last executing test programs:

4m48.108456123s ago: executing program 0 (id=56):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
listen(0xffffffffffffffff, 0x3)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000001fc0)=""/184, 0x20002078)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)

4m45.981108038s ago: executing program 0 (id=60):
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
open(0x0, 0x145142, 0x20)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0xc, 0x1, &(0x7f00000001c0)="87", 0x9, 0x1, 0x16c0, 0x5df, 0x8b, 0x0, 0x4, 'syz0\x00'})

4m45.801670692s ago: executing program 0 (id=61):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/11], 0x48)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0)

4m45.635977614s ago: executing program 0 (id=62):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'})
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
shutdown(r4, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

4m41.703910339s ago: executing program 0 (id=73):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="98000095", @ANYRES16=0x0, @ANYBLOB="10002dbd7000ffdbdf2505000000840002800400040024000380080002000400000008000200070000000800010000"], 0x98}, 0x1, 0x0, 0x0, 0x40}, 0x10)
ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0))
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4138ae84, &(0x7f0000000080)=@x86={0x6, 0xa, 0x7, 0x0, 0x3, 0x8d, 0xce, 0x1c, 0x89, 0xa0, 0x7, 0x8, 0x0, 0xe56, 0xb, 0x2, 0x8, 0x2, 0x1, '\x00', 0x9, 0x3ff})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0)
mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00<r\xe9\x9cD\x90\xce\xe1\xc5\x85=\\!\xbbQ\xde\xc3\xe3\x7f\xcf\x1f\x17G\xa6\x13\xae\x92 \x1c\xbf\xfa\xe8e\x8cD\"\xa3w')
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000084ffffffff000000000200000006000000000000000000000903000000000000000000000602"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a30000000001400078005"], 0x5c}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000400000000000000001000084080000000000000001"], 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)={0x6, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r7, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0)

4m36.327241319s ago: executing program 0 (id=89):
r0 = socket(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000100)={0x4, 0x0, 0xd000, 0x1000, &(0x7f0000ffc000/0x1000)=nil})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0))
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x0, 0x18c, 0x203, 0x8000000, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0)
write(r0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0)

4m21.25978322s ago: executing program 32 (id=89):
r0 = socket(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000100)={0x4, 0x0, 0xd000, 0x1000, &(0x7f0000ffc000/0x1000)=nil})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0))
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x0, 0x18c, 0x203, 0x8000000, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0)
write(r0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0)

4m21.125840362s ago: executing program 3 (id=136):
r0 = gettid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
tgkill(r0, r2, 0x1e)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x747, 0x0, 0x3}, 0xc)
connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
sendmsg$inet(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)}, 0x4040004)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0005}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000000400)={0x0, 0x0})
r6 = open(&(0x7f0000000480)='./bus\x00', 0x1c927e, 0x1e)
fallocate(r6, 0x0, 0x10000, 0x80000000)
r7 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, 0x0, 0x0)

4m19.596910898s ago: executing program 3 (id=138):
mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1004000, 0x0)
open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x8100)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002c00010026bd70f7fbdbdf250400002804001d00"], 0x18}, 0x1, 0x0, 0x0, 0x404400c}, 0x40010)
socket$igmp6(0xa, 0x3, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000", @ANYBLOB="6197cf2d0ba620d3ee76f009341d3596ea82937abfe40bfedd13e8ff05787ca9ef15fae6ad8d44098c685cc5a1d1e3c93b125e869b3d14f1bec0be6edb7f7d4cfd9c7ffca5f1396a9eb58dfb669c2221698062bc4f3c679b652d1a70b1341583bc7fbb9051dd16929ff8f2fe2525a40f512850f440066876044dbed33645d5a78c2abc339c632335f24338a66e9de6c5e4671c7772bfbcb66e196db62dadfc645280f8bd073a41ac61f6"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x80000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xf}, 0x1c)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xe)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000000300)=0x1)
ioctl$PPPIOCSFLAGS1(r6, 0x40047459, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)

4m17.214399337s ago: executing program 3 (id=145):
r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x2a382)
r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5', 0x1)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r0, 0x0, 0x24002de8)
ioctl$LOOP_CLR_FD(r0, 0x4c01)

4m16.633156997s ago: executing program 3 (id=150):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0xe, &(0x7f0000000140)={[{@test_dummy_encryption}, {@test_dummy_encryption}, {@noauto_da_alloc}, {@minixdf}, {@errors_remount}, {@quota}]}, 0x3, 0x455, &(0x7f0000000f00)="$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")
mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000300)=ANY=[], 0x8, 0x2eb, &(0x7f00000004c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x4a}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
getresuid(0x0, 0x0, 0x0)
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)
r4 = socket$inet(0x2, 0x3, 0x100)
setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000500)=0x8, 0x4)
bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x3c)

4m14.478467472s ago: executing program 3 (id=155):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0})
set_robust_list(&(0x7f0000000500), 0x18)
syz_usb_connect(0x1, 0xfffffffffffffd22, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xc)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x2, 0x11, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7ff}, {}, {}, [@cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffa}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x1, 0x41, &(0x7f00000005c0)=""/65, 0x41000, 0x44, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x2, 0x0, 0x10, 0x60}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000780), 0x10, 0xfff, @void, @value}, 0x94)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e40)={0x1, 0x0, [{0x0, 0xf3, &(0x7f00000008c0)=""/243}]})
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf, @void, @value}, 0x94)
unshare(0x64000600)
syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x200000)
socket$unix(0x1, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$ppp(0xffffff9c, &(0x7f0000000100), 0x200, 0x0)
socket$key(0xf, 0x3, 0x2)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x4e0, &(0x7f00000006c0)={0x0, 0x3c4b, 0x4, 0x0, 0xfffffffc}, &(0x7f0000000180), &(0x7f0000000780))
socketpair$unix(0x1, 0x2, 0x0, 0x0)

4m12.452169787s ago: executing program 3 (id=162):
socket(0x1d, 0x1, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39, @void, @value}, 0x94)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1)
mount$nfs4(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6673633d8f"])
setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4)
sendto$inet(r1, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0)
unshare(0x40020000)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20)
inotify_init1(0x0)
io_submit(0x0, 0x0, 0x0)

4m0.226249311s ago: executing program 5 (id=132):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getrlimit(0xc, &(0x7f0000000300))
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4621, 0x0, @local}, 0x1c)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20000840)

3m57.333146109s ago: executing program 33 (id=162):
socket(0x1d, 0x1, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39, @void, @value}, 0x94)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1)
mount$nfs4(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6673633d8f"])
setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4)
sendto$inet(r1, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0)
unshare(0x40020000)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20)
inotify_init1(0x0)
io_submit(0x0, 0x0, 0x0)

3m55.367235732s ago: executing program 5 (id=190):
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x200)
shmget$private(0x0, 0x3000, 0x78000422, &(0x7f0000002000/0x3000)=nil)
openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000080), 0x45ffffa, 0x281)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001100)={r0, 0x0, {0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333791f045158d97405000000000000040000000100", [0xfffffffffeff7ffc]}})
ioctl$BTRFS_IOC_SPACE_INFO(r1, 0x4c09, 0x0)
rename(0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
socket$rxrpc(0x21, 0x2, 0x2)
r4 = syz_io_uring_setup(0x6d8a, &(0x7f0000000300)={0x0, 0x37b2, 0x10100}, &(0x7f0000000180)=<r5=>0x0, &(0x7f00000001c0)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2})
io_uring_enter(r4, 0x2def, 0x4000, 0x0, 0x0, 0x0)
r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r8, 0x10e, 0x2, &(0x7f0000000300)=0xa, 0x4)
ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000080)=0xb0000)
userfaultfd(0x80801)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0xf, 0x0, 0x8, 0x5}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xf, 0x9, 0x8000000000000001, 0x4, 0x7fffffff}, 0x0, 0x0)
syz_usb_connect(0x6, 0x7a, 0x0, 0x0)
syz_open_dev$sndpcmc(0x0, 0x1, 0x280880)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121)

3m40.240073236s ago: executing program 34 (id=190):
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x200)
shmget$private(0x0, 0x3000, 0x78000422, &(0x7f0000002000/0x3000)=nil)
openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000080), 0x45ffffa, 0x281)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001100)={r0, 0x0, {0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333791f045158d97405000000000000040000000100", [0xfffffffffeff7ffc]}})
ioctl$BTRFS_IOC_SPACE_INFO(r1, 0x4c09, 0x0)
rename(0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
socket$rxrpc(0x21, 0x2, 0x2)
r4 = syz_io_uring_setup(0x6d8a, &(0x7f0000000300)={0x0, 0x37b2, 0x10100}, &(0x7f0000000180)=<r5=>0x0, &(0x7f00000001c0)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2})
io_uring_enter(r4, 0x2def, 0x4000, 0x0, 0x0, 0x0)
r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r8, 0x10e, 0x2, &(0x7f0000000300)=0xa, 0x4)
ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000080)=0xb0000)
userfaultfd(0x80801)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0xf, 0x0, 0x8, 0x5}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xf, 0x9, 0x8000000000000001, 0x4, 0x7fffffff}, 0x0, 0x0)
syz_usb_connect(0x6, 0x7a, 0x0, 0x0)
syz_open_dev$sndpcmc(0x0, 0x1, 0x280880)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121)

18.278018044s ago: executing program 7 (id=693):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='sys_enter\x00'}, 0x10)
pipe2(&(0x7f0000000000)={0x0, <r0=>0x0}, 0x0)
syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x50)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x9, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x40000000}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r6}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8, 0x0, 0x0, 0x40000000}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
close_range(r0, 0xffffffffffffffff, 0x0)

14.217077552s ago: executing program 1 (id=702):
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000000)
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
socket(0x10, 0x6, 0x0)
socket$packet(0x11, 0x3, 0x300)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)
umount2(&(0x7f0000000100)='./bus\x00', 0x8)
r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r4, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
renameat2(r4, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r4, &(0x7f00000001c0)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})

13.69071862s ago: executing program 7 (id=706):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]})
chdir(&(0x7f00000001c0)='./bus\x00')
utime(&(0x7f0000000000)='./file0\x00', 0x0)
rmdir(&(0x7f0000000380)='./file0/../file0\x00')

12.736621796s ago: executing program 7 (id=707):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'})
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
fsopen(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001840)=@newtaction={0xea8, 0x30, 0x25, 0x0, 0x0, {}, [{0xe94, 0x1, [@m_pedit={0xe90, 0x1, 0x0, 0x0, {{0xa}, {0xe64, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x3}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xdc79}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x6}, {}, {0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}, {}, {0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x100}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffe, 0x0, 0x0, 0x2}, {}, {}, {}, {0x2}, {0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}]}}, @TCA_PEDIT_KEYS_EX={0x40, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xea8}}, 0x0)

12.419246032s ago: executing program 2 (id=708):
connect(0xffffffffffffffff, &(0x7f0000000340)=@phonet={0x23, 0x9, 0xc3, 0x3}, 0x80)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4040841}, 0x8000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
setrlimit(0x1, &(0x7f0000000000)={0x140, 0xfffffffc})
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000440)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
recvmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1}}], 0x2, 0x60, 0x0)
tkill(0x0, 0xb)
mount$9p_virtio(0x0, 0x0, 0x0, 0x0, 0x0)
chdir(0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000100), 0xfffffd9d)
io_uring_setup(0x192, 0x0)
r6 = openat$drirender128(0xffffff9c, 0x0, 0x800, 0x0)
ioctl$DRM_IOCTL_VERSION(r6, 0xc0246400, &(0x7f00000002c0)={0x5, 0x6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r7 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10)

11.315813s ago: executing program 6 (id=709):
io_uring_setup(0x79bb, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, 0x0, 0x20040801)
recvmsg$unix(r0, &(0x7f0000000300)={&(0x7f00000006c0)=@abs, 0x6e, 0x0}, 0x41)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
openat$kvm(0xffffff9c, &(0x7f0000000080), 0x2000, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x18}}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x25, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)

9.435436612s ago: executing program 7 (id=710):
socket(0x1d, 0x1, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1)
mount$nfs4(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6673633d8f"])
setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4)
sendto$inet(r3, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0)
unshare(0x40020000)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20)
inotify_init1(0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x854bc19281c1f3ae)
io_submit(0x0, 0x0, 0x0)

9.338982474s ago: executing program 2 (id=711):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa1000000000000070100"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x23, &(0x7f0000000000), 0x0)
socket$inet6(0xa, 0x80002, 0x0)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, 0x0, 0x10)
ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000100)=0xcf5)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20)

8.204408422s ago: executing program 2 (id=712):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb7, &(0x7f0000000140)=""/183, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x34)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
r3 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382)
r4 = memfd_create(&(0x7f0000000ac0)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\xccEi\xfb\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee<\x8bw\xdd^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\x89>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3\x00\x00\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\xefo\xb8\x8f]\x14\x1d', 0x4)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000f40)=@filter={'filter\x00', 0x4, 0x4, 0x3cc, 0xffffffff, 0x0, 0x0, 0xe4, 0xfeffffff, 0xffffffff, 0x390, 0x390, 0x390, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x2f2, 0xa4, 0xe4}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x4}}}, {{@ipv6={@private2, @empty, [], [], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xec, 0x12c, 0x0, {}, [@common=@dst={{0x48}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x57, {0x2000000}}}}, {{@ipv6={@empty, @mcast1, [], [], 'ip6tnl0\x00', 'dvmrp0\x00'}, 0x0, 0xd0, 0xf4, 0x0, {}, [@common=@unspec=@realm={{0x2c}, {0x1, 0xdd8}}]}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x428)
r6 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000000c0)=0x3)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x0, 0x1, 0xd59f80, 0x19ef, 0x7, 0x19ef, 0x3, 0x6, 0x27ff, 0x2800, 0x2, 0xbb6, 0x2, 0x8, {0x8, 0xffffffff}, 0xd0, 0x9}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfd, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x0, 0x0, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()

6.998049903s ago: executing program 2 (id=713):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'})
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)

6.917542234s ago: executing program 4 (id=714):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x44080)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000000)=0x1ac, 0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x4, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x1, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0xfffffd42, 0x1, {{0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = syz_open_dev$vim2m(&(0x7f0000000280), 0x7fff, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x38, 0x6, 0x3, "000000010034b52ba75066c27891ca55e21f0000000000e7ffffff000200", 0x30323950})
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000080)=0x7f)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e22, 0xdc05, @private0}]}, &(0x7f0000000000)=0xc)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)

6.006161469s ago: executing program 1 (id=715):
getpid()
openat$binfmt_register(0xffffff9c, &(0x7f00000005c0), 0x1, 0x0)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RGETLOCK(r1, &(0x7f0000000040)=ANY=[], 0xffffff6a)
fcntl$setstatus(r1, 0x4, 0x2000)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x58000000, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0x181900, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0xe)
ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246)
close_range(r0, 0xffffffffffffffff, 0x0)

