721][ T4176] cgroup: Unknown subsys name 'net'
[   61.057220][ T4176] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   62.527273][ T4176] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k FS
[   64.012256][ T4188] chnl_net:caif_netlink_parms(): no params data found
[   64.122296][ T4189] chnl_net:caif_netlink_parms(): no params data found
[   64.132489][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.139584][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.149016][ T4188] device bridge_slave_0 entered promiscuous mode
[   64.161070][ T4194] chnl_net:caif_netlink_parms(): no params data found
[   64.176499][ T4190] chnl_net:caif_netlink_parms(): no params data found
[   64.194368][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.204798][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.213106][ T4188] device bridge_slave_1 entered promiscuous mode
[   64.250576][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.276885][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.291851][ T4200] chnl_net:caif_netlink_parms(): no params data found
[   64.364375][ T4188] team0: Port device team_slave_0 added
[   64.400024][ T4188] team0: Port device team_slave_1 added
[   64.415603][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.422826][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.430581][ T4189] device bridge_slave_0 entered promiscuous mode
[   64.463859][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.471098][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.479060][ T4194] device bridge_slave_0 entered promiscuous mode
[   64.490583][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.497741][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.506110][ T4194] device bridge_slave_1 entered promiscuous mode
[   64.519295][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.526587][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.534540][ T4189] device bridge_slave_1 entered promiscuous mode
[   64.571598][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.586221][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.593533][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.601694][ T4190] device bridge_slave_0 entered promiscuous mode
[   64.609708][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.616799][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.642732][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.663081][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.679538][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.686905][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.694898][ T4190] device bridge_slave_1 entered promiscuous mode
[   64.709336][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.716335][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.742819][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.754316][ T4200] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.761550][ T4200] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.769685][ T4200] device bridge_slave_0 entered promiscuous mode
[   64.787166][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.808418][ T4200] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.815741][ T4200] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.824009][ T4200] device bridge_slave_1 entered promiscuous mode
[   64.845230][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.856438][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.875876][ T4189] team0: Port device team_slave_0 added
[   64.883990][ T4189] team0: Port device team_slave_1 added
[   64.891522][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.929256][ T4200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.948044][ T4190] team0: Port device team_slave_0 added
[   64.968555][ T4200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.986280][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.993383][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.019849][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.033006][ T4190] team0: Port device team_slave_1 added
[   65.041387][ T4194] team0: Port device team_slave_0 added
[   65.059569][ T4188] device hsr_slave_0 entered promiscuous mode
[   65.066950][ T4188] device hsr_slave_1 entered promiscuous mode
[   65.087748][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.095117][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.121092][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.133779][ T4194] team0: Port device team_slave_1 added
[   65.146737][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.158457][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.186036][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.223591][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.230839][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.256894][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.271233][ T4200] team0: Port device team_slave_0 added
[   65.298877][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.306201][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.332727][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.348185][ T4200] team0: Port device team_slave_1 added
[   65.367626][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.374886][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.400948][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.427303][ T4189] device hsr_slave_0 entered promiscuous mode
[   65.434200][ T4189] device hsr_slave_1 entered promiscuous mode
[   65.440807][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   65.448854][ T4189] Cannot create hsr debugfs directory
[   65.512994][ T4200] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.519989][ T4200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.546572][ T4200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.573712][ T4194] device hsr_slave_0 entered promiscuous mode
[   65.580430][ T4194] device hsr_slave_1 entered promiscuous mode
[   65.587194][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   65.594937][ T4194] Cannot create hsr debugfs directory
[   65.604039][ T4190] device hsr_slave_0 entered promiscuous mode
[   65.610994][ T4190] device hsr_slave_1 entered promiscuous mode
[   65.617649][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   65.625291][ T4190] Cannot create hsr debugfs directory
[   65.636554][ T4200] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.643659][ T4200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.670301][ T4200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.711064][ T1325] Bluetooth: hci2: command 0x0409 tx timeout
[   65.728749][ T1325] Bluetooth: hci3: command 0x0409 tx timeout
[   65.735002][ T1325] Bluetooth: hci1: command 0x0409 tx timeout
[   65.747075][ T1325] Bluetooth: hci0: command 0x0409 tx timeout
[   65.800771][   T21] Bluetooth: hci4: command 0x0409 tx timeout
[   65.814289][ T4200] device hsr_slave_0 entered promiscuous mode
[   65.821585][ T4200] device hsr_slave_1 entered promiscuous mode
[   65.828901][ T4200] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   65.836920][ T4200] Cannot create hsr debugfs directory
[   66.057600][ T4188] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   66.072736][ T4188] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   66.082296][ T4188] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   66.111776][ T4188] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   66.135097][ T4189] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   66.144013][ T4189] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   66.156782][ T4189] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   66.166289][ T4189] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   66.250305][ T4190] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   66.272560][ T4190] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   66.283585][ T4190] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   66.304590][ T4190] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   66.363186][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.379019][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.404396][ T4194] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   66.417306][ T4194] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   66.429575][ T4194] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   66.439975][ T4194] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   66.455943][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   66.466475][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   66.488028][ T4188] 8021q: adding VLAN 0 to HW filter on device team0
[   66.507259][ T4189] 8021q: adding VLAN 0 to HW filter on device team0
[   66.516585][ T4200] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   66.526690][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   66.535807][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   66.543837][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   66.553026][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   66.563433][ T1272] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.570784][ T1272] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.580461][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   66.604460][ T4200] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   66.614849][ T4200] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   66.625901][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   66.635091][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   66.646082][ T1272] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.653218][ T1272] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.661424][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   66.678698][ T4200] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   66.690962][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   66.699761][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   66.709074][ T1272] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.716227][ T1272] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.749229][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   66.758235][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   66.770090][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   66.780351][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   66.789776][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   66.800499][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   66.809105][ T1272] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.816226][ T1272] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.824411][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   66.834049][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   66.843044][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   66.874908][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.882142][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   66.893221][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   66.904582][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   66.913872][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   66.922876][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   66.932847][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   66.942501][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   66.951409][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   66.960301][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   67.004715][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   67.017745][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   67.026939][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   67.035928][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   67.045327][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   67.053689][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   67.062060][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   67.070408][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   67.084163][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.094381][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   67.106634][ T4190] 8021q: adding VLAN 0 to HW filter on device team0
