last executing test programs:

19.972913841s ago: executing program 0 (id=854):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0x4)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0, 0x31a, &(0x7f0000000580)="$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")
socket$packet(0x11, 0x2, 0x300)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x1701)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x800)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x10, 0x6, 0x1748, 0x230, 0x438, 0x1538, 0x1538, 0x1538, 0x1678, 0x1678, 0x1678, 0x1678, 0x1678, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000000000000}}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private0, @ipv4=@empty, 0xe, 0x3f}}}, {{@ipv6={@dev, @loopback, [0x0, 0x0, 0x0, 0xffffffff], [], 'pimreg0\x00', 'veth1_macvtap\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x7}}, @common=@unspec=@connbytes={{0x38}}]}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @private2, @loopback, @mcast2, @local, @private1, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @empty, @private1, @private1, @loopback, @loopback]}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @dev={0xfe, 0x80, '\x00', 0x15}, [0xffffffff, 0x0, 0xff, 0xff000000], [0xff000000, 0x0, 0xff], 'syz_tun\x00', 'pimreg1\x00', {0xff}, {}, 0x2f, 0x81, 0x1, 0x8}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x1, 0x0, './cgroup.cpu/syz0\x00', 0xe, {0x6}}}]}, @common=@unspec=@MARK={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [], [0x0, 0xffffff00], 'bond_slave_1\x00', 'gretap0\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@empty, 0x0, 0x29}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x17a8)

15.946469609s ago: executing program 1 (id=860):
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2a}]}, 0x0}, 0x94)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40), 0xfc, 0x56f, &(0x7f0000000bc0)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=")
syz_mount_image$vfat(&(0x7f0000006600), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000cc0))
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = open(&(0x7f0000000280)='./file1\x00', 0x1cd142, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xc4a42, 0x80)
fallocate(r5, 0x0, 0x0, 0x8ffff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
sendfile(r4, r4, 0x0, 0x800000020)
syz_open_dev$tty1(0xc, 0x4, 0x1)
read$FUSE(r0, &(0x7f0000002440)={0x2020}, 0x20)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040))
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0)
close(r6)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"})

14.454465378s ago: executing program 1 (id=863):
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
epoll_create1(0x0)
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x800, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1)
socket$inet_udp(0x2, 0x2, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r2 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040))
r3 = socket$inet(0x2b, 0x801, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x48f, &(0x7f00000000c0)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x14}, 0x2c)
pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r5, 0xffffffffffffffff, 0x100000000000000)

14.18540258s ago: executing program 1 (id=864):
accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
r0 = open_tree(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x1000)
faccessat2(r0, &(0x7f0000000380)='./file0\x00', 0x100, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3})
mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', 0x0, 0x80c019, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)='usrquota')
r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)={0x2c, r7, 0x7, 0x0, 0xfffffffe, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r8 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r8, 0x1, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)

13.035761944s ago: executing program 1 (id=866):
r0 = socket(0x2, 0x805, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
msgctl$MSG_INFO(0x0, 0xc, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r4=>0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000180)={<r5=>r4, 0x10, "c7dff70e4f853f3a4c1240f0f02fd60d"}, &(0x7f0000000200)=0x18)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={r5, 0x7}, &(0x7f0000000140)=0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000c80), &(0x7f00000000c0)='./file0\x00', 0x401, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0], 0xfd, 0x2ce, &(0x7f0000000980)="$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")
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_conn_req={{0x2, 0x6, 0x4}, {0x3}}]}}, 0x11)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = syz_clone(0x20a04000, 0x0, 0x0, 0x0, 0x0, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000)=r7, 0x12)
ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40106f52, &(0x7f0000000040)={0x11})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0xc0185879, 0xfffffffffffffffe)

12.058936969s ago: executing program 0 (id=867):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
socket$inet6(0xa, 0x3, 0xb)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r3=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8093, 0x8268}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
r10 = openat$tun(0xffffffffffffff9c, 0x0, 0x2841, 0x0)
close(r10)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x2, 0x9, 0x0, 0xaba}, 0x4, 0x0, 0x3ff, 0x1, 0x9, 0x19, 0x6, 0x1f, 0x5, 0x9, {0x8, 0x400, 0x80, 0x8274, 0x3, 0x15}}}}]}, 0x78}}, 0x20040084)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r14 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=@newtfilter={0x888, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xfffd, 0xfff3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x858, 0x2, [@TCA_BASIC_POLICE={0x854, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x3, 0x3ff, 0x2, 0x7, 0xfffffff7, 0x7, 0x2a3c14c8, 0x0, 0x140, 0x9cd0, 0x78e, 0x8, 0x9, 0x2, 0x80000000, 0x5, 0x80000000, 0x9, 0x1ff, 0xfff, 0x27, 0x52a67a94, 0xf, 0x1, 0x0, 0xfffffffe, 0x6, 0x0, 0x2, 0x800, 0x8, 0x2, 0xffffffad, 0x8, 0x68, 0x0, 0x10000, 0x7ff, 0x7, 0xffffff64, 0x4, 0x9, 0x7, 0x5, 0x14000000, 0xffff, 0x2, 0x1ff, 0x4, 0xffff5edc, 0x8, 0x4, 0x81, 0x5, 0x94c, 0x1cf, 0x10000000, 0x3, 0x6, 0xfffffffb, 0x1, 0x2, 0x7, 0x1, 0x6, 0x0, 0xa, 0xf43, 0xa, 0x4, 0x5, 0x1, 0xfeb9, 0x3ff, 0x100, 0x2, 0x2, 0x8, 0x0, 0x24000000, 0x4, 0x80000000, 0x6, 0xac5, 0x9, 0xffb, 0x2, 0x67, 0xa, 0x9, 0x5, 0x7fffffff, 0xfffffff8, 0x86, 0x0, 0x0, 0x8ac7, 0x5, 0x78, 0x9, 0xc, 0x6, 0x400, 0x20, 0x5, 0xffffffdf, 0x389, 0x3, 0x1e800000, 0x80000001, 0x4a, 0xff, 0x2, 0x3, 0x1ff, 0x9, 0x4, 0x6, 0x2, 0x7, 0x8001, 0x2, 0x263, 0xb, 0x8, 0x6, 0x6, 0x9, 0x6, 0xa, 0x13d, 0x9, 0x3fed, 0x2, 0x4, 0x2, 0x101, 0x4, 0x7, 0x240, 0x4, 0x5, 0x1, 0xfffffffb, 0x1, 0x800, 0x7fffffff, 0x8fc, 0x2, 0x68a4, 0x600000, 0x6, 0x4, 0x8, 0x4, 0x37, 0xa, 0x9, 0x3, 0x5, 0x8, 0x100, 0x7, 0x101, 0x6, 0x7, 0x7, 0x3, 0x2, 0x3, 0x8, 0x9, 0x0, 0xd6, 0x4ad, 0x7, 0x9, 0x2, 0x0, 0x7e6, 0x54d6, 0x2, 0x3, 0x8, 0x1, 0xf32, 0xffff, 0xb2, 0x0, 0x6, 0x7, 0x8, 0x1, 0x4, 0x7, 0x9, 0x959a, 0x0, 0x7, 0x2, 0x4, 0x7f, 0x2, 0x80000000, 0x10000, 0x10, 0x6, 0x2, 0x4, 0x1000, 0x8, 0x9, 0xfffffffc, 0xe6, 0x2, 0x9, 0x4, 0x1, 0x4, 0x9, 0xff, 0x9, 0x9, 0xb, 0x3, 0x7fff, 0x200, 0x5, 0xca1, 0x7f, 0xe, 0x1, 0x1000, 0xfff, 0x5, 0xc1, 0x0, 0x7, 0x40, 0x7fffffff, 0x1, 0x7, 0x6, 0x8, 0xe9375e5, 0x8cf5, 0x7, 0xdf0d, 0x2, 0xfffffffb]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x10, 0xd, 0xd36, 0x4, 0x6bc, 0x2, 0x7, 0xf, 0x800, 0x7, 0x7, 0xe7f, 0xffff, 0x7, 0x5, 0x1, 0x0, 0x4, 0x909e, 0x89cd, 0xffffffff, 0x8, 0x9, 0x4, 0x5, 0x2, 0x8, 0x4, 0xf23, 0x3ff, 0x9, 0xa, 0x5, 0x0, 0xff, 0x7f, 0x4, 0x0, 0x3, 0x382, 0x40, 0x80, 0x8, 0x2, 0x5, 0x2, 0x9, 0x7, 0x4, 0x0, 0x7, 0x80000000, 0x80000001, 0x8000, 0x9e, 0xe4, 0x200000, 0x7fffffff, 0x5a, 0x9, 0xfffffff7, 0x4, 0x6, 0x6, 0x459, 0x2, 0xff, 0x14000000, 0x5f72, 0x3, 0x8, 0x7, 0x5, 0x0, 0x6, 0x0, 0x6, 0x1000, 0xffffffff, 0x101, 0x2, 0x5, 0x7, 0x9, 0x1000, 0x9, 0x3, 0xfbb4, 0x4a, 0x0, 0x7, 0x8, 0x9, 0x0, 0x7, 0x101, 0x0, 0x3ff, 0x5, 0x800, 0x7fffffff, 0x2, 0x1, 0x3, 0x4, 0xffff, 0x5, 0x19, 0x6c, 0x9, 0x7fffffff, 0xceb6, 0x5, 0x7, 0x53c0, 0x6, 0x4, 0x9, 0x1, 0x9, 0x2, 0x7, 0x8, 0x3, 0x3ff, 0x1, 0x6, 0xffffff7b, 0x15ef7157, 0x4, 0x5, 0x2, 0x7, 0x7fffffff, 0xdb5, 0x1000, 0x800, 0x8, 0x80000000, 0x100, 0x7, 0x3fd1, 0x40, 0x1000, 0x3, 0xfffffffb, 0x5270e9b, 0x5, 0x7f, 0x9, 0x40, 0x9, 0x3, 0x0, 0x9, 0x8, 0x7, 0x1, 0x7, 0x3, 0x9, 0x0, 0xfe23, 0x6, 0x5, 0x8, 0xffffff7f, 0x3, 0xd, 0x80, 0x4, 0x9, 0x4, 0xff, 0x8001, 0x78, 0x80, 0x72e, 0x5c, 0x1, 0xb0, 0x6, 0x8, 0x9, 0x0, 0x80000001, 0x8, 0x4, 0x4, 0x0, 0x1, 0x1, 0x59ac, 0xebda, 0x7, 0x10000, 0x4, 0x100, 0x0, 0x7, 0x138, 0x1, 0x8, 0xcb18, 0x0, 0xb, 0x5, 0xe489, 0x8, 0x5, 0x6, 0x8d03, 0x1800000, 0x80000000, 0xc4800000, 0x4251, 0x7fff, 0x8001, 0x6, 0x7, 0x5, 0x3, 0x4, 0x371, 0xaa67, 0x2, 0x0, 0x10, 0x8, 0x5a8, 0x400, 0x0, 0x4, 0xf, 0x8, 0x9, 0xc2b3, 0x0, 0x7fffffff, 0xfffffffa, 0x9, 0x3ff, 0x6, 0x7, 0x5, 0x7, 0x4, 0xc, 0x9, 0x1, 0x0, 0x10000, 0x4, 0x4, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x8, 0x6, 0x4d2, 0x2, {0x8, 0x0, 0xa, 0x8, 0x8, 0x9}, {0x4, 0x0, 0xa380, 0x7ff, 0x5, 0x7d487c2b}, 0x9, 0x4}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}]}]}}]}, 0x888}, 0x1, 0x0, 0x0, 0x10}, 0x8080)
socket$kcm(0x11, 0x3, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r6, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0)

11.482105966s ago: executing program 1 (id=870):
r0 = socket$kcm(0x2, 0x3, 0x106)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="5c0000001200e3d86e08000a076b876c1d0048007ea60864160af36504001a0038001d006286b6c74c2dda2b1449b39385515b992bf857f421", 0x39}, {&(0x7f0000000080)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3bc7664d327d90", 0x23}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0xb, 0xbf21, 0x100, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00')
pread64(r1, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a)
syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = msgget$private(0x0, 0x3ac)
r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$set_timeout(0xf, r3, 0x4b2)
msgctl$MSG_INFO(r2, 0xc, &(0x7f0000000000)=""/126)
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
socket(0x10, 0x803, 0x2)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
socket$kcm(0x10, 0x2, 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
accept4(r4, 0x0, 0x0, 0x80800)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000001400078008001340000017e5080012400002000905000500020200000500010006"], 0x58}}, 0x4080)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000280)=""/219)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0xf0ff, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffe}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x7f000001}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000057}, 0x4000050)