5.98608634s ago: executing program 2 (id=716):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='sys_enter\x00'}, 0x10)
pipe2(&(0x7f0000000000)={0x0, <r0=>0x0}, 0x0)
syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x50)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x9, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x40000000}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r6}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8, 0x0, 0x0, 0x40000000}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
close_range(r0, 0xffffffffffffffff, 0x0)

5.753527543s ago: executing program 6 (id=717):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]})
chdir(&(0x7f00000001c0)='./bus\x00')
utime(&(0x7f0000000000)='./file0\x00', 0x0)
rmdir(&(0x7f0000000380)='./file0/../file0\x00')

5.578881947s ago: executing program 4 (id=718):
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0)
syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="04140608c800"], 0x9)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
syz_open_dev$video(&(0x7f00000001c0), 0x6fa4d7f1, 0x4400)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
io_setup(0x8, &(0x7f0000000600))
mkdir(&(0x7f0000000300)='./bus\x00', 0x9)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@index_off}]})
mknodat$loop(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0xc000, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
linkat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0)
r2 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0xf, &(0x7f00000002c0), 0x4)
sendmsg$inet(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x44, &(0x7f0000000640), 0x4)
socket$nl_route(0x10, 0x3, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
write$char_usb(r0, 0x0, 0x0)
close(r0)

5.492620607s ago: executing program 1 (id=719):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
listen(0xffffffffffffffff, 0x3)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r3, &(0x7f0000001fc0)=""/184, 0x20002078)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)

4.79517693s ago: executing program 6 (id=720):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x4080, 0x0)
ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000001580))

4.248065409s ago: executing program 6 (id=721):
connect(0xffffffffffffffff, &(0x7f0000000340)=@phonet={0x23, 0x9, 0xc3, 0x3}, 0x80)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4040841}, 0x8000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
setrlimit(0x1, &(0x7f0000000000)={0x140, 0xfffffffc})
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000440)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58)
recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1}}], 0x2, 0x60, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
tkill(0x0, 0xb)
mount$9p_virtio(0x0, 0x0, 0x0, 0x0, 0x0)
chdir(0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000100), 0xfffffd9d)
io_uring_setup(0x192, 0x0)
r5 = openat$drirender128(0xffffff9c, 0x0, 0x800, 0x0)
ioctl$DRM_IOCTL_VERSION(r5, 0xc0246400, &(0x7f00000002c0)={0x5, 0x6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10)

4.199919779s ago: executing program 1 (id=722):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x23, &(0x7f0000000000), 0x0)
socket$inet6(0xa, 0x80002, 0x0)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, 0x0, 0x10)
ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000100)=0xcf5)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20)

4.178176699s ago: executing program 7 (id=723):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000020}, 0x0)

2.204051543s ago: executing program 1 (id=724):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'dh\x00', 0x1d, 0x1000, 0x4a}, 0x2c)
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x3, 0x300)
syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x1, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0xf11, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1b, 0x1f}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x58}}, 0x0)

2.203625473s ago: executing program 4 (id=725):
pipe(&(0x7f0000005880)={<r0=>0xffffffffffffffff})
syz_emit_ethernet(0x6e, &(0x7f0000000440)={@multicast, @random="fd137b07daa7", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @private}, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x2f, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}, [], "8d0022eb00000000"}}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3b, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000005640)=0x1, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xf, 0x4, &(0x7f0000001300)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x1, 0x6}, 0x1c)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
lremovexattr(0x0, &(0x7f0000000080)=@known='system.advise\x00')
setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x310)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f0000000040)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108)
clock_gettime(0x0, &(0x7f00000002c0))
syz_emit_ethernet(0x0, 0x0, 0x0)
r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r3)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0xe41, 0x0)
mount(&(0x7f0000000000), &(0x7f0000000280)='./cgroup\x00', 0x0, 0x75809, 0x0)
mount(0x0, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x21a8f5, 0x0)

2.165307813s ago: executing program 6 (id=726):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'})
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)

1.79341939s ago: executing program 7 (id=727):
io_uring_setup(0x79bb, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, 0x0, 0x20040801)
recvmsg$unix(r0, &(0x7f0000000300)={&(0x7f00000006c0)=@abs, 0x6e, 0x0}, 0x41)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
openat$kvm(0xffffff9c, &(0x7f0000000080), 0x2000, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x18}}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x25, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)

1.543311443s ago: executing program 4 (id=728):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x44080)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000000)=0x1ac, 0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x4, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x1, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0xfffffd42, 0x1, {{0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = syz_open_dev$vim2m(&(0x7f0000000280), 0x7fff, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x38, 0x6, 0x3, "000000010034b52ba75066c27891ca55e21f0000000000e7ffffff000200", 0x30323950})
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000080)=0x7f)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e22, 0xdc05, @private0}]}, &(0x7f0000000000)=0xc)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)

1.118567021s ago: executing program 6 (id=729):
syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2002)
fsopen(&(0x7f0000000200)='tracefs\x00', 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x38fe, &(0x7f0000000300)={0x0, 0x84e8, 0x10100}, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0})
io_uring_enter(r2, 0x2dec, 0x3ffe, 0x6, 0x0, 0x0)
userfaultfd(0x80801)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
r5 = socket$netlink(0x10, 0x3, 0x14)
r6 = socket$kcm(0x10, 0x2, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r7 = io_uring_setup(0x345c, &(0x7f0000000480)={0x0, 0x7b54, 0x4, 0xffffffff, 0x250})
io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r7, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20)
sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
socket$packet(0x11, 0x2, 0x300)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800008846b84d00dfffffff", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0x3100, 0x11, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000000314010000010000000000000900020073797a3100000000080041007278650014003300626f6e645f736c6176655f3100"], 0x38}}, 0x0)

1.082906661s ago: executing program 4 (id=730):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]})
chdir(&(0x7f00000001c0)='./bus\x00')
utime(&(0x7f0000000000)='./file0\x00', 0x0)
rmdir(&(0x7f0000000380)='./file0/../file0\x00')

859.663745ms ago: executing program 1 (id=731):
r0 = syz_open_dev$swradio(&(0x7f0000000f80), 0x1, 0x2)
read(r0, &(0x7f0000000fc0)=""/4, 0x4)
socket$netlink(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x800000}, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000140))
syz_io_uring_submit(r4, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000300)="b8e863ffa5aeb6a7", 0x8}, {&(0x7f00000007c0)="165095b78d0660eb23df3db9f440235d75310aa64da0e8a2cc84d52c4aa22b04df3a328fa62f65139360869982510d6b55595b7f9d6b2332e0a68874a771a82ebcd651b59263748f4e452ead5af901d8baa9f6f634c1a835da5fadc95f7fdc405deaa64070e806726d92f87707f89d4d2edbfb2a3ab5e296aa107f18520b757d18ab1ef7a86ee509596867303b137603a1e37158623a2278bfaac18e63a05393387186f000cc91c555ae0cb246070cb89fb07d31e678caaf6dbfb6ee296b029c8394b58769b2f779d40e86bf65df80631d00c854484616cc10511398a29c8c1d0000af0aec088cd62527d54dedfc6ec41d5b098c4f1028832c5952d310bab4fb46e611e04181e9076a61bde9d1cb30cb0ba8a191e31b827441ed0cbcbfdc7f2169848e4e826d60dd21d081e7dbc2dc7c29c042f23b0a7026543c25e31898ec896d96786881638e872c", 0x149}], 0x2, &(0x7f00000021c0)=ANY=[@ANYBLOB="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"], 0x114c}, 0x0, 0x8841})
io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
openat$udambuf(0xffffffffffffff9c, 0x0, 0x2)
memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3)
io_submit(0x0, 0x0, 0x0)
syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
sendmsg$key(0xffffffffffffffff, 0x0, 0x18)
r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_open_dev$MSR(&(0x7f0000000240), 0xb, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r7, 0x8914, &(0x7f0000000000))
ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000280)={0x1, @bcast, @bpq0, 0xfff4, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3ff, 0x2, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]})
accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0xffffffffffffffd1, 0x800)
r8 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb)
bind$ax25(r8, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
connect$ax25(r8, &(0x7f00000001c0)={{0x3, @default, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48)
ioctl$sock_ifreq(0xffffffffffffffff, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'})
openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0xa2602, 0x0)

808.633666ms ago: executing program 2 (id=732):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
listen(0xffffffffffffffff, 0x3)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r3, &(0x7f0000001fc0)=""/184, 0x20002078)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)

0s ago: executing program 4 (id=733):
r0 = syz_open_procfs(0x0, &(0x7f0000002100)='limits\x00')
read$FUSE(r0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

