last executing test programs:

1m6.769958244s ago: executing program 3 (id=586):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]})
chdir(&(0x7f00000001c0)='./bus\x00')
rmdir(&(0x7f0000000380)='./file0/../file0\x00')

1m3.733389257s ago: executing program 3 (id=587):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000049c0)={0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
inotify_init1(0x0)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000680)='./file0\x00', 0x2148c5, &(0x7f0000000380)={[{@utf8no}, {@utf8no}, {@shortname_mixed}, {@utf8}, {@uni_xlateno}, {@numtail}, {@utf8}, {@uni_xlate}, {@shortname_mixed}, {@fat=@usefree}, {@shortname_lower}, {@shortname_lower}, {@rodir}, {@utf8}]}, 0x0, 0x2c4, &(0x7f0000000a40)="$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")
r2 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333406, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x11080, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0)
read$FUSE(r2, &(0x7f0000004c40)={0x2020}, 0x2020)
setns(r1, 0x24020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x104)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
umount2(&(0x7f0000000040)='.\x00', 0x2)
syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file1\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0)

1m2.269353571s ago: executing program 3 (id=592):
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r0 = msgget$private(0x0, 0x208)
msgrcv(r0, 0x0, 0x0, 0x835597a199ab43be, 0x4800)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, 0x0)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETSW2(r2, 0x402c542c, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x50)
read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020, 0x0, <r3=>0x0, <r4=>0x0, <r5=>0x0}, 0x2020)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xffffffffffffffff, 0x0, 0x0, {0x40, 0x8, 0xe, 0xfffc, 0x0, 0x1, 0x0, 0x0, 0x121, 0x2000, 0x0, r4, r5, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000440)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50)
openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1)
r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x2c, r6, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x2c}}, 0x0)

1m0.396087065s ago: executing program 3 (id=594):
syz_mount_image$fuse(0x0, 0x0, 0x6088, 0x0, 0x1, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3c0, 0x108, 0x1f0, 0x0, 0x108, 0xe0, 0xe0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0xa00}}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410)
add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f00000003c0)={'ip_vti0\x00', &(0x7f0000000400)={'gre0\x00', 0x0, 0x2100, 0x6000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4}}}})
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r6, 0x0)

59.328066999s ago: executing program 3 (id=597):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$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")
syz_mount_image$fuse(0x0, 0x0, 0x1802400, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
mount(0x0, 0x0, 0x0, 0x5000, 0x0)
open(&(0x7f00000001c0)='./file0\x00', 0x800, 0xb0)
r3 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_TTY_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x10, 0x3f8, 0x0, 0x1}, 0x37}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000000)
socket$packet(0x11, 0x2, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x5, 0x0, 0x0, 0x41d, 0x0, 0x4}, 0x0, 0x0)

58.282973362s ago: executing program 3 (id=602):
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
close(0x3)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f00000001c0), 0x12)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
syz_clone(0x43b00000, 0x0, 0x5b, 0x0, 0x0, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000380), 0x12)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

42.071172969s ago: executing program 32 (id=602):
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
close(0x3)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f00000001c0), 0x12)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
syz_clone(0x43b00000, 0x0, 0x5b, 0x0, 0x0, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000380), 0x12)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

30.207001007s ago: executing program 0 (id=636):
syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x800000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
brk(0x689d80000003)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="e200"/24], 0x50)
socket(0x10, 0x80003, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000580), 0x1000, r3}, 0x38)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000000203010100000000000000ffffff7f000800034000000000080004400000000008000540000000000900020000000000070000000800010001"], 0x40}}, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x318, 0x0, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x280, 0x230, 0x230, 0x280, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x160, 0x1a8, 0x0, {0x1000000}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x44}, [0xffffffff, 0x54691080da52b893, 0xff, 0xffffff00], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xff, 0xff, 0xff, 0xffffff], @ipv6=@private0, [0xffffff00, 0xffffff00, 0xff], @ipv6=@mcast2, [0xffffff00, 0xffffff00, 0xffffff00, 0xffff00], 0xfffffffe, 0x6, 0x1d, 0x4e23, 0x4e21, 0x4e22, 0x4e22, 0xa00, 0x2200}, 0x100, 0x1004, 0x4e22, 0x4e23, 0x4e22, 0x4e23}}, @common=@unspec=@state={{0x28}, {0x8}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x378)

29.371375969s ago: executing program 0 (id=637):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@host})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000440), 0x10)
connect$vsock_stream(r1, 0x0, 0x0)
listen(r1, 0x5)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
accept4$unix(r1, 0x0, 0x0, 0x0)
getpgrp(0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
open(0x0, 0x80ff, 0x88)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x1)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$l2tp6(0xa, 0x2, 0x73)
pselect6(0x40, &(0x7f0000000000)={0x0, 0xfffffffffffffffe, 0xff, 0x3, 0x1000000, 0x8000, 0x4, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0xfffffffffffffff7}, 0x0, 0x0)

28.970371049s ago: executing program 0 (id=639):
fanotify_init(0x4, 0x800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0)
ioctl$MEDIA_REQUEST_IOC_REINIT(0xffffffffffffffff, 0x7c81, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read$FUSE(r3, &(0x7f00000040c0)={0x2020}, 0x2020)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="100000000400000008000000020000001008", @ANYRES32=0x1, @ANYBLOB="0000000000000000000100000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/13], 0x50)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x24008000, &(0x7f00000001c0)={0xa, 0x2, 0x20398, @empty, 0xffffffff}, 0x1c)
mount(&(0x7f00000000c0)=@sr0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000180)='omfs\x00', 0x446, &(0x7f0000000240)='\x00')
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='vegas', 0x5)

27.95894687s ago: executing program 0 (id=640):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
fcntl$getownex(r0, 0x10, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r2)
syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02)
syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00')
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0)
mkdirat$cgroup(r2, &(0x7f0000000dc0)='syz0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
r3 = openat$cgroup_freezer_state(r2, &(0x7f00000002c0), 0x2, 0x0)
write$cgroup_freezer_state(r3, &(0x7f00000000c0)='FROZEN\x00', 0x7)
sendfile(r3, r3, 0x0, 0x8000002)

24.767040171s ago: executing program 0 (id=642):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
syz_mount_image$erofs(&(0x7f0000001240), &(0x7f0000000200)='./file0\x00', 0x2800080, &(0x7f0000001280)=ANY=[], 0xff, 0x22f, &(0x7f0000000b00)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x0)
fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0)
r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x38000)

21.662352698s ago: executing program 0 (id=646):
r0 = syz_io_uring_setup(0x837, 0x0, &(0x7f0000000040)=<r1=>0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4)
io_uring_enter(r0, 0x3514, 0x9141, 0x69, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000240)={0x1f, 0x1}, 0x6)
ioctl$sock_bt_hci(r2, 0x800448d5, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000128001007f00000001"], 0x48)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)}, 0x44050)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000106666018800000000000109022400010000a0001904000519030001000921080001012229000905810300040000"], 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)

19.696083996s ago: executing program 1 (id=649):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup(r0, 0x0, 0x200002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x80)
openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r7, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d80672e65a6a0a72e19c2b60bd6276fd8bb6366e9d1ed9a60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d10d1f600"})
bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10)
connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0)

16.471149049s ago: executing program 1 (id=651):
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c100}, 0xc048)
sendmsg$NFT_BATCH(r3, 0x0, 0x40)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r4, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)}], 0x1}}], 0x1, 0x20008000)
setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000a80)=@gcm_128={{0x303}, "9ff3d6661480294c", "5fa3c0bf46782bbee21b09b7446edc75", "5bee93e1", "f11bb8cba3046ce3"}, 0x28)
close(0xffffffffffffffff)

9.467952742s ago: executing program 1 (id=662):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0})
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f00000006c0)='.\x00', 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = fanotify_init(0x200, 0x0)
r5 = memfd_create(0x0, 0x1)
r6 = dup(r5)
fanotify_mark(r4, 0x1, 0x48000046, r6, 0x0)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000300000000000004000000080002000500000006"], 0x24}}, 0x0)

8.32208311s ago: executing program 1 (id=665):
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket$kcm(0x2, 0x3, 0x2)
recvmsg$kcm(r0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x18000)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000340), 0x20200, 0x0)
pipe2$9p(&(0x7f0000000200), 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
geteuid()
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001300)={{{@in=@initdev, @in=@multicast1}}, {{@in6=@loopback}, 0x0, @in=@private}}, &(0x7f0000000c40)=0xe8)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40004)
ioctl$SOUND_MIXER_READ_DEVMASK(r2, 0x80044dfe, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)
close_range(r1, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000400), 0x0)
r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x7, 0x4, 0x9, 0x4}, 0x0, 0x401a, &(0x7f00000021c0)={{0x6, 0x2, 0x5, 0x40}}, 0x4, 0x0, 0x8}})
sched_setscheduler(0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000081dd22104c052e000005010203010902120001000000000904000000f7045c5c48a35fdb6a"], 0x0)

7.188765037s ago: executing program 2 (id=667):
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)=0x7)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c)
r0 = socket$netlink(0x10, 0x3, 0x4)
write(r0, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff0000", 0x1e)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f00000000c0)=@ethtool_gfeatures})
syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
socket(0x400000000010, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x840)
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000380)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa10812, &(0x7f00000003c0)=ANY=[@ANYBLOB='dmask=00000000000000000002621,utf8,umask=00000000000000000200000,namecase=1,discard,errors=remount-ro,umask=00000000000000000200004,umask=00000000000000000003377,namecase=1,utf8,iocharset=iso8859-4,iocharset=cp874,dmask=01777777777777777777770,errors=remount-ro,uid=', @ANYRESOCT=0x0, @ANYRES16, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRESDEC, @ANYBLOB="49440fb4005cba20653d2326292c265c2c00e79feca4a2e1053fdd2c84e7a89aa4ee02cbb47695d7ade8fd4362d0e37fbbb365b529e3d4cfa7ec78bc709784cc24ff7cfd3accb1a53fcd27bcb1794fcc15fc6eeae6dd85887fec609d9df9eb63c1eb27e9a7e7c87e551a878c1ff1548dce0557af9986d21054cc6d2e9be1e16b9e2e6e9df5b4b95e1b", @ANYRES8=0x0, @ANYRES16=0x0, @ANYRESOCT=0x0, @ANYRESOCT], 0x21, 0x1508, &(0x7f0000002080)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81009431, 0xfffffffffffffffe)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)

6.974832248s ago: executing program 33 (id=646):
r0 = syz_io_uring_setup(0x837, 0x0, &(0x7f0000000040)=<r1=>0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4)
io_uring_enter(r0, 0x3514, 0x9141, 0x69, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000240)={0x1f, 0x1}, 0x6)
ioctl$sock_bt_hci(r2, 0x800448d5, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000128001007f00000001"], 0x48)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)}, 0x44050)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000106666018800000000000109022400010000a0001904000519030001000921080001012229000905810300040000"], 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)

6.963299998s ago: executing program 2 (id=669):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$read(0xb, r3, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r4 = socket$inet(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
pipe(&(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$inet_udp(0x2, 0x2, 0x0)
close(r7)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r7, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r8, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044)
write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc)
splice(r5, 0x0, r7, 0x0, 0x7151, 0x0)

6.667396323s ago: executing program 4 (id=670):
bind$alg(0xffffffffffffffff, &(0x7f0000003880)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58)
openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r0)
sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x24, r2, 0x48334cf00147764d, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xf}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044880}, 0x20000000)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x406f413, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102384, 0x18ff0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)

5.855934834s ago: executing program 1 (id=671):
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r0 = syz_open_procfs(0x0, 0x0)
r1 = fsopen(&(0x7f0000000000)='proc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
fchdir(r2)
r3 = inotify_init1(0x800)
inotify_add_watch(r3, 0x0, 0x60000526)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004410}, 0x0)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x1aa)
getdents64(r4, &(0x7f0000004440)=""/4096, 0x1000)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0xfffffffffffffffe)
ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f00000002c0)={0x2, 0x0, [{0xd, 0x5, 0x5, 0x5, 0xcd73, 0x3, 0x5}, {0x1, 0x2000, 0x9f603fe0013529b, 0x8, 0x20145b25, 0x0, 0x8}]})
read$FUSE(r0, &(0x7f0000002400)={0x2020}, 0x2020)
socket$inet_udp(0x2, 0x2, 0x0)