9.956812047s ago: executing program 2 (id=876):
socket$packet(0x11, 0x2, 0x300)
socket$inet(0x2, 0x3, 0x2f)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff)
socket(0x10, 0x3, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0)
r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000200)={0x5b5c, [[0xffffffff, 0xffffffff, 0xfffffffb, 0x3, 0xffffffff, 0x3, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x4, 0x0, 0xffffffff, 0xffffffff, 0x3, 0xffffffff], [0xffffffff, 0xfffffdff, 0xfffffffe, 0xffffffff, 0xfffffbff, 0xffffffff, 0xfffffbff, 0xffffffff]], '\x00', [{0x3, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x0, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac4c, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x2, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1003, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x7, 0xfff, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4241, 0x0, 0x0, 0x1}], '\x00', 0xfffffffe})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffec5)
r1 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_MOVE(0x1e, r1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xc, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x601, 0x0)
write(r2, &(0x7f00000001c0)='p:s/p .', 0x7)
syz_clone(0x7840680, 0x0, 0x0, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x5, @none}, 0xe)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000)

9.204531382s ago: executing program 3 (id=877):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x100, 0x1108, 0x9, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r3}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r3}, 0x38)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f00000000c0)={{0xaa7, 0x2000, 0x1, 0xfffe}, 'syz1\x00', 0x4})
ioctl$UI_DEV_CREATE(r4, 0x5501)
read(r4, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x9, 0x6, 0x8, 0x8}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r6}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_emit_ethernet(0x7a, &(0x7f0000000500)=ANY=[], 0x0)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, 0x0, 0x400488a4)
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000640)='./file1\x00', 0x1008000, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRESOCT=0x0, @ANYRES8=0x0, @ANYRESDEC, @ANYBLOB="675bdee1c1767e7eb2060f796a611cd31897bd238874f0af484c8962e4125ba4949dcebde58b33eea0dced6e47dc841bbe12987cb53d7f37ec72436001"], 0x1, 0x609, &(0x7f0000001280)="$eJzs3cFvHFcdB/DvbGxnN0Wp4yZtQJWwilQhLJK1LZGUC1AKslCFKnHgbBEnsbJJK9tFbg8QEIeKU/+EAvI/gDgWKQfaAwc49WzUIxISR9+2mtnZ9drZpontZDft5yPNvvfmzbz9vd/Mjmd3ZW2Ar6yVhUzdS5GVhde3y/buznJnd2f5dr+e5HSSRtJMUpSr/5bk0+Rueku+3u8YKu/zyYfNGx+//9F7vVY5VrOY6m1fPGi/hzOIZbYXa1We1HhLxx/vwAznkswfezw4Ad2+/4zsPubrEgCYZEVyatT62eRMfcNevg/o3RX37rGfanfHHQAAAAA8Ac/uZS/bOTvuOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBpUv/+f1EvjX59PkX/9/9n6nWp60+1e8n0uGMAAAAAAAAAgOP65l72sp2z/Xa3qL7zf6lqnK8en8nb2cxaNnIp21nNVraykcUks0MDzWyvbm1tLD7Enksj91x6MvMFAAAAAAAAgC+p32dl//t/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYBEVyqldUy/l+fTaNqSTNJDPldneTfyf52rjjPa574w4AAAAAnoBn97KX7Zztt7tF9Z7/+ep9fzNv5062sp6tdLKWa9VnAb1PABq7O8ud3Z3l2+Vy/7g/+t8jhVGNmN5nD2Xr/me+WG3RyvWsV2su5Vd5M51cS6Pas3SxH8/ouH5XxlT8oPaQkV2ry3LmP6vLyTBbZWR6kJF2HVuZjXMPzsQjHp3Dz7SYRu9ToCTnH0POz9RlOZ/XJjrnS0Nn3/MPzkQy98s/XrnZuXPr5vXNhcmZ0hEdzsTyUCZe+Eplol1l4sKgvZKf5hdZyHzeyEbW8+usZitrmc9rVW21Pp/Lx9kDmWrmUKZ+eKD1xhdFMlMfl95V9NFieqna92zW8/O8mWvVEW3nSq5kKd/LK2kfOMIXRh7h33br7r1ut5vGo73qv/Xt//+5Ww4wnWfyk6qcFGVezw3ldfiaO1v1Da/Zz9JcPzutkcMe5do49Y26Up49r07ctfHcob8S/Uw89+Arwp+qE2ezc+fWxs3Vtx7y+V6uyzIDPx5kYqpe2z11IpM6kvJ8mRvEcvDsKPueG9m3WPWdH/T1zrPGUN+FQd8XvVJn6nu44ZH6f7HKvhdG9vX2uzjUN+p+C4CJd+Y7Z2Za/239q/VB6w+tm63Xm6+evnr6xZlM/2P6+1PtUy83Xiz+mg/ym/33/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNFtvvPurdVOZ23jyJX+LxEddxwVlaen0spEhPEYK+O+MgGP2+Wt229d3nzn3e+u3169sXZj7c4r7atXFxcXr7QvX1/vrNWP444SADhJ+zf9444EAAAAAAAAAAAAAAD4PE/i34nHPUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODLbWUhU/dSZLF9qV22d3eWO+XSr+9v2UxSlJW/J/k0uZvektmh4YrPe55PPmze+Pj9j97bH6tZbf/PpZOYxYFYGodiOu54S0Pj/eVIwxWDzMwnmatLGLvPAgAA///xmQQl")

9.070335218s ago: executing program 4 (id=878):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0x4)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0, 0x31a, &(0x7f0000000580)="$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")
socket$packet(0x11, 0x2, 0x300)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x1701)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macsec0\x00'})
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x800)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x10, 0x6, 0x1748, 0x230, 0x438, 0x1538, 0x1538, 0x1538, 0x1678, 0x1678, 0x1678, 0x1678, 0x1678, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000000000000}}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private0, @ipv4=@empty, 0xe, 0x3f}}}, {{@ipv6={@dev, @loopback, [0x0, 0x0, 0x0, 0xffffffff], [], 'pimreg0\x00', 'veth1_macvtap\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x7}}, @common=@unspec=@connbytes={{0x38}}]}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @private2, @loopback, @mcast2, @local, @private1, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @empty, @private1, @private1, @loopback, @loopback]}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @dev={0xfe, 0x80, '\x00', 0x15}, [0xffffffff, 0x0, 0xff, 0xff000000], [0xff000000, 0x0, 0xff], 'syz_tun\x00', 'pimreg1\x00', {0xff}, {}, 0x2f, 0x81, 0x1, 0x8}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x1, 0x0, './cgroup.cpu/syz0\x00', 0xe, {0x6}}}]}, @common=@unspec=@MARK={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [], [0x0, 0xffffff00], 'bond_slave_1\x00', 'gretap0\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@empty, 0x0, 0x29}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x17a8)

8.8091457s ago: executing program 2 (id=879):
userfaultfd(0x801)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xf5d1b000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x6b4, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0x2, 0x4, 0x378, 0xffffffff, 0x0, 0x0, 0xd0, 0xfeffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast1, [0x0, 0xff, 0x0, 0xffffff00], [], 'pimreg0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x3, 0x60}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@mcast1, @loopback, [0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0xffffffff], 'netdevsim0\x00', 'geneve0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, [0xff000000, 0xffffffff, 0xff, 0xffffffff], 0x4e22, 0x4e04, 0x4e24, 0xe22, 0x0, 0x0, 0x7, 0x52a3, 0x1cf}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94)
r4 = epoll_create1(0x0)
fcntl$dupfd(r4, 0x2, 0xffffffffffffffff)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x14)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r5)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c)
listen(r6, 0x0)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r7, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)

7.638063985s ago: executing program 3 (id=880):
r0 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x24)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4)
bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4)
bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4)
bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c)
r5 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1, 0x5}, 0x1c)
r6 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r6, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x6}, 0x1c)
r7 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r7, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c)
r8 = socket$inet6(0xa, 0x2, 0x0)
r9 = socket(0xa, 0x2, 0x0)
bind$inet6(r9, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c)
bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c)
r10 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1000000}, 0x1c)
r11 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r11, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x12}, 0x1c)

7.470464023s ago: executing program 1 (id=881):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300)=0x5, 0x4)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10)
sendto$inet(r1, &(0x7f0000000040)="ee", 0xffffffffffffff75, 0x20004010, 0x0, 0x0)
r2 = socket$inet(0x2, 0x3, 0x33)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_int(r6, 0x0, 0x7, 0x0, 0x0)
syz_emit_ethernet(0x86, &(0x7f0000000200)={@link_local, @random=' u\b\x00', @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x0, "fff522a45d565fd1bef2bde4487648f5ba27bbe6628c1000836849b5e92bda7c", "146a317637af5c94b1e2cab23b8908c4", {"1440048630554f6e84da74a7f80e383e", "2585ff3e812ec53f2f0d7d41bea87c5c"}}}}}}}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x2, 0x7, 0x0, 0x0, 0x8, 0x0, 0x70bd2a, 0x25dfdbfb, [@sadb_sa={0x2, 0x1, 0x4d6, 0x5, 0x3, 0x9b, 0x0, 0x20000000}, @sadb_lifetime={0x4, 0x3, 0xe, 0xffffffff80000001, 0xffffffffffff0000, 0x6}]}, 0x40}}, 0x0)
pipe2(&(0x7f0000000100)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0)
splice(r1, 0x0, r7, 0x0, 0x7ffff000, 0x3)

7.275623472s ago: executing program 0 (id=882):
prlimit64(0x0, 0xe, &(0x7f0000000180)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
userfaultfd(0x80801)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r5 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0)
pwrite64(r5, &(0x7f00000008c0)='/', 0x1, 0x0)
r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_NOACK_MAP(r7, &(0x7f0000004140)={0x0, 0x0, &(0x7f0000004100)={&(0x7f0000004080)={0x1c, r8, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x80c)
ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000600)={r4, r4, 0x8, 0x1f, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'})
syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0), 0x1, 0x228, &(0x7f0000000300)="$eJzKKC4sZmdgYPj7sSaZgUGAAQRYGEQYLjAwMrAwMDDIM4KFGD4yQeipUPomlGaDyl+B0r5Q8XYo/de8KiKKgYExU+meGdMB8RRFRgEGHpGvpx4wJDPwxzJYzvNecykoc8pVobdL94PUe4VWbmJgVE/hXzRnwwSnmbxgYxkjo5DNYT4gM4sDZBADA8PkPxH3HrBIMoggmSXK8U/sVMvyVWad9xlmdExLY2A0mMXBwMCgd0R3pp0BbzcT1MziyqrsxJyc1KLiMwyo5k9m3M+kyAhSd+bv1eAHjHYM3bEMjAxyG/zVFn/7I1W5cVN95PSqiJqp3U03l66PY9im//eKidT7iRlh/x8cEtSyyMv/ME9G6fvmhjkfauqemDh2NirP5W+9/Pfd+5ja4gQ1psfiXYVs/AluWjWfnJ3cLB/PTa9u31KsuCArzWXisakX/yYcX8vAMPnCE1v9mjOH4hVjOKXcKufG3HWLF+Rapn6+7g0Dw8GozxMZGJcz7mdiYJgZtnMPsr/KG6CRwcDMwMCgwsDAwMTAwpCWmZNq4MHAyMAM5RiyQFXBVDMxcIAl9JLzc1LaGRjBSQCsbTkDC9wMw8cMrHCOETLH2KIBahJDO5RWgdIeUHo5lH4MpeXRkg0L2IR+KE+jgYGBjaEisaSkyJCNgQHKgosZwcWMBOA2M0FtncuE6rnjTAyjYBSMglEwCkbBKBgFo2AUjIJRMJIBIAAA///ZbLn7")

7.264542222s ago: executing program 3 (id=883):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='sysfs\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0)
write(r1, &(0x7f0000000700)='none\n', 0x5)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/block/md0/md/level\x00', 0x1, 0x0)
write(r2, &(0x7f0000000900)='rai', 0x3)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0)
write(r3, &(0x7f0000000b00)='2\n', 0x2)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0)
write(r4, &(0x7f0000000d00)='1:0\n', 0x4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0)
write(r5, &(0x7f0000000f00)='0\n', 0x2)
close(r5)
r6 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./sys/block/md0/md/array_state\x00', 0x1, 0x0)
write(r6, &(0x7f0000001100)='active', 0x6)
close(r6)
r7 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0)
write(r7, &(0x7f0000001300)='1:1\n', 0x4)
close(r7)
r8 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./sys/block/md0/md/dev-ram1/slot\x00', 0x1, 0x0)
write(r8, &(0x7f0000001500)='1\n', 0x2)
close(r8)