 66.650416][ T4178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   66.689093][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   66.699033][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   66.716198][ T4175] device veth0_macvtap entered promiscuous mode
[   66.737067][ T4167] device veth0_vlan entered promiscuous mode
[   66.746053][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   66.757546][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   66.766769][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   66.774993][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   66.784878][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   66.793476][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   66.802926][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   66.811522][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   66.819480][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   66.837764][ T4175] device veth1_macvtap entered promiscuous mode
[   66.850507][ T4172] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.879620][ T4167] device veth1_vlan entered promiscuous mode
[   66.896039][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   66.905702][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   66.915169][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   66.923400][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   66.939040][ T4175] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.956763][ T4168] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.965287][  T480] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   66.979715][  T480] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   66.989619][  T480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   67.016809][ T4175] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.049207][ T4167] device veth0_macvtap entered promiscuous mode
[   67.059413][  T480] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   67.075868][  T480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   67.086026][  T480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   67.096281][  T480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   67.105284][  T480] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   67.123519][ T4175] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.133149][ T4175] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.143527][ T4175] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.152352][ T4175] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.184500][ T4167] device veth1_macvtap entered promiscuous mode
[   67.205131][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   67.217265][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   67.229982][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   67.267515][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   67.279057][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   67.293797][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.307243][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.319660][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.332999][ T4172] device veth0_vlan entered promiscuous mode
[   67.357468][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   67.366166][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   67.375343][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   67.387489][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   67.396973][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   67.404936][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   67.415868][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.426914][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.438665][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.450492][ T4167] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.459235][ T4167] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.469143][ T4167] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.478258][ T4167] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.500721][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   67.514780][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   67.526557][ T4172] device veth1_vlan entered promiscuous mode
[   67.537736][ T4178] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.629009][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   67.641808][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   67.662413][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.671582][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.699002][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   67.708667][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   67.717938][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   67.727522][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   67.736017][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   67.774609][  T480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   67.783716][  T480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   67.797210][  T480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   67.806432][  T480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   67.816766][ T4172] device veth0_macvtap entered promiscuous mode
[   67.829997][ T4168] device veth0_vlan entered promiscuous mode
[   67.850805][  T480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.859018][  T480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.893961][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   67.904145][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   67.922020][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.930075][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.937851][ T4168] device veth1_vlan entered promiscuous mode
[   67.947688][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.953089][ T4172] device veth1_macvtap entered promiscuous mode
[   67.956984][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.969986][ T4178] device veth0_vlan entered promiscuous mode
[   67.984979][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   67.993797][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   68.003173][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   68.011212][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   68.019066][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   68.027124][ T4212] Bluetooth: hci1: command 0x040f tx timeout
[   68.028223][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   68.033847][ T4212] Bluetooth: hci0: command 0x040f tx timeout
[   68.048029][ T4214] Bluetooth: hci2: command 0x040f tx timeout
[   68.054382][ T4214] Bluetooth: hci3: command 0x040f tx timeout
[   68.057681][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   68.069043][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   68.110731][ T1107] Bluetooth: hci4: command 0x040f tx timeout
[   68.121682][ T4178] device veth1_vlan entered promiscuous mode
[   68.147971][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.159948][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.170915][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.184838][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.197299][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.216952][ T4168] device veth0_macvtap entered promiscuous mode
[   68.240620][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   68.253942][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   68.263716][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   68.274174][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   68.283434][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   68.293412][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   68.302939][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   68.311909][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   68.323939][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.335008][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.345189][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.358313][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.369699][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.384502][ T4168] device veth1_macvtap entered promiscuous mode
[   68.399568][  T480] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   68.416889][  T480] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   68.468062][  T480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   68.489506][  T480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   68.523190][  T480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   68.543933][ T4172] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.559713][ T4172] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.570837][ T4172] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.579574][ T4172] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.620146][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!!
[   68.629344][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!!
[   68.638684][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!!
[   68.650324][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!!
[   68.686476][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!!
[   68.708954][ T4178] device veth0_macvtap entered promiscuous mode
[   68.744611][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.350964][ T4212] Bluetooth: hci3: command 0x0419 tx timeout
[   70.357169][ T4212] Bluetooth: hci2: command 0x0419 tx timeout
[   70.367524][ T4212] Bluetooth: hci0: command 0x0419 tx timeout
[   70.373871][ T4212] Bluetooth: hci1: command 0x0419 tx timeout
[   70.379982][ T4212] Bluetooth: hci4: command 0x0419 tx timeout
[   70.390034][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.409655][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.426779][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.443859][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.462819][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.479789][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.508339][ T4178] device veth1_macvtap entered promiscuous mode
[   70.559278][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   70.559977][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   70.560710][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   70.575850][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.575908][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.575916][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.575927][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.575935][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.575945][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.576984][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.579657][ T4168] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.579713][ T4168] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.579735][ T4168] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.579757][ T4168] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.586132][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   70.586601][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   70.662162][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.662190][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.662202][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.662218][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.662230][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.662245][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.662256][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.662271][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.663811][ T4178] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.684494][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   70.685209][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   70.720553][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.720577][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.720588][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.720602][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.720613][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.720628][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.720639][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.720653][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.721925][ T4178] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.778380][ T4178] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.778420][ T4178] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.778451][ T4178] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.778481][ T4178] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.782639][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   70.783414][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   70.929771][ T3025] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.929827][ T3025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.946253][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.946307][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.952397][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   70.953144][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   71.056298][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.056357][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.057695][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   71.504990][ T1428] ieee802154 phy0 wpan0: encryption failed: -22
[   71.512135][ T1428] ieee802154 phy1 wpan1: encryption failed: -22
[   71.547092][ T4252] libceph: resolve '
[   71.547092][ T4252] -&���f�Y�ǝ�a���2i�
[   71.547092][ T4252] .���?��&�*��&' (ret=-3): failed
[   71.604435][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.618609][  T480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.649723][  T480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.658710][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.686720][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   71.705277][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   71.754821][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.797753][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.809292][ T4260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7'.
[   71.827288][ T4260] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   71.928032][ T4260] batman_adv: batadv0: Removing interface: batadv_slave_1
[   71.972564][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   72.214815][ T4264] 9pnet: Insufficient options for proto=fd
[   72.280242][ T4182] Bluetooth: hci1: unexpected event for opcode 0x2003
[   72.474160][ T4271] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   72.628757][ T4273] process 'syz.2.3' launched '/dev/fd/9' with NULL argv: empty string added
[   72.659137][   T21] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   73.030994][ T4275] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9'.
[   73.120894][   T21] usb 1-1: Using ep0 maxpacket: 32
[   73.406011][   T21] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[   74.460328][ T4287] =======================================================
[   74.460328][ T4287] WARNING: The mand mount option has been deprecated and
[   74.460328][ T4287]          and is ignored by this kernel. Remove the mand
[   74.460328][ T4287]          option from the mount to silence this warning.
[   74.460328][ T4287] =======================================================
[   74.495340][    C1] vkms_vblank_simulate: vblank timer overrun
[   75.158373][ T4285] sched: RT throttling activated
[   75.544532][ T4287] lo speed is unknown, defaulting to 1000
[   75.554296][ T4287] lo speed is unknown, defaulting to 1000
[   75.561564][ T4287] lo speed is unknown, defaulting to 1000
[   75.650227][ T4287] infiniband s
z1: set active
[   75.655372][ T4287] infiniband s
z1: added lo
[   75.669850][ T4215] lo speed is unknown, defaulting to 1000
[   75.680349][   T21] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[   75.701079][   T21] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[   75.714658][   T21] usb 1-1: Product: syz
[   75.721435][   T21] usb 1-1: Manufacturer: syz
[   75.763398][ T4287] RDS/IB: s
z1: added
[   75.768028][ T4287] smc: adding ib device s
z1 with port count 1
[   75.774533][ T4287] smc:    ib device s
z1 port 1 has pnetid 
[   75.784096][ T4287] lo speed is unknown, defaulting to 1000
[   75.900291][ T4287] lo speed is unknown, defaulting to 1000
[   75.971890][ T1107] lo speed is unknown, defaulting to 1000
[   76.018190][ T4287] lo speed is unknown, defaulting to 1000
[   76.108552][ T4287] lo speed is unknown, defaulting to 1000
[   76.197753][ T4287] lo speed is unknown, defaulting to 1000
[   76.365196][   T21] usb 1-1: config 0 descriptor??
[   76.390718][   T21] usb 1-1: can't set config #0, error -71
[   76.552881][   T21] usb 1-1: USB disconnect, device number 2
[   76.870130][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #12!!!
[   76.879299][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #112!!!
[   76.888420][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #112!!!
[   76.897510][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #192!!!
[   76.906586][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #192!!!
[   77.714334][ T4311] Zero length message leads to an empty skb
[   79.948998][ T4318] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18'.
[   80.017718][ T4318] HTB: quantum of class 80010007 is big. Consider r2q change.
[   82.900203][ T4358] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   82.912440][ T4358] overlayfs: "xino" feature enabled using 2 upper inode bits.
[   85.740659][ T4365] xt_CT: You must specify a L4 protocol and not use inversions on it
[   86.459264][ T4374] netlink: 4 bytes leftover after parsing attributes in process `syz.1.33'.
[   86.823255][ T1324] cfg80211: failed to load regulatory.db
[   86.872045][   T26] audit: type=1326 audit(1744954590.057:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4375 comm="syz.4.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4e04ac169 code=0x7ffc0000
[   87.352240][ T4374] team0 (unregistering): Port device team_slave_0 removed
[   87.369888][   T26] audit: type=1326 audit(1744954590.057:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4375 comm="syz.4.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4e04ac169 code=0x7ffc0000
[   87.537824][ T4382] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   87.549018][ T4382] overlayfs: "xino" feature enabled using 2 upper inode bits.
[   87.569562][ T4374] team0 (unregistering): Port device team_slave_1 removed
[   87.999160][ T4386] netlink: 12 bytes leftover after parsing attributes in process `syz.1.38'.
[   88.215171][ T4373] infiniband syz1: set active
[   88.255810][ T4373] infiniband syz1: added bond_slave_1
[   88.317817][ T4373] infiniband syz1: Couldn't open port 1
[   88.559220][ T4373] RDS/IB: syz1: added
[   89.976070][ T4373] smc: adding ib device syz1 with port count 1
[   90.006882][ T4373] smc:    ib device syz1 port 1 has pnetid 
[   90.078032][ T4395] overlayfs: failed to resolve './file0': -2
[   90.250280][   T21] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[   90.610286][   T21] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[   90.631247][   T21] usb 5-1: config 0 has no interface number 0
[   90.651550][   T21] usb 5-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping
[   90.688299][   T21] usb 5-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping
[   90.734163][   T21] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[   90.734915][ T4409] loop1: detected capacity change from 0 to 512