[   67.117873][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   67.148363][ T4194] 8021q: adding VLAN 0 to HW filter on device team0
[   67.171015][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   67.179677][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   67.201628][  T155] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.208746][  T155] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.240112][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   67.258554][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   67.266624][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   67.299380][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   67.308537][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   67.325725][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.332878][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.344082][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   67.358467][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   67.367457][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.374588][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.384013][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   67.393082][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   67.402508][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   67.411715][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   67.420428][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   67.430404][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   67.440277][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   67.448898][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   67.478135][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   67.487840][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   67.498002][ T4237] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.505234][ T4237] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.518672][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   67.527261][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   67.550471][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   67.562401][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   67.574528][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   67.584969][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   67.594792][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   67.613772][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   67.629002][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   67.664841][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.673341][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   67.685067][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   67.694031][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   67.701787][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   67.709229][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   67.721822][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   67.730124][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   67.738030][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   67.752635][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   67.769228][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   67.780868][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   67.782063][ T4198] Bluetooth: hci0: command 0x041b tx timeout
[   67.806877][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.814641][ T4198] Bluetooth: hci1: command 0x041b tx timeout
[   67.821298][ T4198] Bluetooth: hci3: command 0x041b tx timeout
[   67.827412][ T4198] Bluetooth: hci2: command 0x041b tx timeout
[   67.837688][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   67.850117][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   67.861635][ T4198] Bluetooth: hci4: command 0x041b tx timeout
[   67.884092][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   67.901861][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   67.938682][ T4200] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.010144][ T4200] 8021q: adding VLAN 0 to HW filter on device team0
[   68.023542][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   68.036305][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   68.050233][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   68.060026][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   68.081730][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   68.089685][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   68.114134][ T4189] device veth0_vlan entered promiscuous mode
[   68.127634][ T4189] device veth1_vlan entered promiscuous mode
[   68.140102][ T4188] device veth0_vlan entered promiscuous mode
[   68.157949][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   68.166984][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   68.175228][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   68.184820][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   68.193276][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   68.201885][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   68.210496][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   68.219592][ T1272] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.226739][ T1272] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.234734][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   68.243208][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   68.251271][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   68.288215][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.297374][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   68.306517][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   68.314504][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   68.325360][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   68.338646][ T1272] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.345808][ T1272] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.361527][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   68.369049][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   68.383237][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   68.395836][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   68.412487][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.436296][ T4188] device veth1_vlan entered promiscuous mode
[   68.449095][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   68.464626][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   68.479527][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   68.491111][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   68.499936][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   68.515815][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   68.527093][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   68.545763][ T4200] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   68.558227][ T4200] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   68.569161][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   68.579646][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   68.657590][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   68.670637][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   68.693538][ T4189] device veth0_macvtap entered promiscuous mode
[   68.728321][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   68.737005][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   68.748645][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   68.762569][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   68.771552][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   68.784699][ T4189] device veth1_macvtap entered promiscuous mode
[   68.794311][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   68.803165][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   68.812027][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   68.827790][ T4188] device veth0_macvtap entered promiscuous mode
[   68.868681][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   68.879362][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   68.889203][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   68.898550][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   68.908543][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   68.917289][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   68.926361][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   68.935108][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   68.944924][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   68.969537][ T4188] device veth1_macvtap entered promiscuous mode
[   68.979706][ T4190] device veth0_vlan entered promiscuous mode
[   68.988167][ T4194] device veth0_vlan entered promiscuous mode
[   69.014120][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.029726][ T4190] device veth1_vlan entered promiscuous mode
[   69.038045][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   69.047872][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   69.057453][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   69.067196][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   69.079507][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.089761][ T4194] device veth1_vlan entered promiscuous mode