5.352794879s ago: executing program 2 (id=672):
open_tree(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
fsopen(0x0, 0x0)
bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x4, 0x2ffffffff}, 0xc)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}, 0x10)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r4)
bind$inet6(r4, 0x0, 0x0)
listen(0xffffffffffffffff, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000180)='./bus\x00', 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB='errors=continue,discard_unit=section,alloc_mode=default,active_logs=6,acl,fault_injection=00000000000000001262,acl,noacl,compress_cache,background_gc=off,nobarrier,compress_cache,mode=lfs,errors=remount-ro,nocheckpoint_merge,mode=fragment:segment,inline_dmntry,\x00'], 0x1, 0x5505, &(0x7f0000002480)="$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")
r5 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0)

5.216726406s ago: executing program 4 (id=673):
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff2000/0x4000)=nil, 0x4000, &(0x7f0000000440)='@)-\x00')
memfd_create(&(0x7f0000000080)='\x00', 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
read(r0, &(0x7f0000000080)=""/1, 0x1)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r1, 0x0, 0x0, 0x20040140)
setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000000c0)=@fragment={0x0, 0x0, 0x2, 0x1, 0x0, 0x16, 0x66}, 0x8)
listen(r1, 0xfff)
socket$nl_audit(0x10, 0x3, 0x9)
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044014}, 0x20000040)
socket$inet_tcp(0x2, 0x1, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
read(r3, &(0x7f0000000080)=""/1, 0x1)
r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x1, 0x0)
r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
keyctl$invalidate(0x15, 0x0)
mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000)

3.591743858s ago: executing program 2 (id=674):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'gre0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x7, 0x1, 0x2, 0xffffffff, {{0x1f, 0x4, 0x0, 0x1a, 0x7c, 0x68, 0x0, 0x9, 0x29, 0x0, @multicast1, @multicast2, {[@timestamp={0x44, 0x8, 0xf9, 0x0, 0x5, [0x0]}, @timestamp_addr={0x44, 0xc, 0x9, 0x1, 0x2, [{@private=0xa010102, 0x2a}]}, @timestamp_prespec={0x44, 0x44, 0x1b, 0x3, 0xf, [{@rand_addr=0x64010100, 0xfff}, {@private=0xa010100, 0x7}, {@loopback, 0x8}, {@multicast1, 0xff}, {@multicast2, 0x8}, {@multicast1, 0x3}, {@broadcast, 0x53526585}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}]}, @rr={0x7, 0xb, 0x92, [@remote, @multicast2]}, @end, @timestamp_addr={0x44, 0x4, 0xe7, 0x1, 0x9}]}}}}})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x11, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@ldst={0x3, 0x3, 0x6, 0x9, 0xf958b2f995f468ea, 0xffffffffffffffe0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000440)='GPL\x00', 0xf, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000ac0)=[{0x4, 0x1, 0xf, 0xa}, {0x0, 0x4, 0x5, 0x8}], 0x10, 0x91}, 0x94)
sendmsg$nl_route(r1, &(0x7f0000000c80)={&(0x7f0000000180), 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x70bd2b, 0x25dfdbfd, {0x2, 0x80, 0x0, 0xf9, 0xfc, 0x2, 0xfe, 0xb, 0x200}}, 0x1c}, 0x1, 0x0, 0x0, 0x2638a9bcf8fb576e}, 0x8000)
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x14, 0x1, 0x9, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}}, 0x14}}, 0x40000010)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x37}, 0x94)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'gretap0\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)

3.497508873s ago: executing program 1 (id=675):
r0 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r0, 0x0, 0x10000000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181000, 0x104)
io_setup(0x9, 0x0)
io_cancel(0x0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001800010000000000000000001d0100001500010000000000000000007d7408e707adb5a5050000000800050001fd"], 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94)
mount$overlay(0x0, 0x0, 0x0, 0x8, &(0x7f0000000200))

3.276751814s ago: executing program 4 (id=676):
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x8e6082, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x0, 0xb, 0x148, 0x0, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040))
r4 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f00000000c0)=0x3)

2.403859679s ago: executing program 2 (id=677):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {}, 0xfd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000230001000900000001"], 0x48)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000002100090002000000ffdbdf2501000000080008", @ANYRES32=r5, @ANYBLOB="cf9fe76d2b0f767220cfec14923d860a0048f5f8fc30f92d1f2279087b0bfa672e4768dfec0c86f942b1e1974cdce8bbd76fb84b7154fb5c02f311c10a421f8bcad6ef11af09cf55fc7952b3c00ca8f84ca5a7"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
timerfd_create(0x8, 0x80000)
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
socket$kcm(0x10, 0x2, 0x0)
close_range(r9, 0xffffffffffffffff, 0x0)

1.356090121s ago: executing program 4 (id=678):
socket(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, [], [], [0x8, 0x1]})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
close(0x3)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48)
r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x900, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0)
ioctl$DRM_IOCTL_MODE_SETGAMMA(0xffffffffffffffff, 0xc02064a5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="8f0978d21b640fc79ca50000c0fe470f06430f01c2440f20c0ac0a0000e39d9d0f22c066460f38809bf77f00000f214a0fc73d0d0000003e653666400fc7775f400f01c4", 0x44}], 0x1, 0x10, 0x0, 0x0)
openat$dma_heap(0xffffffffffffff9c, 0x0, 0x2040, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

1.355263481s ago: executing program 2 (id=679):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x7c}}, 0x0)
r1 = socket$inet6(0xa, 0x80002, 0x4)
setsockopt$inet6_int(r1, 0x29, 0x19, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@multicast2, 0x404d3, 0x32}, 0x0, @in=@empty}}, 0xe8)
r3 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4)
r4 = socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0x0, 0x5}}}, 0x24}}, 0x10)
sendmsg$inet(r5, 0x0, 0x4000040)
ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, 0x0)
sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01021000000000000000020000200900020073797a310000000008000440000000000900010073797a3000000000080003400000000a140000001100010000000000000000000000000a"], 0x64}}, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xac800000}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c)

1.151884341s ago: executing program 4 (id=680):
syz_io_uring_setup(0x4f6, 0x0, &(0x7f0000000180)=<r0=>0x0, &(0x7f0000000140)=<r1=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, 0x0, 0x0, 0x4)
syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1})
r2 = eventfd2(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0)
write$sndseq(r4, 0x0, 0x0)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r7, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
sendto$inet6(r7, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)

0s ago: executing program 4 (id=681):
sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, 0x0, 0x0)
add_key$user(0x0, &(0x7f00000005c0), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd)
socket$alg(0x26, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
r1 = socket(0xa, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x480)
r3 = getpid()
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$isdn(0x22, 0x2, 0x10)
r8 = socket$isdn(0x22, 0x2, 0x2)
r9 = dup3(r8, r7, 0x0)
kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r6, &(0x7f0000000280)={r9, r5, 0x7})
ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r9, 0xc008aec1, &(0x7f0000000040)={0x3, 0x0, [{0x80000001, 0x4, 0x5, 0xe4, 0x4, 0x1, 0x100}, {0x40000000, 0x3, 0x6, 0x0, 0x9, 0xa0000000, 0x400}, {0x80000000, 0x7, 0x1, 0x7, 0x10001, 0x40, 0x5}]})

kernel console output (not intermixed with test programs):