[   90.749689][   T21] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[   90.773704][   T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.794308][   T21] usb 5-1: config 0 descriptor??
[   90.822033][ T4400] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   90.843243][   T21] ldusb 5-1:0.55: Interrupt in endpoint not found
[   91.810247][ T4413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.42'.
[   93.168855][ T4409] EXT4-fs (loop1): Test dummy encryption mode enabled
[   93.189085][ T4409] EXT4-fs (loop1): Test dummy encryption mode enabled
[   93.220945][ T4409] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   93.297419][ T4409] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   93.390959][ T4409] EXT4-fs (loop1): 1 truncate cleaned up
[   93.446709][ T4409] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,test_dummy_encryption,noauto_da_alloc,minixdf,errors=remount-ro,quota,. Quota mode: writeback.
[   94.175458][ T4212] usb 5-1: USB disconnect, device number 2
[   94.521422][ T4431] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   94.532513][ T4431] overlayfs: "xino" feature enabled using 2 upper inode bits.
[   97.831858][ T4456] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   97.889434][ T4466] lo speed is unknown, defaulting to 1000
[   97.896803][ T4456] overlayfs: "xino" feature enabled using 2 upper inode bits.
[   98.179408][   T21] hid-generic 0005:16C0:05DF.0001: item fetching failed at offset 0/1
[   98.200027][   T21] hid-generic: probe of 0005:16C0:05DF.0001 failed with error -22
[   99.322463][ T4481] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   99.334687][ T4481] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  101.779582][ T4507] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  101.790833][ T4507] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  102.837504][ T4516] overlayfs: missing 'lowerdir'
[  107.127283][ T4532] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  107.138673][ T4532] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  107.214798][ T4553] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  107.280250][ T4553] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  107.426878][ T4555] lo speed is unknown, defaulting to 1000
[  107.848683][ T4565] netlink: 4 bytes leftover after parsing attributes in process `syz.4.88'.
[  110.540496][ T4592] 9pnet: Insufficient options for proto=fd
[  112.134760][ T4607] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  112.146629][ T4607] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  113.929432][ T4622] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  113.941028][ T4622] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  114.144719][ T4626] 9pnet: Insufficient options for proto=fd
[  116.114240][ T4640] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  116.125460][ T4640] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  117.279468][ T4660] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  117.290658][ T4660] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  117.688102][ T4668] 9pnet: Insufficient options for proto=fd
[  118.433913][ T4679] x_tables: duplicate underflow at hook 1
[  119.532853][ T4687] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  119.544024][ T4687] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  119.559204][ T4689] netlink: 48 bytes leftover after parsing attributes in process `syz.3.121'.
[  120.326096][ T4694] netlink: 12 bytes leftover after parsing attributes in process `syz.1.126'.
[  120.368889][ T4694] netlink: 12 bytes leftover after parsing attributes in process `syz.1.126'.
[  120.750053][ T4698] input: syz0 as /devices/virtual/input/input5
[  121.729937][ T4690] libceph: resolve '
[  121.729937][ T4690] -&���f�Y�ǝ�a���2i�
[  121.729937][ T4690] .���?��&�*��&' (ret=-3): failed
[  122.101227][   T26] audit: type=1326 audit(1744954625.287:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4702 comm="syz.1.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4eda61169 code=0x7ffc0000
[  122.285583][   T26] audit: type=1326 audit(1744954625.287:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4702 comm="syz.1.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4eda61169 code=0x7ffc0000
[  124.427999][ T4724] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  124.439139][ T4724] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  125.142401][ T4735] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  125.153533][ T4735] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  125.390406][ T4733] lo speed is unknown, defaulting to 1000
[  126.698103][ T4744] device netdevsim0 entered promiscuous mode
[  126.875892][ T4744] netlink: 16 bytes leftover after parsing attributes in process `syz.2.142'.
[  127.196576][ T4755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.147'.
[  127.220455][ T4254] Bluetooth: hci5: command 0x0409 tx timeout
[  128.402928][ T4769] loop3: detected capacity change from 0 to 512
[  128.477172][ T4772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.152'.
[  128.542737][ T4769] EXT4-fs (loop3): Test dummy encryption mode enabled
[  128.549709][ T4769] EXT4-fs (loop3): Test dummy encryption mode enabled
[  128.653953][ T4733] chnl_net:caif_netlink_parms(): no params data found
[  128.662659][ T4769] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  128.800964][ T4769] EXT4-fs (loop3): 1 truncate cleaned up
[  128.806694][ T4769] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,test_dummy_encryption,noauto_da_alloc,minixdf,errors=remount-ro,quota,. Quota mode: writeback.
[  129.570258][ T4211] Bluetooth: hci5: command 0x041b tx timeout
[  129.787396][ T4788] lo speed is unknown, defaulting to 1000
[  129.788118][ T4733] bridge0: port 1(bridge_slave_0) entered blocking state
[  129.911243][ T4733] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.961182][ T4733] device bridge_slave_0 entered promiscuous mode
[  130.003447][ T4733] bridge0: port 2(bridge_slave_1) entered blocking state
[  130.258099][ T4733] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.302224][ T4733] device bridge_slave_1 entered promiscuous mode
[  130.539031][ T4733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  130.654717][ T4733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  130.801268][ T4779] libceph: resolve '
[  130.801268][ T4779] -&���f�Y�ǝ�a���2i�
[  130.801268][ T4779] .���?��&�*��&' (ret=-3): failed
[  130.829327][ T4733] team0: Port device team_slave_0 added
[  130.875677][ T4733] team0: Port device team_slave_1 added
[  131.009478][ T4733] batman_adv: batadv0: Adding interface: batadv_slave_0
[  131.044478][ T4733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  131.194802][ T4733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  131.232308][ T4733] batman_adv: batadv0: Adding interface: batadv_slave_1
[  131.269862][ T4733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  131.376619][ T4733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  131.606071][   T26] audit: type=1326 audit(1744954634.787:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4805 comm="syz.1.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4eda61169 code=0x7ffc0000
[  131.633163][ T4158] Bluetooth: hci5: command 0x040f tx timeout
[  131.662044][ T4733] device hsr_slave_0 entered promiscuous mode
[  131.681450][ T4733] device hsr_slave_1 entered promiscuous mode
[  131.689839][ T4733] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  131.706986][ T4733] Cannot create hsr debugfs directory
[  131.713186][   T26] audit: type=1326 audit(1744954634.787:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4805 comm="syz.1.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4eda61169 code=0x7ffc0000
[  131.758302][   T26] audit: type=1326 audit(1744954634.917:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4805 comm="syz.1.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7ff4eda61169 code=0x7ffc0000
[  131.820251][   T26] audit: type=1326 audit(1744954634.917:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4805 comm="syz.1.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4eda61169 code=0x7ffc0000
[  131.915999][   T26] audit: type=1326 audit(1744954634.917:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4805 comm="syz.1.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4eda61169 code=0x7ffc0000
[  132.034107][   T26] audit: type=1326 audit(1744954634.917:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4805 comm="syz.1.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7ff4eda61169 code=0x7ffc0000
[  132.105723][   T26] audit: type=1326 audit(1744954634.917:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4805 comm="syz.1.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4eda61169 code=0x7ffc0000
[  132.185773][   T26] audit: type=1326 audit(1744954634.917:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4805 comm="syz.1.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4eda61169 code=0x7ffc0000
[  132.209863][   T26] audit: type=1326 audit(1744954634.917:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4805 comm="syz.1.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7ff4eda61169 code=0x7ffc0000
[  132.275079][ T4733] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  132.304267][ T4733] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  132.319796][ T4733] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  132.361526][ T4733] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  132.868755][ T4814] lo speed is unknown, defaulting to 1000
[  132.913808][ T1428] ieee802154 phy0 wpan0: encryption failed: -22
[  132.920247][ T1428] ieee802154 phy1 wpan1: encryption failed: -22
[  132.964293][ T4733] 8021q: adding VLAN 0 to HW filter on device bond0
[  133.021024][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  133.029677][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  133.054621][ T4733] 8021q: adding VLAN 0 to HW filter on device team0
[  133.065392][ T4819] loop4: detected capacity change from 0 to 512
[  133.091132][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  133.110933][ T4819] EXT4-fs (loop4): Test dummy encryption mode enabled
[  133.117923][ T4819] EXT4-fs (loop4): Test dummy encryption mode enabled
[  133.129473][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  133.161298][ T4819] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  133.210666][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[  133.217792][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[  133.263792][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  133.272568][ T4819] EXT4-fs (loop4): 1 truncate cleaned up
[  133.284483][ T4819] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,test_dummy_encryption,noauto_da_alloc,minixdf,errors=remount-ro,quota,. Quota mode: writeback.
[  133.301928][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  133.318585][ T4825] netlink: 68 bytes leftover after parsing attributes in process `syz.1.165'.
[  133.341005][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  133.388744][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[  133.395872][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[  133.585430][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  134.157618][ T1324] Bluetooth: hci5: command 0x0419 tx timeout
[  134.218229][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  134.273673][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  134.296088][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  134.305627][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  134.316374][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  134.328423][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  134.593879][ T4825] lo speed is unknown, defaulting to 1000
[  134.613424][ T4733] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  134.768245][ T4733] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  134.783039][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  134.812714][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  134.876455][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  134.929002][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  134.973327][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  136.160879][ T4825] lo speed is unknown, defaulting to 1000
[  136.490837][ T4825] lo speed is unknown, defaulting to 1000
[  136.499051][ T4825] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  136.554974][ T4825] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  138.175290][ T4825] lo speed is unknown, defaulting to 1000
[  138.568765][ T4825] lo speed is unknown, defaulting to 1000
[  138.586095][ T4825] lo speed is unknown, defaulting to 1000
[  138.594759][ T4825] lo speed is unknown, defaulting to 1000
[  138.609882][ T4825] lo speed is unknown, defaulting to 1000
[  138.622890][ T4825] lo speed is unknown, defaulting to 1000
[  138.639739][ T4825] lo speed is unknown, defaulting to 1000
[  138.796659][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  138.814566][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  138.857363][ T4733] 8021q: adding VLAN 0 to HW filter on device batadv0
[  140.891798][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  140.911210][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  140.957201][ T4733] device veth0_vlan entered promiscuous mode
[  141.009014][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  141.027922][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  141.061350][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  141.118040][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  141.236402][ T4733] device veth1_vlan entered promiscuous mode
[  141.307559][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  141.326938][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  141.340588][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  141.346062][ T4870] libceph: resolve '
[  141.346062][ T4870] -&���f�Y�ǝ�a���2i�
[  141.346062][ T4870] .���?��&�*��&' (ret=-3): failed
[  141.358454][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  141.373893][ T4733] device veth0_macvtap entered promiscuous mode
[  141.376260][ T4872] ubi31: attaching mtd0
[  141.402446][ T4872] ubi31: scanning is finished
[  141.409915][ T4872] ubi31: empty MTD device detected
[  141.422427][ T4733] device veth1_macvtap entered promiscuous mode
[  141.496630][ T4733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  141.517625][ T4872] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  141.525619][ T4872] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  141.540192][ T4733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.550852][ T4872] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  141.557964][ T4733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  141.589113][ T4733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.601073][ T4872] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  141.608572][ T4872] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  141.620144][ T4733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  141.650111][ T4733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.674308][ T4733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  141.685380][ T4872] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  141.705736][ T4872] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1651929390
[  141.716909][ T4733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.737288][ T4872] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  141.748576][ T4733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  141.770943][ T4883] ubi31: background thread "ubi_bgt31d" started, PID 4883
[  141.792302][ T4733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.824998][ T4733] batman_adv: batadv0: Interface activated: batadv_slave_0
[  141.959433][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  141.990592][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  142.138553][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  142.217024][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  142.264402][ T4733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  142.307674][ T4733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  142.349700][ T4733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  142.395202][ T4733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  142.436445][ T4733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  142.477208][ T4733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  142.503999][ T4891] syz.1.179 uses obsolete (PF_INET,SOCK_PACKET)
[  142.522453][ T4733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  142.576032][ T4733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  142.640931][ T4733] batman_adv: batadv0: Interface activated: batadv_slave_1
[  142.699163][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  142.718007][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  142.765522][ T4733] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  142.785460][ T4733] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  142.822212][ T4733] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  142.862280][ T4733] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  143.280382][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  143.288583][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  143.487453][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  143.537204][ T4304] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  143.584143][ T4304] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  143.615815][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  144.734011][ T4907] netlink: 36 bytes leftover after parsing attributes in process `syz.2.182'.
[  147.366084][ T4918] lo speed is unknown, defaulting to 1000
[  147.712158][ T4925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.187'.
[  147.889095][  T144] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.028052][  T144] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.119058][  T144] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.305764][  T144] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.463355][ T4918] lo speed is unknown, defaulting to 1000
[  148.903259][ T4937] loop4: detected capacity change from 0 to 524255232
[  149.350767][ T4254] Bluetooth: hci2: command 0x0409 tx timeout
[  150.418678][ T4939] lo speed is unknown, defaulting to 1000
[  150.463767][ T4918] chnl_net:caif_netlink_parms(): no params data found
[  150.870989][ T4918] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.903489][ T4918] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.931660][ T4918] device bridge_slave_0 entered promiscuous mode
[  150.987402][ T4918] bridge0: port 2(bridge_slave_1) entered blocking state
[  151.010636][ T4918] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.046811][ T4918] device bridge_slave_1 entered promiscuous mode
[  151.106369][ T4939] lo speed is unknown, defaulting to 1000
[  151.171506][ T4969] libceph: resolve '
[  151.171506][ T4969] -&���f�Y�ǝ�a���2i�
[  151.171506][ T4969] .���?��&�*��&' (ret=-3): failed
[  151.206920][ T4918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  151.243215][ T4918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  151.393024][ T4918] team0: Port device team_slave_0 added
[  151.463449][ T4254] Bluetooth: hci2: command 0x041b tx timeout
[  151.491128][ T4918] team0: Port device team_slave_1 added
[  151.637365][ T4918] batman_adv: batadv0: Adding interface: batadv_slave_0
[  151.664861][ T4976] block device autoloading is deprecated. It will be removed in Linux 5.19