[   69.097339][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.108699][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.120056][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.133137][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   69.142683][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   69.151501][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   69.160150][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   69.169284][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   69.179289][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   69.187479][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   69.200990][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.209837][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.218919][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.234256][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.247481][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.258753][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.270580][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.292936][ T4200] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.318371][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   69.327969][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   69.340121][ T4189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.349171][ T4189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.358577][ T4189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.367827][ T4189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.395948][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   69.406210][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   69.443209][ T4190] device veth0_macvtap entered promiscuous mode
[   69.486267][ T4194] device veth0_macvtap entered promiscuous mode
[   69.496480][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   69.506135][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   69.515509][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   69.525333][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   69.535498][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   69.546073][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   69.571882][ T4194] device veth1_macvtap entered promiscuous mode
[   69.602035][ T4190] device veth1_macvtap entered promiscuous mode
[   69.620560][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.638514][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.670968][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   69.679001][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   69.688571][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   69.697633][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   69.707295][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   69.718607][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   69.726634][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   69.737983][ T4200] device veth0_vlan entered promiscuous mode
[   69.756699][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.770249][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.781683][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.795662][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.805638][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.816302][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.828196][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.838353][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.850216][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.860949][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.863527][ T4229] Bluetooth: hci2: command 0x040f tx timeout
[   69.874596][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.888273][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.891452][ T4229] Bluetooth: hci3: command 0x040f tx timeout
[   69.903668][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.916895][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.921525][ T4229] Bluetooth: hci1: command 0x040f tx timeout
[   69.930499][ T4229] Bluetooth: hci0: command 0x040f tx timeout
[   69.937050][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   69.945934][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   69.955585][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   69.963826][   T13] Bluetooth: hci4: command 0x040f tx timeout
[   69.972022][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   69.981472][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   69.998174][ T4200] device veth1_vlan entered promiscuous mode
[   70.008773][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.021622][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.032502][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.043229][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.054922][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.072451][ T4237] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.080408][ T4237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.096369][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.108038][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.118228][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.129886][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.141248][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.152111][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.163466][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.171799][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   70.181578][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   70.190374][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   70.199551][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   70.207741][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   70.216974][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   70.229268][ T4194] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.239937][ T4194] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.249177][ T4194] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.258879][ T4194] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.283647][ T4190] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.293961][ T4190] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.303355][ T4190] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.312208][ T4190] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.328411][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.348923][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.377142][ T4200] device veth0_macvtap entered promiscuous mode
[   70.399842][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   70.413920][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   70.424023][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   70.440166][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   70.460277][ T4200] device veth1_macvtap entered promiscuous mode
[   70.605399][ T4263] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   70.607779][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.657077][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.668515][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.685013][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.698727][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.715369][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.728040][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.745158][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.762716][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.792941][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   70.807784][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   70.817535][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   70.839068][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.854134][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.866143][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.879151][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.894839][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.907462][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.923443][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.936541][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.956068][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.981859][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.989756][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.050286][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.066736][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.108831][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   71.118064][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   71.133034][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   71.144114][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   71.155224][ T4200] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.165286][ T4200] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.175176][ T4200] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.185267][ T4200] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.365860][ T1272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.402158][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[   71.408994][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[   71.543209][ T1272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.861050][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   71.917154][ T4279] device bridge1 entered promiscuous mode
[   71.938235][ T4279] team0: Port device bridge1 added
[   71.950070][ T4198] Bluetooth: hci1: command 0x0419 tx timeout
[   71.956615][ T4198] Bluetooth: hci3: command 0x0419 tx timeout
[   72.001872][ T4198] Bluetooth: hci2: command 0x0419 tx timeout
[   72.021001][   T13] Bluetooth: hci4: command 0x0419 tx timeout
[   72.027117][   T13] Bluetooth: hci0: command 0x0419 tx timeout
[   72.062267][ T1272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.104996][ T1272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.113976][ T4279] bridge0: port 3(team0) entered blocking state
[   72.120411][ T4279] bridge0: port 3(team0) entered disabled state
[   72.141653][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.149615][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.186431][ T4279] device team0 entered promiscuous mode
[   72.212969][ T4279] device team_slave_0 entered promiscuous mode
[   72.219994][ T4279] device team_slave_1 entered promiscuous mode
[   72.228409][ T4279] bridge0: port 3(team0) entered blocking state
[   72.234964][ T4279] bridge0: port 3(team0) entered forwarding state
[   72.287031][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   72.304657][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   73.413254][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.439632][ T4294] loop0: detected capacity change from 0 to 256
[   73.463384][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.542879][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   73.830734][    C0] sched: RT throttling activated
[   73.858413][ T4298] loop4: detected capacity change from 0 to 512
[   74.270747][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #218!!!
[   74.290754][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #29a!!!
[   74.300736][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #29a!!!
[   74.310733][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #29a!!!