6.542978776s ago: executing program 2 (id=884):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x69ef, 0x100, 0x1, 0x11}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0, &(0x7f0000000180)=<r3=>0x0)
r4 = memfd_secret(0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd=r4, 0x8, 0x0, 0x0, 0x14})
io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$kcm(0x10, 0x2, 0x0)
syz_usb_connect(0x3, 0x2d, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
r9 = syz_open_dev$video(&(0x7f0000000080), 0x7f, 0x0)
ioctl$VIDIOC_CROPCAP(r9, 0xc02c563a, &(0x7f0000000000)={0x9, {0x0, 0xfffff88f, 0x200000e7}, {0x0, 0x0, 0x3, 0x3}, {0xfdfb, 0x3}})
sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r8, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r10)
r12 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r12, 0xc0405602, &(0x7f0000000040)={0x59, 0xa, 0x100, "3258c5c0d651aa231b00280000000000000000000000ed00", 0x32435750})
sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a5f74756e"], 0x38}}, 0x0)
sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000200)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0003", 0x23}], 0x1}, 0x20008000)
sendmsg$nl_generic(r5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42014}, 0x20089890)

5.999135231s ago: executing program 4 (id=885):
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
epoll_create1(0x0)
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x800, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet_udp(0x2, 0x2, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r2 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040))
syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x0, 0x2882)
r3 = socket$inet(0x2b, 0x801, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x48f, &(0x7f00000000c0)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x14}, 0x2c)
pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r5, 0xffffffffffffffff, 0x100000000000000)

5.564586181s ago: executing program 0 (id=886):
semtimedop(0x0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x32, &(0x7f0000000780)=ANY=[@ANYRESDEC], 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
read$char_usb(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x1000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$rxrpc(0x21, 0x2, 0x2)
setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, 0x0, 0x0)
syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000240), 0x3af4701e)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r4, 0x0)
r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001cc0)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930000800020000000043950003000000001e", 0x68}], 0x1}, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r5)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5)
mq_open(0x0, 0x42, 0x0, 0x0)

5.524706693s ago: executing program 3 (id=887):
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
epoll_create1(0x0)
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x800, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{0x0}], 0x1)
socket$inet_udp(0x2, 0x2, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r2 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040))
r3 = socket$inet(0x2b, 0x801, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x48f, &(0x7f00000000c0)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x14}, 0x2c)
pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r5, 0xffffffffffffffff, 0x100000000000000)

4.914610861s ago: executing program 3 (id=888):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0xa, 0x0, 0x9, 0x50, 0x8, 0x2fa11, 0x401}, 0x0)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r2, 0x11b, 0x20, 0x0, 0x0)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r3, r3)
setpgid(0x0, r3)
tkill(r3, 0x7)
wait4(r3, 0x0, 0x0, 0x0)
r4 = mmap$IORING_OFF_PBUF_RING(0x0, 0xffffffc8, 0x1, 0x1010, 0xffffffffffffffff, 0x81573a58)
syz_io_uring_submit(0x0, r4, 0x0, &(0x7f0000000400)=@IORING_OP_MSG_RING={0x28, 0x25, 0x0, r1, &(0x7f00000001c0)="92a089e7f8503114724e58e130a241", 0x0, 0x8, 0x1, 0x1, {0x0, 0x0, r1, 0x7ff}})
sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x20, 0x1, 0x7ff, 0x6, 0x0, 0x9, 0x0, 0x7fff}, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2)
symlink(0x0, &(0x7f0000003400)='./file0\x00')
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4)
r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r6, 0xc1205531, &(0x7f00000002c0)={0x1, 0x8, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "deb926b282d41302f26892ddb0671d8b"})
r7 = socket$netlink(0x10, 0x3, 0xf)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r8 = socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$can_bcm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0)
sendmsg$can_bcm(r8, 0x0, 0x0)
sendmsg$can_bcm(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x6, 0x0, 0x0, {0x77359400}, {}, {}, 0x1, @canfd={{0x1}, 0x2a, 0x2, 0x0, 0x0, "6d1e89ee4a7132e7b02ef95ca6964b1db4fa3e039bcead685d2f08393c515a01097c6e459835ca39d210cb71ea38c7b922e57f7a67a26e5bb141bfb1c0fbb54f"}}, 0x80}}, 0x8044)

4.855630334s ago: executing program 2 (id=889):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x101a00, 0x58)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1], 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r4}, 0x38)
ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f0000000200)=0x3)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)
sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x20000080)
bpf$ITER_CREATE(0xb, 0x0, 0x0)
keyctl$reject(0x13, 0x0, 0xd59, 0x1, 0x0)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x140800, 0x0)
r7 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000100)={0x20000014})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x13)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x3)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)

4.636403335s ago: executing program 4 (id=890):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0)
r0 = syz_open_dev$sndctrl(0x0, 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc2c45512, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r2=>0x0}, &(0x7f0000000200)=0x5)
bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000040))
readv(r3, &(0x7f0000000100)=[{&(0x7f0000000080)=""/73, 0x49}], 0x1)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000c40)={<r4=>0x0, 0x1a00000000000, 0x1})
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000001300)={r4, "beb6addd7dcf28313724e5ee51bef465"})
ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r7=>0x0})
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES64=r2, @ANYRES64=r3, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="040000181100"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000d00)={r9, r7, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x39, &(0x7f0000000640)=ANY=[], 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x40810)
recvmmsg(r5, &(0x7f0000007700), 0x318, 0xfc0, 0x0)

4.457277243s ago: executing program 2 (id=891):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000080), 0x4a)
sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
close(r3)
r4 = socket$tipc(0x1e, 0x5, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x42}, 0x204}}, 0x10)
syz_usb_connect(0x0, 0x3f, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_int(r7, 0x1, 0x1e, 0x0, &(0x7f0000000140)=0x5f)
sendmsg$nl_route(r5, 0x0, 0x0)
ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002100)={0x0, @remote, @dev}, 0x0)
ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0xc0145b0e, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={<r8=>0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4ea1, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}]}, &(0x7f0000000440)=0x10)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000001c0)={r8, 0x4}, &(0x7f0000000340)=0x8)
openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)

3.391579173s ago: executing program 3 (id=892):
r0 = socket$kcm(0x2, 0x3, 0x106)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="5c0000001200e3d86e08000a076b876c1d0048007ea60864160af36504001a0038001d006286b6c74c2dda2b1449b39385515b992bf857f421", 0x39}, {&(0x7f0000000080)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3bc7664d327d90", 0x23}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0xb, 0xbf21, 0x100, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00')
pread64(r1, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a)
syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = msgget$private(0x0, 0x3ac)
r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$set_timeout(0xf, r3, 0x4b2)
msgctl$MSG_INFO(r2, 0xc, &(0x7f0000000000)=""/126)
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
socket(0x10, 0x803, 0x2)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
socket$kcm(0x10, 0x2, 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
accept4(r4, 0x0, 0x0, 0x80800)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000001400078008001340000017e5080012400002000905000500020200000500010006"], 0x58}}, 0x4080)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000280)=""/219)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0xf0ff, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffe}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x7f000001}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000057}, 0x4000050)

3.23315892s ago: executing program 4 (id=893):
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x38)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffa}, 0x3a, [0x8000, 0x401, 0xf, 0x8, 0x86, 0x2, 0x3, 0x7f, 0xa6, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0xdb, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0x10, 0x80, 0x207, 0x20003, 0x8, 0x4c76, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7fc, 0x17, 0x0, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000004, 0x9, 0x8000012f, 0x8004, 0x8, 0xffffbff3, 0x129432f6, 0xc8, 0xc9, 0xe, 0x2bf, 0x6c7, 0x1, 0xfffffffc, 0x5, 0x0, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x8, 0x4, 0x7, 0x7ffb, 0x6, 0x500, 0x401, 0x10001, 0x1, 0xff, 0x5, 0xfffff572, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0xd, 0xfffff256, 0x2, 0x1, 0xfdfffffd, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xfffffffc, 0x48c93690, 0xe79, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0xff, 0x4, 0xb, 0x6, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0xfffffffd, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3039, 0xfffffffa, 0xb, 0x5, 0xffffffff, 0x2, 0x400003, 0x6, 0x4, 0x6d01, 0x6, 0x34, 0x800003, 0x200, 0x83, 0x3, 0x5, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x50, 0x3, 0x7ff, 0x12b, 0x8a6, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x2008077f, 0x2006, 0x7, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2000004, 0xffff, 0x6, 0x80000000, 0xb9, 0xce4, 0x10001fc, 0x10002, 0x4184, 0x5, 0x3, 0x0, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x6, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x1622, 0x7, 0x200af, 0x20000008, 0x5, 0x226, 0x3, 0x5, 0x0, 0x30b1d693, 0xfffff4f0, 0x4, 0x7, 0x7, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0x30, 0xfff]}, 0x45c)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r4}, 0x38)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x200000, 0x0)
ftruncate(0xffffffffffffffff, 0x6000000)
unshare(0x28000600)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x3, 0xfffa}, 0x3a, [0x8000, 0x401, 0xb, 0x8, 0x86, 0x2, 0x3, 0x7f, 0xa6, 0x4d, 0x6, 0x7fff, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0xdb, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0x10, 0x80, 0x207, 0x20003, 0x8, 0x4c76, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7fc, 0x17, 0xffffffff, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000004, 0x9, 0x8000012f, 0x8004, 0x8, 0xffffbff3, 0x129432f6, 0xc8, 0xc9, 0xe, 0x2bf, 0x6c7, 0x1, 0xfffffffc, 0x5, 0x0, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x8, 0x4, 0x7, 0x7ffb, 0x7, 0x500, 0x401, 0x10001, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0xd, 0xfffff256, 0x2, 0x1, 0xfdfffffd, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xfffffffc, 0x48c93690, 0x7, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0xff, 0x4, 0xa, 0x6, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0xfffffffd, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0xffffffff, 0x2, 0x400003, 0x6, 0x4, 0x6d01, 0x6, 0x34, 0x800003, 0x200, 0x80, 0x3, 0x0, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0x9, 0xac8, 0xbf, 0x50, 0x3, 0x7ff, 0xbe0f, 0x8a6, 0x7, 0xa, 0xffffffff, 0x5, 0x20, 0x120000, 0x2008077f, 0x2, 0x7, 0x4, 0x25], [0x9, 0xbb33, 0x3, 0xb, 0x5, 0x2000004, 0xffff, 0x5, 0x80000000, 0xb9, 0xce4, 0x10001fc, 0x10002, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x6, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x1622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0xe, 0x5, 0x0, 0x30b1d693, 0xfffff4f0, 0x4, 0x7, 0x7, 0x6c1b, 0x1, 0x4, 0x5, 0x803, 0xd7, 0x200, 0x30, 0xfff]}, 0x45c)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000dc0)={0x0, 0x800, 0x5, 0xc000, 0xe, "0062ba7d8200000016001b000200f705096604"})
r6 = syz_open_pts(r5, 0xea283)
dup3(r6, r5, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0)

3.107695586s ago: executing program 0 (id=894):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r3, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "0e57b3d487e2db32", "a9df7ccf060089d5de4d4f2c3e000009", "3e360600"}, 0x28)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, 0x0, 0x0)
writev(r3, &(0x7f00000000c0)=[{0x0}], 0x1)
readv(r3, 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001305000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a32000000001400000011"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x2000c0c2)
socket$l2tp(0x2, 0x2, 0x73)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)

2.013641537s ago: executing program 4 (id=895):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0x4)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0, 0x31a, &(0x7f0000000580)="$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")
socket$packet(0x11, 0x2, 0x300)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x1701)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macsec0\x00'})
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x800)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x10, 0x6, 0x1748, 0x230, 0x438, 0x1538, 0x1538, 0x1538, 0x1678, 0x1678, 0x1678, 0x1678, 0x1678, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000000000000}}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private0, @ipv4=@empty, 0xe, 0x3f}}}, {{@ipv6={@dev, @loopback, [0x0, 0x0, 0x0, 0xffffffff], [], 'pimreg0\x00', 'veth1_macvtap\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x7}}, @common=@unspec=@connbytes={{0x38}}]}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @private2, @loopback, @mcast2, @local, @private1, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @empty, @private1, @private1, @loopback, @loopback]}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @dev={0xfe, 0x80, '\x00', 0x15}, [0xffffffff, 0x0, 0xff, 0xff000000], [0xff000000, 0x0, 0xff], 'syz_tun\x00', 'pimreg1\x00', {0xff}, {}, 0x2f, 0x81, 0x1, 0x8}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x1, 0x0, './cgroup.cpu/syz0\x00', 0xe, {0x6}}}]}, @common=@unspec=@MARK={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [], [0x0, 0xffffff00], 'bond_slave_1\x00', 'gretap0\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@empty, 0x0, 0x29}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x17a8)