[  151.684458][ T4918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  151.817199][ T4918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  152.108620][ T4918] batman_adv: batadv0: Adding interface: batadv_slave_1
[  152.133977][ T4918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  152.189458][ T4918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  153.103521][ T4986] netlink: 20 bytes leftover after parsing attributes in process `syz.2.197'.
[  153.176758][ T4986] netlink: 24 bytes leftover after parsing attributes in process `syz.2.197'.
[  153.293279][ T4918] device hsr_slave_0 entered promiscuous mode
[  153.341518][ T4918] device hsr_slave_1 entered promiscuous mode
[  153.380655][ T4918] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  153.445865][ T4918] Cannot create hsr debugfs directory
[  153.540251][ T4254] Bluetooth: hci2: command 0x040f tx timeout
[  154.529948][ T4987] netlink: 12 bytes leftover after parsing attributes in process `syz.1.198'.
[  154.536986][ T4999] netlink: 116 bytes leftover after parsing attributes in process `syz.4.200'.
[  154.739458][  T144] device hsr_slave_0 left promiscuous mode
[  154.775881][  T144] device hsr_slave_1 left promiscuous mode
[  154.925862][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  154.952720][  T144] batman_adv: batadv0: Removing interface: batadv_slave_0
[  155.962271][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  155.969749][  T144] batman_adv: batadv0: Removing interface: batadv_slave_1
[  155.998105][    T7] Bluetooth: hci2: command 0x0419 tx timeout
[  156.170876][  T144] device bridge_slave_1 left promiscuous mode
[  156.178879][  T144] bridge0: port 2(bridge_slave_1) entered disabled state
[  156.301609][  T144] device bridge_slave_0 left promiscuous mode
[  156.307901][  T144] bridge0: port 1(bridge_slave_0) entered disabled state
[  156.358683][  T144] rdma_rxe: ignoring netdev event = 10 for bond_slave_1
[  156.401136][  T144] device veth1_macvtap left promiscuous mode
[  156.407715][  T144] device veth0_macvtap left promiscuous mode
[  156.414027][  T144] device veth1_vlan left promiscuous mode
[  156.424986][  T144] device veth0_vlan left promiscuous mode
[  156.553105][  T144] infiniband syz1: set down
[  156.934331][  T144] team0 (unregistering): Port device team_slave_1 removed
[  156.968137][  T144] team0 (unregistering): Port device team_slave_0 removed
[  156.997195][  T144] rdma_rxe: ignoring netdev event = 27 for bond_slave_1
[  157.016204][  T144] rdma_rxe: ignoring netdev event = 26 for bond_slave_1
[  157.028402][  T144] rdma_rxe: ignoring netdev event = 21 for bond_slave_1
[  157.039803][  T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  157.057539][  T144] rdma_rxe: ignoring netdev event = 9 for bond_slave_1
[  157.082571][  T144] rdma_rxe: ignoring netdev event = 8 for bond_slave_1
[  157.111029][    T9] smc: removing ib device syz1
[  157.119068][  T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  157.218184][   T26] audit: type=1326 audit(1744954660.397:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5028 comm="syz.2.207" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2fff5e4169 code=0x0
[  157.408047][  T144] bond0 (unregistering): Released all slaves
[  157.417221][ T5034] tmpfs: Unknown parameter 'usrquota'
[  157.771146][ T4918] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  157.848634][ T4918] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  157.857753][   T26] audit: type=1326 audit(1744954661.037:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5041 comm="syz.2.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fff5e4169 code=0x7ffc0000
[  157.923022][ T4918] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  157.976022][ T4918] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  158.039260][   T26] audit: type=1326 audit(1744954661.037:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5041 comm="syz.2.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fff5e4169 code=0x7ffc0000
[  158.243676][   T26] audit: type=1326 audit(1744954661.077:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5041 comm="syz.2.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f2fff5e4169 code=0x7ffc0000
[  158.293651][   T26] audit: type=1326 audit(1744954661.077:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5041 comm="syz.2.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fff5e4169 code=0x7ffc0000
[  158.328095][   T26] audit: type=1326 audit(1744954661.077:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5041 comm="syz.2.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fff5e4169 code=0x7ffc0000
[  158.362375][   T26] audit: type=1326 audit(1744954661.097:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5041 comm="syz.2.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f2fff5e4169 code=0x7ffc0000
[  158.392119][   T26] audit: type=1326 audit(1744954661.097:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5041 comm="syz.2.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fff5e4169 code=0x7ffc0000
[  158.545463][   T26] audit: type=1326 audit(1744954661.097:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5041 comm="syz.2.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fff5e4169 code=0x7ffc0000
[  158.589464][ T4918] 8021q: adding VLAN 0 to HW filter on device bond0
[  158.701278][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  158.723001][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  158.742611][   T26] audit: type=1326 audit(1744954661.097:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5041 comm="syz.2.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f2fff5e4169 code=0x7ffc0000
[  158.801888][ T4918] 8021q: adding VLAN 0 to HW filter on device team0
[  158.852649][ T4991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  158.868350][ T4991] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  158.972507][ T4991] bridge0: port 1(bridge_slave_0) entered blocking state
[  158.979602][ T4991] bridge0: port 1(bridge_slave_0) entered forwarding state
[  158.999063][ T4991] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  159.028309][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  159.058375][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  159.092741][ T3079] bridge0: port 2(bridge_slave_1) entered blocking state
[  159.099848][ T3079] bridge0: port 2(bridge_slave_1) entered forwarding state
[  159.124938][ T5039] libceph: resolve '
[  159.124938][ T5039] -&���f�Y�ǝ�a���2i�
[  159.124938][ T5039] .���?��&�*��&' (ret=-3): failed
[  159.183941][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  159.247122][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  159.461009][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  160.705919][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  160.735811][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  160.822682][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  160.901342][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  160.929814][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  160.944096][ T5077] netlink: 12 bytes leftover after parsing attributes in process `syz.4.216'.
[  160.975527][ T4918] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  161.121739][ T5077] netlink: 12 bytes leftover after parsing attributes in process `syz.4.216'.
[  161.224731][ T4918] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  161.298917][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  161.312104][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  161.343409][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  162.193206][ T5097] 9pnet_virtio: no channels available for device syz
[  162.982432][ T4991] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  162.989979][ T4991] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  163.255166][ T4918] 8021q: adding VLAN 0 to HW filter on device batadv0
[  164.460979][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  164.500923][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  164.631861][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  164.650793][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  164.691155][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  164.749992][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  164.783269][ T4918] device veth0_vlan entered promiscuous mode
[  164.860812][ T4918] device veth1_vlan entered promiscuous mode
[  164.975185][ T5118] lo speed is unknown, defaulting to 1000
[  165.080681][ T4991] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  165.108114][ T4991] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  165.141259][ T4991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  165.232938][ T4991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  165.272438][ T4918] device veth0_macvtap entered promiscuous mode
[  165.389175][ T5124] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  165.400325][ T5124] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  165.488885][ T4991] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  165.544626][ T4918] device veth1_macvtap entered promiscuous mode
[  165.632739][ T4918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  165.688989][ T4918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.757117][ T4918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  165.810105][ T4918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.819953][ T4918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  165.900161][ T4918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.932895][ T4158] Bluetooth: hci3: command 0x0409 tx timeout
[  166.939592][ T4918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  166.960715][ T4918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.980148][ T4918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  167.027388][ T4918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.102077][ T4918] batman_adv: batadv0: Interface activated: batadv_slave_0
[  167.175838][ T5118] lo speed is unknown, defaulting to 1000
[  167.896651][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  167.911035][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  168.392755][ T4918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  168.437083][ T4918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.471628][ T4918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  168.510154][ T4918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.540128][ T4918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  168.580238][ T4918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.591300][ T5140] overlayfs: failed to resolve './file1': -2
[  168.628448][ T4918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  168.648514][ T4918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.702290][ T4918] batman_adv: batadv0: Interface activated: batadv_slave_1
[  168.729974][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  168.755827][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  168.791885][ T4918] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  168.848734][ T4918] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  168.867329][ T4918] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  168.897532][ T4918] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  168.980370][ T4212] Bluetooth: hci3: command 0x041b tx timeout
[  169.187509][ T4351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  169.189020][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  169.196614][ T4351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  169.216851][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  169.285241][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  169.341520][ T5118] chnl_net:caif_netlink_parms(): no params data found
[  169.394790][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  169.634661][ T5118] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.645245][ T5118] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.663565][ T5118] device bridge_slave_0 entered promiscuous mode
[  169.709654][ T5118] bridge0: port 2(bridge_slave_1) entered blocking state
[  169.990237][ T5118] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.998501][ T5118] device bridge_slave_1 entered promiscuous mode
[  170.121126][ T5118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  170.184235][ T5118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  170.391211][ T5118] team0: Port device team_slave_0 added
[  170.483635][ T5118] team0: Port device team_slave_1 added
[  170.689278][ T5118] batman_adv: batadv0: Adding interface: batadv_slave_0
[  170.760537][ T5118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  170.788662][ T5118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  170.822712][ T5118] batman_adv: batadv0: Adding interface: batadv_slave_1
[  170.871299][ T5118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  171.061795][ T4212] Bluetooth: hci3: command 0x040f tx timeout
[  171.063844][ T5118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  173.078408][ T5118] device hsr_slave_0 entered promiscuous mode
[  173.193270][ T1107] Bluetooth: hci3: command 0x0419 tx timeout
[  173.210867][ T5118] device hsr_slave_1 entered promiscuous mode
[  174.013213][ T5118] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  174.042691][ T5118] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  174.105303][ T5118] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  174.183458][ T5118] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  174.488725][ T5118] 8021q: adding VLAN 0 to HW filter on device bond0
[  174.539110][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  174.580951][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  174.614669][ T5118] 8021q: adding VLAN 0 to HW filter on device team0
[  174.638036][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  174.673379][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  174.708649][ T5100] bridge0: port 1(bridge_slave_0) entered blocking state
[  174.715810][ T5100] bridge0: port 1(bridge_slave_0) entered forwarding state
[  174.781773][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  174.820993][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  174.862542][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  174.878124][ T5100] bridge0: port 2(bridge_slave_1) entered blocking state
[  174.885400][ T5100] bridge0: port 2(bridge_slave_1) entered forwarding state
[  174.916878][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  175.054329][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  175.084089][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  175.134259][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  175.175200][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  175.216399][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  175.281493][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  175.312357][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  175.345999][ T5118] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  175.373135][ T5118] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  175.402439][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  175.421392][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  175.460563][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  175.518746][  T144] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.657881][  T144] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.671916][   T26] audit: type=1326 audit(1744954678.857:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5248 comm="syz.6.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72f97d5169 code=0x7ffc0000
[  176.238901][   T26] audit: type=1326 audit(1744954678.857:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5248 comm="syz.6.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72f97d5169 code=0x7ffc0000
[  176.286877][  T144] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.362232][   T26] audit: type=1326 audit(1744954678.877:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5248 comm="syz.6.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f72f97d5169 code=0x7ffc0000
[  176.386944][   T26] audit: type=1326 audit(1744954678.877:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5248 comm="syz.6.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72f97d5169 code=0x7ffc0000
[  176.414048][   T26] audit: type=1326 audit(1744954678.877:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5248 comm="syz.6.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72f97d5169 code=0x7ffc0000
[  176.437948][   T26] audit: type=1326 audit(1744954678.877:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5248 comm="syz.6.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f72f97d5169 code=0x7ffc0000
[  176.460624][   T26] audit: type=1326 audit(1744954678.877:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5248 comm="syz.6.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72f97d5169 code=0x7ffc0000
[  176.766119][   T26] audit: type=1326 audit(1744954678.877:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5248 comm="syz.6.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72f97d5169 code=0x7ffc0000
[  176.811569][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  176.819146][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  176.854332][   T26] audit: type=1326 audit(1744954678.897:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5248 comm="syz.6.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f72f97d5169 code=0x7ffc0000
[  176.896856][   T26] audit: type=1326 audit(1744954678.897:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5248 comm="syz.6.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72f97d5169 code=0x7ffc0000
[  176.943941][  T144] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.138663][ T5118] 8021q: adding VLAN 0 to HW filter on device batadv0
[  178.061558][ T5276] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  178.072682][ T5276] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  180.622251][ T4276] hid-generic C990:0003:0000.0002: unknown main item tag 0x0
[  180.659333][ T4276] hid-generic C990:0003:0000.0002: unknown main item tag 0x0
[  180.679110][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  180.705022][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  180.770360][    T7] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  180.820344][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  180.839428][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  180.863346][ T5118] device veth0_vlan entered promiscuous mode
[  180.885554][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  180.912004][ T4276] hid-generic C990:0003:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  180.942469][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  181.028747][ T5118] device veth1_vlan entered promiscuous mode
[  181.050628][    T7] usb 7-1: Using ep0 maxpacket: 16
[  181.201052][    T7] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  181.226468][    T7] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  181.286744][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  181.316095][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  181.347361][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  181.365477][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  181.434556][ T5118] device veth0_macvtap entered promiscuous mode
[  181.455481][ T5118] device veth1_macvtap entered promiscuous mode
[  181.462366][    T7] usb 7-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a
[  181.472591][    T7] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.492390][    T7] usb 7-1: Product: syz
[  181.498458][    T7] usb 7-1: Manufacturer: syz