[   74.320738][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #29a!!!
[   74.330735][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #29a!!!
[   74.340735][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #39a!!!
[   74.350738][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #39a!!!
[   74.360740][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #39a!!!
[   74.370735][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #39a!!!
[   75.942967][ T4294] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9'.
[   75.979038][ T4294] device vlan2 entered promiscuous mode
[   76.049599][ T4298] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended
[   76.119094][ T4294] device syz_tun entered promiscuous mode
[   76.125401][ T4298] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,min_batch_time=0x0000000000000000,nombcache,,errors=continue. Quota mode: writeback.
[   76.173900][ T4298] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   77.115865][ T4298] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.5: Invalid block bitmap block 1179403647 in block_group 0
[   78.291416][ T4330] loop0: detected capacity change from 0 to 32768
[   78.332546][ T4330] =======================================================
[   78.332546][ T4330] WARNING: The mand mount option has been deprecated and
[   78.332546][ T4330]          and is ignored by this kernel. Remove the mand
[   78.332546][ T4330]          option from the mount to silence this warning.
[   78.332546][ T4330] =======================================================
[   78.400069][ T4338] loop2: detected capacity change from 0 to 1024
[   78.455405][ T4338] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities
[   78.495366][ T4330] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   78.630920][ T4300] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   79.465241][ T4338] loop2: detected capacity change from 0 to 512
[   79.631016][ T4338] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   79.650933][ T4300] usb 4-1: Using ep0 maxpacket: 16
[   79.662176][ T4189] ocfs2: Unmounting device (7,0) on (node local)
[   79.671452][ T4338] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   79.770910][ T4300] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   79.783793][ T4300] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   79.793714][ T4300] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   79.806783][ T4300] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   79.816144][ T4300] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   79.832032][ T4300] usb 4-1: config 0 descriptor??
[   79.852882][ T4338] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.19: invalid indirect mapped block 4294967295 (level 0)
[   79.941427][ T4338] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.19: invalid indirect mapped block 4294967295 (level 1)
[   79.979672][ T4338] EXT4-fs (loop2): 1 orphan inode deleted
[   79.999798][ T4338] EXT4-fs (loop2): 1 truncate cleaned up
[   80.021430][ T4234] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   80.029231][ T4338] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   80.136955][ T4356] syz.0.21: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0-1
[   80.156341][ T4356] CPU: 0 PID: 4356 Comm: syz.0.21 Not tainted syzkaller #0
[   80.163603][ T4356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[   80.173705][ T4356] Call Trace:
[   80.177013][ T4356]  <TASK>
[   80.179987][ T4356]  dump_stack_lvl+0x188/0x250
[   80.184758][ T4356]  ? rcu_lock_release+0x5/0x20
[   80.189582][ T4356]  ? show_regs_print_info+0x20/0x20
[   80.194836][ T4356]  ? load_image+0x400/0x400
[   80.199388][ T4356]  warn_alloc+0x243/0x320
[   80.203775][ T4356]  ? zone_watermark_ok_safe+0x240/0x240
[   80.209354][ T4356]  ? __mutex_lock_common+0x465/0x2400
[   80.214772][ T4356]  ? verify_lock_unused+0x140/0x140
[   80.220004][ T4356]  __vmalloc_node_range+0x2b1/0x8b0
[   80.225243][ T4356]  ? dvb_dvr_do_ioctl+0x12a/0x220
[   80.230303][ T4356]  vmalloc+0x75/0x80
[   80.234244][ T4356]  ? dvb_dvr_do_ioctl+0x12a/0x220
[   80.239301][ T4356]  dvb_dvr_do_ioctl+0x12a/0x220
[   80.244239][ T4356]  dvb_usercopy+0x191/0x2b0
[   80.248771][ T4356]  ? dvb_dvr_release+0x3d0/0x3d0
[   80.253747][ T4356]  ? dvb_generic_ioctl+0xb0/0xb0
[   80.258741][ T4356]  ? dvb_dvr_poll+0x230/0x230
[   80.263449][ T4356]  dvb_dvr_ioctl+0x25/0x30
[   80.267904][ T4356]  __se_sys_ioctl+0xfa/0x170
[   80.272527][ T4356]  do_syscall_64+0x4c/0xa0
[   80.276977][ T4356]  ? clear_bhb_loop+0x30/0x80
[   80.281686][ T4356]  ? clear_bhb_loop+0x30/0x80
[   80.286400][ T4356]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   80.292333][ T4356] RIP: 0033:0x7fd87315ee59
[   80.296796][ T4356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   80.316432][ T4356] RSP: 002b:00007fd8713b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   80.324886][ T4356] RAX: ffffffffffffffda RBX: 00007fd8733d7fa0 RCX: 00007fd87315ee59
[   80.332883][ T4356] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000003
[   80.340889][ T4356] RBP: 00007fd8731f4d6f R08: 0000000000000000 R09: 0000000000000000
[   80.348887][ T4356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   80.356887][ T4356] R13: 00007fd8733d8038 R14: 00007fd8733d7fa0 R15: 00007ffe558277a8
[   80.364940][ T4356]  </TASK>
[   80.375946][ T4356] Mem-Info:
[   80.379136][ T4356] active_anon:299 inactive_anon:8488 isolated_anon:0
[   80.379136][ T4356]  active_file:4544 inactive_file:46612 isolated_file:0
[   80.379136][ T4356]  unevictable:768 dirty:1740 writeback:0
[   80.379136][ T4356]  slab_reclaimable:20393 slab_unreclaimable:91731
[   80.379136][ T4356]  mapped:31691 shmem:4540 pagetables:640 bounce:0
[   80.379136][ T4356]  kernel_misc_reclaimable:0
[   80.379136][ T4356]  free:1377276 free_pcp:12202 free_cma:0
[   80.422859][ T4234] usb 5-1: Using ep0 maxpacket: 16
[   80.428216][ T4356] Node 0 active_anon:1164kB inactive_anon:33544kB active_file:17976kB inactive_file:186448kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:126864kB dirty:6960kB writeback:0kB shmem:16184kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10512kB pagetables:2560kB all_unreclaimable? no
[   80.460501][ T4356] Node 1 active_anon:32kB inactive_anon:508kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no
[   80.466586][ T4300] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[   80.502816][ T4356] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   80.523949][ T4300] microsoft 0003:045E:07DA.0001: No inputs registered, leaving
[   80.540595][ T4356] lowmem_reserve[]: 0 2539 2540 2540 2540
[   80.549152][ T4356] Node 0 DMA32 free:1577780kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1164kB inactive_anon:35044kB active_file:17976kB inactive_file:186448kB unevictable:1536kB writepending:6960kB present:3129332kB managed:2606544kB mlocked:0kB bounce:0kB free_pcp:35780kB local_pcp:17824kB free_cma:0kB
[   80.565660][ T4300] microsoft 0003:045E:07DA.0001: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[   80.582196][ T4356] lowmem_reserve[]: 0 0 0 0 0
[   80.601491][ T4356] Node 0 Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   80.628169][ T4356] lowmem_reserve[]: 0 0 0 0 0
[   80.636722][ T4356] Node 1 Normal free:3915000kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:508kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:11932kB local_pcp:9236kB free_cma:0kB
[   80.641234][ T4300] microsoft 0003:045E:07DA.0001: no inputs found
[   80.688045][ T4356] lowmem_reserve[]: 0 0 0 0 0
[   80.696866][ T4356] Node 0 DMA: 
[   80.696908][ T4300] microsoft 0003:045E:07DA.0001: could not initialize ff, continuing anyway
[   80.696941][ T4356] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   80.733427][ T4300] usb 4-1: USB disconnect, device number 2
[   80.752982][ T4356] Node 0 DMA32: 687*4kB (ME) 253*8kB (M) 305*16kB (M) 290*32kB (M) 243*64kB (ME) 15*128kB (M) 7*256kB (UM) 9*512kB (M) 11*1024kB (UME) 8*2048kB (UM) 368*4096kB (M) = 1577780kB
[   80.773191][ T4356] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[   80.793798][ T4356] Node 1 Normal: 62*4kB (UME) 26*8kB (UME) 17*16kB (UME) 55*32kB (UME) 27*64kB (UME) 17*128kB (UME) 4*256kB (U) 2*512kB (U) 1*1024kB (E) 1*2048kB (M) 953*4096kB (M) = 3915000kB
[   80.833204][ T4234] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[   80.851887][ T4234] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   80.880456][ T4234] usb 5-1: Product: syz
[   81.052197][ T4358] fido_id[4358]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[   81.057120][ T4234] usb 5-1: Manufacturer: syz
[   81.072181][ T4234] usb 5-1: SerialNumber: syz
[   81.090826][ T4356] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   81.103668][ T4234] r8152-cfgselector 5-1: config 0 descriptor??
[   81.110086][ T4356] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   81.130598][ T4356] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   81.159401][ T4356] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   81.174744][ T4356] 60816 total pagecache pages
[   81.179593][ T4356] 0 pages in swap cache
[   81.184899][ T4356] Swap cache stats: add 0, delete 0, find 0/0
[   81.195796][ T4356] Free swap  = 124996kB
[   81.202932][ T4356] Total swap = 124996kB
[   81.207372][ T4356] 2097051 pages RAM
[   81.215825][ T4356] 0 pages HighMem/MovableOnly
[   81.222576][ T4356] 411492 pages reserved
[   81.241751][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   81.249293][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   81.271807][ T4356] 0 pages cma reserved
[   82.073848][ T4364] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   82.327329][ T4365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23'.
[   82.355863][ T4365] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled
[   82.381140][ T4234] r8152-cfgselector 5-1: Unknown version 0x0000
[   82.403953][ T4234] r8152-cfgselector 5-1: bad CDC descriptors
[   82.533016][ T4234] r8152-cfgselector 5-1: Unknown version 0x0000
[   82.615748][ T4234] r8152-cfgselector 5-1: USB disconnect, device number 2
[   85.203760][ T4375] loop3: detected capacity change from 0 to 256
[   85.241640][ T4375] exfat: Unknown parameter 'nÿecase'
[   86.754559][    T7] cfg80211: failed to load regulatory.db
[   88.078161][ T4410] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4194] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[4410]
[   88.509927][ T4409] loop0: detected capacity change from 0 to 4096
[   88.596127][   T23] usb 3-1: new low-speed USB device number 2 using dummy_hcd
[   88.729905][ T4409] EXT4-fs (loop0): Test dummy encryption mode enabled
[   88.737045][ T4409] EXT4-fs (loop0): Test dummy encryption mode enabled
[   88.779430][ T4409] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,test_dummy_encryption=v1,noload,test_dummy_encryption=v1,nodiscard,data_err=ignore,stripe=0x000000000000060f,journal_ioprio=0x0000000000000000,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback.