845.65Āµs ago: executing program 2 (id=896):
r0 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x101802, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6(0xa, 0x1, 0x0)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
pread64(r0, &(0x7f0000000040), 0x34, 0x7ff)
r7 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r7, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10)
sendmsg$rds(r7, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@cswp={0x58, 0x114, 0x7, {{0xb, 0x3}, 0x0, 0x0, 0x401, 0x5, 0x8, 0x3, 0x40, 0x8}}], 0x58}, 0x0)

331.05Āµs ago: executing program 4 (id=897):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
getdents(0xffffffffffffffff, 0x0, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001240)={0x8, {"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", 0x1000}}, 0x1006)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_procfs(0x0, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x107842, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x8015, 0x3, 'dh\x00', 0x1, 0x4, 0x6d}, 0x2c)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, 0x0, 0x0)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
write$cgroup_int(r3, &(0x7f0000000040)=0x1f00, 0x12)
setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000001100)=@nat={'nat\x00', 0x62, 0x5, 0x1520, 0x1298, 0x1298, 0xffffffff, 0x0, 0x1180, 0x1488, 0x1488, 0xffffffff, 0x1488, 0x1488, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00', {0xff}}, 0x0, 0x10a0, 0x10d8, 0x0, {0x22e}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.net/syz0\x00', 0x9, {0x100000001}}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x4f00, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x3dc, {0x0, @rand_addr=0x64010102, @remote, @icmp_id, @gre_key}}}}, {{@ip={@broadcast, @rand_addr=0x64010100, 0x0, 0x0, 'veth1_to_team\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key, @icmp_id}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'pimreg1\x00', 'netdevsim0\x00'}, 0x0, 0x1b8, 0x1f0, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@icmp={{0x28}, {0x0, "6e82"}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1580)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="880000000008030000000000000000000a00000604000480050003008800000006000240890600"], 0x88}, 0x1, 0x0, 0x0, 0x48090}, 0x200080d0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000180)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@nombcache}, {@errors_remount}, {@quota}]}, 0xff, 0x44b, &(0x7f0000000dc0)="$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")