[  181.503865][    T7] usb 7-1: SerialNumber: syz
[  181.518244][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.552570][    T7] usb 7-1: config 0 descriptor??
[  181.563543][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.574416][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.585347][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.605881][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.617007][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.649435][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.674543][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.695209][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.716346][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.740204][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.771716][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.821951][ T5118] batman_adv: batadv0: Interface activated: batadv_slave_0
[  181.833596][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  181.893747][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  181.950806][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  181.977147][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  182.090792][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  182.120157][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  182.140222][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  182.179844][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  182.210220][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  182.260811][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  182.290161][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  182.602248][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  182.642959][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  182.691636][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  182.739504][ T5118] batman_adv: batadv0: Interface activated: batadv_slave_1
[  182.769559][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  182.794186][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  182.885596][ T5118] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  182.910257][ T5118] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  182.939817][ T5325] vivid-008: =================  START STATUS  =================
[  182.948793][ T5118] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  182.965019][ T5118] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  182.978183][ T5325] vivid-008: Enable Output Cropping: true
[  182.989962][ T5325] vivid-008: Enable Output Composing: true
[  183.000586][ T5325] vivid-008: Enable Output Scaler: true
[  183.006365][ T5325] vivid-008: Tx RGB Quantization Range: Automatic
[  183.030604][ T5325] vivid-008: Transmit Mode: HDMI
[  183.035622][ T5325] vivid-008: Display Present: true inactive
[  183.070005][ T5325] vivid-008: Hotplug Present: 0x00000001
[  183.075872][ T5325] vivid-008: RxSense Present: 0x00000001
[  183.089565][ T5325] vivid-008: EDID Present: 0x00000001
[  183.280288][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  183.288494][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  183.419783][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  183.650382][ T5325] vivid-008: ==================  END STATUS  ==================
[  183.674415][ T4325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  183.751688][ T4325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  183.764766][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  184.918039][ T4254] usb 7-1: USB disconnect, device number 2
[  185.543016][  T144] device hsr_slave_0 left promiscuous mode
[  185.561753][  T144] device hsr_slave_1 left promiscuous mode
[  185.570535][ T5363] netlink: 12 bytes leftover after parsing attributes in process `syz.6.260'.
[  185.610954][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  185.618430][  T144] batman_adv: batadv0: Removing interface: batadv_slave_0
[  185.687090][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  185.726375][  T144] batman_adv: batadv0: Removing interface: batadv_slave_1
[  185.774693][  T144] device bridge_slave_1 left promiscuous mode
[  185.807335][  T144] bridge0: port 2(bridge_slave_1) entered disabled state
[  185.870352][  T144] device bridge_slave_0 left promiscuous mode
[  185.892058][  T144] bridge0: port 1(bridge_slave_0) entered disabled state
[  185.940622][  T144] device veth1_macvtap left promiscuous mode
[  185.954647][  T144] device veth0_macvtap left promiscuous mode
[  185.962321][  T144] device veth1_vlan left promiscuous mode
[  185.968310][  T144] device veth0_vlan left promiscuous mode
[  186.180508][    T7] Bluetooth: hci0: command 0x0406 tx timeout
[  186.190677][ T4212] Bluetooth: hci1: command 0x0406 tx timeout
[  186.430307][ T4254] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  187.580905][ T4254] usb 5-1: unable to read config index 0 descriptor/all
[  187.595317][ T4254] usb 5-1: can't read configurations, error -71
[  187.793779][  T144] team0 (unregistering): Port device team_slave_1 removed
[  187.888157][  T144] team0 (unregistering): Port device team_slave_0 removed
[  188.046769][  T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  188.091090][ T4212] usb 7-1: new full-speed USB device number 3 using dummy_hcd
[  188.183637][  T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  188.448327][  T144] bond0 (unregistering): Released all slaves
[  188.484745][ T4212] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  188.528297][ T4212] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x94, skipping
[  188.541712][ T5382] ALSA: mixer_oss: invalid OSS volume ''
[  188.559565][ T4212] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  188.753654][ T5384] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan1, syncid = -1, id = 0
[  188.790286][ T4212] usb 7-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  188.822384][ T4212] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.850264][ T4212] usb 7-1: Product: syz
[  188.854479][ T4212] usb 7-1: Manufacturer: syz
[  188.859091][ T4212] usb 7-1: SerialNumber: syz
[  188.924123][ T4212] usb 7-1: config 0 descriptor??
[  189.146198][ T5392] loop7: detected capacity change from 0 to 512
[  189.240938][ T5392] EXT4-fs (loop7): Test dummy encryption mode enabled
[  189.306381][ T5392] EXT4-fs (loop7): Test dummy encryption mode enabled
[  189.316671][ T5392] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  189.511485][ T5392] EXT4-fs (loop7): 1 truncate cleaned up
[  189.517302][ T5392] EXT4-fs (loop7): mounted filesystem without journal. Opts: test_dummy_encryption,test_dummy_encryption,noauto_da_alloc,minixdf,errors=remount-ro,quota,. Quota mode: writeback.
[  191.137646][ T5426] netlink: 48 bytes leftover after parsing attributes in process `syz.6.267'.
[  194.344594][ T1428] ieee802154 phy0 wpan0: encryption failed: -22
[  194.354335][ T1428] ieee802154 phy1 wpan1: encryption failed: -22
[  194.814929][ T5465] infiniband syz1: set active
[  194.819648][ T5465] infiniband syz1: added bond_slave_1
[  194.933089][ T5465] infiniband syz1: Couldn't open port 1
[  194.982097][ T5465] RDS/IB: syz1: added
[  195.161590][ T5465] smc: adding ib device syz1 with port count 1
[  195.169867][ T5465] smc:    ib device syz1 port 1 has pnetid 
[  196.631099][ T5506] loop7: detected capacity change from 0 to 16384
[  197.386833][ T5521] tmpfs: Unknown parameter 'usrquota'
[  199.281494][ T5550] netlink: 4 bytes leftover after parsing attributes in process `syz.7.288'.
[  199.574900][ T5550] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.080147][ T5550] device bridge_slave_1 left promiscuous mode
[  200.114854][ T5550] bridge0: port 2(bridge_slave_1) entered disabled state
[  203.264990][ T5589] ksmbd: Unknown IPC event: 6, ignore.
[  209.186282][ T5639] netlink: 12 bytes leftover after parsing attributes in process `syz.6.304'.
[  209.619342][ T5651] rdma_rxe: rxe_register_device failed with error -23
[  209.635631][ T5651] rdma_rxe: failed to add bond_slave_1
[  210.904384][ T4215] usb 7-1: USB disconnect, device number 3
[  212.134587][ T5674] netlink: 48 bytes leftover after parsing attributes in process `syz.1.313'.
[  212.999088][ T5674] device wireguard0 entered promiscuous mode
[  215.370317][ T5707] 9pnet_virtio: no channels available for device syz
[  216.060648][ T3025] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.984612][ T3025] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.182707][ T3025] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.337851][ T3025] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.172229][ T5736] netlink: 24 bytes leftover after parsing attributes in process `syz.7.322'.
[  220.634368][ T5745] rdma_rxe: rxe_register_device failed with error -23
[  221.454664][ T5745] rdma_rxe: failed to add bond_slave_1
[  223.739155][ T5781] 9pnet: Insufficient options for proto=fd
[  224.127604][ T5792] 9pnet_virtio: no channels available for device syz
[  224.180256][ T5766] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  224.561598][ T5792] netlink: 'syz.4.334': attribute type 1 has an invalid length.
[  224.570478][ T5792] netlink: 13443 bytes leftover after parsing attributes in process `syz.4.334'.
[  224.611584][ T5766] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  224.645372][ T5766] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  224.834423][ T5766] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  224.888102][ T5766] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  224.950598][ T5786] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  226.932318][ T3025] device hsr_slave_0 left promiscuous mode
[  226.939341][ T3025] device hsr_slave_1 left promiscuous mode
[  226.948349][ T5815] rdma_rxe: rxe_register_device failed with error -23
[  227.041151][ T3025] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  227.117494][ T5815] rdma_rxe: failed to add bond_slave_1
[  227.410364][ T3025] batman_adv: batadv0: Removing interface: batadv_slave_0
[  227.493942][ T3025] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  227.577290][ T3025] batman_adv: batadv0: Removing interface: batadv_slave_1
[  227.630450][ T3025] device bridge_slave_1 left promiscuous mode
[  227.667391][ T3025] bridge0: port 2(bridge_slave_1) entered disabled state
[  227.754266][ T3025] device bridge_slave_0 left promiscuous mode
[  227.783408][ T3025] bridge0: port 1(bridge_slave_0) entered disabled state
[  227.826151][ T3025] device veth1_macvtap left promiscuous mode
[  227.840733][ T3025] device veth0_macvtap left promiscuous mode
[  227.846860][ T3025] device veth1_vlan left promiscuous mode
[  227.871872][ T3025] device veth0_vlan left promiscuous mode
[  227.881391][ T1324] usb 2-1: USB disconnect, device number 2
[  228.450065][ T5839] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10)
[  228.457252][ T5839] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  228.527783][ T5843] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(13)
[  228.534441][ T5843] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  228.711231][ T4254] vhci_hcd: vhci_device speed not set
[  228.880387][ T5839] vhci_hcd vhci_hcd.0: Device attached
[  228.920344][ T4254] usb 37-1: new full-speed USB device number 2 using vhci_hcd
[  228.973222][ T5843] vhci_hcd vhci_hcd.0: Device attached
[  229.023362][ T5847] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  229.072462][ T3025] team0 (unregistering): Port device team_slave_1 removed
[  229.083809][ T5857] loop1: detected capacity change from 0 to 512
[  229.138196][ T3025] team0 (unregistering): Port device team_slave_0 removed
[  229.157124][ T5858] ax25_connect(): syz.7.347 uses autobind, please contact jreuter@yaina.de
[  229.166404][ T5844] vhci_hcd: connection closed
[  229.167028][ T5841] vhci_hcd: connection reset by peer
[  229.180210][  T480] vhci_hcd: stop threads
[  229.185431][  T480] vhci_hcd: release socket
[  229.201949][  T480] vhci_hcd: disconnect device
[  229.211264][  T480] vhci_hcd: stop threads
[  229.215551][  T480] vhci_hcd: release socket
[  229.223797][ T5857] EXT4-fs (loop1): Test dummy encryption mode enabled
[  229.230198][  T480] vhci_hcd: disconnect device
[  229.257651][ T5857] EXT4-fs (loop1): Test dummy encryption mode enabled
[  229.270352][ T5857] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  229.275373][ T3025] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  229.319248][ T5857] EXT4-fs (loop1): 1 truncate cleaned up
[  229.329671][ T5857] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,test_dummy_encryption,noauto_da_alloc,minixdf,errors=remount-ro,quota,. Quota mode: writeback.
[  229.535265][ T3025] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  231.337958][ T3025] bond0 (unregistering): Released all slaves
[  231.495603][ T5854] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready
[  231.560311][ T5766] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  231.980329][ T5766] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  232.001364][ T5766] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  232.015908][ T5766] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  232.026578][ T5766] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  232.051415][ T5766] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  232.220541][ T5766] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  232.233276][ T5766] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  232.263903][ T5766] usb 5-1: Product: syz
[  232.277160][ T5766] usb 5-1: Manufacturer: syz
[  232.351434][ T5766] cdc_wdm 5-1:1.0: skipping garbage
[  232.359365][ T5766] cdc_wdm 5-1:1.0: skipping garbage
[  232.419045][ T5766] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  232.441445][ T5766] cdc_wdm 5-1:1.0: Unknown control protocol
[  232.663577][ T5870] overlayfs: missing 'lowerdir'
[  232.745970][ T1324] usb 5-1: USB disconnect, device number 5
[  233.094369][    C0] vcan0: j1939_tp_rxtimer: 0xffff88802a463000: rx timeout, send abort
[  233.107379][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802a463000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[  234.247090][ T4254] vhci_hcd: vhci_device speed not set
[  234.247271][ T5923] loop4: detected capacity change from 0 to 512
[  234.484352][ T5923] EXT4-fs (loop4): Test dummy encryption mode enabled
[  234.524183][ T5923] EXT4-fs (loop4): Test dummy encryption mode enabled
[  234.552961][ T5923] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  235.420176][ T5923] EXT4-fs (loop4): 1 truncate cleaned up
[  235.426013][ T5923] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,test_dummy_encryption,noauto_da_alloc,minixdf,errors=remount-ro,quota,. Quota mode: writeback.
[  236.436211][ T5946] netlink: 40 bytes leftover after parsing attributes in process `syz.6.365'.
[  240.122045][ T5982] tmpfs: Unknown parameter 'usrquota'
[  240.720422][ T5989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.375'.
[  240.778643][ T5989] bridge0: port 2(bridge_slave_1) entered disabled state
[  240.973295][ T5989] device bridge_slave_1 left promiscuous mode
[  241.025107][ T5989] bridge0: port 2(bridge_slave_1) entered disabled state
[  241.034614][ T5995] loop6: detected capacity change from 0 to 512
[  241.169979][ T5995] EXT4-fs (loop6): Test dummy encryption mode enabled
[  241.177147][ T5995] EXT4-fs (loop6): Test dummy encryption mode enabled
[  241.270147][ T5995] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  241.381061][ T5995] EXT4-fs (loop6): 1 truncate cleaned up
[  241.386759][ T5995] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,test_dummy_encryption,noauto_da_alloc,minixdf,errors=remount-ro,quota,. Quota mode: writeback.
[  244.492304][ T6053] tmpfs: Unknown parameter 'usrquota'
[  245.933183][ T6066] loop6: detected capacity change from 0 to 512
[  245.996708][ T6072] netlink: 4 bytes leftover after parsing attributes in process `syz.7.388'.
[  246.036469][ T6066] EXT4-fs (loop6): Test dummy encryption mode enabled
[  246.087865][ T6066] EXT4-fs (loop6): Test dummy encryption mode enabled
[  246.127690][ T6066] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  246.214295][ T6066] EXT4-fs (loop6): 1 truncate cleaned up
[  246.219994][ T6066] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,test_dummy_encryption,noauto_da_alloc,minixdf,errors=remount-ro,quota,. Quota mode: writeback.
[  247.827824][   T21] Bluetooth: hci4: command 0x0406 tx timeout
[  249.214896][ T6119] tmpfs: Unknown parameter 'usrquota'
[  250.240339][ T6087] libceph: resolve '
[  250.240339][ T6087] -&���f�Y�ǝ�a���2i�
[  250.240339][ T6087] .���?��&�*��&' (ret=-3): failed
[  250.563056][ T6138] netlink: 4 bytes leftover after parsing attributes in process `syz.2.402'.
[  250.588072][ T6138] bridge0: port 2(bridge_slave_1) entered disabled state
[  250.829262][ T6142] loop7: detected capacity change from 0 to 512
[  250.912906][ T6138] device bridge_slave_1 left promiscuous mode
[  250.919544][ T6138] bridge0: port 2(bridge_slave_1) entered disabled state
[  250.944070][ T6142] EXT4-fs (loop7): Test dummy encryption mode enabled
[  250.996144][ T6142] EXT4-fs (loop7): Test dummy encryption mode enabled
[  251.026441][ T6142] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  251.961652][ T6142] EXT4-fs (loop7): 1 truncate cleaned up
[  251.980252][ T6142] EXT4-fs (loop7): mounted filesystem without journal. Opts: test_dummy_encryption,test_dummy_encryption,noauto_da_alloc,minixdf,errors=remount-ro,quota,. Quota mode: writeback.
[  255.782592][ T1428] ieee802154 phy0 wpan0: encryption failed: -22
[  255.788976][ T1428] ieee802154 phy1 wpan1: encryption failed: -22
[  255.873233][ T6213] tmpfs: Unknown parameter 'usrquota'
[  257.168308][ T6229] ax25_connect(): syz.4.415 uses autobind, please contact jreuter@yaina.de
[  257.358681][ T6234] loop6: detected capacity change from 0 to 512
[  257.452421][ T6229] 8021q: adding VLAN 0 to HW filter on device bond0
[  257.563613][ T6234] EXT4-fs (loop6): Test dummy encryption mode enabled
[  257.670866][ T6234] EXT4-fs (loop6): Test dummy encryption mode enabled
[  257.701132][ T6229] bond0: (slave rose0): Enslaving as an active interface with an up link
[  257.763344][ T6234] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  257.909526][ T4991] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  259.729158][ T6234] EXT4-fs (loop6): 1 truncate cleaned up
[  259.753797][ T6234] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,test_dummy_encryption,noauto_da_alloc,minixdf,errors=remount-ro,quota,. Quota mode: writeback.
[  263.906704][ T6295] tmpfs: Unknown parameter 'usrquota'
[  265.301361][ T6326] loop2: detected capacity change from 0 to 512
[  266.260955][ T6326] EXT4-fs (loop2): Test dummy encryption mode enabled
[  266.270273][ T6326] EXT4-fs (loop2): Test dummy encryption mode enabled
[  266.277133][ T6326] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  266.612826][ T6326] EXT4-fs (loop2): 1 truncate cleaned up
[  266.619843][ T6326] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,test_dummy_encryption,noauto_da_alloc,minixdf,errors=remount-ro,quota,. Quota mode: writeback.
[  269.176409][ T6365] tmpfs: Unknown parameter 'usrquota'
[  270.867009][ T6389] block device autoloading is deprecated. It will be removed in Linux 5.19
[  271.700122][ T5766] Bluetooth: hci5: command 0x1003 tx timeout
[  271.706374][ T4179] Bluetooth: hci5: sending frame failed (-49)
[  273.790492][ T4256] Bluetooth: hci5: command 0x1001 tx timeout
[  273.796678][ T4179] Bluetooth: hci5: sending frame failed (-49)
[  274.268643][ T6456] tmpfs: Unknown parameter 'usrquota'
[  275.942746][ T4256] Bluetooth: hci5: command 0x1009 tx timeout