[   88.808813][    C1] vkms_vblank_simulate: vblank timer overrun
[   89.412565][   T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   90.056757][   T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   90.143621][   T23] usb 3-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00
[   90.200871][   T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.287196][   T23] usb 3-1: config 0 descriptor??
[   90.403732][ T4427] loop4: detected capacity change from 0 to 4096
[   90.539359][ T4427] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   91.887681][ T4434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.43'.
[   91.941020][   T23] usbhid 3-1:0.0: can't add hid device: -71
[   91.950258][   T23] usbhid: probe of 3-1:0.0 failed with error -71
[   92.007516][ T4434] netlink: 'syz.0.43': attribute type 5 has an invalid length.
[   92.037480][   T23] usb 3-1: USB disconnect, device number 2
[   92.043599][ T4434] netlink: 20 bytes leftover after parsing attributes in process `syz.0.43'.
[   92.057411][ T4434] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 34859 - 0
[   92.066426][ T4434] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 34859 - 0
[   92.077188][ T4434] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 34859 - 0
[   92.086338][ T4434] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 34859 - 0
[   92.115734][ T4434] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 58908 - 0
[   92.246534][ T4438] EXT4-fs error (device loop4): ext4_get_first_dir_block:3617: inode #12: block 80: comm syz.4.41: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0
[   92.283579][ T4438] EXT4-fs error (device loop4): ext4_get_first_dir_block:3619: inode #12: comm syz.4.41: directory missing '..'
[   92.626699][ T4434] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 58908 - 0
[   92.740910][ T4437] loop2: detected capacity change from 0 to 8
[   93.020981][ T4434] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 58908 - 0
[   93.056614][ T4434] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 58908 - 0
[   93.087164][ T4437] SQUASHFS error: xz decompression failed, data probably corrupt
[   93.089686][ T4434] device geneve2 entered promiscuous mode
[   93.149779][ T4437] SQUASHFS error: Failed to read block 0x108: -5
[   93.306656][ T4437] SQUASHFS error: Unable to read metadata cache entry [106]
[   93.318465][ T4437] SQUASHFS error: Unable to read inode 0x11f
[   93.463386][ T4446] IPVS: fo: FWM 3 0x00000003 - no destination available
[   93.582557][ T4445] loop0: detected capacity change from 0 to 1024
[   93.813848][ T4445] EXT4-fs (loop0): Ignoring removed bh option
[   94.042115][ T4445] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none.
[   94.233676][ T4193] Bluetooth: hci1: hcon ffff888025458000 sent 1 < count 64
[   94.307745][ T4454] loop3: detected capacity change from 0 to 512
[   94.439615][ T4459] loop0: detected capacity change from 0 to 164
[   94.449822][ T4454] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   94.932949][ T4454] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   95.961218][ T4454] EXT4-fs (loop3): 1 truncate cleaned up
[   95.967117][ T4454] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x000000000000000d,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,auto_da_alloc,jqfmt=vfsv0,data=journal,,errors=continue. Quota mode: none.
[   98.880256][ T4484] loop2: detected capacity change from 0 to 512
[  100.766423][ T4484] EXT4-fs (loop2): orphan cleanup on readonly fs
[  100.820515][ T4484] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.56: bg 0: block 5: invalid block bitmap
[  101.332226][ T4484] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  101.498427][ T4484] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.56: invalid indirect mapped block 3 (level 2)
[  101.797350][ T4484] EXT4-fs (loop2): 2 truncates cleaned up
[  101.846490][ T4484] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  103.235806][ T4516] overlayfs: failed to resolve './file0': -2
[  104.329577][ T4229] Bluetooth: hci0: command 0x0406 tx timeout
[  107.002861][ T4229] Bluetooth: hci1: command 0x0406 tx timeout
[  107.077241][ T4570] loop3: detected capacity change from 0 to 1024
[  107.285986][ T4573] overlayfs: failed to resolve './file0': -2
[  108.132427][ T4229] Bluetooth: hci4: command 0x0406 tx timeout
[  108.660796][ T4234] Bluetooth: hci2: command 0x0406 tx timeout
[  127.497483][ T4741] loop2: detected capacity change from 0 to 164
[  132.292753][ T4770] loop2: detected capacity change from 0 to 1024
[  132.852520][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  132.859272][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  135.589295][ T4794] loop3: detected capacity change from 0 to 164
[  136.626989][ T4787] loop4: detected capacity change from 0 to 32768
[  136.718591][ T4787] XFS (loop4): Mounting V5 Filesystem
[  139.350102][ T4787] XFS (loop4): log mount failed
[  139.384963][ T4819] loop0: detected capacity change from 0 to 512
[  139.630839][ T4819] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  140.113730][ T4819] EXT4-fs (loop0): 1 truncate cleaned up
[  140.135043][ T4819] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_batch_time=0x000000000000000d,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,auto_da_alloc,jqfmt=vfsv0,data=journal,,errors=continue. Quota mode: none.
[  144.958569][ T4860] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4)
[  146.813854][ T4878] loop3: detected capacity change from 0 to 1024
[  148.835264][ T4899] loop2: detected capacity change from 0 to 512
[  149.068382][ T4899] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  149.579610][ T4899] EXT4-fs (loop2): 1 truncate cleaned up
[  149.668010][ T4899] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x000000000000000d,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,auto_da_alloc,jqfmt=vfsv0,data=journal,,errors=continue. Quota mode: none.
[  149.799947][ T4230] Bluetooth: hci3: command 0x0406 tx timeout
[  153.821027][ T4925] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  157.638859][ T4976] loop3: detected capacity change from 0 to 1024
[  157.775754][ T4976] EXT4-fs (loop3): Ignoring removed bh option
[  158.031920][ T4976] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none.
[  159.024253][ T4988] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  159.064654][ T4992] IPVS: fo: FWM 3 0x00000003 - no destination available
[  161.633136][ T5006] loop3: detected capacity change from 0 to 1024
[  161.671047][ T5009] loop0: detected capacity change from 0 to 8
[  162.121746][ T5009] SQUASHFS error: xz decompression failed, data probably corrupt
[  162.325618][ T5009] SQUASHFS error: Failed to read block 0x108: -5
[  162.519557][ T5009] SQUASHFS error: Unable to read metadata cache entry [106]
[  162.573819][ T5009] SQUASHFS error: Unable to read inode 0x11f
[  163.111011][ T4195] Bluetooth: hci3: hcon ffff888079070000 sent 1 < count 64
[  164.245224][ T5042] IPVS: fo: FWM 3 0x00000003 - no destination available
[  166.450971][ T5056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.211'.