dge_slave_1 entered promiscuous mode
[   75.834786][ T4268] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.842163][ T4268] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.851871][ T4268] device bridge_slave_1 entered promiscuous mode
[   75.906326][ T4279] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.913694][ T4279] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.922149][ T4279] device bridge_slave_0 entered promiscuous mode
[   75.935208][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   75.947075][ T4277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   75.960059][ T4268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   75.976563][ T4279] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.984367][ T4279] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.993264][ T4279] device bridge_slave_1 entered promiscuous mode
[   76.002661][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.013887][ T4277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.025066][ T4268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.063174][ T4282] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.071281][ T4282] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.079503][ T4282] device bridge_slave_0 entered promiscuous mode
[   76.115181][ T4282] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.126588][ T4282] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.134747][ T4282] device bridge_slave_1 entered promiscuous mode
[   76.152400][ T4268] team0: Port device team_slave_0 added
[   76.161796][ T4279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   76.173623][ T4273] team0: Port device team_slave_0 added
[   76.189425][ T4277] team0: Port device team_slave_0 added
[   76.197107][ T4279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.215275][ T4268] team0: Port device team_slave_1 added
[   76.222860][ T4273] team0: Port device team_slave_1 added
[   76.245402][ T4277] team0: Port device team_slave_1 added
[   76.282083][ T4282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   76.309464][ T4279] team0: Port device team_slave_0 added
[   76.324139][ T4282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.335003][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0
[   76.342557][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.369122][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   76.389152][ T4279] team0: Port device team_slave_1 added
[   76.395991][ T4268] batman_adv: batadv0: Adding interface: batadv_slave_0
[   76.403354][ T4268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.430412][ T4268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   76.451094][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1
[   76.458233][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.484463][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   76.509259][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_0
[   76.516256][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.542626][ T4277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   76.554670][ T4268] batman_adv: batadv0: Adding interface: batadv_slave_1
[   76.562881][ T4268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.595529][ T4268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   76.628454][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_1
[   76.635475][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.661813][ T4277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   76.682818][ T4282] team0: Port device team_slave_0 added
[   76.703289][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_0
[   76.710640][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.736756][ T4279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   76.758254][ T4272] Bluetooth: hci0: command 0x0409 tx timeout
[   76.771562][ T4282] team0: Port device team_slave_1 added
[   76.789944][ T4273] device hsr_slave_0 entered promiscuous mode
[   76.797150][ T4273] device hsr_slave_1 entered promiscuous mode
[   76.812411][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_1
[   76.819543][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.847081][ T4272] Bluetooth: hci1: command 0x0409 tx timeout
[   76.853879][ T4279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   76.883515][ T4277] device hsr_slave_0 entered promiscuous mode
[   76.890587][ T4277] device hsr_slave_1 entered promiscuous mode
[   76.898134][ T4277] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   76.906033][ T4277] Cannot create hsr debugfs directory
[   76.911927][ T4272] Bluetooth: hci3: command 0x0409 tx timeout
[   76.937157][ T4282] batman_adv: batadv0: Adding interface: batadv_slave_0
[   76.944233][ T4282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.970860][ T4282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   76.986665][ T4268] device hsr_slave_0 entered promiscuous mode
[   76.993198][ T4272] Bluetooth: hci2: command 0x0409 tx timeout
[   77.004899][ T4268] device hsr_slave_1 entered promiscuous mode
[   77.011666][ T4268] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   77.019558][ T4268] Cannot create hsr debugfs directory
[   77.059578][ T4282] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.066587][ T4282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.092849][ T4276] Bluetooth: hci4: command 0x0409 tx timeout
[   77.103727][ T4282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.198304][ T4279] device hsr_slave_0 entered promiscuous mode
[   77.205290][ T4279] device hsr_slave_1 entered promiscuous mode
[   77.212522][ T4279] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   77.220535][ T4279] Cannot create hsr debugfs directory
[   77.250834][ T4282] device hsr_slave_0 entered promiscuous mode
[   77.257972][ T4282] device hsr_slave_1 entered promiscuous mode
[   77.264740][ T4282] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   77.272535][ T4282] Cannot create hsr debugfs directory
[   77.589376][ T4273] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   77.600930][ T4273] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   77.617906][ T4273] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   77.642510][ T4273] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   77.696207][ T4277] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   77.715323][ T4277] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   77.730202][ T4277] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   77.755491][ T4277] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   77.782838][ T4268] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   77.796479][ T4268] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   77.839482][ T4268] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   77.874105][ T4268] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   77.914863][ T4282] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   77.924931][ T4282] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   77.939121][ T4282] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   77.954096][ T4282] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   78.005245][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.052422][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   78.066097][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   78.102248][ T4273] 8021q: adding VLAN 0 to HW filter on device team0
[   78.113170][ T4279] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   78.152222][ T4279] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   78.167073][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   78.176664][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   78.186899][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.194295][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   78.204087][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   78.223931][ T4268] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.231526][ T4279] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   78.247230][ T4279] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   78.276534][ T4268] 8021q: adding VLAN 0 to HW filter on device team0
[   78.288459][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   78.299459][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   78.309341][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.316666][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   78.325231][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   78.337138][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   78.369677][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   78.379217][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   78.390198][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.397292][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   78.406079][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   78.415576][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   78.424694][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   78.433800][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.441623][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   78.450691][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   78.459905][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   78.469217][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   78.479136][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   78.490140][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   78.498845][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   78.534325][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.551381][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   78.564559][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   78.574005][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   78.583650][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   78.593232][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   78.602253][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   78.612466][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   78.627700][ T4273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   78.639831][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   78.659192][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   78.667300][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   78.685055][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   78.695985][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   78.704820][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   78.713721][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   78.721978][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   78.738044][ T4282] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.750389][ T4277] 8021q: adding VLAN 0 to HW filter on device team0
[   78.765073][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   78.774583][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   78.798399][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   78.807050][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   78.828383][ T4276] Bluetooth: hci0: command 0x041b tx timeout
[   78.840984][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   78.859635][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   78.873433][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.880623][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   78.898242][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   78.907652][ T4276] Bluetooth: hci1: command 0x041b tx timeout
[   78.930360][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   78.940395][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   78.950438][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   78.958881][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   78.970090][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   78.978898][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.986049][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   78.997079][ T4282] 8021q: adding VLAN 0 to HW filter on device team0
[   79.003954][ T4276] Bluetooth: hci3: command 0x041b tx timeout
[   79.034335][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   79.068892][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   79.073510][ T4276] Bluetooth: hci2: command 0x041b tx timeout
[   79.085122][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   79.100106][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   79.113706][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.120920][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.147588][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   79.149517][ T4276] Bluetooth: hci4: command 0x041b tx timeout
[   79.176438][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   79.192907][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   79.204684][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.211874][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.222672][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   79.232381][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   79.265136][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   79.283627][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   79.307334][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   79.317051][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   79.326293][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   79.335732][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   79.371225][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   79.389978][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   79.409596][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   79.438765][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   79.448018][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   79.468824][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   79.498694][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   79.526868][ T4279] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.541080][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   79.559323][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   79.574005][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   79.593550][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   79.631149][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   79.648804][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   79.668541][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   79.722027][ T4279] 8021q: adding VLAN 0 to HW filter on device team0
[   79.755197][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   79.769632][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   79.790564][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   79.798610][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   79.813031][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   79.821112][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   79.841515][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0
[   79.888458][ T4268] 8021q: adding VLAN 0 to HW filter on device batadv0
[   79.896035][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   79.920461][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   79.938453][ T4321] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.945718][ T4321] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.968338][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   79.979633][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   79.989418][ T4321] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.996908][ T4321] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.036072][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   80.045397][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   80.070533][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   80.085959][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   80.096513][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   80.156906][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   80.166484][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   80.183627][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   80.196767][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   80.212403][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   80.223472][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   80.237167][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   80.247545][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   80.256234][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   80.305533][ T4279] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   80.319132][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   80.337648][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   80.346449][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   80.360735][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   80.371244][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   80.381219][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   80.390648][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   80.417925][ T4268] device veth0_vlan entered promiscuous mode
[   80.435834][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   80.458042][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   80.465750][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   80.500569][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   80.526728][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   80.535143][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   80.548614][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.563606][ T4268] device veth1_vlan entered promiscuous mode
[   80.572340][ T4273] device veth0_vlan entered promiscuous mode
[   80.625876][ T4273] device veth1_vlan entered promiscuous mode
[   80.678646][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   80.698252][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   80.705764][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   80.721276][ T4268] device veth0_macvtap entered promiscuous mode
[   80.740474][ T4282] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.764287][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   80.773839][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   80.783952][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   80.794715][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   80.804353][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   80.814693][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   80.857971][ T4268] device veth1_macvtap entered promiscuous mode