0s ago: executing program 0 (id=906):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0))
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vxcan1\x00'})
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x8014}, 0x40040)
openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f000000ee00)={0x0, 0x0, &(0x7f000000edc0)={&(0x7f000000ed40)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x40080)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={0x0, 0x102a000, 0x1c00, 0xfffffffc, 0x2}, 0x20)
r5 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x1, 0x4, 0x2, 0x0, 0x1, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r7, <r8=>0xffffffffffffffff}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r6}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000a40)={r8, &(0x7f0000000500)}, 0x20)
ioctl$FE_SET_PROPERTY(r5, 0x40106f52, &(0x7f0000000100)={0x3, 0x0})
setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, 0x0, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet_udp(0x2, 0x2, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.68' (ED25519) to the list of known hosts.
syzkaller login: [   74.880835][ T4262] cgroup: Unknown subsys name 'net'
[   75.023766][ T4262] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   76.628918][ T4262] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k FS
[   78.110711][ T4279] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   78.119606][ T4279] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   78.127896][ T4279] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   78.135836][ T4279] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   78.143907][ T4279] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   78.151473][ T4279] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   78.157511][ T4277] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   78.168614][ T4277] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   78.176250][ T4277] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   78.184352][ T4277] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   78.192306][ T4277] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   78.199934][ T4277] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   78.226580][ T4275] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   78.235182][ T4275] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   78.250027][ T4279] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   78.258432][ T4279] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   78.268179][ T4279] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   78.275585][ T4279] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   78.293911][ T4279] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   78.302249][ T4279] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   78.310049][ T4279] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   78.327362][ T4279] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   78.334982][ T4279] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   78.342742][ T4279] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   78.379119][ T4275] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   78.387290][ T4275] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   78.395223][ T4275] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   78.403744][ T4275] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   78.411990][ T4275] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   78.419611][ T4275] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   78.661359][ T4274] chnl_net:caif_netlink_parms(): no params data found
[   78.794599][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.802582][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.812663][ T4274] device bridge_slave_0 entered promiscuous mode
[   78.841082][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.849069][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.857164][ T4274] device bridge_slave_1 entered promiscuous mode
[   78.883336][ T4282] chnl_net:caif_netlink_parms(): no params data found
[   78.933692][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.948823][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.008018][ T4274] team0: Port device team_slave_0 added
[   79.023386][ T4278] chnl_net:caif_netlink_parms(): no params data found
[   79.042021][ T4274] team0: Port device team_slave_1 added
[   79.087853][ T4288] chnl_net:caif_netlink_parms(): no params data found
[   79.132037][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.139122][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.165557][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.179289][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.186296][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.213340][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.251047][ T4283] chnl_net:caif_netlink_parms(): no params data found
[   79.276098][ T4282] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.283357][ T4282] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.291441][ T4282] device bridge_slave_0 entered promiscuous mode
[   79.300253][ T4282] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.307439][ T4282] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.315481][ T4282] device bridge_slave_1 entered promiscuous mode
[   79.378262][ T4278] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.385447][ T4278] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.394131][ T4278] device bridge_slave_0 entered promiscuous mode
[   79.427939][ T4282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.438100][ T4278] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.445235][ T4278] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.457508][ T4278] device bridge_slave_1 entered promiscuous mode
[   79.488169][ T4274] device hsr_slave_0 entered promiscuous mode
[   79.495209][ T4274] device hsr_slave_1 entered promiscuous mode
[   79.504147][ T4282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.546884][ T4288] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.554033][ T4288] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.565751][ T4288] device bridge_slave_0 entered promiscuous mode
[   79.603427][ T4288] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.610782][ T4288] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.622163][ T4288] device bridge_slave_1 entered promiscuous mode
[   79.631081][ T4278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.642884][ T4278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.654951][ T4282] team0: Port device team_slave_0 added
[   79.673982][ T4283] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.683314][ T4283] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.691934][ T4283] device bridge_slave_0 entered promiscuous mode
[   79.713894][ T4282] team0: Port device team_slave_1 added
[   79.727290][ T4283] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.734491][ T4283] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.743384][ T4283] device bridge_slave_1 entered promiscuous mode
[   79.808738][ T4278] team0: Port device team_slave_0 added
[   79.816363][ T4288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.828187][ T4288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.844014][ T4282] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.851168][ T4282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.877271][ T4282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.891407][ T4283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.912663][ T4278] team0: Port device team_slave_1 added
[   79.924932][ T4282] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.932080][ T4282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.958545][ T4282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.971521][ T4283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   80.011237][ T4288] team0: Port device team_slave_0 added
[   80.031596][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.038909][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.065410][ T4278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.086495][ T4288] team0: Port device team_slave_1 added
[   80.105457][ T4283] team0: Port device team_slave_0 added
[   80.112164][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.119918][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.146948][ T4278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.183336][ T4283] team0: Port device team_slave_1 added
[   80.211588][ T4288] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.222244][ T4288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.248712][ T4288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.264351][ T4282] device hsr_slave_0 entered promiscuous mode
[   80.273880][ T4282] device hsr_slave_1 entered promiscuous mode
[   80.281466][ T4282] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   80.292171][ T4282] Cannot create hsr debugfs directory
[   80.317591][ T4279] Bluetooth: hci2: command 0x0409 tx timeout
[   80.317623][ T4275] Bluetooth: hci1: command 0x0409 tx timeout
[   80.323948][ T4279] Bluetooth: hci0: command 0x0409 tx timeout
[   80.338609][ T4288] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.345591][ T4288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.371729][ T4288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.397018][ T4275] Bluetooth: hci3: command 0x0409 tx timeout
[   80.405748][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.412990][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.439546][ T4283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.462532][ T4278] device hsr_slave_0 entered promiscuous mode
[   80.469595][ T4278] device hsr_slave_1 entered promiscuous mode
[   80.476647][ T4278] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   80.484492][ T4275] Bluetooth: hci4: command 0x0409 tx timeout
[   80.494084][ T4278] Cannot create hsr debugfs directory
[   80.521771][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.536233][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.562846][ T4283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.597684][ T4288] device hsr_slave_0 entered promiscuous mode
[   80.604688][ T4288] device hsr_slave_1 entered promiscuous mode
[   80.611828][ T4288] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   80.619762][ T4288] Cannot create hsr debugfs directory
[   80.697271][ T4283] device hsr_slave_0 entered promiscuous mode
[   80.704477][ T4283] device hsr_slave_1 entered promiscuous mode
[   80.711726][ T4283] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   80.721206][ T4283] Cannot create hsr debugfs directory
[   80.943597][ T4274] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   80.956131][ T4274] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   80.977894][ T4274] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   80.989491][ T4274] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   81.105080][ T4282] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   81.120232][ T4282] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   81.138815][ T4282] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   81.149478][ T4282] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   81.229651][ T4278] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   81.263614][ T4278] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   81.290129][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.306624][ T4278] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   81.341419][ T4278] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   81.356085][ T4282] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.371490][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   81.381777][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   81.406442][ T4288] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   81.419572][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   81.430204][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   81.440077][ T4274] 8021q: adding VLAN 0 to HW filter on device team0
[   81.472646][ T4288] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   81.495756][ T4282] 8021q: adding VLAN 0 to HW filter on device team0
[   81.506693][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   81.515751][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   81.525989][ T1110] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.533644][ T1110] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.550901][ T4288] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   81.566186][ T4288] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   81.579067][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   81.609790][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   81.622997][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   81.632503][ T1110] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.639852][ T1110] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.649045][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   81.659010][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   81.670835][ T1110] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.678040][ T1110] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.709535][ T4283] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   81.724047][ T4283] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   81.733950][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   81.743626][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   81.753407][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   81.762995][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   81.773079][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   81.782529][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   81.791793][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   81.800651][ T1110] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.807834][ T1110] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.815996][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   81.835441][ T4278] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.855528][ T4283] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   81.866455][ T4283] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   81.877437][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   81.888393][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   81.897589][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   81.906234][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   81.915116][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   81.929633][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   81.949882][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   81.960952][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   81.977380][ T4274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   81.993633][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   82.010799][ T4278] 8021q: adding VLAN 0 to HW filter on device team0
[   82.023966][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   82.032962][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   82.046602][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   82.056415][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   82.065566][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   82.099221][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   82.116703][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   82.125987][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   82.142690][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   82.151606][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.158839][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.167587][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   82.202696][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   82.221768][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   82.283574][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   82.301199][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   82.314901][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.322091][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.331474][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   82.341100][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   82.350255][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   82.359686][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   82.388351][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   82.397257][ T4281] Bluetooth: hci1: command 0x041b tx timeout
[   82.403300][ T4281] Bluetooth: hci0: command 0x041b tx timeout
[   82.409708][ T4275] Bluetooth: hci2: command 0x041b tx timeout
[   82.421771][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   82.430715][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   82.440632][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   82.458689][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   82.468906][ T4278] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   82.479613][ T4281] Bluetooth: hci3: command 0x041b tx timeout
[   82.488328][ T4278] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   82.517640][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   82.534184][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   82.544208][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   82.557314][ T4281] Bluetooth: hci4: command 0x041b tx timeout
[   82.567500][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   82.581382][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   82.616320][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   82.655515][ T4288] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.701687][ T4283] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.731084][ T4288] 8021q: adding VLAN 0 to HW filter on device team0
[   82.764470][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   82.774472][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   82.818403][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   82.837381][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   82.845673][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   82.869474][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   82.898181][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.905363][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.927543][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   82.943854][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   82.952736][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.959949][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.974368][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   82.983959][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   82.999927][ T4283] 8021q: adding VLAN 0 to HW filter on device team0