[  277.142853][ T4254] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  277.661899][ T4254] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  277.690232][ T4254] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  277.726941][ T4254] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[  277.774590][ T4254] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  277.796106][ T4254] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  277.940758][ T4254] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  277.966434][ T4254] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  278.001728][ T4254] usb 7-1: Product: syz
[  278.016193][ T4254] usb 7-1: Manufacturer: syz
[  278.091278][ T4254] cdc_wdm 7-1:1.0: skipping garbage
[  278.097296][ T4254] cdc_wdm 7-1:1.0: skipping garbage
[  278.145533][ T4254] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[  278.180139][ T4254] cdc_wdm 7-1:1.0: Unknown control protocol
[  278.347210][ T6495] overlayfs: missing 'lowerdir'
[  278.886511][ T1324] Bluetooth: hci2: command 0x0406 tx timeout
[  278.931375][ T4256] usb 7-1: USB disconnect, device number 4
[  279.630661][ T6539] ubi: mtd0 is already attached to ubi31
[  279.874366][ T6543] netlink: 'syz.2.470': attribute type 27 has an invalid length.
[  281.895517][ T6569] rdma_rxe: rxe_register_device failed with error -23
[  281.905252][ T6569] rdma_rxe: failed to add bond_slave_1
[  284.167918][ T6543] bridge0: port 1(bridge_slave_0) entered disabled state
[  284.760772][ T4256] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  285.251022][ T4256] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  285.277695][ T4256] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  285.339977][ T4256] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[  285.397251][ T4256] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  285.536331][ T4256] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  285.670661][ T4256] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  285.679771][ T4256] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  285.708836][ T4256] usb 7-1: Product: syz
[  285.719857][ T4256] usb 7-1: Manufacturer: syz
[  285.885645][ T6543] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  285.916379][ T6543] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  286.197920][ T6584] overlayfs: missing 'lowerdir'
[  287.683822][ T4256] cdc_wdm 7-1:1.0: skipping garbage
[  287.689078][ T4256] cdc_wdm 7-1:1.0: skipping garbage
[  287.775627][ T4256] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[  287.785703][ T4256] cdc_wdm 7-1:1.0: Unknown control protocol
[  287.933784][ T4210] usb 7-1: USB disconnect, device number 5
[  289.678106][ T6543] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  289.700298][ T1324] Bluetooth: hci3: command 0x0406 tx timeout
[  289.720239][ T6543] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  289.747891][ T6543] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  289.763929][ T6543] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  289.789179][ T6543] device netdevsim0 left promiscuous mode
[  290.082231][ T6545] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  290.120602][ T6545] 8021q: adding VLAN 0 to HW filter on device bond0
[  290.165325][ T6545] 8021q: adding VLAN 0 to HW filter on device team0
[  290.214638][ T6545] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  290.260502][ T6545] syz.2.470 (6545) used greatest stack depth: 17912 bytes left
[  290.577808][ T6623] rdma_rxe: rxe_register_device failed with error -23
[  290.590474][ T6623] rdma_rxe: failed to add bond_slave_1
[  291.840336][ T1107] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  293.709544][ T6635] ODEBUG: Out of memory. ODEBUG disabled
[  294.124229][ T1107] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  294.150116][ T1107] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  294.161156][ T1107] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  294.185977][ T1107] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  294.217756][ T1107] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  294.390343][ T1107] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  294.519941][ T1107] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  294.528484][ T1107] usb 5-1: Product: syz
[  294.532718][ T1107] usb 5-1: Manufacturer: syz
[  295.430778][ T1107] usb 5-1: can't set config #1, error -71
[  295.486417][ T1107] usb 5-1: USB disconnect, device number 6
[  295.495193][ T6665] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22
[  295.517996][ T6665] netdevsim netdevsim4: Direct firmware load for . failed with error -22
[  295.627053][ T6665] netdevsim netdevsim4: Falling back to sysfs fallback for: .
[  295.960171][ T4179] Bluetooth: hci1: unexpected event for opcode 0x1005
[  298.819672][ T6696] ax25_connect(): syz.6.503 uses autobind, please contact jreuter@yaina.de
[  298.906857][ T6699] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  301.361129][ T5766] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  302.176254][ T1107] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  303.330222][ T5766] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  303.338975][ T1107] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  303.360431][ T5766] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  303.371280][ T1107] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  303.409098][ T5766] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  303.418497][ T1107] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[  303.449763][ T5766] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  303.461199][ T1107] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  303.480095][ T5766] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  303.491993][ T1107] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  303.641106][ T1107] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  303.650444][ T5766] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  303.668745][ T5766] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  303.677300][ T1107] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  303.689242][ T5766] usb 3-1: Product: syz
[  303.690870][ T1107] usb 7-1: Product: syz
[  303.699881][ T5766] usb 3-1: Manufacturer: syz
[  303.707191][ T1107] usb 7-1: Manufacturer: syz
[  303.741166][ T5766] cdc_wdm 3-1:1.0: skipping garbage
[  303.750483][ T5766] cdc_wdm 3-1:1.0: skipping garbage
[  303.762185][ T1107] cdc_wdm 7-1:1.0: skipping garbage
[  303.774294][ T1107] cdc_wdm 7-1:1.0: skipping garbage
[  303.790300][ T5766] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  303.829315][ T1107] cdc_wdm 7-1:1.0: cdc-wdm1: USB WDM device
[  303.840182][ T5766] cdc_wdm 3-1:1.0: Unknown control protocol
[  303.871506][ T1107] cdc_wdm 7-1:1.0: Unknown control protocol
[  303.956930][ T6712] overlayfs: missing 'lowerdir'
[  303.968695][ T6717] overlayfs: missing 'lowerdir'
[  303.996162][ T6756] netlink: 4 bytes leftover after parsing attributes in process `syz.4.517'.
[  304.026405][ T1107] usb 3-1: USB disconnect, device number 2
[  304.049866][ T1324] usb 7-1: USB disconnect, device number 6
[  304.586474][ T6756] bridge0: port 2(bridge_slave_1) entered disabled state
[  304.747483][ T6756] device bridge_slave_1 left promiscuous mode
[  304.760266][ T6756] bridge0: port 2(bridge_slave_1) entered disabled state
[  306.890245][ T6773] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  307.109861][ T6780] netlink: 20 bytes leftover after parsing attributes in process `syz.4.523'.
[  309.377640][ T6806] loop2: detected capacity change from 0 to 512
[  309.736363][ T6806] EXT4-fs (loop2): Test dummy encryption mode enabled
[  309.775642][ T6806] EXT4-fs (loop2): Test dummy encryption mode enabled
[  309.900268][ T6806] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  310.994370][ T6806] EXT4-fs (loop2): 1 truncate cleaned up
[  311.000298][ T6806] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,test_dummy_encryption,noauto_da_alloc,minixdf,errors=remount-ro,quota,. Quota mode: writeback.
[  311.167456][ T6829] netlink: 12 bytes leftover after parsing attributes in process `syz.7.532'.
[  311.734343][ T4158] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  312.108564][ T6846] netlink: 4 bytes leftover after parsing attributes in process `syz.2.533'.
[  312.130580][ T4158] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  312.156840][ T4158] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  312.216851][ T4158] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[  312.256545][ T4158] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  312.302946][ T4158] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  312.494463][ T4158] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  312.518079][ T4158] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  312.669546][ T4158] usb 7-1: Product: syz
[  312.707362][ T4158] usb 7-1: Manufacturer: syz
[  312.771186][ T4158] cdc_wdm 7-1:1.0: skipping garbage
[  312.780506][ T4158] cdc_wdm 7-1:1.0: skipping garbage
[  312.787909][ T4158] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[  312.794459][ T4158] cdc_wdm 7-1:1.0: Unknown control protocol
[  312.834824][ T6862] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  313.047822][ T6821] overlayfs: missing 'lowerdir'
[  315.484057][ T6891] loop7: detected capacity change from 0 to 512
[  315.565274][ T6891] EXT4-fs (loop7): Test dummy encryption mode enabled
[  315.596164][ T6891] EXT4-fs (loop7): Test dummy encryption mode enabled
[  315.648057][ T6891] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  315.697085][ T6891] EXT4-fs (loop7): 1 truncate cleaned up
[  315.720322][ T6891] EXT4-fs (loop7): mounted filesystem without journal. Opts: test_dummy_encryption,test_dummy_encryption,noauto_da_alloc,minixdf,errors=remount-ro,quota,. Quota mode: writeback.
[  316.605929][ T4158] usb 7-1: USB disconnect, device number 7
[  317.275033][ T1428] ieee802154 phy0 wpan0: encryption failed: -22
[  317.689099][ T1428] ieee802154 phy1 wpan1: encryption failed: -22
[  317.818424][ T6908] netlink: 12 bytes leftover after parsing attributes in process `syz.1.546'.
[  317.974223][ T6925] netlink: 'syz.6.551': attribute type 27 has an invalid length.
[  318.115813][ T6929] raw_sendmsg: syz.6.551 forgot to set AF_INET. Fix it!
[  319.057991][ T6925] bridge0: port 2(bridge_slave_1) entered disabled state
[  319.065482][ T6925] bridge0: port 1(bridge_slave_0) entered disabled state
[  320.209345][ T6957] loop1: detected capacity change from 0 to 512
[  320.339192][ T6957] EXT4-fs (loop1): Test dummy encryption mode enabled
[  320.351422][ T6957] EXT4-fs (loop1): Test dummy encryption mode enabled
[  320.375005][ T6957] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  320.449514][ T6957] EXT4-fs (loop1): 1 truncate cleaned up
[  320.455480][ T6957] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,test_dummy_encryption,noauto_da_alloc,minixdf,errors=remount-ro,quota,. Quota mode: writeback.
[  320.811403][ T6962] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  321.130780][ T6962] EXT4-fs (loop1): Remounting filesystem read-only
[  322.143121][ T6925] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  322.555760][ T6925] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  323.744251][ T6925] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  323.758534][ T6925] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  323.777787][ T6925] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  323.798372][ T6925] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  324.240407][ T6937] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  324.248818][ T6945] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  326.287697][ T7011] device wireguard0 entered promiscuous mode
[  326.818208][ T7019] loop4: detected capacity change from 0 to 512
[  326.944195][ T7019] EXT4-fs (loop4): Test dummy encryption mode enabled
[  326.961531][ T7019] EXT4-fs (loop4): Test dummy encryption mode enabled
[  326.981634][ T7019] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  327.202727][ T7019] EXT4-fs (loop4): 1 truncate cleaned up
[  327.208460][ T7019] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,test_dummy_encryption,noauto_da_alloc,minixdf,errors=remount-ro,quota,. Quota mode: writeback.
[  329.413351][ T7072] netlink: 8 bytes leftover after parsing attributes in process `syz.2.579'.
[  329.424834][ T7072] netlink: 'syz.2.579': attribute type 5 has an invalid length.
[  329.497914][ T7067] netlink: 32 bytes leftover after parsing attributes in process `syz.7.571'.
[  329.672119][ T7072] netlink: 20 bytes leftover after parsing attributes in process `syz.2.579'.
[  329.724309][ T7072] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0
[  329.810336][ T7072] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0
[  329.852799][ T7072] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0
[  329.890239][ T7072] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0
[  329.913161][ T7072] device geneve2 entered promiscuous mode
[  330.216297][ T7094] netlink: 4 bytes leftover after parsing attributes in process `syz.4.580'.
[  330.359324][ T7098] loop1: detected capacity change from 0 to 512
[  330.454721][ T7098] EXT4-fs (loop1): Test dummy encryption mode enabled
[  330.613223][ T7098] EXT4-fs (loop1): Test dummy encryption mode enabled
[  330.620618][ T7098] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  330.665065][ T7098] EXT4-fs (loop1): 1 truncate cleaned up
[  330.700219][ T7098] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,test_dummy_encryption,noauto_da_alloc,minixdf,errors=remount-ro,quota,. Quota mode: writeback.
[  333.449354][ T7027] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  333.542669][ T7027] EXT4-fs (loop1): Remounting filesystem read-only
[  334.160185][ T7137] lo speed is unknown, defaulting to 1000
[  334.168187][ T7137] lo speed is unknown, defaulting to 1000
[  334.183090][ T7137] lo speed is unknown, defaulting to 1000
[  334.253671][ T7137] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  334.484794][ T7137] lo speed is unknown, defaulting to 1000
[  334.491780][ T7137] lo speed is unknown, defaulting to 1000
[  334.498534][ T7137] lo speed is unknown, defaulting to 1000
[  334.505446][ T7137] lo speed is unknown, defaulting to 1000
[  334.512254][ T7137] lo speed is unknown, defaulting to 1000
[  335.777947][ T7170] netlink: 4 bytes leftover after parsing attributes in process `syz.4.596'.
[  337.013747][ T7181] loop1: detected capacity change from 0 to 512
[  337.040361][ T7181] EXT4-fs (loop1): Test dummy encryption mode enabled
[  337.088223][ T7181] EXT4-fs (loop1): Test dummy encryption mode enabled
[  337.173793][ T7181] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  337.346042][ T7192] smc: net device bond0 applied user defined pnetid SYZ0
[  338.131427][ T7192] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0
[  338.227040][ T7181] EXT4-fs (loop1): 1 truncate cleaned up
[  338.236241][ T7181] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,test_dummy_encryption,noauto_da_alloc,minixdf,errors=remount-ro,quota,. Quota mode: writeback.
[  338.302334][ T6971] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  339.181319][ T6971] usb 5-1: config index 0 descriptor too short (expected 45, got 36)
[  339.190192][ T6971] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  339.213765][ T6971] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  339.359053][ T6971] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  339.378580][ T6971] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  339.403208][ T6971] usb 5-1: config 0 descriptor??
[  339.502785][ T7195] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  339.984517][ T6971] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  340.285245][ T7230] libceph: resolve '
[  340.285245][ T7230] -&���f�Y�ǝ�a���2i�
[  340.285245][ T7230] .���?��&�*��&' (ret=-3): failed
[  340.409747][ T7242] netlink: 4 bytes leftover after parsing attributes in process `syz.6.612'.
[  340.503109][ T7242] device bridge_slave_1 left promiscuous mode
[  340.547341][ T7245] smc: net device bond0 erased user defined pnetid SYZ0
[  340.548545][ T7242] bridge0: port 2(bridge_slave_1) entered disabled state
[  340.575930][ T7245] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0
[  340.590723][   T26] kauditd_printk_skb: 37 callbacks suppressed
[  340.590750][   T26] audit: type=1326 audit(1744954843.777:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7247 comm="syz.7.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8835d8169 code=0x7ffc0000
[  340.679890][   T26] audit: type=1326 audit(1744954843.807:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7247 comm="syz.7.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8835d8169 code=0x7ffc0000
[  340.708849][   T26] audit: type=1326 audit(1744954843.807:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7247 comm="syz.7.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fe8835d8169 code=0x7ffc0000
[  340.784943][   T26] audit: type=1326 audit(1744954843.807:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7247 comm="syz.7.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8835d8169 code=0x7ffc0000
[  340.940586][   T26] audit: type=1326 audit(1744954843.807:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7247 comm="syz.7.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8835d8169 code=0x7ffc0000
[  342.510049][   T26] audit: type=1326 audit(1744954843.807:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7247 comm="syz.7.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe8835d6ad0 code=0x7ffc0000
[  342.574731][ T6947] usb 5-1: USB disconnect, device number 7
[  342.597769][   T26] audit: type=1326 audit(1744954843.807:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7247 comm="syz.7.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8835d8169 code=0x7ffc0000
[  342.648639][   T26] audit: type=1326 audit(1744954843.807:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7247 comm="syz.7.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8835d8169 code=0x7ffc0000
[  343.227139][   T26] audit: type=1326 audit(1744954843.817:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7247 comm="syz.7.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe8835d8169 code=0x7ffc0000
[  343.255097][   T26] audit: type=1326 audit(1744954843.817:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7247 comm="syz.7.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8835d8169 code=0x7ffc0000
[  345.097756][ T7314] libceph: resolve '
[  345.097756][ T7314] -&���f�Y�ǝ�a���2i�
[  345.097756][ T7314] .���?��&�*��&' (ret=-3): failed
[  345.921704][ T7332] tmpfs: Unknown parameter 'usrquota'
[  346.840316][ T7342] netlink: 12 bytes leftover after parsing attributes in process `syz.2.632'.
[  347.600182][    T7] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  348.680228][    T7] usb 7-1: Using ep0 maxpacket: 16
[  348.800343][    T7] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  348.800399][    T7] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  348.800442][    T7] usb 7-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[  348.800472][    T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  348.821828][    T7] usb 7-1: config 0 descriptor??
[  348.865993][    T7] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input6
[  349.725660][ T4276] usb 7-1: USB disconnect, device number 8
[  350.116348][ T7389] 9pnet: Insufficient options for proto=fd
[  350.638212][ T7393] libceph: resolve '
[  350.638212][ T7393] -&���f�Y�ǝ�a���2i�
[  350.638212][ T7393] .���?��&�*��&' (ret=-3): failed