[   80.880401][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   80.908263][ T4276] Bluetooth: hci0: command 0x040f tx timeout
[   80.918601][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   80.939489][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   80.972990][ T4273] device veth0_macvtap entered promiscuous mode
[   80.987853][ T4276] Bluetooth: hci1: command 0x040f tx timeout
[   81.000130][ T4277] device veth0_vlan entered promiscuous mode
[   81.017081][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.038879][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   81.059194][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   81.067811][ T4276] Bluetooth: hci3: command 0x040f tx timeout
[   81.097000][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   81.106465][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   81.115759][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   81.125720][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   81.135473][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   81.148742][ T4276] Bluetooth: hci2: command 0x040f tx timeout
[   81.165088][ T4273] device veth1_macvtap entered promiscuous mode
[   81.182279][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.195946][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   81.208725][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   81.219245][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   81.228213][ T4276] Bluetooth: hci4: command 0x040f tx timeout
[   81.242116][ T4277] device veth1_vlan entered promiscuous mode
[   81.261050][ T4268] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.275570][ T4268] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.284715][ T4268] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.299806][ T4268] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.330839][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   81.348603][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   81.356188][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   81.382470][ T4279] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.399512][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   81.420424][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.440627][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.460353][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   81.474939][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   81.485401][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   81.521263][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   81.539873][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.555785][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.565833][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   81.588489][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   81.597278][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   81.613407][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   81.642849][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   81.658710][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   81.690386][ T4277] device veth0_macvtap entered promiscuous mode
[   81.705713][ T4273] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.715973][ T4273] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.732411][ T4273] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.741971][ T4273] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.809530][ T4277] device veth1_macvtap entered promiscuous mode
[   81.816713][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   81.827015][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   81.836335][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   81.845905][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   81.908629][   T30] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.916703][   T30] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.932957][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   81.943500][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   81.953142][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   81.961992][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   81.971277][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   81.983085][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   81.991626][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   82.000179][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   82.008863][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   82.019766][ T4282] device veth0_vlan entered promiscuous mode
[   82.039103][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.052204][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.065205][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.076919][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.089024][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.096523][ T4279] device veth0_vlan entered promiscuous mode
[   82.115598][ T4282] device veth1_vlan entered promiscuous mode
[   82.141378][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   82.156634][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   82.165803][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   82.177819][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.193339][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.204243][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.219638][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.233149][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.247247][ T4279] device veth1_vlan entered promiscuous mode
[   82.269702][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   82.279791][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   82.288405][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   82.297065][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   82.330243][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.341150][ T4277] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.350406][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.359100][ T4277] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.368067][ T4277] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.376855][ T4277] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.414670][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   82.423560][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   82.432556][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   82.441349][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   82.452963][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   82.462155][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   82.494412][ T4279] device veth0_macvtap entered promiscuous mode
[   82.504658][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.513397][ T4282] device veth0_macvtap entered promiscuous mode
[   82.536082][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.561880][ T4279] device veth1_macvtap entered promiscuous mode
[   82.584636][ T4282] device veth1_macvtap entered promiscuous mode
[   82.601107][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   82.655575][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.684766][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.695973][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.707287][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.718346][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.729361][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.746801][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.775445][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   82.793343][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   82.814052][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.819900][   T30] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.831686][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.852822][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.864467][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.867837][   T30] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.875298][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.894626][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.914529][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.934441][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.950923][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.961832][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.973500][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.983767][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.998195][ T4276] Bluetooth: hci0: command 0x0419 tx timeout
[   83.010462][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.020670][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.031577][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.043590][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.055572][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.068321][ T4272] Bluetooth: hci1: command 0x0419 tx timeout
[   83.086338][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.098353][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.109292][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.119387][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.130482][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.140574][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.151209][ T4276] Bluetooth: hci3: command 0x0419 tx timeout
[   83.157812][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.169548][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.189568][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   83.202626][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   83.212884][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   83.227321][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   83.230087][ T4272] Bluetooth: hci2: command 0x0419 tx timeout
[   83.246981][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   83.267718][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   83.276862][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   83.296567][ T4282] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.306126][ T4282] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.310248][ T4276] Bluetooth: hci4: command 0x0419 tx timeout
[   83.320404][ T4282] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.335743][ T4282] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.349761][ T4279] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.362187][ T4279] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.371540][ T4279] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.382379][ T4279] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.458256][ T4317] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.472864][ T4317] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.505980][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   83.564299][ T4317] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.576272][ T4317] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.635438][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   83.717315][ T4356] netlink: 'syz.0.1': attribute type 12 has an invalid length.
[   83.777138][ T4321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.814177][ T4321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.884513][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   83.887701][ T4321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.957862][ T4321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.985092][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.033111][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.110256][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.163635][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.210674][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   84.247974][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   84.277374][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   85.120568][ T4368] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   85.495246][ T4373] pit: kvm: requested 24304 ns i8254 timer period limited to 200000 ns
[   85.539711][ T4373] pit: kvm: requested 24304 ns i8254 timer period limited to 200000 ns
[   85.592392][ T4373] pit: kvm: requested 81295 ns i8254 timer period limited to 200000 ns
[   85.622836][ T4373] pit: kvm: requested 134933 ns i8254 timer period limited to 200000 ns
[   85.654505][ T4373] pit: kvm: requested 128228 ns i8254 timer period limited to 200000 ns
[   85.686446][ T4373] pit: kvm: requested 24304 ns i8254 timer period limited to 200000 ns
[   85.712224][ T4373] pit: kvm: requested 128228 ns i8254 timer period limited to 200000 ns
[   85.774759][ T4373] pit: kvm: requested 81295 ns i8254 timer period limited to 200000 ns
[   85.831946][ T4373] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns
[   85.881358][ T4373] pit: kvm: requested 24304 ns i8254 timer period limited to 200000 ns
[   86.317582][ T4310] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   86.520679][ T4310] usb 5-1: Using ep0 maxpacket: 8
[   86.592705][ T4310] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[   86.615067][ T4310] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.636284][ T4310] usb 5-1: Product: syz
[   86.646559][ T4310] usb 5-1: Manufacturer: syz
[   86.663106][ T4310] usb 5-1: SerialNumber: syz
[   86.693041][ T4310] usb 5-1: config 0 descriptor??
[   87.806452][ T4310] dvb_usb_rtl28xxu 5-1:0.0: chip type detection failed -110
[   87.819669][ T4310] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -110
[   87.927427][    C1] sched: RT throttling activated
[   87.929723][   T27] cfg80211: failed to load regulatory.db
[   88.192680][ T4400] loop3: detected capacity change from 0 to 40427
[   88.211637][ T4429] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23'.
[   88.215923][ T4400] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   88.269728][ T4400] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   88.325459][ T4400] F2FS-fs (loop3): invalid crc value
[   88.400438][ T4400] F2FS-fs (loop3): Found nat_bits in checkpoint
[   88.551548][ T4400] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   88.578027][ T4400] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   89.139155][ T4400] overlayfs: failed to resolve './file0': -2
[   89.586405][ T4322] usb 5-1: USB disconnect, device number 2
[   89.862070][ T4458] block device autoloading is deprecated and will be removed.
[   89.871935][ T4457] device syzkaller0 entered promiscuous mode
[   90.027173][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   90.120165][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   90.139098][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   90.227946][ T4461] device bridge_slave_0 left promiscuous mode
[   90.258777][ T4461] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.315042][ T4452] md: could not open device unknown-block(0,0).
[   90.327215][ T4461] device bridge_slave_1 left promiscuous mode
[   90.333851][ T4452] md: md_import_device returned -6
[   90.344151][ T4458] md: md2 stopped.
[   90.354023][ T4461] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.406450][ T4461] bond0: (slave bond_slave_0): Releasing backup interface
[   90.434102][ T4470] loop2: detected capacity change from 0 to 16
[   90.468330][ T4461] bond0: (slave bond_slave_1): Releasing backup interface
[   90.497655][ T4470] erofs: (device loop2): EXPERIMENTAL compressed fragments feature in use. Use at your own risk!
[   90.547134][ T4470] erofs: (device loop2): EXPERIMENTAL global deduplication feature in use. Use at your own risk!
[   90.674809][ T4461] team0: Port device team_slave_0 removed
[   90.726736][ T4461] team0: Port device team_slave_1 removed
[   90.746103][ T4461] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   90.835723][ T4461] batman_adv: batadv0: Removing interface: batadv_slave_0
[   91.747444][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[   91.767454][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[   91.777431][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[   91.787427][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[   91.797443][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[   91.807428][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[   91.817434][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[   91.827436][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[   91.837431][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[   91.847430][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[   91.967717][ T4461] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   91.975364][ T4461] batman_adv: batadv0: Removing interface: batadv_slave_1
[   92.201168][ T4463] team0: Mode changed to "loadbalance"
[   94.909121][    C1] sd 0:0:1:0: [sda] tag#8242 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[   94.919967][    C1] sd 0:0:1:0: [sda] tag#8242 CDB: Read(6) 08 00 00 00 00 00
[   94.992228][    C1] sd 0:0:1:0: [sda] tag#8243 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[   95.002769][    C1] sd 0:0:1:0: [sda] tag#8243 CDB: Read(6) 08 00 00 00 00 00
[   97.662930][ T4322] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   97.857530][ T4322] usb 5-1: Using ep0 maxpacket: 32
[   97.864827][ T4322] usb 5-1: config 0 has an invalid interface number: 188 but max is 0
[   97.889919][ T4322] usb 5-1: config 0 has no interface number 0
[   97.901752][ T4322] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[   97.939242][ T4322] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[   97.963632][ T4322] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.981583][ T4322] usb 5-1: Product: syz
[   97.997568][ T4322] usb 5-1: Manufacturer: syz
[   98.002697][ T4322] usb 5-1: SerialNumber: syz
[   98.070569][ T4322] usb 5-1: config 0 descriptor??
[   98.089156][ T4545] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[   98.315469][ T4545] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[   99.208587][ T4579] Bluetooth: MGMT ver 1.22
[  100.261014][ T4594] kvm: pic: non byte write