[  166.459831][ T5056] netlink: 'syz.4.211': attribute type 5 has an invalid length.
[  166.501829][ T5056] netlink: 20 bytes leftover after parsing attributes in process `syz.4.211'.
[  166.514085][ T5058] overlayfs: missing 'lowerdir'
[  166.541504][ T5056] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 50895 - 0
[  166.568910][ T5056] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 50895 - 0
[  166.610825][ T5056] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 50895 - 0
[  166.640791][ T5056] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 50895 - 0
[  166.763853][ T5056] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 55383 - 0
[  166.783155][ T5056] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 55383 - 0
[  166.833218][ T5056] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 55383 - 0
[  166.852356][ T5056] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 55383 - 0
[  166.864763][ T5056] device geneve2 entered promiscuous mode
[  168.435384][ T5078] loop0: detected capacity change from 0 to 164
[  170.621820][ T5082] loop3: detected capacity change from 0 to 4096
[  170.986986][ T5082] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  171.077175][ T5101] overlayfs: missing 'lowerdir'
[  179.362789][ T5157] overlayfs: missing 'lowerdir'
[  181.218045][ T5175] loop0: detected capacity change from 0 to 4096
[  181.902130][ T5175] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  182.453249][ T5189] loop4: detected capacity change from 0 to 4096
[  182.704378][ T5194] EXT4-fs error (device loop0): ext4_get_first_dir_block:3617: inode #12: block 80: comm syz.0.240: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0
[  182.728767][ T5189] EXT4-fs (loop4): Test dummy encryption mode enabled
[  182.735667][ T5189] EXT4-fs (loop4): Test dummy encryption mode enabled
[  182.907347][ T5194] EXT4-fs error (device loop0): ext4_get_first_dir_block:3619: inode #12: comm syz.0.240: directory missing '..'
[  183.028400][ T5189] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,test_dummy_encryption=v1,noload,test_dummy_encryption=v1,nodiscard,data_err=ignore,stripe=0x000000000000060f,journal_ioprio=0x0000000000000000,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback.
[  184.776830][ T5206] overlayfs: missing 'lowerdir'
[  185.133263][ T5209] loop0: detected capacity change from 0 to 164
[  185.469301][ T5212] loop2: detected capacity change from 0 to 1024
[  186.192203][   T23] Bluetooth: hci0: command 0x0406 tx timeout
[  186.208525][   T23] Bluetooth: hci1: command 0x0406 tx timeout
[  187.000294][   T23] Bluetooth: hci3: command 0x0406 tx timeout
[  187.007904][   T23] Bluetooth: hci2: command 0x0406 tx timeout
[  187.017185][ T4277] Bluetooth: hci4: command 0x0406 tx timeout
[  188.161650][ T5227] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4)
[  189.735981][ T5248] overlayfs: missing 'lowerdir'
[  189.818999][ T5242] loop0: detected capacity change from 0 to 32768
[  189.899036][ T5242] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.255 (5242)
[  190.080851][ T5251] loop2: detected capacity change from 0 to 4096
[  190.172420][ T5251] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  192.140849][   T13] usb 4-1: new low-speed USB device number 3 using dummy_hcd
[  192.601013][   T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  192.633221][   T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  192.663858][   T13] usb 4-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00
[  192.689474][   T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.724085][   T13] usb 4-1: config 0 descriptor??
[  192.756381][ T5242] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  192.830157][ T5242] BTRFS info (device loop0): turning on sync discard
[  192.867053][ T5242] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  192.885517][ T5242] BTRFS info (device loop0): use zstd compression, level 3
[  192.895504][ T5242] BTRFS info (device loop0): turning on async discard
[  192.906705][ T5242] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  192.922180][ T5242] BTRFS info (device loop0): trying to use backup root at mount time
[  192.930478][ T5242] BTRFS info (device loop0): enabling auto defrag
[  192.942368][ T5242] BTRFS info (device loop0): using free space tree
[  192.948911][ T5242] BTRFS info (device loop0): has skinny extents
[  193.037863][ T5273] loop2: detected capacity change from 0 to 1024
[  193.339892][ T5292] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4188] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5292]
[  193.524327][ T5242] BTRFS error (device loop0): open_ctree failed: -12
[  195.061465][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  195.067925][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  195.564988][   T13] hid-generic 0003:0C70:F0B6.0002: unknown main item tag 0x7
[  195.588526][   T13] hid-generic 0003:0C70:F0B6.0002: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.3-1/input0
[  195.602847][   T13] usb 4-1: USB disconnect, device number 3
[  196.613145][ T5310] fido_id[5310]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  196.991977][ T5309] overlayfs: missing 'lowerdir'
[  197.389800][ T5323] loop4: detected capacity change from 0 to 164
[  198.936394][ T5332] loop0: detected capacity change from 0 to 4096
[  199.270041][ T5332] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  200.302013][ T5351] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4200] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5351]