[   83.010732][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   83.060093][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   83.069385][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   83.087570][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   83.097788][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   83.118585][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   83.138478][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   83.147505][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   83.156278][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   83.184649][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.214390][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   83.230090][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   83.242660][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   83.255773][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.262994][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.273115][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   83.282476][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   83.291261][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.298446][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.306462][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   83.318817][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   83.332688][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   83.342007][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   83.375023][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   83.408237][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   83.416381][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   83.440178][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   83.467878][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   83.517907][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   83.538195][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   83.557548][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   83.566226][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   83.575424][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   83.590440][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   83.620464][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   83.632039][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   83.641487][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   83.659217][ T4278] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.696499][ T4282] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.716245][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   83.726507][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   83.742036][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   83.751782][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   83.795682][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   83.804885][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   83.824904][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   83.850780][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   83.879545][ T4274] device veth0_vlan entered promiscuous mode
[   83.901860][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   83.947780][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   83.990079][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   84.002173][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   84.033397][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   84.044119][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   84.060228][ T4274] device veth1_vlan entered promiscuous mode
[   84.084462][ T4282] device veth0_vlan entered promiscuous mode
[   84.109372][ T4288] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.130420][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   84.139868][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   84.150533][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   84.159496][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   84.188804][ T4282] device veth1_vlan entered promiscuous mode
[   84.210248][ T4274] device veth0_macvtap entered promiscuous mode
[   84.230994][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   84.243001][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   84.252430][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   84.262117][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   84.271591][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   84.288053][ T4278] device veth0_vlan entered promiscuous mode
[   84.302573][ T4274] device veth1_macvtap entered promiscuous mode
[   84.316009][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   84.327823][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   84.335709][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   84.344327][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   84.353425][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   84.375276][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.400998][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   84.421056][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   84.430983][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   84.442364][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   84.460610][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.477432][ T4275] Bluetooth: hci1: command 0x040f tx timeout
[   84.477452][ T4281] Bluetooth: hci0: command 0x040f tx timeout
[   84.483671][ T4275] Bluetooth: hci2: command 0x040f tx timeout
[   84.509245][ T4283] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.520573][ T4278] device veth1_vlan entered promiscuous mode
[   84.535522][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   84.551654][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   84.567136][ T4275] Bluetooth: hci3: command 0x040f tx timeout
[   84.573924][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   84.593207][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   84.602652][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   84.631683][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   84.647469][ T4275] Bluetooth: hci4: command 0x040f tx timeout
[   84.654732][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   84.674246][ T4274] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.685983][ T4274] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.701508][ T4274] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.711587][ T4274] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.740314][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   84.750896][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   84.769087][ T4282] device veth0_macvtap entered promiscuous mode
[   84.777226][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   84.785517][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   84.798996][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   84.807284][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   84.817694][ T4288] device veth0_vlan entered promiscuous mode
[   84.850212][ T4282] device veth1_macvtap entered promiscuous mode
[   84.870692][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   84.887850][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   84.911573][ T4288] device veth1_vlan entered promiscuous mode
[   84.936476][ T4278] device veth0_macvtap entered promiscuous mode
[   84.995075][ T4278] device veth1_macvtap entered promiscuous mode
[   85.025036][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.045552][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.058520][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.070077][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   85.079707][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   85.092766][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   85.103634][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   85.160577][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.179606][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.201460][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.224225][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.236287][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.246317][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.257574][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.269704][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.288926][ T4288] device veth0_macvtap entered promiscuous mode
[   85.297568][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   85.313333][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   85.323056][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   85.340278][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   85.350006][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   85.359838][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   85.371827][ T4282] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.379066][ T1134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.389693][ T1134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.407132][ T4282] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.416052][ T4282] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.432889][ T4282] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.455852][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.471789][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.482227][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.498676][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.511265][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.525558][ T4288] device veth1_macvtap entered promiscuous mode
[   85.533639][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   85.542790][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   85.551262][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   85.561086][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   85.570156][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   85.600445][ T4278] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.616319][ T4278] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.632635][ T4278] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.641754][ T4278] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.752817][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.763830][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.776248][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.776663][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.794933][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.805549][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.815516][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.829672][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.843022][ T4288] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.888814][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   85.899140][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   85.907961][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   85.917345][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   85.926687][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   85.941047][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.962892][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.976360][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.990649][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.001079][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   86.012146][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.024023][ T4288] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.050432][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   86.054128][ T1134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.069611][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   86.084959][ T1134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.100593][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   86.110568][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   86.120939][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   86.129939][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   86.139279][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   86.156577][ T4288] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.166435][ T4288] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.175733][ T4288] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.187247][ T4288] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.202088][ T4283] device veth0_vlan entered promiscuous mode
[   86.261294][ T4283] device veth1_vlan entered promiscuous mode
[   86.309423][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.333380][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.368597][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   86.379217][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   86.389639][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   86.480109][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.516836][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.546433][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.557302][ T4275] Bluetooth: hci0: command 0x0419 tx timeout
[   86.563395][ T4275] Bluetooth: hci1: command 0x0419 tx timeout
[   86.571875][ T4281] Bluetooth: hci2: command 0x0419 tx timeout
[   86.612940][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.634592][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   86.637143][ T1134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.652961][ T4279] Bluetooth: hci3: command 0x0419 tx timeout
[   86.747043][ T4275] Bluetooth: hci4: command 0x0419 tx timeout
[   86.849298][ T1134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.876229][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   87.169291][ T4361] can0: slcan on ttyS3.
[   87.507635][ T4283] device veth0_macvtap entered promiscuous mode
[   87.514325][ T4362] can0 (unregistered): slcan off ttyS3.
[   87.521273][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   87.538715][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   87.557511][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   87.575334][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   87.660507][ T4283] device veth1_macvtap entered promiscuous mode
[   87.737850][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.757554][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.784255][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.816961][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.837782][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.868115][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.067127][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   88.078755][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.106065][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   88.135275][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.556787][ T4376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6'.
[   88.646669][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.667463][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   88.679255][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   88.698106][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   88.804881][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.866818][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.916372][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.942591][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.961897][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.973985][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.996652][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   89.032212][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.080602][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.168912][ T4283] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.221452][ T4283] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.241723][ T4283] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.256976][ T4283] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.288442][ T4385] loop0: detected capacity change from 0 to 256
[   89.309546][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   89.333010][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   90.452984][ T4392] loop2: detected capacity change from 0 to 512
[   90.509370][ T4392] EXT4-fs: Ignoring removed nobh option
[   91.543444][ T4392] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.9: invalid indirect mapped block 256 (level 2)
[   91.664473][ T4365] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.681894][ T4392] EXT4-fs (loop2): 2 truncates cleaned up
[   91.686598][ T4365] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.697923][  T126] cfg80211: failed to load regulatory.db
[   91.880176][ T4392] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   91.922580][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   93.293459][ T4403] 0x7073726500000000-0x7073726500306e61 : ""
[   93.300569][ T4403] mtd: partition "" is out of reach -- disabled
[   93.313613][ T4403] ftl_cs: FTL header not found.
[   93.546071][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.815499][ T4391] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.9: bg 0: block 5: invalid block bitmap
[   94.245680][ T4391] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28
[   94.258343][ T4391] EXT4-fs (loop2): This should not happen!! Data will be lost
[   94.258343][ T4391] 
[   94.268159][ T4391] EXT4-fs (loop2): Total free blocks count 0
[   94.274242][ T4391] EXT4-fs (loop2): Free/Dirty block details
[   94.280451][ T4391] EXT4-fs (loop2): free_blocks=0
[   94.285567][ T4391] EXT4-fs (loop2): dirty_blocks=33
[   94.290818][ T4391] EXT4-fs (loop2): Block reservation details
[   94.296935][ T4391] EXT4-fs (loop2): i_reserved_data_blocks=33
[   94.392201][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.507245][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   94.707799][ T4282] EXT4-fs (loop2): unmounting filesystem.
[   96.620686][ T4428] tipc: Started in network mode
[   96.626169][ T4428] tipc: Node identity 4, cluster identity 4711
[   96.632503][ T4428] tipc: Node number set to 4
[   96.647341][ T4428] syz.0.17 uses obsolete (PF_INET,SOCK_PACKET)
[   98.578048][ T4426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   99.288503][ T4440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19'.
[   99.378196][ T4440] device hsr_slave_0 left promiscuous mode
[   99.443645][ T4440] device hsr_slave_1 left promiscuous mode
[  100.218553][ T4467] loop1: detected capacity change from 0 to 4096
[  100.355323][ T4467] ntfs: (device loop1): parse_ntfs_boot_sector(): MFTMirr LCN (511, 0x1ff) is beyond end of volume.  Weird.
[  100.367559][ T4467] ntfs: (device loop1): ntfs_fill_super(): Unsupported NTFS filesystem.
[  102.346736][    C0] sched: RT throttling activated
[  102.466796][    T0] NOHZ tick-stop error: local softirq work is pending, handler #12!!!
[  102.486792][    T0] NOHZ tick-stop error: local softirq work is pending, handler #92!!!
[  102.496771][    T0] NOHZ tick-stop error: local softirq work is pending, handler #92!!!
[  102.506762][    T0] NOHZ tick-stop error: local softirq work is pending, handler #92!!!
[  102.516760][    T0] NOHZ tick-stop error: local softirq work is pending, handler #192!!!
[  102.526760][    T0] NOHZ tick-stop error: local softirq work is pending, handler #192!!!
[  102.536762][    T0] NOHZ tick-stop error: local softirq work is pending, handler #192!!!
[  102.546762][    T0] NOHZ tick-stop error: local softirq work is pending, handler #192!!!
[  102.556757][    T0] NOHZ tick-stop error: local softirq work is pending, handler #192!!!
[  102.566760][    T0] NOHZ tick-stop error: local softirq work is pending, handler #192!!!
[  102.793010][ T4483] loop3: detected capacity change from 0 to 512
[  103.180781][ T4483] =======================================================
[  103.180781][ T4483] WARNING: The mand mount option has been deprecated and
[  103.180781][ T4483]          and is ignored by this kernel. Remove the mand