[  100.347598][ T4310] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  100.520496][ T4322] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  100.536931][ T4322] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  100.550906][ T4310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  100.581289][ T4310] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  100.591772][ T4322] asix: probe of 5-1:0.188 failed with error -71
[  100.600912][ T4310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.630932][ T4322] usb 5-1: USB disconnect, device number 3
[  100.643183][ T4310] usb 3-1: config 0 descriptor??
[  100.874148][ T4588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  100.888007][ T4588] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  100.914681][ T4310] usbhid 3-1:0.0: can't add hid device: -71
[  100.932897][ T4310] usbhid: probe of 3-1:0.0 failed with error -71
[  100.953231][ T4310] usb 3-1: USB disconnect, device number 2
[  101.516506][ T4606] vivid-001: =================  START STATUS  =================
[  101.541264][ T4310] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  101.556028][ T4606] vivid-001: Radio HW Seek Mode: Bounded
[  101.600638][ T4606] vivid-001: Radio Programmable HW Seek: false
[  101.606899][ T4606] vivid-001: RDS Rx I/O Mode: Block I/O
[  101.631833][ T4606] vivid-001: Generate RBDS Instead of RDS: false
[  101.662791][ T4606] vivid-001: RDS Reception: true
[  101.690785][ T4606] vivid-001: RDS Program Type: 0 inactive
[  101.709844][ T4606] vivid-001: RDS PS Name:  inactive
[  101.735228][ T4606] vivid-001: RDS Radio Text:  inactive
[  101.741817][ T4606] vivid-001: RDS Traffic Announcement: 
[  101.742634][ T4310] usb 3-1: Using ep0 maxpacket: 16
[  101.757540][ T4606] false inactive
[  101.772214][ T4310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  101.786913][ T4606] vivid-001: RDS Traffic Program: false inactive
[  101.790937][ T4310] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.40
[  101.808918][ T4606] 
[  101.811331][ T4606] vivid-001: RDS Music: false inactive
[  101.823546][ T4606] vivid-001: ==================  END STATUS  ==================
[  101.834024][ T4310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.892532][ T4310] usb 3-1: config 0 descriptor??
[  102.324237][ T4310] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0
[  102.338722][ T4310] mcp2221 0003:04D8:00DD.0001: USB HID v0.00 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0
[  102.779448][ T4588] i2c i2c-1: unsupported multi-msg i2c transaction
[  102.787830][ T4601] Zero length message leads to an empty skb
[  102.821032][  T126] usb 3-1: USB disconnect, device number 3
[  103.060631][ T4620] loop4: detected capacity change from 0 to 764
[  103.169700][ T4621] device syzkaller0 entered promiscuous mode
[  104.021974][ T4630] Illegal XDP return value 4292156288 on prog  (id 3) dev syz_tun, expect packet loss!
[  106.740085][ T4658] =======================================================
[  106.740085][ T4658] WARNING: The mand mount option has been deprecated and
[  106.740085][ T4658]          and is ignored by this kernel. Remove the mand
[  106.740085][ T4658]          option from the mount to silence this warning.
[  106.740085][ T4658] =======================================================
[  106.816851][ T4644] loop4: detected capacity change from 0 to 764
[  106.855516][ T4659] device vlan2 entered promiscuous mode
[  106.873948][ T4659] device bond0 entered promiscuous mode
[  106.968341][ T4658] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  108.628165][ T4684] loop0: detected capacity change from 0 to 256
[  108.717169][ T4684] FAT-fs (loop0): Directory bread(block 64) failed
[  108.724263][ T4684] FAT-fs (loop0): Directory bread(block 65) failed
[  108.731377][ T4684] FAT-fs (loop0): Directory bread(block 66) failed
[  108.738100][ T4684] FAT-fs (loop0): Directory bread(block 67) failed
[  108.745155][ T4684] FAT-fs (loop0): Directory bread(block 68) failed
[  108.751890][ T4684] FAT-fs (loop0): Directory bread(block 69) failed
[  108.758874][ T4684] FAT-fs (loop0): Directory bread(block 70) failed
[  108.765518][ T4684] FAT-fs (loop0): Directory bread(block 71) failed
[  108.772648][ T4684] FAT-fs (loop0): Directory bread(block 72) failed
[  108.779346][ T4684] FAT-fs (loop0): Directory bread(block 73) failed
[  108.849767][ T4685] capability: warning: `syz.1.94' uses 32-bit capabilities (legacy support in use)
[  109.541327][ T4693] netlink: 4 bytes leftover after parsing attributes in process `syz.3.95'.
[  109.550469][ T4693] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  109.701345][ T4698] process 'syz.0.96' launched '/dev/fd/-1' with NULL argv: empty string added
[  109.764355][ T4693] batman_adv: batadv0: Removing interface: batadv_slave_1
[  112.016048][ T4729] loop0: detected capacity change from 0 to 512
[  112.703282][ T4729] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.109: inode has both inline data and extents flags
[  112.756558][ T4736] syz.3.108 uses obsolete (PF_INET,SOCK_PACKET)
[  112.821238][ T4729] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.109: couldn't read orphan inode 15 (err -117)
[  112.967750][ T4729] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  113.156881][ T4729] syz.0.109 (pid 4729) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  113.471939][ T4742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.111'.
[  113.515795][ T4273] EXT4-fs (loop0): unmounting filesystem.
[  113.541492][ T4742] device bridge_slave_1 left promiscuous mode
[  113.590811][ T4742] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.679461][ T4742] device bridge_slave_0 left promiscuous mode
[  113.820870][ T4742] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.622994][ T4767] Cannot find add_set index 0 as target
[  116.311211][ T4768] netlink: 20 bytes leftover after parsing attributes in process `syz.0.120'.
[  116.379828][   T26] audit: type=1800 audit(1774635516.007:2): pid=4761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.119" name="file0" dev="fuse" ino=3 res=0 errno=0
[  119.461762][ T4812] netlink: 'syz.3.132': attribute type 1 has an invalid length.
[  119.941160][ T4815] device macvlan2 entered promiscuous mode
[  119.959717][ T4815] device bond1 entered promiscuous mode
[  119.966202][ T4815] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  120.001190][ T4815] device bond1 left promiscuous mode
[  122.026605][ T4807] loop2: detected capacity change from 0 to 40427
[  122.260967][ T4807] F2FS-fs (loop2): invalid crc value
[  122.390242][ T4807] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-4)
[  123.583752][ T4848] loop2: detected capacity change from 0 to 2048
[  123.818441][ T4848] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  123.967495][  T126] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  124.199265][  T126] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  124.217690][  T126] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.228996][ T4627] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm kworker/u4:16: bg 0: block 234: padding at end of block bitmap is not set
[  124.287679][ T4627] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28
[  124.302030][ T4627] EXT4-fs (loop2): This should not happen!! Data will be lost
[  124.302030][ T4627] 
[  124.304564][  T126] usb 2-1: config 0 descriptor??
[  124.323329][ T4627] EXT4-fs (loop2): Total free blocks count 0
[  124.331694][ T4627] EXT4-fs (loop2): Free/Dirty block details
[  124.341713][ T4627] EXT4-fs (loop2): free_blocks=0
[  124.346844][ T4627] EXT4-fs (loop2): dirty_blocks=16
[  124.353680][ T4627] EXT4-fs (loop2): Block reservation details
[  124.360942][  T126] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  124.373725][ T4627] EXT4-fs (loop2): i_reserved_data_blocks=1
[  124.394149][ T4279] EXT4-fs (loop2): unmounting filesystem.
[  125.433643][ T4885] device ip6gre1 entered promiscuous mode
[  125.896328][ T4899] loop2: detected capacity change from 0 to 128
[  125.937710][ T4640] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  126.207909][ T4640] usb 5-1: Using ep0 maxpacket: 32
[  126.292019][ T4640] usb 5-1: config 0 has an invalid interface number: 188 but max is 0
[  126.397844][ T4899] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  126.521928][ T4640] usb 5-1: config 0 has no interface number 0
[  126.528799][ T4640] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  126.556501][ T4640] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  126.606956][ T4640] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.623168][ T4899] ext4 filesystem being mounted at /25/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  126.674539][ T4640] usb 5-1: Product: syz
[  126.709511][ T4640] usb 5-1: Manufacturer: syz
[  126.734148][ T4899] EXT4-fs (loop2): shut down requested (2)
[  126.746141][ T4640] usb 5-1: SerialNumber: syz
[  126.755313][ T4899] fscrypt (loop2, inode 12): Error -5 getting encryption context
[  126.835822][ T4640] usb 5-1: config 0 descriptor??
[  126.848677][ T4890] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  127.038579][ T4279] EXT4-fs (loop2): unmounting filesystem.
[  127.130843][ T4910] Cannot find add_set index 0 as target
[  127.221472][  T126] usb 2-1: USB disconnect, device number 2
[  127.674217][ T4890] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  127.877140][ T4918] device syzkaller0 entered promiscuous mode
[  127.992026][ T4920] tipc: Failed to remove unknown binding: 66,0,0/0:3413766902/3413766904
[  128.001393][ T4920] tipc: Failed to remove unknown binding: 66,0,0/0:3413766902/3413766903
[  128.026965][ T4920] tipc: Failed to remove unknown binding: 66,0,0/0:3413766902/3413766904
[  128.048579][ T4920] tipc: Failed to remove unknown binding: 66,0,0/0:3413766902/3413766903
[  128.391188][ T4928] device syzkaller0 entered promiscuous mode
[  128.668251][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.3
[  129.396227][ T4924] loop0: detected capacity change from 0 to 40427
[  129.419786][ T4924] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  129.539779][ T4924] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  129.761144][ T4924] F2FS-fs (loop0): invalid crc_offset: 33558524
[  130.109143][ T4924] F2FS-fs (loop0): Found nat_bits in checkpoint
[  130.209139][ T4640] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71
[  130.241892][ T4640] asix: probe of 5-1:0.188 failed with error -71
[  130.319997][ T4640] usb 5-1: USB disconnect, device number 4
[  130.373338][ T4924] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  130.394317][ T4924] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  131.649001][ T4974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.175'.
[  131.692365][ T4974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.175'.
[  131.787588][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.3
[  131.797858][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.3
[  131.947083][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  134.029766][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  134.036140][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  134.132581][ T4991] device syzkaller0 entered promiscuous mode
[  134.300471][ T4998] loop3: detected capacity change from 0 to 1024
[  134.454597][ T4998] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  134.828144][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 100.1.1.4
[  135.238525][ T4998] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  135.250935][ T5007] netlink: 'syz.2.187': attribute type 4 has an invalid length.
[  135.370403][   T26] audit: type=1800 audit(1774635535.003:3): pid=4998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.182" name="file1" dev="loop3" ino=15 res=0 errno=0
[  135.457627][   T26] audit: type=1800 audit(1774635535.083:4): pid=4998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.182" name="file1" dev="loop3" ino=15 res=0 errno=0
[  135.470877][ T4998] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  135.501909][ T4998] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  135.520509][ T5013] netlink: 76 bytes leftover after parsing attributes in process `syz.0.188'.
[  135.557684][    T7] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  135.698700][ T5015] netlink: 'syz.0.189': attribute type 1 has an invalid length.
[  135.736552][ T5015] 8021q: adding VLAN 0 to HW filter on device bond1
[  135.747772][    T7] usb 2-1: Using ep0 maxpacket: 32
[  135.768915][    T7] usb 2-1: config 0 has an invalid interface number: 188 but max is 0
[  135.785021][    T7] usb 2-1: config 0 has no interface number 0
[  135.791934][    T7] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  135.814399][ T5015] device ipvlan2 entered promiscuous mode
[  135.835706][    T7] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  135.879459][    T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.889762][ T5015] bond1: (slave ip6gretap1): making interface the new active one
[  135.911925][ T5015] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[  135.922628][    T7] usb 2-1: Product: syz
[  135.930310][    T7] usb 2-1: Manufacturer: syz
[  135.935540][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  135.947697][ T4277] EXT4-fs (loop3): unmounting filesystem.
[  135.960622][    T7] usb 2-1: SerialNumber: syz
[  135.992038][    T7] usb 2-1: config 0 descriptor??
[  136.005770][ T5009] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  136.189228][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  136.199143][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  136.231633][ T5009] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  136.547077][ T5026] loop4: detected capacity change from 0 to 512
[  136.575905][ T5026] EXT4-fs: Ignoring removed nobh option
[  136.581849][ T5026] EXT4-fs: Ignoring removed oldalloc option
[  136.677578][  T129] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  136.744649][ T5026] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  136.907458][  T129] usb 3-1: Using ep0 maxpacket: 32
[  136.930033][  T129] usb 3-1: config 0 has an invalid interface number: 196 but max is 0
[  137.042100][  T129] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  137.217233][  T129] usb 3-1: config 0 has no interface number 0
[  137.228004][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.5
[  137.237664][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 172.30.0.5
[  137.253930][  T129] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 16
[  137.487527][  T129] usb 3-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  137.529710][  T129] usb 3-1: config 0 interface 196 has no altsetting 0
[  137.554785][  T129] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a
[  137.620721][  T129] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.649719][  T129] usb 3-1: Product: syz
[  137.664277][  T129] usb 3-1: Manufacturer: syz
[  137.675238][  T129] usb 3-1: SerialNumber: syz
[  137.692631][  T129] usb 3-1: config 0 descriptor??
[  137.705636][ T5024] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  137.895371][ T4351] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  137.953599][  T129] ipheth 3-1:0.196: Unable to find endpoints
[  137.963189][  T129] usb 3-1: USB disconnect, device number 4
[  139.357460][ T4351] usb 5-1: Using ep0 maxpacket: 16
[  139.389799][ T4351] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  139.441195][ T4351] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  139.485768][ T4351] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  139.569134][ T4351] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.577208][ T4351] usb 5-1: Product: syz
[  139.664160][    T7] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  139.680022][    T7] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9
[  139.691334][    T7] asix: probe of 2-1:0.188 failed with error -71
[  139.708461][    T7] usb 2-1: USB disconnect, device number 3
[  139.714619][ T4351] usb 5-1: Manufacturer: syz
[  139.737490][ T4351] usb 5-1: SerialNumber: syz
[  139.761791][ T5045] loop2: detected capacity change from 0 to 256
[  139.779017][ T5045] FAT-fs (loop2): Unrecognized mount option "shortnameH�in95" or missing value
[  139.788484][ T4351] usb 5-1: can't set config #1, error -71
[  139.797319][ T4282] EXT4-fs (loop4): unmounting filesystem.
[  139.840510][ T4351] usb 5-1: USB disconnect, device number 5
[  140.632123][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  140.643535][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.5
[  140.653244][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.5
[  140.862934][ T5056] binder: BINDER_SET_CONTEXT_MGR already set
[  140.945646][ T5056] binder: 5049:5056 ioctl 4018620d 200000004a80 returned -16
[  141.320112][ T5066] loop4: detected capacity change from 0 to 2048
[  141.639849][ T5066] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  141.901436][ T5072] random: crng reseeded on system resumption
[  142.459998][ T5074] loop1: detected capacity change from 0 to 256
[  142.835940][ T5083] comedi comedi3: board detection failed
[  142.918078][   T22] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[  143.789207][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.5
[  143.799067][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.5
[  143.809107][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  143.819014][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  145.046064][ T5074] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  145.087614][ T5074] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  145.149568][ T5074] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  145.373780][ T5089] device syzkaller0 entered promiscuous mode
[  145.540284][ T5091] netlink: 136 bytes leftover after parsing attributes in process `syz.4.212'.
[  145.568371][ T5091] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[  147.077513][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  147.087739][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  147.097657][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.5
[  147.108487][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.5
[  148.791884][ T5131] input: syz0 as /devices/virtual/input/input5
[  149.094476][ T5137] random: crng reseeded on system resumption
[  149.291761][ T5142] loop2: detected capacity change from 0 to 256