[  201.473808][ T5359] loop0: detected capacity change from 0 to 1024
[  202.240749][ T4300] usb 5-1: new low-speed USB device number 3 using dummy_hcd
[  202.260299][ T5367] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  202.279777][ T5367] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  202.356485][ T5368] ==================================================================
[  202.364931][ T5368] BUG: KASAN: use-after-free in dvb_device_open+0xc6/0x370
[  202.372194][ T5368] Read of size 8 at addr ffff888149f33818 by task syz.2.283/5368
[  202.379943][ T5368] 
[  202.382326][ T5368] CPU: 0 PID: 5368 Comm: syz.2.283 Not tainted syzkaller #0
[  202.389639][ T5368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  202.399728][ T5368] Call Trace:
[  202.403035][ T5368]  <TASK>
[  202.405998][ T5368]  dump_stack_lvl+0x188/0x250
[  202.410713][ T5368]  ? show_regs_print_info+0x20/0x20
[  202.415940][ T5368]  ? _printk+0xda/0x130
[  202.420128][ T5368]  ? dvb_device_open+0xc6/0x370
[  202.425158][ T5368]  ? load_image+0x400/0x400
[  202.429715][ T5368]  ? _raw_spin_lock_irqsave+0xbc/0x100
[  202.435231][ T5368]  print_address_description+0x60/0x2d0
[  202.440817][ T5368]  ? dvb_device_open+0xc6/0x370
[  202.445712][ T5368]  kasan_report+0xdf/0x130
[  202.450191][ T5368]  ? dvb_device_open+0xc6/0x370
[  202.455110][ T5368]  dvb_device_open+0xc6/0x370
[  202.459839][ T5368]  ? do_raw_spin_unlock+0x11d/0x230
[  202.465081][ T5368]  chrdev_open+0x5c5/0x6a0
[  202.469544][ T5368]  ? cd_forget+0x160/0x160
[  202.474021][ T5368]  ? fsnotify_perm+0x3a7/0x560
[  202.478834][ T5368]  ? cd_forget+0x160/0x160
[  202.483285][ T5368]  do_dentry_open+0x7ff/0xf80
[  202.488052][ T5368]  path_openat+0x26f5/0x2fa0
[  202.492732][ T5368]  ? do_filp_open+0x410/0x410
[  202.497462][ T5368]  do_filp_open+0x1e2/0x410
[  202.502005][ T5368]  ? vfs_tmpfile+0x300/0x300
[  202.506654][ T5368]  ? _raw_spin_unlock+0x24/0x40
[  202.511540][ T5368]  ? alloc_fd+0x598/0x630
[  202.515905][ T5368]  do_sys_openat2+0x150/0x4b0
[  202.520627][ T5368]  ? __lock_acquire+0x7d10/0x7d10
[  202.525800][ T5368]  ? do_sys_open+0xe0/0xe0
[  202.530251][ T5368]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  202.536288][ T5368]  ? lock_chain_count+0x20/0x20
[  202.541183][ T5368]  ? vtime_user_exit+0x2c8/0x3e0
[  202.546186][ T5368]  __x64_sys_openat+0x135/0x160
[  202.551077][ T5368]  do_syscall_64+0x4c/0xa0
[  202.555524][ T5368]  ? clear_bhb_loop+0x30/0x80
[  202.560231][ T5368]  ? clear_bhb_loop+0x30/0x80
[  202.564931][ T5368]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  202.570857][ T5368] RIP: 0033:0x7fbb6cc3568e
[  202.575299][ T5368] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  202.594954][ T5368] RSP: 002b:00007fbb6aeacb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  202.603419][ T5368] RAX: ffffffffffffffda RBX: 00007fbb6aead6c0 RCX: 00007fbb6cc3568e
[  202.611424][ T5368] RDX: 0000000000000002 RSI: 00007fbb6aeacc00 RDI: ffffffffffffff9c
[  202.619466][ T5368] RBP: 00007fbb6aeacc00 R08: 0000000000000000 R09: 0000000000000000
[  202.627466][ T5368] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  202.635461][ T5368] R13: 00007fbb6ceee128 R14: 00007fbb6ceee090 R15: 00007ffd6c6bb538
[  202.643481][ T5368]  </TASK>
[  202.646524][ T5368] 
[  202.648881][ T5368] Allocated by task 1:
[  202.652992][ T5368]  __kasan_kmalloc+0xb5/0xf0
[  202.657627][ T5368]  dvb_register_device+0x311/0x2170
[  202.662856][ T5368]  dvb_register_frontend+0x645/0x920
[  202.668318][ T5368]  vidtv_bridge_probe+0x9a1/0xf70
[  202.673396][ T5368]  platform_probe+0x137/0x1c0
[  202.678100][ T5368]  really_probe+0x284/0xc80
[  202.682627][ T5368]  __driver_probe_device+0x18c/0x330
[  202.687940][ T5368]  driver_probe_device+0x4f/0x420
[  202.693008][ T5368]  __driver_attach+0x46b/0x670
[  202.697802][ T5368]  bus_for_each_dev+0x182/0x1f0
[  202.702698][ T5368]  bus_add_driver+0x30a/0x5a0
[  202.707414][ T5368]  driver_register+0x32d/0x430
[  202.712207][ T5368]  vidtv_bridge_init+0x39/0x70
[  202.716999][ T5368]  do_one_initcall+0x272/0x730
[  202.721815][ T5368]  do_initcall_level+0x137/0x1f0
[  202.726798][ T5368]  do_initcalls+0x4b/0x90
[  202.731158][ T5368]  kernel_init_freeable+0x3e9/0x570
[  202.736389][ T5368]  kernel_init+0x19/0x1b0
[  202.740762][ T5368]  ret_from_fork+0x1f/0x30
[  202.745209][ T5368] 
[  202.747560][ T5368] Freed by task 5227:
[  202.751589][ T5368]  kasan_set_track+0x4b/0x70
[  202.756223][ T5368]  kasan_set_free_info+0x1f/0x40
[  202.761212][ T5368]  ____kasan_slab_free+0xd5/0x110
[  202.766282][ T5368]  slab_free_freelist_hook+0xea/0x170
[  202.771683][ T5368]  kfree+0xef/0x2a0
[  202.775517][ T5368]  dvb_device_open+0x2e7/0x370
[  202.780308][ T5368]  chrdev_open+0x5c5/0x6a0
[  202.784754][ T5368]  do_dentry_open+0x7ff/0xf80
[  202.789474][ T5368]  path_openat+0x26f5/0x2fa0
[  202.794340][ T5368]  do_filp_open+0x1e2/0x410
[  202.798874][ T5368]  do_sys_openat2+0x150/0x4b0
[  202.803588][ T5368]  __x64_sys_openat+0x135/0x160
[  202.808469][ T5368]  do_syscall_64+0x4c/0xa0
[  202.812921][ T5368]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  202.818863][ T5368] 
[  202.821213][ T5368] The buggy address belongs to the object at ffff888149f33800
[  202.821213][ T5368]  which belongs to the cache kmalloc-256 of size 256
[  202.835305][ T5368] The buggy address is located 24 bytes inside of