[  103.180781][ T4483]          option from the mount to silence this warning.
[  103.180781][ T4483] =======================================================
[  106.379050][ T4510] loop3: detected capacity change from 0 to 16
[  106.390722][ T4510] erofs: Unknown parameter 'ćé'
[  107.552167][ T4514] atomic_op ffff888055e32198 conn xmit_atomic 0000000000000000
[  107.757775][ T4509] IPVS: wlc: FWM 3 0x00000003 - no destination available
[  107.997182][    C0] IPVS: wlc: FWM 3 0x00000003 - no destination available
[  111.388972][ T4551] loop0: detected capacity change from 0 to 512
[  112.739046][ T4561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.43'.
[  112.951914][ T4551] process 'syz.0.42' launched './file2' with NULL argv: empty string added
[  114.546984][   T14] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  114.704411][ T4573] FAULT_INJECTION: forcing a failure.
[  114.704411][ T4573] name failslab, interval 1, probability 0, space 0, times 1
[  114.748307][ T4573] CPU: 1 PID: 4573 Comm: syz.4.46 Not tainted syzkaller #0
[  114.755603][ T4573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  114.765797][ T4573] Call Trace:
[  114.769207][ T4573]  <TASK>
[  114.772172][ T4573]  dump_stack_lvl+0x188/0x24e
[  114.776916][ T4573]  ? show_regs_print_info+0x12/0x12
[  114.782162][ T4573]  ? load_image+0x410/0x410
[  114.786757][ T4573]  ? __lock_acquire+0x7c40/0x7c40
[  114.791830][ T4573]  ? mark_lock+0x94/0x320
[  114.796211][ T4573]  should_fail_ex+0x390/0x4c0
[  114.800941][ T4573]  should_failslab+0x5/0x20
[  114.805515][ T4573]  slab_pre_alloc_hook+0x59/0x300
[  114.810592][ T4573]  ? lockdep_init_map_type+0x98/0x8d0
[  114.816046][ T4573]  ? psi_cgroup_alloc+0x52/0x1f0
[  114.821034][ T4573]  __kmem_cache_alloc_node+0x4f/0x270
[  114.826476][ T4573]  ? psi_cgroup_alloc+0x52/0x1f0
[  114.831714][ T4573]  kmalloc_trace+0x26/0xe0
[  114.836212][ T4573]  psi_cgroup_alloc+0x52/0x1f0
[  114.841038][ T4573]  cgroup_mkdir+0x59d/0xe70
[  114.845620][ T4573]  ? css_task_iter_end+0x280/0x280
[  114.850795][ T4573]  ? up_read+0x20/0x20
[  114.854926][ T4573]  ? do_raw_spin_unlock+0x11d/0x230
[  114.860184][ T4573]  ? kernfs_iop_permission+0x26d/0x350
[  114.865695][ T4573]  ? css_task_iter_end+0x280/0x280
[  114.870855][ T4573]  kernfs_iop_mkdir+0x23d/0x3d0
[  114.875762][ T4573]  vfs_mkdir+0x386/0x570
[  114.880063][ T4573]  do_mkdirat+0x1d8/0x440
[  114.884450][ T4573]  ? vfs_mkdir+0x570/0x570
[  114.888934][ T4573]  __x64_sys_mkdirat+0x85/0x90
[  114.893745][ T4573]  do_syscall_64+0x4c/0xa0
[  114.898207][ T4573]  ? clear_bhb_loop+0x60/0xb0
[  114.902977][ T4573]  ? clear_bhb_loop+0x60/0xb0
[  114.907712][ T4573]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  114.913679][ T4573] RIP: 0033:0x7f98ff19e159
[  114.918163][ T4573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  114.937819][ T4573] RSP: 002b:00007f98fffe1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  114.946284][ T4573] RAX: ffffffffffffffda RBX: 00007f98ff425fa0 RCX: 00007f98ff19e159
[  114.954293][ T4573] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c
[  114.962311][ T4573] RBP: 00007f98ff23506b R08: 0000000000000000 R09: 0000000000000000
[  114.970327][ T4573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  114.978351][ T4573] R13: 00007f98ff426038 R14: 00007f98ff425fa0 R15: 00007ffcf4232138
[  114.986404][ T4573]  </TASK>
[  115.581517][ T4580] loop1: detected capacity change from 0 to 16
[  115.639987][ T4580] erofs: Unknown parameter 'ćé'
[  115.690424][ T4447] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  116.030543][ T4584] atomic_op ffff888018fb9998 conn xmit_atomic 0000000000000000
[  117.342649][ T4593] loop4: detected capacity change from 0 to 512
[  117.554166][ T4446] Bluetooth: Error in BCSP hdr checksum
[  117.580122][ T4593] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  118.068501][ T4604] loop1: detected capacity change from 0 to 128
[  118.471531][ T4604] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  118.617962][ T4604] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  118.959239][ T4614] loop0: detected capacity change from 0 to 512
[  119.564087][ T4279] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  119.664820][ T4614] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1)
[  119.828460][ T4283] EXT4-fs (loop4): unmounting filesystem.
[  119.940785][ T4622] loop2: detected capacity change from 0 to 256
[  120.965504][ T4634] loop3: detected capacity change from 0 to 256
[  122.701615][ T4653] syz.0.64: attempt to access beyond end of device
[  122.701615][ T4653] nbd0: rw=4096, sector=128, nr_sectors = 8 limit=0
[  122.715128][ T4653] gfs2: error 10 reading superblock
[  123.001265][ T4658] netlink: 104 bytes leftover after parsing attributes in process `syz.2.66'.
[  124.016595][ T4663] loop0: detected capacity change from 0 to 512
[  125.221378][ T4663] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1)
[  125.402905][ T4679] loop3: detected capacity change from 0 to 128
[  125.438547][ T4679] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  125.464961][ T4679] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  126.069363][ T4690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.74'.
[  127.569198][ T4702] loop0: detected capacity change from 0 to 8
[  127.968799][ T4702] unable to read inode lookup table
[  129.448948][ T4721] loop2: detected capacity change from 0 to 256
[  130.323110][ T4729] netlink: 4 bytes leftover after parsing attributes in process `syz.1.85'.
[  130.387051][ T4729] device hsr_slave_0 left promiscuous mode
[  130.415837][ T4729] device hsr_slave_1 left promiscuous mode
[  132.359802][ T4749] tipc: Started in network mode
[  132.364783][ T4749] tipc: Node identity 4, cluster identity 4711
[  132.371038][ T4749] tipc: Node number set to 4
[  132.652006][ T1282] ieee802154 phy0 wpan0: encryption failed: -22
[  132.696989][ T1282] ieee802154 phy1 wpan1: encryption failed: -22
[  133.495630][ T4778] xt_connbytes: Forcing CT accounting to be enabled
[  133.502629][ T4778] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  133.514634][ T4778] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING
[  134.925868][ T4792] overlayfs: failed to clone upperpath
[  134.943053][ T4792] fuse: Bad value for 'fd'
[  135.162874][ T4791] tipc: Started in network mode
[  135.233372][ T4791] tipc: Node identity 4, cluster identity 4711
[  135.352787][ T4791] tipc: Node number set to 4
[  136.284719][ T4801] gadgetfs: bound to dummy_udc driver
[  137.169816][ T4799] netlink: 16 bytes leftover after parsing attributes in process `syz.2.100'.
[  137.201002][ T4791] tipc: Enabled bearer <eth:syz_tun>, priority 0
[  137.213583][ T4791] tipc: Resetting bearer <eth:syz_tun>
[  137.380226][ T4791] tipc: Disabling bearer <eth:syz_tun>
[  139.543828][ T4821] netlink: 404 bytes leftover after parsing attributes in process `syz.2.106'.
[  139.964347][ T4819] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  142.464981][ T4848] tipc: Started in network mode
[  142.470120][ T4848] tipc: Node identity 4, cluster identity 4711
[  142.476415][ T4848] tipc: Node number set to 4
[  145.482221][ T4863] tipc: Enabled bearer <eth:syz_tun>, priority 0
[  145.504153][ T4863] tipc: Resetting bearer <eth:syz_tun>
[  145.532619][ T4868] retu-mfd 0-0001: could not read Retu revision: -5
[  145.547989][ T4868] retu-mfd: probe of 0-0001 failed with error -5
[  145.566478][ T4868] i2c i2c-0: new_device: Instantiated device retu at 0x01
[  146.224879][ T4863] tipc: Disabling bearer <eth:syz_tun>
[  147.911715][ T4906] loop4: detected capacity change from 0 to 128
[  148.023153][ T4447] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  148.375450][ T4911] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4283] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[4911]
[  149.235233][ T4919] loop2: detected capacity change from 0 to 8
[  149.427334][ T4919] SQUASHFS error: zlib decompression failed, data probably corrupt
[  149.435362][ T4919] SQUASHFS error: Failed to read block 0x9b: -5
[  149.486500][ T4924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.131'.
[  149.517210][ T4924] netlink: 'syz.0.131': attribute type 5 has an invalid length.
[  149.524948][ T4924] netlink: 20 bytes leftover after parsing attributes in process `syz.0.131'.
[  149.567322][ T4919] SQUASHFS error: Unable to read metadata cache entry [99]
[  149.574617][ T4919] SQUASHFS error: Unable to read inode 0x127
[  149.652353][ T4924] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  149.708088][ T4924] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  150.416077][ T4924] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  150.644839][ T4924] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  150.653981][ T4924] device geneve2 entered promiscuous mode
[  151.364224][ T4919] loop2: detected capacity change from 0 to 4096
[  151.446914][ T4943] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  152.479506][ T4953] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  153.982175][ T4963] loop2: detected capacity change from 0 to 8192
[  154.183291][ T4968] netlink: 'syz.0.141': attribute type 2 has an invalid length.
[  154.191687][ T4968] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.141'.
[  154.570959][ T4963] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  154.647005][ T4963] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  154.675584][ T4963] REISERFS (device loop2): using ordered data mode
[  154.718079][ T4963] reiserfs: using flush barriers
[  155.482598][ T4963] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  155.499511][ T4963] REISERFS (device loop2): checking transaction log (loop2)
[  155.558216][ T4963] REISERFS (device loop2): Using r5 hash to sort names
[  155.569406][ T4963] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  159.841901][ T5017] tipc: Started in network mode
[  161.741708][ T5017] tipc: Node identity 4, cluster identity 4711
[  161.815470][ T5017] tipc: Node number set to 4
[  162.008649][ T5032] loop0: detected capacity change from 0 to 16
[  162.050273][ T5032] erofs: (device loop0): mounted with root inode @ nid 36.
[  162.130723][ T5032] syz.0.159: attempt to access beyond end of device
[  162.130723][ T5032] loop0: rw=524288, sector=1056, nr_sectors = 16 limit=16
[  162.236055][ T5032] syz.0.159: attempt to access beyond end of device
[  162.236055][ T5032] loop0: rw=524288, sector=16, nr_sectors = 40 limit=16
[  162.500127][ T5032] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -41 in[61, 4035] out[8192]
[  162.701927][   T26] audit: type=1800 audit(1789678102.502:2): pid=5032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.159" name="file2" dev="loop0" ino=89 res=0 errno=0
[  165.450232][ T5032] syz.0.159 (5032) used greatest stack depth: 20400 bytes left
[  168.323648][ T5083] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  169.205937][ T5086] loop0: detected capacity change from 0 to 128
[  169.276958][ T5064] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  173.008717][ T5110] xt_connbytes: Forcing CT accounting to be enabled
[  173.015502][ T5110] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING
[  173.520209][ T5115] loop0: detected capacity change from 0 to 256
[  173.531733][ T5115] exfat: Unknown parameter '000000000000000000110x00000000000000000xffffffffffffffff00000000000000000010'
[  174.136857][ T5064] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  174.404236][ T5118] netlink: 104 bytes leftover after parsing attributes in process `syz.1.178'.
[  178.383017][ T5154] loop4: detected capacity change from 0 to 8
[  178.428463][ T5156] netlink: 40 bytes leftover after parsing attributes in process `syz.3.189'.
[  178.485080][ T5154] unable to read inode lookup table
[  182.009850][ T5181] loop4: detected capacity change from 0 to 128
[  182.801163][ T5179] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING
[  183.660786][ T5199] netlink: 8 bytes leftover after parsing attributes in process `syz.3.194'.
[  183.687788][ T5199] netlink: 'syz.3.194': attribute type 5 has an invalid length.
[  183.707801][ T5199] netlink: 20 bytes leftover after parsing attributes in process `syz.3.194'.
[  183.751297][ T5199] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  183.823185][ T5199] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  183.834078][ T5203] loop4: detected capacity change from 0 to 16
[  183.859921][ T5199] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  183.912888][ T5199] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  183.954368][ T5203] erofs: (device loop4): mounted with root inode @ nid 36.
[  183.978037][ T5199] device geneve2 entered promiscuous mode
[  184.092252][ T5203] syz.4.196: attempt to access beyond end of device
[  184.092252][ T5203] loop4: rw=524288, sector=1056, nr_sectors = 16 limit=16
[  184.398218][ T5203] syz.4.196: attempt to access beyond end of device
[  184.398218][ T5203] loop4: rw=524288, sector=16, nr_sectors = 40 limit=16
[  185.239068][ T5203] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -41 in[61, 4035] out[8192]
[  185.251371][   T26] audit: type=1800 audit(1789678125.052:3): pid=5203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.196" name="file2" dev="loop4" ino=89 res=0 errno=0
[  185.306804][ T4316] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  185.411497][ T5222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.202'.
[  185.511168][ T4316] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  185.553036][ T4316] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  185.647377][ T4316] usb 1-1: config 0 interface 0 has no altsetting 0
[  185.665631][ T4316] usb 1-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00
[  185.750481][ T4316] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.829152][ T4316] usb 1-1: config 0 descriptor??
[  186.696921][ T4316] usbhid 1-1:0.0: can't add hid device: -71
[  186.703504][ T4316] usbhid: probe of 1-1:0.0 failed with error -71
[  186.806448][ T4316] usb 1-1: USB disconnect, device number 2
[  186.996637][ T5232] Zero length message leads to an empty skb
[  187.997971][ T5236] loop2: detected capacity change from 0 to 128
[  188.303011][ T5243] xt_connbytes: Forcing CT accounting to be enabled
[  188.309971][ T5243] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING
[  189.395368][ T5253] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  189.434195][ T5254] netlink: 40 bytes leftover after parsing attributes in process `syz.2.211'.
[  191.097929][ T5261] NILFS (nullb0): couldn't find nilfs on the device
[  191.910797][ T5270] loop2: detected capacity change from 0 to 128
[  193.334729][ T5283] loop4: detected capacity change from 0 to 8
[  193.433972][ T5285] loop2: detected capacity change from 0 to 8
[  193.593456][ T5285] unable to read inode lookup table
[  193.721805][ T4279] Bluetooth: hci4: link tx timeout
[  193.727558][ T4279] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  194.182765][ T1282] ieee802154 phy0 wpan0: encryption failed: -22
[  194.195988][ T1282] ieee802154 phy1 wpan1: encryption failed: -22
[  195.334279][ T4281] Bluetooth: hci4: link tx timeout
[  195.340509][ T4281] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  195.766916][ T4281] Bluetooth: hci4: command 0x0406 tx timeout
[  195.813830][ T5296] loop0: detected capacity change from 0 to 128
[  197.246046][ T5305] xt_connbytes: Forcing CT accounting to be enabled
[  197.252963][ T5305] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING
[  197.303369][ T5302] loop2: detected capacity change from 0 to 164
[  198.308936][ T5309] gfs2: not a GFS2 filesystem
[  198.331067][ T5309] hpfs: Bad magic ... probably not HPFS
[  198.883895][ T5309] tty tty4: ldisc open failed (-12), clearing slot 3
[  201.198288][ T5321] syz.0.228 (5321) used greatest stack depth: 15664 bytes left
[  201.276883][ T4281] Bluetooth: hci1: command 0x0406 tx timeout
[  201.284182][ T4279] Bluetooth: hci2: command 0x0406 tx timeout
[  201.284204][ T4275] Bluetooth: hci3: command 0x0406 tx timeout
[  201.290376][ T4279] Bluetooth: hci0: command 0x0406 tx timeout
[  201.304443][ T5330] loop2: detected capacity change from 0 to 16
[  201.330271][ T5327] tipc: Enabled bearer <eth:syz_tun>, priority 0
[  201.348724][ T5330] erofs: (device loop2): mounted with root inode @ nid 36.
[  201.390522][ T5330] syz.2.230: attempt to access beyond end of device
[  201.390522][ T5330] loop2: rw=524288, sector=1056, nr_sectors = 16 limit=16
[  201.461339][ T5336] loop0: detected capacity change from 0 to 128
[  202.192974][ T5341] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4274] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[5341]
[  202.244898][ T5341] netlink: 388 bytes leftover after parsing attributes in process `syz.0.232'.
[  202.446937][ T4279] Bluetooth: Wrong link type (-22)
[  202.493907][ T5330] syz.2.230: attempt to access beyond end of device
[  202.493907][ T5330] loop2: rw=524288, sector=16, nr_sectors = 40 limit=16
[  202.617074][ T5330] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -41 in[61, 4035] out[8192]
[  202.707173][   T26] audit: type=1800 audit(1789678142.512:4): pid=5330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.230" name="file2" dev="loop2" ino=89 res=0 errno=0
[  203.025119][ T5348] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16
[  203.927821][ T5347] bridge0: port 3(syz_tun) entered blocking state
[  203.959490][ T5347] bridge0: port 3(syz_tun) entered disabled state
[  203.983557][ T5347] device syz_tun entered promiscuous mode
[  204.938374][ T5347] bridge0: port 3(syz_tun) entered blocking state
[  204.945285][ T5347] bridge0: port 3(syz_tun) entered forwarding state
[  205.286164][ T5358] Bluetooth: MGMT ver 1.22
[  206.338048][ T3655] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  207.084443][ T3655] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  207.114942][ T3655] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  207.125780][ T3655] usb 1-1: config 0 interface 0 has no altsetting 0
[  207.132894][ T3655] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[  207.844394][ T3655] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  207.855279][ T3655] usb 1-1: config 0 descriptor??
[  209.792398][ T5373] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  209.793709][ T5389] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4)
[  210.034967][ T5394] loop2: detected capacity change from 0 to 16
[  210.053718][ T5394] erofs: (device loop2): mounted with root inode @ nid 36.
[  210.128935][ T5394] syz.2.248: attempt to access beyond end of device
[  210.128935][ T5394] loop2: rw=524288, sector=1056, nr_sectors = 16 limit=16
[  210.213103][ T5394] syz.2.248: attempt to access beyond end of device
[  210.213103][ T5394] loop2: rw=524288, sector=16, nr_sectors = 40 limit=16
[  210.598273][ T5394] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -41 in[61, 4035] out[8192]
[  210.725445][ T5411] tmpfs: Unknown parameter 'quota'
[  211.678783][   T26] audit: type=1800 audit(1789678151.482:5): pid=5394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.248" name="file2" dev="loop2" ino=89 res=0 errno=0
[  211.818249][ T3655] usbhid 1-1:0.0: can't add hid device: -71
[  211.824283][ T3655] usbhid: probe of 1-1:0.0 failed with error -71
[  211.909253][ T3655] usb 1-1: USB disconnect, device number 3
[  212.332981][ T5428] NILFS (nullb0): couldn't find nilfs on the device