[  149.487872][ T5142] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  149.584217][ T5142] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  149.745923][ T5142] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  150.267512][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.5
[  150.277426][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.5
[  151.387713][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  152.638289][ T5160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.228'.
[  152.807569][ T5160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.228'.
[  153.307819][ T5166] netlink: 'syz.1.228': attribute type 4 has an invalid length.
[  153.315528][ T5166] netlink: 152 bytes leftover after parsing attributes in process `syz.1.228'.
[  153.446595][ T5166] .`: renamed from bond0
[  153.467518][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.5
[  153.477226][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.5
[  154.507638][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  154.517592][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  154.725826][ T5180] loop1: detected capacity change from 0 to 128
[  154.903312][ T5181] syz.1.234: attempt to access beyond end of device
[  154.903312][ T5181] loop1: rw=2049, sector=145, nr_sectors = 344 limit=128
[  155.511471][ T4911] kworker/u4:20: attempt to access beyond end of device
[  155.511471][ T4911] loop1: rw=1, sector=150, nr_sectors = 1 limit=128
[  155.740766][ T4911] Buffer I/O error on dev loop1, logical block 150, lost async page write
[  156.587716][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.5
[  156.597468][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.5
[  157.627577][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  157.639050][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  159.707570][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.5
[  159.717333][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.5
[  160.907680][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  162.827502][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.5
[  162.837215][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.5
[  164.027630][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  164.037498][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  165.167534][  T126] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  165.367551][  T126] usb 4-1: Using ep0 maxpacket: 32
[  165.375994][  T126] usb 4-1: config 0 has no interfaces?
[  165.404142][  T126] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  165.434102][  T126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.466683][  T126] usb 4-1: Product: syz
[  165.484739][  T126] usb 4-1: Manufacturer: syz
[  165.501615][  T126] usb 4-1: SerialNumber: syz
[  165.535922][  T126] usb 4-1: config 0 descriptor??
[  165.798582][ T5294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  165.837696][ T5294] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  165.875415][  T129] usb 4-1: USB disconnect, device number 3
[  165.948781][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.5
[  165.958442][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.5
[  166.021759][ T5302] loop4: detected capacity change from 0 to 256
[  166.112718][ T5302] FAT-fs (loop4): Directory bread(block 64) failed
[  166.140017][ T5302] FAT-fs (loop4): Directory bread(block 65) failed
[  166.180584][ T5302] FAT-fs (loop4): Directory bread(block 66) failed
[  166.207620][ T5302] FAT-fs (loop4): Directory bread(block 67) failed
[  166.221651][ T5302] FAT-fs (loop4): Directory bread(block 68) failed
[  166.229375][ T5302] FAT-fs (loop4): Directory bread(block 69) failed
[  166.236174][ T5302] FAT-fs (loop4): Directory bread(block 70) failed
[  166.301458][ T5302] FAT-fs (loop4): Directory bread(block 71) failed
[  166.317985][ T5302] FAT-fs (loop4): Directory bread(block 72) failed
[  166.332081][ T5302] FAT-fs (loop4): Directory bread(block 73) failed
[  167.033322][ T5308] FAT-fs (loop4): error, corrupted directory (invalid entries)
[  167.147543][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  167.157442][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  167.258125][ T5308] FAT-fs (loop4): Filesystem has been set read-only
[  168.149585][ T5315] loop3: detected capacity change from 0 to 1024
[  168.227719][ T5315] EXT4-fs: Ignoring removed oldalloc option
[  168.308361][ T5315] EXT4-fs: Ignoring removed bh option
[  168.380410][ T5315] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  168.515277][ T5315] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  168.821041][ T5323] EXT4-fs (loop3): shut down requested (0)
[  169.067577][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.5
[  169.077436][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.5
[  169.673021][ T4277] EXT4-fs (loop3): unmounting filesystem.
[  169.962396][ T5334] device syzkaller0 entered promiscuous mode
[  170.347513][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  170.357718][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  172.471424][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.5
[  172.481147][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.5
[  173.183231][ T5360] device syzkaller0 entered promiscuous mode
[  173.467514][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  173.477431][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  173.521730][ T5372] loop4: detected capacity change from 0 to 1024
[  173.535429][ T5372] EXT4-fs: Ignoring removed oldalloc option
[  173.544313][ T5372] EXT4-fs: Ignoring removed bh option
[  173.564020][ T5372] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  173.597184][ T5371] 8021q: adding VLAN 0 to HW filter on device bond2
[  173.634116][ T5372] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  173.842971][ T5377] bond2: (slave ip6gretap1): making interface the new active one
[  173.883239][ T5377] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link
[  173.955769][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready
[  173.998933][ T5371] device bond2 entered promiscuous mode
[  174.065427][ T5380] EXT4-fs (loop4): shut down requested (0)
[  174.117139][ T5371] device ip6gretap1 entered promiscuous mode
[  174.720437][ T5379] device bond2 left promiscuous mode
[  174.725811][ T5379] device ip6gretap1 left promiscuous mode
[  174.831449][ T4282] EXT4-fs (loop4): unmounting filesystem.
[  174.859136][ T5379] 8021q: adding VLAN 0 to HW filter on device bond2
[  175.627601][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.5
[  175.637627][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.5
[  175.676866][ T5395] loop4: detected capacity change from 0 to 512
[  175.688484][ T5395] EXT4-fs: Ignoring removed nomblk_io_submit option
[  176.004545][ T5395] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8817e02c, mo2=0002]
[  176.299686][ T5395] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.293: invalid indirect mapped block 2683928664 (level 1)
[  176.320160][ T5395] EXT4-fs (loop4): Remounting filesystem read-only
[  176.330802][ T5395] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.293: bg 0: block 361: padding at end of block bitmap is not set
[  176.347134][ T5395] EXT4-fs (loop4): Remounting filesystem read-only
[  176.354293][ T5395] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  176.367754][ T5395] EXT4-fs (loop4): Remounting filesystem read-only
[  176.379546][ T5395] EXT4-fs (loop4): 1 truncate cleaned up
[  176.385912][ T5395] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  176.775472][ T4282] EXT4-fs (loop4): unmounting filesystem.
[  176.914807][ T5399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.305'.
[  176.956371][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready
[  176.973612][ T5405] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  176.981608][ T5405] IPv6: NLM_F_CREATE should be set when creating new route
[  177.707576][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  177.717408][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  177.784265][ T5405] bridge0: port 2(bridge_slave_1) entered disabled state
[  177.791960][ T5405] bridge0: port 1(bridge_slave_0) entered disabled state
[  177.996680][ T5435] loop1: detected capacity change from 0 to 512
[  178.041909][ T5435] EXT4-fs (loop1): 1 truncate cleaned up
[  178.051151][ T5435] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  178.078373][ T5435] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  178.143206][ T4268] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0
[  178.201543][ T4268] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor: bg 0: block 465: padding at end of block bitmap is not set
[  178.226398][ T4268] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  178.236423][ T4268] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 234881024 (level 0)
[  178.285617][ T4268] EXT4-fs (loop1): unmounting filesystem.
[  178.564187][ T5405] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  178.603263][ T5405] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  178.747565][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.5
[  178.757415][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.5
[  179.135116][ T5405] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  179.145801][ T5405] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  179.155412][ T5405] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  179.164418][ T5405] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  182.552451][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  182.556694][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.5
[  182.562831][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  182.573088][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.5
[  183.652275][ T5475] loop1: detected capacity change from 0 to 32768
[  184.431486][ T5475] read_mapping_page failed!
[  184.436939][ T5475] ERROR: (device loop1): txCommit: 
[  184.436939][ T5475] 
[  184.849946][ T4268] ERROR: (device loop1): diFree: numfree > numinos
[  184.849946][ T4268] 
[  185.707654][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.5
[  185.717544][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.5
[  188.667624][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  188.980419][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.5
[  188.990146][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.5
[  189.070866][ T5503] loop1: detected capacity change from 0 to 32768
[  189.100834][ T5503] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.322 (5503)
[  189.124308][ T5510] loop2: detected capacity change from 0 to 16
[  189.154352][ T5503] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  189.165173][ T5503] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  189.174043][ T5503] BTRFS info (device loop1): setting nodatacow, compression disabled
[  189.182962][ T5503] BTRFS info (device loop1): enabling auto defrag
[  189.189618][ T5503] BTRFS info (device loop1): max_inline at 0
[  189.195739][ T5503] BTRFS info (device loop1): using free space tree
[  189.244804][ T5510] erofs: (device loop2): mounted with root inode @ nid 36.
[  190.318621][ T5503] BTRFS info (device loop1): scrub: started on devid 1
[  190.333248][ T5503] BTRFS info (device loop1): left=0, need=98304, flags=2
[  190.340867][ T5503] BTRFS info (device loop1): space_info SYSTEM (sub-group id 0) has 0 free, is not full
[  190.351311][ T5503] BTRFS info (device loop1): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0
[  190.365108][ T5503] BTRFS info (device loop1): global_block_rsv: size 1441792 reserved 1441792
[  190.374600][ T5503] BTRFS info (device loop1): trans_block_rsv: size 0 reserved 0
[  190.382401][ T5503] BTRFS info (device loop1): chunk_block_rsv: size 0 reserved 0
[  190.390141][ T5503] BTRFS info (device loop1): delayed_block_rsv: size 0 reserved 0
[  190.399234][ T5503] BTRFS info (device loop1): delayed_refs_rsv: size 0 reserved 0
[  190.426240][ T5503] BTRFS info (device loop1): scrub: finished on devid 1 with status: 0
[  191.507653][ T5557] netlink: 12 bytes leftover after parsing attributes in process `syz.0.330'.
[  191.581261][ T4268] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  191.680910][ T5557] bond2: (slave syz_tun): Enslaving as an active interface with an up link
[  192.187496][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  192.827449][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.5
[  194.641081][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  194.648645][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  195.707530][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  195.718579][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  196.747616][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.5
[  196.757420][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.5
[  199.084405][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  199.094212][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  200.657982][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.5
[  200.668057][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.5
[  201.977144][ T5651] loop3: detected capacity change from 0 to 128
[  202.009385][ T5651] ext4: Unknown parameter 'noacl'
[  202.717962][ T4272] Bluetooth: hci1: command 0x0406 tx timeout
[  202.728385][ T4272] Bluetooth: hci0: command 0x0406 tx timeout
[  202.737283][ T4272] Bluetooth: hci3: command 0x0406 tx timeout
[  202.745151][ T4272] Bluetooth: hci4: command 0x0406 tx timeout
[  202.752269][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  202.752678][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  202.772727][ T4276] Bluetooth: hci2: command 0x0406 tx timeout
[  203.119754][ T5658] loop3: detected capacity change from 0 to 64
[  203.263815][ T5660] device syzkaller0 entered promiscuous mode
[  205.147587][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.5
[  207.237571][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  207.628732][ T5700] Invalid option length (57448) for dns_resolver key
[  208.267576][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.5
[  208.277425][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.5
[  210.587505][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  210.597455][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  211.627644][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.5
[  211.637677][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.5
[  212.137611][ T5666] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  212.146569][ T5666] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  212.162825][ T5666] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  212.194792][ T5666] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  212.637992][ T5666] device ip6gre1 left promiscuous mode
[  212.694009][ T5666] device ipvlan2 left promiscuous mode
[  212.805080][ T5687] netlink: 'syz.1.361': attribute type 10 has an invalid length.
[  212.840856][ T5687] wlan1: mtu less than device minimum
[  212.846368][ T5687] .`: (slave wlan1): Error -22 calling dev_set_mtu
[  213.293293][ T5748] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING
[  213.707563][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  213.717400][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  214.156553][ T5759] netlink: 'syz.3.374': attribute type 1 has an invalid length.
[  214.370886][ T5766] bond3: (slave bridge1): making interface the new active one
[  214.478130][ T5766] bond3: (slave bridge1): Enslaving as an active interface with an up link
[  214.747955][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.5
[  214.758359][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.5
[  215.326184][ T5770] bond3: (slave bridge2): Enslaving as an active interface with a down link
[  216.748983][ T5792] overlayfs: failed to clone upperpath
[  216.827490][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  216.837275][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  217.869320][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.5
[  217.879160][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.5
[  218.009731][ T5816] loop4: detected capacity change from 0 to 64
[  219.948924][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  219.958717][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  220.987914][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.5
[  220.997834][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.5
[  222.580187][ T5863] bond2: (slave syz_tun): Releasing backup interface
[  222.634388][ T5868] loop3: detected capacity change from 0 to 256
[  222.704307][ T5868] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x0726f69c, utbl_chksum : 0xe619d30d)
[  222.994540][ T5870] syz.3.392: attempt to access beyond end of device
[  222.994540][ T5870] loop3: rw=0, sector=34359738488, nr_sectors = 8 limit=256
[  223.011700][   T26] audit: type=1800 audit(1774635622.623:5): pid=5870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.392" name="file1" dev="loop3" ino=1048601 res=0 errno=0
[  223.387639][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  223.397547][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  224.439289][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.5
[  224.449110][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.5
[  225.474868][ T5879] bridge0: port 2(bridge_slave_1) entered disabled state
[  225.482564][ T5879] bridge0: port 1(bridge_slave_0) entered disabled state
[  226.507572][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  226.517470][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  226.697193][ T5910] loop4: detected capacity change from 0 to 128
[  227.547553][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.5
[  227.557298][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.5
[  227.740016][ T5879] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  227.938660][ T5879] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  227.982911][ T5879] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  227.993740][ T5879] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  228.015652][ T5879] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  229.381102][ T5937] loop4: detected capacity change from 0 to 64
[  229.628950][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  229.638812][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  230.521043][ T5943] device syzkaller0 entered promiscuous mode