[  351.220602][ T7418] capability: warning: `syz.6.645' uses deprecated v2 capabilities in a way that may be insecure
[  353.140430][ T7439] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  354.380386][ T7446] netlink: 20 bytes leftover after parsing attributes in process `syz.7.651'.
[  355.975672][ T7496] netlink: 12 bytes leftover after parsing attributes in process `syz.7.663'.
[  356.192580][ T7509] netlink: 12 bytes leftover after parsing attributes in process `syz.1.668'.
[  358.164053][ T7507] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  358.667156][ T7521] netlink: 20 bytes leftover after parsing attributes in process `syz.4.670'.
[  359.808118][ T7537] netlink: 'syz.4.673': attribute type 10 has an invalid length.
[  359.848323][ T4179] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[  359.854454][ T7537] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  359.858510][ T4179] CPU: 0 PID: 4179 Comm: kworker/u5:5 Not tainted 5.15.180-syzkaller #0
[  359.875140][ T4179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  359.885255][ T4179] Workqueue: hci2 hci_rx_work
[  359.890020][ T4179] Call Trace:
[  359.893325][ T4179]  <TASK>
[  359.896281][ T4179]  dump_stack_lvl+0x1e3/0x2d0
[  359.900996][ T4179]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  359.906713][ T4179]  ? panic+0x860/0x860
[  359.910822][ T4179]  ? sysfs_create_dir_ns+0x282/0x390
[  359.916141][ T4179]  sysfs_create_dir_ns+0x2c6/0x390
[  359.921287][ T4179]  ? sysfs_warn_dup+0xa0/0xa0
[  359.925994][ T4179]  ? do_raw_spin_unlock+0x137/0x8b0
[  359.931229][ T4179]  kobject_add_internal+0x6e0/0xe00
[  359.936566][ T4179]  kobject_add+0x14e/0x210
[  359.941015][ T4179]  ? device_add+0x3c2/0xfd0
[  359.945545][ T4179]  ? kobject_init+0x1d0/0x1d0
[  359.950256][ T4179]  ? __raw_spin_lock_init+0x41/0x100
[  359.955569][ T4179]  ? get_device_parent+0x128/0x400
[  359.960713][ T4179]  device_add+0x476/0xfd0
[  359.965081][ T4179]  hci_conn_add_sysfs+0xe4/0x1f0
[  359.970054][ T4179]  le_conn_complete_evt+0xc15/0x1500
[  359.975387][ T4179]  ? cs_le_create_conn+0x5f0/0x5f0
[  359.980545][ T4179]  hci_le_meta_evt+0x28c/0x3f50
[  359.985426][ T4179]  ? __lock_acquire+0x1ff0/0x1ff0
[  359.990503][ T4179]  ? __mutex_lock_common+0x444/0x25a0
[  359.995917][ T4179]  ? hci_remote_host_features_evt+0x280/0x280
[  360.002015][ T4179]  ? __mutex_unlock_slowpath+0x218/0x750
[  360.007677][ T4179]  ? hci_event_packet+0x3b4/0x1550
[  360.012827][ T4179]  ? mutex_unlock+0x10/0x10
[  360.017369][ T4179]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  360.023398][ T4179]  ? print_irqtrace_events+0x210/0x210
[  360.028904][ T4179]  hci_event_packet+0xc41/0x1550
[  360.033891][ T4179]  ? rcu_lock_release+0x20/0x20
[  360.038797][ T4179]  ? hci_send_to_monitor+0x99/0x4d0
[  360.044037][ T4179]  hci_rx_work+0x237/0xa10
[  360.048507][ T4179]  process_one_work+0x8a1/0x10c0
[  360.053501][ T4179]  ? worker_detach_from_pool+0x260/0x260
[  360.059175][ T4179]  ? _raw_spin_lock_irqsave+0x120/0x120
[  360.064749][ T4179]  ? kthread_data+0x4e/0xc0
[  360.069295][ T4179]  ? wq_worker_running+0x97/0x170
[  360.074349][ T4179]  worker_thread+0xaca/0x1280
[  360.079095][ T4179]  kthread+0x3f6/0x4f0
[  360.083194][ T4179]  ? rcu_lock_release+0x20/0x20
[  360.088077][ T4179]  ? kthread_blkcg+0xd0/0xd0
[  360.092702][ T4179]  ret_from_fork+0x1f/0x30
[  360.097172][ T4179]  </TASK>
[  360.114635][ T4179] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  360.128533][ T4179] Bluetooth: hci2: failed to register connection device
[  360.143962][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  360.824140][ T7547] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  361.790429][ T4215] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  362.190429][ T1324] Bluetooth: hci2: command 0x2016 tx timeout
[  362.572142][ T7573] netlink: 20 bytes leftover after parsing attributes in process `syz.6.683'.
[  362.741331][ T4215] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  363.030396][ T4215] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  363.650058][ T4215] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  363.659096][ T4215] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  363.685475][ T4215] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  363.930204][ T4215] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  363.941112][ T4215] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  364.100303][ T4215] usb 2-1: can't set config #1, error -71
[  364.119603][ T4215] usb 2-1: USB disconnect, device number 3
[  365.439678][ T7599] device vlan2 entered promiscuous mode
[  365.454317][ T7599] bond0: (slave vlan2): Opening slave failed
[  365.533648][ T7601] tipc: Started in network mode
[  365.538634][ T7601] tipc: Node identity ac1414aa, cluster identity 4711
[  365.605408][ T7601] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  365.617885][ T7601] tipc: Enabled bearer <udp:>, priority 10
[  365.624670][ T7605] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  365.741136][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  365.880309][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  366.020171][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  366.160193][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  366.300122][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  366.440168][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  366.590168][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  366.731157][ T1324] tipc: Node number set to 2886997162
[  366.880288][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  367.150344][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  367.442031][ T7623] netlink: 20 bytes leftover after parsing attributes in process `syz.6.696'.
[  369.571268][ T7638] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  369.582339][ T7638] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  370.390886][ T7665] IPVS: set_ctl: invalid protocol: 59 172.20.20.187:20001
[  370.540234][ T7665] exFAT-fs (nullb0): invalid boot record signature
[  370.602472][ T7665] exFAT-fs (nullb0): failed to read boot sector
[  370.608861][ T7665] exFAT-fs (nullb0): failed to recognize exfat type
[  370.820189][    C0] net_ratelimit: 3 callbacks suppressed
[  370.820211][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  371.860161][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  372.900155][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  373.940156][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  374.990130][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  376.020116][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  377.060187][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  378.100144][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  378.720825][ T1428] ieee802154 phy0 wpan0: encryption failed: -22
[  378.728363][ T1428] ieee802154 phy1 wpan1: encryption failed: -22
[  379.025281][ T7750] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  379.036629][ T7750] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  379.063861][ T6947] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  379.140129][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  379.571421][ T6947] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  379.585079][ T6947] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  379.662862][ T6947] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  379.731444][ T6947] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  379.822274][ T6947] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  380.009892][ T7763] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  380.077634][ T7763] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  380.086359][ T7763] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  380.096127][ T7763] device bridge_slave_0 left promiscuous mode
[  380.103923][ T7763] bridge0: port 1(bridge_slave_0) entered disabled state
[  380.135753][ T7763] bond0: (slave bond_slave_0): Releasing backup interface
[  380.180131][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  381.620167][ T6947] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  381.676622][ T6947] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  381.755898][ T6947] usb 5-1: Product: syz
[  381.774349][ T6947] usb 5-1: Manufacturer: syz
[  381.824730][ T7763] bond0: (slave bond_slave_1): Releasing backup interface
[  381.832712][ T6947] usb 5-1: can't set config #1, error -71
[  381.861081][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  381.888721][ T6947] usb 5-1: USB disconnect, device number 8
[  381.967053][ T7763] team0: Port device team_slave_0 removed
[  382.038336][ T7763] team0: Port device team_slave_1 removed
[  382.064716][ T7763] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  382.082705][ T7763] batman_adv: batadv0: Removing interface: batadv_slave_0
[  382.101996][ T7763] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  382.120075][ T7763] batman_adv: batadv0: Removing interface: batadv_slave_1
[  382.173301][ T7775] device vlan2 entered promiscuous mode
[  382.206342][ T7775] device bond0 entered promiscuous mode
[  382.212367][ T7775] device bond_slave_0 entered promiscuous mode
[  382.218702][ T7775] device bond_slave_1 entered promiscuous mode
[  382.283757][ T7775] device bond0 left promiscuous mode
[  382.300570][ T7775] device bond_slave_0 left promiscuous mode
[  382.317417][ T7775] device bond_slave_1 left promiscuous mode
[  382.910215][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  383.227514][ T7810] rdma_rxe: rxe_register_device failed with error -23
[  383.235567][ T7810] rdma_rxe: failed to add bond_slave_1
[  383.564128][ T7819] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  383.575703][ T7819] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  383.940207][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  384.454663][ T7813] 
[  384.457031][ T7813] ======================================================
[  384.464134][ T7813] WARNING: possible circular locking dependency detected
[  384.471145][ T7813] 5.15.180-syzkaller #0 Not tainted
[  384.476347][ T7813] ------------------------------------------------------
[  384.483371][ T7813] syz.1.731/7813 is trying to acquire lock:
[  384.489273][ T7813] ffffffff8dd7f678 (nr_neigh_list_lock){+...}-{2:2}, at: nr_remove_neigh+0x25/0xe0
[  384.498616][ T7813] 
[  384.498616][ T7813] but task is already holding lock:
[  384.505988][ T7813] ffff88801c3b1670 (&nr_node->node_lock){+...}-{2:2}, at: nr_add_node+0xfb2/0x2210
[  384.515346][ T7813] 
[  384.515346][ T7813] which lock already depends on the new lock.
[  384.515346][ T7813] 
[  384.525742][ T7813] 
[  384.525742][ T7813] the existing dependency chain (in reverse order) is:
[  384.534759][ T7813] 
[  384.534759][ T7813] -> #2 (&nr_node->node_lock){+...}-{2:2}:
[  384.542751][ T7813]        lock_acquire+0x1db/0x4f0
[  384.547772][ T7813]        _raw_spin_lock_bh+0x31/0x40
[  384.553074][ T7813]        nr_rt_device_down+0x155/0x7b0
[  384.558543][ T7813]        nr_device_event+0x130/0x140
[  384.563818][ T7813]        raw_notifier_call_chain+0xd0/0x170
[  384.569704][ T7813]        dev_close_many+0x32c/0x4b0
[  384.574892][ T7813]        dev_close+0x1b3/0x2b0
[  384.579649][ T7813]        bpq_device_event+0x3c8/0x9d0
[  384.585011][ T7813]        raw_notifier_call_chain+0xd0/0x170
[  384.590897][ T7813]        dev_close_many+0x32c/0x4b0
[  384.596087][ T7813]        dev_close+0x1b3/0x2b0
[  384.600837][ T7813]        bond_setup_by_slave+0x66/0x390
[  384.606398][ T7813]        bond_enslave+0x7b1/0x3c20
[  384.611509][ T7813]        bond_do_ioctl+0x2a6/0xb40
[  384.616614][ T7813]        dev_ifsioc+0xd15/0x1050
[  384.621559][ T7813]        dev_ioctl+0x512/0xf00
[  384.626329][ T7813]        sock_do_ioctl+0x27a/0x430
[  384.631458][ T7813]        sock_ioctl+0x484/0x770
[  384.636298][ T7813]        __se_sys_ioctl+0xf1/0x160
[  384.641424][ T7813]        do_syscall_64+0x3b/0x80
[  384.646375][ T7813]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  384.652787][ T7813] 
[  384.652787][ T7813] -> #1 (nr_node_list_lock){+...}-{2:2}:
[  384.660592][ T7813]        lock_acquire+0x1db/0x4f0
[  384.665609][ T7813]        _raw_spin_lock_bh+0x31/0x40
[  384.670905][ T7813]        nr_rt_device_down+0xb1/0x7b0
[  384.676270][ T7813]        nr_device_event+0x130/0x140
[  384.681564][ T7813]        raw_notifier_call_chain+0xd0/0x170
[  384.687451][ T7813]        dev_close_many+0x32c/0x4b0
[  384.692641][ T7813]        dev_close+0x1b3/0x2b0
[  384.697396][ T7813]        bpq_device_event+0x3c8/0x9d0
[  384.702870][ T7813]        raw_notifier_call_chain+0xd0/0x170
[  384.708773][ T7813]        dev_close_many+0x32c/0x4b0
[  384.713961][ T7813]        dev_close+0x1b3/0x2b0
[  384.718731][ T7813]        bond_setup_by_slave+0x66/0x390
[  384.724290][ T7813]        bond_enslave+0x7b1/0x3c20
[  384.729404][ T7813]        bond_do_ioctl+0x2a6/0xb40
[  384.734508][ T7813]        dev_ifsioc+0xd15/0x1050
[  384.739435][ T7813]        dev_ioctl+0x512/0xf00
[  384.744188][ T7813]        sock_do_ioctl+0x27a/0x430
[  384.749317][ T7813]        sock_ioctl+0x484/0x770
[  384.754157][ T7813]        __se_sys_ioctl+0xf1/0x160
[  384.759277][ T7813]        do_syscall_64+0x3b/0x80
[  384.764225][ T7813]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  384.770724][ T7813] 
[  384.770724][ T7813] -> #0 (nr_neigh_list_lock){+...}-{2:2}:
[  384.778629][ T7813]        validate_chain+0x1649/0x5930
[  384.784012][ T7813]        __lock_acquire+0x1295/0x1ff0
[  384.789400][ T7813]        lock_acquire+0x1db/0x4f0
[  384.794422][ T7813]        _raw_spin_lock_bh+0x31/0x40
[  384.799709][ T7813]        nr_remove_neigh+0x25/0xe0
[  384.804812][ T7813]        nr_add_node+0x14ef/0x2210
[  384.809913][ T7813]        nr_rt_ioctl+0xeee/0x1880
[  384.814938][ T7813]        sock_do_ioctl+0x10a/0x430
[  384.820062][ T7813]        sock_ioctl+0x484/0x770
[  384.824903][ T7813]        __se_sys_ioctl+0xf1/0x160
[  384.830012][ T7813]        do_syscall_64+0x3b/0x80
[  384.834989][ T7813]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  384.841411][ T7813] 
[  384.841411][ T7813] other info that might help us debug this:
[  384.841411][ T7813] 
[  384.851625][ T7813] Chain exists of:
[  384.851625][ T7813]   nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock
[  384.851625][ T7813] 
[  384.865428][ T7813]  Possible unsafe locking scenario:
[  384.865428][ T7813] 
[  384.872865][ T7813]        CPU0                    CPU1
[  384.878216][ T7813]        ----                    ----
[  384.883590][ T7813]   lock(&nr_node->node_lock);
[  384.888344][ T7813]                                lock(nr_node_list_lock);
[  384.895443][ T7813]                                lock(&nr_node->node_lock);
[  384.902716][ T7813]   lock(nr_neigh_list_lock);
[  384.907508][ T7813] 
[  384.907508][ T7813]  *** DEADLOCK ***
[  384.907508][ T7813] 
[  384.915644][ T7813] 1 lock held by syz.1.731/7813:
[  384.920570][ T7813]  #0: ffff88801c3b1670 (&nr_node->node_lock){+...}-{2:2}, at: nr_add_node+0xfb2/0x2210
[  384.930434][ T7813] 
[  384.930434][ T7813] stack backtrace:
[  384.936308][ T7813] CPU: 1 PID: 7813 Comm: syz.1.731 Not tainted 5.15.180-syzkaller #0
[  384.944358][ T7813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  384.954403][ T7813] Call Trace:
[  384.957672][ T7813]  <TASK>
[  384.960592][ T7813]  dump_stack_lvl+0x1e3/0x2d0
[  384.965288][ T7813]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  384.970946][ T7813]  ? print_circular_bug+0x12b/0x1a0
[  384.976138][ T7813]  check_noncircular+0x2f8/0x3b0
[  384.980150][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  384.981070][ T7813]  ? add_chain_block+0x850/0x850
[  384.992838][ T7813]  ? lockdep_lock+0x11f/0x2a0
[  384.997566][ T7813]  ? rcu_lock_release+0x5/0x20
[  385.002349][ T7813]  ? __lock_acquire+0x1ff0/0x1ff0
[  385.007377][ T7813]  validate_chain+0x1649/0x5930
[  385.012242][ T7813]  ? unwind_get_return_address+0x49/0x80
[  385.017873][ T7813]  ? arch_stack_walk+0xf3/0x140
[  385.022719][ T7813]  ? reacquire_held_locks+0x660/0x660
[  385.028090][ T7813]  ? reacquire_held_locks+0x660/0x660
[  385.033501][ T7813]  ? stack_trace_save+0x113/0x1c0
[  385.038522][ T7813]  ? stack_trace_snprint+0xe0/0xe0
[  385.043627][ T7813]  ? kasan_unpoison+0x42/0x60
[  385.048315][ T7813]  ? __kasan_slab_alloc+0x43/0xc0
[  385.053337][ T7813]  ? mark_lock+0x98/0x340
[  385.057660][ T7813]  __lock_acquire+0x1295/0x1ff0
[  385.062510][ T7813]  lock_acquire+0x1db/0x4f0
[  385.067024][ T7813]  ? nr_remove_neigh+0x25/0xe0
[  385.071811][ T7813]  ? read_lock_is_recursive+0x10/0x10
[  385.077209][ T7813]  ? read_lock_is_recursive+0x10/0x10
[  385.082604][ T7813]  ? nr_remove_neigh+0x25/0xe0
[  385.087424][ T7813]  ? __bpf_trace_softirq+0x10/0x10
[  385.092548][ T7813]  ? do_raw_spin_lock+0x14a/0x370
[  385.097592][ T7813]  ? __bpf_trace_softirq+0x10/0x10
[  385.102702][ T7813]  ? __rwlock_init+0x140/0x140
[  385.107461][ T7813]  ? nr_remove_neigh+0x25/0xe0
[  385.112238][ T7813]  _raw_spin_lock_bh+0x31/0x40
[  385.116998][ T7813]  ? nr_remove_neigh+0x25/0xe0
[  385.121764][ T7813]  nr_remove_neigh+0x25/0xe0
[  385.126369][ T7813]  nr_add_node+0x14ef/0x2210
[  385.130956][ T7813]  ? nr_rt_ioctl+0x1880/0x1880
[  385.135736][ T7813]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  385.141726][ T7813]  ? nr_call_to_digi+0x7a/0x1b0
[  385.146580][ T7813]  ? memcpy+0x3c/0x60
[  385.150555][ T7813]  ? nr_call_to_digi+0x121/0x1b0
[  385.155486][ T7813]  nr_rt_ioctl+0xeee/0x1880
[  385.159994][ T7813]  ? __ia32_compat_sys_ioctl+0xce0/0xce0
[  385.165636][ T7813]  ? aa_get_newest_label+0xf9/0x6c0
[  385.170832][ T7813]  ? nr_dev_get+0x320/0x320
[  385.175335][ T7813]  ? apparmor_capable+0x12e/0x190
[  385.180380][ T7813]  ? capable+0x84/0xe0
[  385.184473][ T7813]  ? nr_ioctl+0x128/0x300
[  385.188797][ T7813]  sock_do_ioctl+0x10a/0x430
[  385.193403][ T7813]  ? sock_show_fdinfo+0xb0/0xb0
[  385.198261][ T7813]  sock_ioctl+0x484/0x770
[  385.202583][ T7813]  ? sock_poll+0x410/0x410
[  385.207015][ T7813]  ? __fget_files+0x413/0x480
[  385.211691][ T7813]  ? bpf_lsm_file_ioctl+0x5/0x10
[  385.216633][ T7813]  ? security_file_ioctl+0x7d/0xa0
[  385.221738][ T7813]  ? sock_poll+0x410/0x410
[  385.226150][ T7813]  __se_sys_ioctl+0xf1/0x160
[  385.230746][ T7813]  do_syscall_64+0x3b/0x80
[  385.235159][ T7813]  ? clear_bhb_loop+0x15/0x70
[  385.239836][ T7813]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  385.245725][ T7813] RIP: 0033:0x7ff4eda61169
[  385.250149][ T7813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  385.269746][ T7813] RSP: 002b:00007ff4eb8c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  385.278239][ T7813] RAX: ffffffffffffffda RBX: 00007ff4edc88fa0 RCX: 00007ff4eda61169
[  385.286205][ T7813] RDX: 0000200000000280 RSI: 000000000000890b RDI: 000000000000000a
[  385.294199][ T7813] RBP: 00007ff4edae3a68 R08: 0000000000000000 R09: 0000000000000000
[  385.302174][ T7813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  385.310204][ T7813] R13: 0000000000000000 R14: 00007ff4edc88fa0 R15: 00007fff68493078
[  385.318201][ T7813]  </TASK>
[  386.020155][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  387.060132][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  388.110106][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  389.140142][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  390.180157][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  391.220168][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  392.260132][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  393.300084][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  394.350100][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available