[  202.835305][ T5368]  256-byte region [ffff888149f33800, ffff888149f33900)
[  202.848679][ T5368] The buggy address belongs to the page:
[  202.854342][ T5368] page:ffffea000527cc80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x149f32
[  202.864617][ T5368] head:ffffea000527cc80 order:1 compound_mapcount:0
[  202.871230][ T5368] flags: 0x57ff00000010200(slab|head|node=1|zone=2|lastcpupid=0x7ff)
[  202.879329][ T5368] raw: 057ff00000010200 dead000000000100 dead000000000122 ffff888016c41b40
[  202.887946][ T5368] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[  202.896548][ T5368] page dumped because: kasan: bad access detected
[  202.903241][ T5368] page_owner tracks the page as allocated
[  202.908986][ T5368] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, ts 21171339153, free_ts 0
[  202.926990][ T5368]  get_page_from_freelist+0x1bbd/0x1ca0
[  202.932583][ T5368]  __alloc_pages+0x1ee/0x480
[  202.937214][ T5368]  alloc_page_interleave+0x24/0x1e0
[  202.942481][ T5368]  new_slab+0xc0/0x4b0
[  202.946598][ T5368]  ___slab_alloc+0x80a/0xdd0
[  202.951234][ T5368]  __kmalloc_node+0x200/0x3b0
[  202.955941][ T5368]  kvmalloc_node+0x84/0x130
[  202.960464][ T5368]  v4l2_ctrl_new+0x70f/0x1310
[  202.965175][ T5368]  v4l2_ctrl_new_std+0x247/0x300
[  202.970157][ T5368]  handler_new_ref+0x14a/0x950
[  202.974960][ T5368]  v4l2_ctrl_add_handler+0x197/0x280
[  202.980274][ T5368]  vivid_create_controls+0x240c/0x3460
[  202.985769][ T5368]  vivid_probe+0x3c47/0x67a0
[  202.990386][ T5368]  platform_probe+0x137/0x1c0
[  202.995093][ T5368]  really_probe+0x284/0xc80
[  202.999621][ T5368]  __driver_probe_device+0x18c/0x330
[  203.004931][ T5368] page_owner free stack trace missing
[  203.010309][ T5368] 
[  203.012651][ T5368] Memory state around the buggy address:
[  203.018310][ T5368]  ffff888149f33700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  203.026400][ T5368]  ffff888149f33780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  203.034488][ T5368] >ffff888149f33800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  203.042576][ T5368]                             ^
[  203.047461][ T5368]  ffff888149f33880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  203.055555][ T5368]  ffff888149f33900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  203.063639][ T5368] ==================================================================
[  203.071718][ T5368] Disabling lock debugging due to kernel taint
[  203.085133][ T5368] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  203.092371][ T5368] CPU: 0 PID: 5368 Comm: syz.2.283 Tainted: G    B             syzkaller #0
[  203.101086][ T5368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  203.111162][ T5368] Call Trace:
[  203.114462][ T5368]  <TASK>
[  203.117417][ T5368]  dump_stack_lvl+0x188/0x250
[  203.122125][ T5368]  ? show_regs_print_info+0x20/0x20
[  203.127355][ T5368]  ? load_image+0x400/0x400
[  203.131987][ T5368]  panic+0x2e5/0x810
[  203.135910][ T5368]  ? bpf_jit_dump+0xd0/0xd0
[  203.140436][ T5368]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  203.146099][ T5368]  ? check_panic_on_warn+0x6c/0xa0
[  203.151258][ T5368]  ? dvb_device_open+0xc6/0x370
[  203.156181][ T5368]  check_panic_on_warn+0x80/0xa0
[  203.161161][ T5368]  ? dvb_device_open+0xc6/0x370
[  203.166043][ T5368]  end_report+0x6d/0xf0
[  203.170225][ T5368]  kasan_report+0x102/0x130
[  203.174762][ T5368]  ? dvb_device_open+0xc6/0x370
[  203.179641][ T5368]  dvb_device_open+0xc6/0x370
[  203.184351][ T5368]  ? do_raw_spin_unlock+0x11d/0x230
[  203.189588][ T5368]  chrdev_open+0x5c5/0x6a0
[  203.194057][ T5368]  ? cd_forget+0x160/0x160
[  203.198516][ T5368]  ? fsnotify_perm+0x3a7/0x560
[  203.203305][ T5368]  ? cd_forget+0x160/0x160
[  203.207751][ T5368]  do_dentry_open+0x7ff/0xf80
[  203.212549][ T5368]  path_openat+0x26f5/0x2fa0
[  203.217179][ T5368]  ? do_filp_open+0x410/0x410
[  203.221892][ T5368]  do_filp_open+0x1e2/0x410
[  203.226421][ T5368]  ? vfs_tmpfile+0x300/0x300
[  203.231043][ T5368]  ? _raw_spin_unlock+0x24/0x40
[  203.235915][ T5368]  ? alloc_fd+0x598/0x630
[  203.240273][ T5368]  do_sys_openat2+0x150/0x4b0
[  203.244972][ T5368]  ? __lock_acquire+0x7d10/0x7d10
[  203.250028][ T5368]  ? do_sys_open+0xe0/0xe0
[  203.254467][ T5368]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  203.260511][ T5368]  ? lock_chain_count+0x20/0x20
[  203.265388][ T5368]  ? vtime_user_exit+0x2c8/0x3e0
[  203.270358][ T5368]  __x64_sys_openat+0x135/0x160
[  203.275236][ T5368]  do_syscall_64+0x4c/0xa0
[  203.279678][ T5368]  ? clear_bhb_loop+0x30/0x80
[  203.284378][ T5368]  ? clear_bhb_loop+0x30/0x80
[  203.289079][ T5368]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  203.294996][ T5368] RIP: 0033:0x7fbb6cc3568e
[  203.299423][ T5368] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  203.319061][ T5368] RSP: 002b:00007fbb6aeacb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  203.327501][ T5368] RAX: ffffffffffffffda RBX: 00007fbb6aead6c0 RCX: 00007fbb6cc3568e
[  203.335493][ T5368] RDX: 0000000000000002 RSI: 00007fbb6aeacc00 RDI: ffffffffffffff9c
[  203.343482][ T5368] RBP: 00007fbb6aeacc00 R08: 0000000000000000 R09: 0000000000000000
[  203.351467][ T5368] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  203.359457][ T5368] R13: 00007fbb6ceee128 R14: 00007fbb6ceee090 R15: 00007ffd6c6bb538
[  203.367446][ T5368]  </TASK>
[  203.370769][ T5368] Kernel Offset: disabled
[  203.375132][ T5368] Rebooting in 86400 seconds..