[  230.667762][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.5
[  230.677704][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.5
[  232.965056][ T5976] 0: reclassify loop, rule prio 0, protocol 700
[  233.307532][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  233.787443][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.5
[  233.797740][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.5
[  235.514931][ T6007] binder: 6006:6007 ioctl 4018620d 0 returned -22
[  236.427511][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  236.437499][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  236.529453][ T6021] device syzkaller0 entered promiscuous mode
[  237.557684][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.5
[  239.547535][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  239.557429][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  240.807510][ T5432] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  241.017596][ T5432] usb 2-1: Using ep0 maxpacket: 16
[  241.028980][ T5432] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  241.101289][ T5432] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  241.161613][ T5432] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  241.199766][ T5432] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  241.239755][ T5432] usb 2-1: Product: syz
[  241.250983][ T5432] usb 2-1: Manufacturer: syz
[  241.397436][ T5432] usb 2-1: SerialNumber: syz
[  241.524897][ T6065] netlink: 'syz.2.433': attribute type 21 has an invalid length.
[  241.534207][ T6065] netlink: 'syz.2.433': attribute type 6 has an invalid length.
[  241.542076][ T6065] netlink: 132 bytes leftover after parsing attributes in process `syz.2.433'.
[  241.551326][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.5
[  241.551735][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.5
[  242.199477][ T5432] usb 2-1: 0:2 : does not exist
[  242.230730][ T5432] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  242.382540][ T5432] usb 2-1: USB disconnect, device number 4
[  243.628213][ T6076] tipc: Started in network mode
[  243.633742][ T6076] tipc: Node identity 84e, cluster identity 4711
[  243.649839][ T4396] udevd[4396]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  243.697668][ T6076] tipc: Node number set to 2126
[  243.741984][ T6079] netlink: 'syz.0.436': attribute type 17 has an invalid length.
[  243.751858][ T6079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.436'.
[  243.794392][ T6079] 8021q: adding VLAN 0 to HW filter on device bond0
[  244.200080][ T6092] device syzkaller0 entered promiscuous mode
[  244.773059][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  245.787493][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.5
[  248.667647][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  248.802290][ T6125] device syzkaller0 entered promiscuous mode
[  249.067484][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.5
[  249.077677][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.5
[  252.197420][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.5
[  252.207376][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.5
[  252.907488][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  253.544687][ T6172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.458'.
[  255.792187][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  255.798618][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  256.027590][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  256.037654][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.5
[  256.385941][ T6211] virt_wifi0 speed is unknown, defaulting to 1000
[  256.393172][ T6211] virt_wifi0 speed is unknown, defaulting to 1000
[  256.412140][ T6211] virt_wifi0 speed is unknown, defaulting to 1000
[  256.643424][ T6211] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  256.663227][ T6211] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  256.709185][ T6211] virt_wifi0 speed is unknown, defaulting to 1000
[  256.737119][ T6211] virt_wifi0 speed is unknown, defaulting to 1000
[  256.756822][ T6211] virt_wifi0 speed is unknown, defaulting to 1000
[  257.367403][ T6211] virt_wifi0 speed is unknown, defaulting to 1000
[  257.374954][ T6211] virt_wifi0 speed is unknown, defaulting to 1000
[  257.809460][ T6215] loop1: detected capacity change from 0 to 32768
[  257.984486][ T6215] XFS (loop1): Mounting V5 Filesystem
[  258.094592][ T6234] loop4: detected capacity change from 0 to 512
[  258.132058][ T6215] XFS (loop1): Ending clean mount
[  258.152382][ T6237] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (13)
[  258.154305][ T6215] XFS (loop1): Quotacheck needed: Please wait.
[  258.203735][ T6234] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  258.305022][ T6215] XFS (loop1): Quotacheck: Done.
[  259.242083][ T4268] XFS (loop1): Unmounting Filesystem
[  259.378751][ T4625] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  259.751154][ T6251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.473'.
[  260.107440][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.5
[  260.117400][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  260.527077][ T6256] loop2: detected capacity change from 0 to 256
[  260.740206][ T6256] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  261.540752][ T6256] exFAT-fs (loop2): error, invalid access to FAT (entry 0x00000005) bogus content (0x0009ffff)
[  261.597657][ T6256] exFAT-fs (loop2): failed to initialize root inode
[  261.725202][ T6264] loop3: detected capacity change from 0 to 1024
[  261.896993][ T6264] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  262.264920][ T6256] loop2: detected capacity change from 0 to 1024
[  262.393953][ T4277] EXT4-fs (loop3): unmounting filesystem.
[  263.402807][ T6279] device syzkaller0 entered promiscuous mode
[  263.417979][ T6279] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  263.500111][ T6278] tipc: Resetting bearer <eth:syzkaller0>
[  263.645767][ T6278] tipc: Disabling bearer <eth:syzkaller0>
[  263.804837][ T6281] loop3: detected capacity change from 0 to 4096
[  264.347562][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.5
[  264.888280][ T6281] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  265.224296][ T6281] ntfs3: loop3: Failed to load $Extend.
[  265.589018][ T6296] device bond0 entered promiscuous mode
[  265.617801][ T6296] device bond_slave_0 entered promiscuous mode
[  265.624501][ T6296] device bond_slave_1 entered promiscuous mode
[  266.135410][ T6296] device batadv0 entered promiscuous mode
[  266.174304][ T6296] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  266.197404][ T6296] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  266.208430][ T6296] 8021q: adding VLAN 0 to HW filter on device hsr1
[  266.783089][ T6312] netlink: 8 bytes leftover after parsing attributes in process `syz.4.488'.
[  268.907573][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  269.058540][ T6323] device syzkaller0 entered promiscuous mode
[  269.089752][ T6331] netlink: 4 bytes leftover after parsing attributes in process `syz.3.493'.
[  269.105217][ T6331] device macvtap1 entered promiscuous mode
[  269.111190][ T6331] device bond0 entered promiscuous mode
[  269.116803][ T6331] device bond_slave_0 entered promiscuous mode
[  269.123205][ T6331] device bond_slave_1 entered promiscuous mode
[  269.129535][ T4351] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  269.142735][ T6331] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  270.056106][ T4351] usb 2-1: Using ep0 maxpacket: 8
[  270.076728][ T6333] device bond0 left promiscuous mode
[  270.083078][ T6333] device bond_slave_0 left promiscuous mode
[  270.090922][ T6333] device bond_slave_1 left promiscuous mode
[  270.101130][ T4351] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  270.111714][ T4351] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  270.126047][ T4351] usb 2-1: Product: syz
[  270.130567][ T4351] usb 2-1: Manufacturer: syz
[  270.135443][ T4351] usb 2-1: SerialNumber: syz
[  270.181737][ T4351] usb 2-1: config 0 descriptor??
[  270.395451][ T6342] loop2: detected capacity change from 0 to 256
[  270.453183][ T4351] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  270.519391][ T6342] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x0726f69c, utbl_chksum : 0xe619d30d)
[  272.062920][ T4351] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -110
[  272.759368][   T26] audit: type=1800 audit(1774635671.973:6): pid=6356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.496" name="file1" dev="loop2" ino=1048604 res=0 errno=0
[  272.827599][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  273.432835][ T4640] usb 2-1: USB disconnect, device number 5
[  273.498068][ T6358] xt_recent: Unsupported userspace flags (000000de)
[  273.753966][ T6362] device syzkaller0 entered promiscuous mode
[  275.025637][ T6376] Cannot find add_set index 0 as target
[  275.947490][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  276.312332][ T6379] sctp: failed to load transform for md5: -2
[  277.661401][ T6410] device syzkaller0 entered promiscuous mode
[  278.967673][ T4640] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  279.067487][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  279.077541][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  279.201126][ T6424] overlayfs: unrecognized mount option "/" or missing value
[  279.318956][ T4640] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  279.393397][ T4640] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  279.509123][ T4640] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  279.538250][ T4640] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  281.932163][ T6451] loop1: detected capacity change from 0 to 128
[  282.033723][ T6451] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  282.187813][ T6451] ext4 filesystem being mounted at /104/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  283.201663][ T4268] EXT4-fs (loop1): unmounting filesystem.
[  283.307579][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  283.670400][ T4640] usb 4-1: can't set config #27, error -71
[  283.687450][ T4640] usb 4-1: USB disconnect, device number 4
[  286.427486][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  286.437412][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  289.547450][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  289.557491][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  292.667459][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  292.677520][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  295.797491][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  295.807475][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  295.914157][ T6556] bridge1: the hash_elasticity option has been deprecated and is always 16
[  297.153328][ T6562] loop4: detected capacity change from 0 to 40427
[  297.179124][ T6562] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  297.186895][ T6562] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  297.196736][ T6562] F2FS-fs (loop4): invalid crc value
[  297.238681][ T6562] F2FS-fs (loop4): Found nat_bits in checkpoint
[  297.286356][ T6562] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  297.294483][ T6562] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  298.907451][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  298.920195][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  298.958697][ T6577] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  303.707461][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  304.783186][ T6619] netlink: 'syz.3.561': attribute type 10 has an invalid length.
[  304.801611][ T6619] 8021q: adding VLAN 0 to HW filter on device batadv0
[  304.813888][ T6619] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  306.247543][ T4640] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  306.607707][ T4640] usb 4-1: Using ep0 maxpacket: 16
[  307.189307][ T4640] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  307.239309][ T4640] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  307.285011][ T4640] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  307.451426][ T6624] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  307.459614][ T4640] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  307.478799][ T4640] usb 4-1: Product: syz
[  307.483128][ T4640] usb 4-1: Manufacturer: syz
[  307.488238][ T4640] usb 4-1: SerialNumber: syz
[  307.552921][ T6635] sd 0:0:1:0: device reset
[  307.787442][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  308.243821][ T6624] 8021q: adding VLAN 0 to HW filter on device team0
[  308.301200][ T6624] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  308.512195][ T4640] usb 4-1: 0:2 : does not exist
[  308.555971][ T4640] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  309.772625][ T4640] usb 4-1: USB disconnect, device number 5
[  309.905518][ T6646] netlink: 4 bytes leftover after parsing attributes in process `syz.1.569'.
[  309.970756][ T6646] device macvtap1 entered promiscuous mode
[  309.992038][ T6646] device .` entered promiscuous mode
[  310.000162][ T6646] device bond_slave_0 entered promiscuous mode
[  310.023792][ T6646] device bond_slave_1 entered promiscuous mode
[  310.044562][ T6646] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  310.083680][ T6646] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap1: link becomes ready
[  310.098644][ T4396] udevd[4396]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  310.135158][ T6648] device .` left promiscuous mode
[  310.143497][ T6648] device bond_slave_0 left promiscuous mode
[  310.196922][ T6648] device bond_slave_1 left promiscuous mode
[  311.317529][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  311.528986][ T6656] loop3: detected capacity change from 0 to 32768
[  311.680346][ T6656] XFS (loop3): Mounting V5 Filesystem
[  311.980134][ T6656] XFS (loop3): Ending clean mount
[  312.047776][ T6672] overlayfs: failed to clone upperpath
[  312.668650][ T6656] XFS (loop3): Quotacheck needed: Please wait.
[  312.817099][ T6656] XFS (loop3): Quotacheck: Done.
[  313.945756][ T4277] XFS (loop3): Unmounting Filesystem
[  314.427457][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  314.437209][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  315.525017][ T6698] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  315.552554][ T6698] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  315.705773][ T6677] netlink: 16 bytes leftover after parsing attributes in process `syz.2.577'.
[  316.771291][ T6699] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  317.067457][    C1] icmp: detected local route for 172.20.20.28 during ICMP sending, src 10.1.1.2
[  317.547441][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  317.557097][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  317.764772][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  317.771330][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  317.872730][ T6708] loop4: detected capacity change from 0 to 512
[  317.940304][ T6708] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  317.957596][ T6708] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  318.246535][ T4282] EXT4-fs (loop4): unmounting filesystem.
[  319.631732][ T6720] nfs: Unknown parameter 'ÿÿÿÿ'
[  320.667453][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  320.677185][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  322.442988][ T6730] loop3: detected capacity change from 0 to 128
[  322.521844][ T6730] FAT-fs (loop3): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1)
[  323.947558][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  323.957245][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  327.445659][ T6755] virt_wifi0 speed is unknown, defaulting to 1000
[  328.667970][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  330.349217][   T26] audit: type=1326 audit(1774635729.343:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6773 comm="syz.2.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8233b9c799 code=0x7ffc0000
[  330.407534][ T6772] virt_wifi0 speed is unknown, defaulting to 1000
[  330.453065][   T26] audit: type=1326 audit(1774635729.343:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6773 comm="syz.2.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8233b9c799 code=0x7ffc0000
[  331.877455][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  331.887788][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  333.232955][ T6799] tipc: Started in network mode
[  333.239629][ T6799] tipc: Node identity 080211000001, cluster identity 4711
[  333.273905][ T6799] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  335.206883][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  335.216537][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  336.051628][ T4311] tipc: Node number set to 134418688
[  337.691865][ T6833] netlink: 44 bytes leftover after parsing attributes in process `syz.4.610'.
[  338.347522][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  338.357714][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  341.467453][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  341.477371][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  343.904798][ T6858] loop1: detected capacity change from 0 to 16
[  343.950511][ T6858] erofs: (device loop1): erofs_read_inode: unsupported datalayout 6 of nid 36
[  344.667461][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  344.701717][ T6866] loop2: detected capacity change from 0 to 40427
[  344.724447][ T6859] loop4: detected capacity change from 0 to 128
[  344.743962][ T6866] F2FS-fs (loop2): invalid crc value
[  344.774002][ T6866] F2FS-fs (loop2): Found nat_bits in checkpoint
[  344.806347][ T6866] F2FS-fs (loop2): Start checkpoint disabled!
[  344.864308][ T6866] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  344.880239][ T4348] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  344.968769][   T26] audit: type=1800 audit(1774635744.593:9): pid=6866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.622" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  345.340078][   T26] audit: type=1800 audit(1774635744.733:10): pid=6869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.622" name="bus" dev="loop2" ino=10 res=0 errno=0
[  346.699568][ T4321] kworker/u4:6: attempt to access beyond end of device
[  346.699568][ T4321] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  347.787416][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  347.797242][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  350.239943][ T4272] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  350.250428][ T4272] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  350.259740][ T4272] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  350.268836][ T4272] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  350.277614][ T4272] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  350.285269][ T4272] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  350.314472][ T4270] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  350.323838][ T4270] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  350.332335][ T4270] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  350.340214][ T4270] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  350.349578][ T4270] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  350.356975][ T4270] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  350.738867][ T6896] virt_wifi0 speed is unknown, defaulting to 1000
[  350.917456][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  350.927369][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  352.429253][ T4270] Bluetooth: hci2: command 0x0409 tx timeout
[  352.813350][   T56] bond2: (slave ip6gretap1): Releasing active interface
[  353.407864][ T6896] chnl_net:caif_netlink_parms(): no params data found
[  354.192087][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  354.201934][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  355.592616][ T4272] Bluetooth: hci2: command 0x041b tx timeout
[  355.744098][ T6941] xt_CT: You must specify a L4 protocol and not use inversions on it
[  356.646904][ T6896] bridge0: port 1(bridge_slave_0) entered blocking state
[  356.728080][ T6896] bridge0: port 1(bridge_slave_0) entered disabled state
[  356.807609][ T6896] device bridge_slave_0 entered promiscuous mode
[  356.881754][ T6896] bridge0: port 2(bridge_slave_1) entered blocking state
[  356.899592][ T6896] bridge0: port 2(bridge_slave_1) entered disabled state
[  357.053780][ T5722] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  357.066909][ T6896] device bridge_slave_1 entered promiscuous mode
[  357.289024][ T6896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  357.300304][ T6896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  357.310942][ T5722] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  357.327502][ T5722] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  357.627420][ T4272] Bluetooth: hci2: command 0x040f tx timeout
[  358.115797][ T5722] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  358.125013][ T5722] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  358.142325][ T6896] team0: Port device team_slave_0 added
[  358.142494][ T5722] usb 2-1: config 0 descriptor??
[  358.191151][   T26] audit: type=1326 audit(1774635757.823:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6945 comm="syz.4.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe51979c799 code=0x7ffc0000
[  358.202297][ T5722] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  358.247246][ T6896] team0: Port device team_slave_1 added
[  358.326029][   T26] audit: type=1326 audit(1774635757.823:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6945 comm="syz.4.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe51979c799 code=0x7ffc0000
[  358.564510][   T26] audit: type=1326 audit(1774635757.843:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6945 comm="syz.4.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe51979c799 code=0x7ffc0000
[  358.757970][ T6896] batman_adv: batadv0: Adding interface: batadv_slave_0
[  358.981066][ T6896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  359.092062][   T26] audit: type=1326 audit(1774635757.843:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6945 comm="syz.4.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7fe51979c799 code=0x7ffc0000
[  359.147595][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  359.157527][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  359.259113][   T26] audit: type=1326 audit(1774635757.843:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6945 comm="syz.4.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe51979c799 code=0x7ffc0000
[  359.350187][ T6896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  359.492800][   T26] audit: type=1326 audit(1774635757.853:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6945 comm="syz.4.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe51979c799 code=0x7ffc0000
[  359.572303][ T6896] batman_adv: batadv0: Adding interface: batadv_slave_1
[  359.591459][ T6896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  359.617681][    C1] vkms_vblank_simulate: vblank timer overrun
[  359.674683][   T26] audit: type=1326 audit(1774635757.853:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6945 comm="syz.4.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe51979c799 code=0x7ffc0000
[  359.707390][ T4272] Bluetooth: hci2: command 0x0419 tx timeout
[  359.963635][   T26] audit: type=1326 audit(1774635757.853:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6945 comm="syz.4.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe51979c799 code=0x7ffc0000
[  359.986184][    C1] vkms_vblank_simulate: vblank timer overrun
[  359.992837][ T6896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  360.188697][   T26] audit: type=1326 audit(1774635757.853:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6945 comm="syz.4.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe51979c799 code=0x7ffc0000
[  360.242433][ T4311] usb 2-1: USB disconnect, device number 6
[  360.318304][   T26] audit: type=1326 audit(1774635757.853:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6945 comm="syz.4.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe51979c799 code=0x7ffc0000
[  360.540225][ T6896] device hsr_slave_0 entered promiscuous mode
[  360.614354][ T6896] device hsr_slave_1 entered promiscuous mode
[  360.657737][ T6896] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  360.665506][ T6896] Cannot create hsr debugfs directory
[  362.267568][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  362.277473][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  362.725922][ T6983] befs: (nullb0): invalid magic header
[  365.052380][   T56] device hsr_slave_0 left promiscuous mode
[  365.065963][   T56] device hsr_slave_1 left promiscuous mode
[  365.104113][   T56] batman_adv: batadv0: Removing interface: batadv_slave_0
[  365.128740][   T56] device bridge_slave_1 left promiscuous mode
[  365.148032][   T56] bridge0: port 2(bridge_slave_1) entered disabled state
[  365.168444][   T56] device bridge_slave_0 left promiscuous mode
[  365.174764][   T56] bridge0: port 1(bridge_slave_0) entered disabled state
[  365.310261][   T56] bond3 (unregistering): (slave bridge2): Releasing active interface
[  366.027545][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  366.037576][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  366.075944][   T56] bond3 (unregistering): (slave bridge1): Releasing active interface
[  366.464961][ T7014] loop2: detected capacity change from 0 to 1024
[  366.733428][   T56] bond3 (unregistering): Released all slaves
[  369.453855][ T7014] fscrypt: Error allocating hmac(sha512): -2
[  370.107865][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  370.117685][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  370.437849][ T7041] netlink: 16 bytes leftover after parsing attributes in process `syz.4.650'.
[  370.965087][   T56] bond2 (unregistering): Released all slaves
[  372.640329][   T56] bond1 (unregistering): Released all slaves
[  372.715702][ T7057] loop2: detected capacity change from 0 to 128
[  372.895570][ T7057] FAT-fs (loop2): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1)
[  373.237406][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  373.247385][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  373.998799][ T7063] syz.4.658 (7063): attempted to duplicate a private mapping with mremap.  This is not supported.
[  376.352171][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  376.362165][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  376.714737][   T56] team0 (unregistering): Port device team_slave_1 removed
[  376.863711][   T56] team0 (unregistering): Port device team_slave_0 removed
[  377.015934][ T7080] 9pnet_virtio: no channels available for device 
[  377.729012][   T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  377.832071][   T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  378.207582][ T4640] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  378.425398][ T4640] usb 2-1: Using ep0 maxpacket: 16
[  378.460905][ T4640] usb 2-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00
[  378.504845][ T4640] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  378.551121][ T4640] usb 2-1: Product: syz
[  378.572977][ T4640] usb 2-1: Manufacturer: syz
[  378.596458][ T4640] usb 2-1: SerialNumber: syz
[  378.650154][ T4640] usb 2-1: config 0 descriptor??
[  378.720962][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  378.727476][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  378.863154][   T56] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  379.009887][   T56] bond0 (unregistering): Released all slaves
[  379.467417][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  379.477232][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  379.652715][ T7099] Set syz0 is full, maxelem 0 reached
[  379.710544][ T4640] usb-storage 2-1:0.0: USB Mass Storage device detected
[  380.769547][ T4640] usb-storage 2-1:0.0: Quirks match for vid 054c pid 002e: 1
[  380.777103][ T4640] usb-storage 2-1:0.0: This device (054c,002e,0500 S 04 P 5c) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller)
[  380.777103][ T4640]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  380.802369][    C1] vkms_vblank_simulate: vblank timer overrun
[  380.840510][ T6896] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  381.095300][ T4640] usb 2-1: USB disconnect, device number 7
[  382.204206][ T6896] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  382.214595][ T7112] sctp: failed to load transform for md5: -2
[  382.257034][ T6896] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  382.418998][ T4270] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  382.429347][ T4270] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  382.435426][ T6896] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  382.441429][ T4270] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  382.458839][ T4270] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  382.470569][ T4270] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  382.477979][ T4270] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  382.717797][ T7122] virt_wifi0 speed is unknown, defaulting to 1000
[  383.102489][ T7131] netlink: 16 bytes leftover after parsing attributes in process `syz.2.674'.
[  383.227548][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  383.237637][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  383.893568][ T7142] Timeout policy `syz1' can only be used by L3 protocol number 34825
[  383.958075][ T7142] autofs4:pid:7142:autofs_fill_super: called with bogus options
[  384.541105][ T4272] Bluetooth: hci1: command 0x0409 tx timeout
[  384.839763][ T6896] 8021q: adding VLAN 0 to HW filter on device bond0
[  384.911694][ T7151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.679'.
[  384.983486][ T5789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  385.002356][ T5789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  385.046730][ T6896] 8021q: adding VLAN 0 to HW filter on device team0
[  385.081521][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  385.139365][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  385.244348][ T4625] bridge0: port 1(bridge_slave_0) entered blocking state
[  385.251848][ T4625] bridge0: port 1(bridge_slave_0) entered forwarding state
[  385.312588][ T7122] chnl_net:caif_netlink_parms(): no params data found
[  385.335451][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  385.376332][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  386.083925][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  386.118633][ T4625] bridge0: port 2(bridge_slave_1) entered blocking state
[  386.127440][ T4625] bridge0: port 2(bridge_slave_1) entered forwarding state
[  386.167793][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  386.186773][ T7165] SET target dimension over the limit!
[  386.273326][ T7167] delete_channel: no stack
[  386.347444][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  386.357666][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.0.2
[  386.946233][ T4272] Bluetooth: hci1: command 0x041b tx timeout
[  386.948134][ T4317] ------------[ cut here ]------------
[  386.958464][ T4317] WARNING: CPU: 0 PID: 4317 at io_uring/io_uring.c:2890 io_ring_exit_work+0x336/0x763
[  386.968141][ T4317] Modules linked in:
[  386.972197][ T4317] CPU: 0 PID: 4317 Comm: kworker/u4:5 Not tainted syzkaller #0
[  386.979835][ T4317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  386.989991][ T4317] Workqueue: events_unbound io_ring_exit_work
[  386.996156][ T4317] RIP: 0010:io_ring_exit_work+0x336/0x763
[  387.002011][ T4317] Code: 89 de 48 8b 7c 24 30 48 8b 74 24 10 e8 bb 2c 11 00 48 85 c0 48 8b 5c 24 28 75 3b e8 fc 16 5d f7 e9 16 fe ff ff e8 f2 16 5d f7 <0f> 0b b8 70 17 00 00 48 89 44 24 10 eb c7 44 89 f1 80 e1 07 80 c1
[  387.021738][ T4317] RSP: 0018:ffffc90004527ac0 EFLAGS: 00010293
[  387.027997][ T4317] RAX: ffffffff8a255d9e RBX: ffff888054f4e018 RCX: ffff888019fbbb80
[  387.036118][ T4317] RDX: 0000000000000000 RSI: ffffffffffffffcc RDI: 0000000000000000
[  387.044219][ T4317] RBP: ffffc90004527c30 R08: ffffc90004527a47 R09: 1ffff920008a4f48
[  387.052579][ T4317] R10: dffffc0000000000 R11: fffff520008a4f49 R12: dffffc0000000000
[  387.061036][ T4317] R13: ffff888054f4e000 R14: 0000000100002107 R15: 000000010000213b
[  387.069296][ T4317] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  387.078331][ T4317] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  387.085247][ T4317] CR2: 00007fe5197e9e80 CR3: 000000005b2a9000 CR4: 00000000003506f0
[  387.093578][ T4317] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  387.101646][ T4317] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  387.109749][ T4317] Call Trace:
[  387.113079][ T4317]  <TASK>
[  387.116097][ T4317]  ? io_ring_ctx_wait_and_kill+0x2e6/0x2e6
[  387.122014][ T4317]  ? _raw_spin_unlock+0x40/0x40
[  387.126927][ T4317]  ? _raw_spin_unlock_irq+0x1f/0x40
[  387.132315][ T4317]  ? process_one_work+0x7b0/0x1160
[  387.137644][ T4317]  process_one_work+0x8a2/0x1160
[  387.142747][ T4317]  ? worker_detach_from_pool+0x240/0x240
[  387.148586][ T4317]  ? _raw_spin_lock_irq+0xb7/0xf0
[  387.153669][ T4317]  ? _raw_spin_lock_irqsave+0x100/0x100
[  387.159484][ T4317]  ? kthread_data+0x4b/0xc0
[  387.164063][ T4317]  worker_thread+0xaa2/0x1270
[  387.168887][ T4317]  ? __kthread_parkme+0x162/0x1c0
[  387.173989][ T4317]  kthread+0x29d/0x330
[  387.178154][ T4317]  ? worker_clr_flags+0x1a0/0x1a0
[  387.183401][ T4317]  ? kthread_blkcg+0xd0/0xd0
[  387.188077][ T4317]  ret_from_fork+0x1f/0x30
[  387.192557][ T4317]  </TASK>
[  387.195618][ T4317] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  387.202929][ T4317] CPU: 0 PID: 4317 Comm: kworker/u4:5 Not tainted syzkaller #0
[  387.210518][ T4317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  387.220810][ T4317] Workqueue: events_unbound io_ring_exit_work
[  387.227076][ T4317] Call Trace:
[  387.230460][ T4317]  <TASK>
[  387.233408][ T4317]  dump_stack_lvl+0x188/0x24e
[  387.238127][ T4317]  ? memcpy+0x3c/0x60
[  387.242116][ T4317]  ? show_regs_print_info+0x12/0x12
[  387.247340][ T4317]  ? load_image+0x400/0x400
[  387.251902][ T4317]  panic+0x2e5/0x730
[  387.255862][ T4317]  ? bpf_jit_dump+0xd0/0xd0
[  387.260399][ T4317]  ? ret_from_fork+0x1f/0x30
[  387.265133][ T4317]  __warn+0x2f8/0x4f0
[  387.269155][ T4317]  ? io_ring_exit_work+0x336/0x763
[  387.274306][ T4317]  ? io_ring_exit_work+0x336/0x763
[  387.279544][ T4317]  report_bug+0x2ba/0x4f0
[  387.283899][ T4317]  ? io_ring_exit_work+0x336/0x763
[  387.289185][ T4317]  handle_bug+0x3a/0x70
[  387.293373][ T4317]  exc_invalid_op+0x16/0x40
[  387.298183][ T4317]  asm_exc_invalid_op+0x16/0x20
[  387.303047][ T4317] RIP: 0010:io_ring_exit_work+0x336/0x763
[  387.308781][ T4317] Code: 89 de 48 8b 7c 24 30 48 8b 74 24 10 e8 bb 2c 11 00 48 85 c0 48 8b 5c 24 28 75 3b e8 fc 16 5d f7 e9 16 fe ff ff e8 f2 16 5d f7 <0f> 0b b8 70 17 00 00 48 89 44 24 10 eb c7 44 89 f1 80 e1 07 80 c1
[  387.328529][ T4317] RSP: 0018:ffffc90004527ac0 EFLAGS: 00010293
[  387.334709][ T4317] RAX: ffffffff8a255d9e RBX: ffff888054f4e018 RCX: ffff888019fbbb80
[  387.342712][ T4317] RDX: 0000000000000000 RSI: ffffffffffffffcc RDI: 0000000000000000
[  387.350889][ T4317] RBP: ffffc90004527c30 R08: ffffc90004527a47 R09: 1ffff920008a4f48
[  387.358905][ T4317] R10: dffffc0000000000 R11: fffff520008a4f49 R12: dffffc0000000000
[  387.366893][ T4317] R13: ffff888054f4e000 R14: 0000000100002107 R15: 000000010000213b
[  387.375332][ T4317]  ? io_ring_exit_work+0x336/0x763
[  387.380518][ T4317]  ? io_ring_ctx_wait_and_kill+0x2e6/0x2e6
[  387.386361][ T4317]  ? _raw_spin_unlock+0x40/0x40
[  387.391237][ T4317]  ? _raw_spin_unlock_irq+0x1f/0x40
[  387.396452][ T4317]  ? process_one_work+0x7b0/0x1160
[  387.401584][ T4317]  process_one_work+0x8a2/0x1160
[  387.406560][ T4317]  ? worker_detach_from_pool+0x240/0x240
[  387.412217][ T4317]  ? _raw_spin_lock_irq+0xb7/0xf0
[  387.417275][ T4317]  ? _raw_spin_lock_irqsave+0x100/0x100
[  387.422954][ T4317]  ? kthread_data+0x4b/0xc0
[  387.427943][ T4317]  worker_thread+0xaa2/0x1270
[  387.432649][ T4317]  ? __kthread_parkme+0x162/0x1c0
[  387.437698][ T4317]  kthread+0x29d/0x330
[  387.442010][ T4317]  ? worker_clr_flags+0x1a0/0x1a0
[  387.447339][ T4317]  ? kthread_blkcg+0xd0/0xd0
[  387.451960][ T4317]  ret_from_fork+0x1f/0x30
[  387.456406][ T4317]  </TASK>
[  387.460029][ T4317] Kernel Offset: disabled
[  387.464900][ T4317] Rebooting in 86400 seconds..