[  213.423274][ T5442] loop4: detected capacity change from 0 to 256
[  214.237587][ T5442] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d)
[  214.375265][ T4320] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  215.106829][ T4320] usb 3-1: Using ep0 maxpacket: 16
[  215.137593][ T4320] usb 3-1: config 0 has an invalid interface number: 8 but max is 0
[  215.291729][ T4320] usb 3-1: config 0 has no interface number 0
[  215.357455][ T5450] No such timeout policy "syz1"
[  215.493119][ T4320] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  215.519206][ T4320] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  215.531968][ T4320] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  215.670639][ T4320] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  215.680830][ T4320] usb 3-1: Product: syz
[  215.685127][ T4320] usb 3-1: SerialNumber: syz
[  215.711707][ T4320] usb 3-1: config 0 descriptor??
[  215.734908][ T4320] cm109 3-1:0.8: invalid payload size 0, expected 4
[  215.771940][ T4320] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input11
[  215.788342][ T5456] loop4: detected capacity change from 0 to 256
[  215.849688][ T5456] FAT-fs (loop4): Unrecognized mount option "rų¶°" or missing value
[  216.986779][ T4322] usb 3-1: USB disconnect, device number 2
[  217.024548][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  217.031930][    C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  217.088382][ T4322] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  217.189892][ T5466] FAULT_INJECTION: forcing a failure.
[  217.189892][ T5466] name failslab, interval 1, probability 0, space 0, times 0
[  217.248931][ T5466] CPU: 1 PID: 5466 Comm: syz.0.262 Not tainted syzkaller #0
[  217.256373][ T5466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  217.266460][ T5466] Call Trace:
[  217.269749][ T5466]  <TASK>
[  217.272704][ T5466]  dump_stack_lvl+0x188/0x24e
[  217.277411][ T5466]  ? show_regs_print_info+0x12/0x12
[  217.282726][ T5466]  ? load_image+0x410/0x410
[  217.287261][ T5466]  ? __might_sleep+0xd0/0xd0
[  217.291859][ T5466]  ? __lock_acquire+0x7c40/0x7c40
[  217.296902][ T5466]  ? __prealloc_shrinker+0x6e3/0x7e0
[  217.302205][ T5466]  should_fail_ex+0x390/0x4c0
[  217.306928][ T5466]  should_failslab+0x5/0x20
[  217.311475][ T5466]  slab_pre_alloc_hook+0x59/0x300
[  217.316518][ T5466]  ? __list_lru_init+0xb0/0x600
[  217.321388][ T5466]  __kmem_cache_alloc_node+0x4f/0x270
[  217.326815][ T5466]  ? __list_lru_init+0xb0/0x600
[  217.331710][ T5466]  __kmalloc+0xa3/0x240
[  217.335920][ T5466]  __list_lru_init+0xb0/0x600
[  217.340642][ T5466]  alloc_super+0x766/0x930
[  217.345089][ T5466]  ? kill_litter_super+0xa0/0xa0
[  217.350059][ T5466]  sget_fc+0x2d4/0x750
[  217.354163][ T5466]  ? kill_litter_super+0xa0/0xa0
[  217.359133][ T5466]  ? proc_reconfigure+0x370/0x370
[  217.364179][ T5466]  get_tree_nodev+0x26/0x160
[  217.368782][ T5466]  vfs_get_tree+0x88/0x270
[  217.373217][ T5466]  do_new_mount+0x247/0xa40
[  217.377745][ T5466]  __se_sys_mount+0x2e3/0x3d0
[  217.382444][ T5466]  ? __x64_sys_mount+0xc0/0xc0
[  217.387225][ T5466]  ? lockdep_hardirqs_on+0x94/0x140
[  217.392436][ T5466]  ? __x64_sys_mount+0x1c/0xc0
[  217.397214][ T5466]  do_syscall_64+0x4c/0xa0
[  217.401729][ T5466]  ? clear_bhb_loop+0x60/0xb0
[  217.406418][ T5466]  ? clear_bhb_loop+0x60/0xb0
[  217.411200][ T5466]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  217.417133][ T5466] RIP: 0033:0x7fdc9999e159
[  217.421567][ T5466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  217.441190][ T5466] RSP: 002b:00007fdc9a7d4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  217.449798][ T5466] RAX: ffffffffffffffda RBX: 00007fdc99c25fa0 RCX: 00007fdc9999e159
[  217.457783][ T5466] RDX: 0000200000000100 RSI: 0000200000000080 RDI: 0000000000000000
[  217.465769][ T5466] RBP: 00007fdc99a3506b R08: 0000000000000000 R09: 0000000000000000
[  217.473744][ T5466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  217.481720][ T5466] R13: 00007fdc99c26038 R14: 00007fdc99c25fa0 R15: 00007ffe1b9bf738
[  217.489712][ T5466]  </TASK>
[  217.568262][ T5469] tipc: Enabling of bearer <eth:syz_tun> rejected, already enabled
[  217.623390][ T5476] kernel profiling enabled (shift: 5)
[  217.653105][ T5478] FAULT_INJECTION: forcing a failure.
[  217.653105][ T5478] name failslab, interval 1, probability 0, space 0, times 0
[  217.753123][ T5479] netlink: 36 bytes leftover after parsing attributes in process `syz.2.264'.
[  217.852748][ T5479] netlink: 36 bytes leftover after parsing attributes in process `syz.2.264'.
[  218.018427][ T5478] CPU: 0 PID: 5478 Comm: syz.0.262 Not tainted syzkaller #0
[  218.025809][ T5478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  218.035911][ T5478] Call Trace:
[  218.039237][ T5478]  <TASK>
[  218.042209][ T5478]  dump_stack_lvl+0x188/0x24e
[  218.047021][ T5478]  ? show_regs_print_info+0x12/0x12
[  218.052260][ T5478]  ? load_image+0x410/0x410
[  218.056800][ T5478]  ? __might_sleep+0xd0/0xd0
[  218.061447][ T5478]  ? __lock_acquire+0x7c40/0x7c40
[  218.066520][ T5478]  ? __lock_acquire+0x1465/0x7c40
[  218.071691][ T5478]  should_fail_ex+0x390/0x4c0
[  218.076607][ T5478]  should_failslab+0x5/0x20
[  218.081149][ T5478]  slab_pre_alloc_hook+0x59/0x300
[  218.086211][ T5478]  ? tomoyo_realpath_from_path+0xe2/0x5c0
[  218.091980][ T5478]  __kmem_cache_alloc_node+0x4f/0x270
[  218.097393][ T5478]  ? tomoyo_realpath_from_path+0xe2/0x5c0
[  218.103143][ T5478]  __kmalloc+0xa3/0x240
[  218.107346][ T5478]  tomoyo_realpath_from_path+0xe2/0x5c0
[  218.112935][ T5478]  tomoyo_check_open_permission+0x212/0x440
[  218.118862][ T5478]  ? tomoyo_check_open_permission+0x1bf/0x440
[  218.124962][ T5478]  ? tomoyo_check_path_number_acl+0x280/0x280
[  218.131086][ T5478]  ? __lock_acquire+0x7c40/0x7c40
[  218.136153][ T5478]  ? __rwlock_init+0x140/0x140
[  218.140960][ T5478]  ? tomoyo_file_open+0xe9/0x170
[  218.145935][ T5478]  security_file_open+0x5e/0xa0
[  218.150819][ T5478]  do_dentry_open+0x2fd/0x10b0
[  218.155636][ T5478]  ? memcpy+0x3c/0x60
[  218.159656][ T5478]  path_openat+0x2674/0x2f10
[  218.164300][ T5478]  ? verify_lock_unused+0x140/0x140
[  218.169534][ T5478]  ? do_filp_open+0x420/0x420
[  218.174261][ T5478]  do_filp_open+0x1ee/0x420
[  218.178813][ T5478]  ? vfs_tmpfile+0x470/0x470
[  218.183530][ T5478]  ? _raw_spin_unlock+0x24/0x40
[  218.188419][ T5478]  ? alloc_fd+0x590/0x640
[  218.192780][ T5478]  do_sys_openat2+0x14b/0x4f0
[  218.197583][ T5478]  ? do_sys_open+0xe0/0xe0
[  218.202027][ T5478]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  218.208044][ T5478]  ? lock_chain_count+0x20/0x20
[  218.212948][ T5478]  __x64_sys_openat+0x135/0x160
[  218.217857][ T5478]  do_syscall_64+0x4c/0xa0
[  218.222297][ T5478]  ? clear_bhb_loop+0x60/0xb0
[  218.227020][ T5478]  ? clear_bhb_loop+0x60/0xb0
[  218.231716][ T5478]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  218.237727][ T5478] RIP: 0033:0x7fdc9999e159
[  218.242165][ T5478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  218.261883][ T5478] RSP: 002b:00007fdc9a7b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  218.270410][ T5478] RAX: ffffffffffffffda RBX: 00007fdc99c26090 RCX: 00007fdc9999e159
[  218.278403][ T5478] RDX: 0000000000020842 RSI: 000020000000c380 RDI: ffffffffffffff9c
[  218.286390][ T5478] RBP: 00007fdc99a3506b R08: 0000000000000000 R09: 0000000000000000
[  218.294384][ T5478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  218.302377][ T5478] R13: 00007fdc99c26128 R14: 00007fdc99c26090 R15: 00007ffe1b9bf738
[  218.310383][ T5478]  </TASK>
[  218.685680][ T5478] ERROR: Out of memory at tomoyo_realpath_from_path.
[  222.911930][ T5528] tipc: Enabled bearer <eth:syz_tun>, priority 0
[  224.011431][ T5544] bridge0: port 3(wlan1) entered blocking state
[  224.018054][ T5544] bridge0: port 3(wlan1) entered disabled state
[  224.026566][ T5544] device wlan1 entered promiscuous mode
[  224.172365][ T5542] tipc: Enabling of bearer <eth:syz_tun> rejected, already enabled
[  224.191399][ T5542] tipc: Resetting bearer <eth:syz_tun>
[  224.737534][ T5552] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  224.807709][ T5542] tipc: Disabling bearer <eth:syz_tun>
[  225.355564][  T126] nvmet: connect request for invalid subsystem testsubsys!
[  225.376152][ T5561] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys"
[  225.673108][ T5571] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4278] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[5571]
[  227.473685][ T5584] loop2: detected capacity change from 0 to 256
[  227.547417][ T5584] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  227.621561][ T5584] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  228.011002][ T5582] No such timeout policy "syz1"
[  230.594665][ T5618] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  230.818719][ T5621] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING
[  230.877105][ T3655] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  233.356750][ T3655] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  233.368076][ T3655] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  233.378878][ T3655] usb 1-1: config 0 interface 0 has no altsetting 0
[  233.385911][ T3655] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[  233.444802][ T3655] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  233.550471][ T3655] usb 1-1: config 0 descriptor??
[  233.596859][ T3655] usb 1-1: can't set config #0, error -71
[  233.730005][ T3655] usb 1-1: USB disconnect, device number 4
[  235.396071][ T5640] loop0: detected capacity change from 0 to 2048
[  235.645438][ T5640] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  237.840218][ T5652] tipc: Enabled bearer <eth:syz_tun>, priority 0
[  237.884645][ T5652] tipc: Resetting bearer <eth:syz_tun>
[  239.594601][ T5652] tipc: Disabling bearer <eth:syz_tun>
[  240.143320][ T5694] loop2: detected capacity change from 0 to 16
[  240.197427][ T5694] erofs: (device loop2): mounted with root inode @ nid 36.
[  240.274334][ T5694] syz.2.319: attempt to access beyond end of device
[  240.274334][ T5694] loop2: rw=524288, sector=1056, nr_sectors = 16 limit=16
[  240.368627][ T5694] syz.2.319: attempt to access beyond end of device
[  240.368627][ T5694] loop2: rw=524288, sector=16, nr_sectors = 40 limit=16
[  240.452474][ T5694] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -41 in[61, 4035] out[8192]
[  240.547170][   T26] audit: type=1800 audit(1789678180.352:6): pid=5694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.319" name="file2" dev="loop2" ino=89 res=0 errno=0
[  241.347785][ T5721] loop0: detected capacity change from 0 to 2048
[  241.377010][ T5721] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  241.564851][ T5724] loop4: detected capacity change from 0 to 512
[  242.352248][ T5724] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  242.412269][ T5724] ext4 filesystem being mounted at /61/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  244.620787][ T4283] EXT4-fs (loop4): unmounting filesystem.
[  244.638785][ T5738] tmpfs: Unknown parameter 'quota'
[  244.847376][ T5746] loop2: detected capacity change from 0 to 1024
[  245.898043][ T5746] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  246.758640][ T5769] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4)
[  246.767191][ T4282] EXT4-fs (loop2): unmounting filesystem.
[  250.714649][ T5800] netlink: 52 bytes leftover after parsing attributes in process `syz.3.341'.
[  251.186422][ T5806] loop4: detected capacity change from 0 to 128
[  252.237117][ T5819] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING
[  253.127580][ T5832] loop2: detected capacity change from 0 to 256
[  253.135249][ T5832] exfat: Unknown parameter '000000000000000000110x00000000000000000xffffffffffffffff00000000000000000010'
[  253.510211][   T26] audit: type=1326 audit(1789678192.822:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5822 comm="syz.3.348" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f16f719e159 code=0x0
[  253.787592][ T5119] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  254.978223][ T5841] xt_CT: No such helper "snmp"
[  255.519548][ T1282] ieee802154 phy0 wpan0: encryption failed: -22
[  255.527146][ T1282] ieee802154 phy1 wpan1: encryption failed: -22
[  256.132141][ T5875] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4282] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[5875]
[  256.817912][ T5877] fuse: Unknown parameter '0x0000000000000009'
[  258.359030][ T5885] No such timeout policy "syz1"
[  258.485868][ T5886] sctp: failed to load transform for md5: -2
[  259.204756][ T5905] netlink: 168 bytes leftover after parsing attributes in process `syz.0.364'.
[  260.366784][ T4279] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  260.387699][ T4279] Bluetooth: hci2: Injecting HCI hardware error event
[  260.639702][ T4279] Bluetooth: hci2: hardware error 0x00
[  261.135594][ T5903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.364'.
[  261.153578][ T5903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.364'.
[  261.486098][ T5926] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4278] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[5926]
[  261.508526][ T5926] netlink: 388 bytes leftover after parsing attributes in process `syz.1.371'.
[  262.096495][ T4286] Bluetooth: Wrong link type (-22)
[  262.715511][ T5936] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4288] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[5936]
[  262.745739][ T4279] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  267.556860][   T26] audit: type=1326 audit(1789678207.222:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5961 comm="syz.1.381" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feea779e159 code=0x0
[  268.425613][ T5977] loop4: detected capacity change from 0 to 128
[  269.176804][ T5984] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING
[  269.278582][ T5986] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4288] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[5986]
[  269.306059][ T5986] netlink: 388 bytes leftover after parsing attributes in process `syz.3.387'.
[  271.331160][ T6008] netlink: 'syz.3.391': attribute type 46 has an invalid length.
[  273.126846][   T26] audit: type=1326 audit(1789678212.662:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6016 comm="syz.0.396" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdc9999e159 code=0x0
[  273.841732][ T6028] loop0: detected capacity change from 0 to 128
[  274.494067][ T6031] sctp: failed to load transform for md5: -2
[  274.797736][ T6042] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING
[  276.304823][ T6050] sctp: failed to load transform for md5: -2
[  278.951382][ T6081] FAULT_INJECTION: forcing a failure.
[  278.951382][ T6081] name failslab, interval 1, probability 0, space 0, times 0
[  279.136790][ T6081] CPU: 1 PID: 6081 Comm: syz.2.405 Not tainted syzkaller #0
[  279.144184][ T6081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  279.154401][ T6081] Call Trace:
[  279.157731][ T6081]  <TASK>
[  279.160722][ T6081]  dump_stack_lvl+0x188/0x24e
[  279.165562][ T6081]  ? show_regs_print_info+0x12/0x12
[  279.170826][ T6081]  ? load_image+0x410/0x410
[  279.175410][ T6081]  ? __might_sleep+0xd0/0xd0
[  279.180085][ T6081]  ? __lock_acquire+0x7c40/0x7c40
[  279.185169][ T6081]  ? __prealloc_shrinker+0x6e3/0x7e0
[  279.190472][ T6081]  should_fail_ex+0x390/0x4c0
[  279.195256][ T6081]  should_failslab+0x5/0x20
[  279.199807][ T6081]  slab_pre_alloc_hook+0x59/0x300
[  279.204886][ T6081]  ? __list_lru_init+0xb0/0x600
[  279.209768][ T6081]  __kmem_cache_alloc_node+0x4f/0x270
[  279.215232][ T6081]  ? __list_lru_init+0xb0/0x600
[  279.220099][ T6081]  __kmalloc+0xa3/0x240
[  279.224282][ T6081]  __list_lru_init+0xb0/0x600
[  279.228978][ T6081]  alloc_super+0x766/0x930
[  279.233435][ T6081]  ? kill_litter_super+0xa0/0xa0
[  279.238421][ T6081]  sget_fc+0x2d4/0x750
[  279.242506][ T6081]  ? kill_litter_super+0xa0/0xa0
[  279.247468][ T6081]  ? proc_reconfigure+0x370/0x370
[  279.252502][ T6081]  get_tree_nodev+0x26/0x160
[  279.257104][ T6081]  vfs_get_tree+0x88/0x270
[  279.261538][ T6081]  do_new_mount+0x247/0xa40
[  279.266055][ T6081]  __se_sys_mount+0x2e3/0x3d0
[  279.270764][ T6081]  ? __x64_sys_mount+0xc0/0xc0
[  279.275545][ T6081]  ? lockdep_hardirqs_on+0x94/0x140
[  279.280753][ T6081]  ? __x64_sys_mount+0x1c/0xc0
[  279.285636][ T6081]  do_syscall_64+0x4c/0xa0
[  279.290092][ T6081]  ? clear_bhb_loop+0x60/0xb0
[  279.294783][ T6081]  ? clear_bhb_loop+0x60/0xb0
[  279.299474][ T6081]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  279.305387][ T6081] RIP: 0033:0x7f14b819e159
[  279.309817][ T6081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  279.329435][ T6081] RSP: 002b:00007f14b63f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  279.337861][ T6081] RAX: ffffffffffffffda RBX: 00007f14b8425fa0 RCX: 00007f14b819e159
[  279.345853][ T6081] RDX: 0000200000000100 RSI: 0000200000000080 RDI: 0000000000000000
[  279.353859][ T6081] RBP: 00007f14b823506b R08: 0000000000000000 R09: 0000000000000000
[  279.361853][ T6081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  279.369858][ T6081] R13: 00007f14b8426038 R14: 00007f14b8425fa0 R15: 00007ffd7684ffe8
[  279.377872][ T6081]  </TASK>
[  280.136858][ T6084] fuse: Unknown parameter '0x0000000000000008'
[  280.226548][ T6088] tipc: Resetting bearer <eth:syz_tun>
[  280.286378][ T6088] bridge0: port 3(syz_tun) entered disabled state
[  280.440572][ T6088] device syz_tun left promiscuous mode
[  280.538268][ T6088] bridge0: port 3(syz_tun) entered disabled state
[  280.567773][ T6088] tipc: Disabling bearer <eth:syz_tun>
[  280.884096][ T6103] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING
[  283.206894][ T4279] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  283.215700][ T4279] Bluetooth: hci1: Injecting HCI hardware error event
[  283.228778][ T4275] Bluetooth: hci1: hardware error 0x00
[  285.916894][ T4275] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  287.154684][ T6141] syz.0.428 (6141): attempted to duplicate a private mapping with mremap.  This is not supported.
[  292.244761][ T6178] md: invalid raid superblock magic on ram1
[  292.274337][ T6178] md: ram1 does not have a valid v0.0 superblock, not importing!
[  292.330746][ T6178] md: md_import_device returned -22
[  293.254992][ T6178] md: invalid raid superblock magic on ram2
[  293.261120][ T6178] md: ram2 does not have a valid v0.0 superblock, not importing!
[  293.269471][ T6178] md: md_import_device returned -22
[  293.719124][ T6195] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING
[  294.427052][ T4322] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  294.705534][ T4322] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  295.380722][ T4322] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  295.391709][ T4322] usb 5-1: config 0 interface 0 has no altsetting 0
[  295.403640][ T4322] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[  295.416196][ T4322] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  295.432879][ T4322] usb 5-1: config 0 descriptor??
[  295.705208][ T6190] bridge0: port 3(wlan1) entered blocking state
[  295.742740][ T6190] bridge0: port 3(wlan1) entered disabled state
[  295.772403][ T6190] device wlan1 entered promiscuous mode
[  296.055335][ T6216] xt_CT: You must specify a L4 protocol and not use inversions on it
[  296.668514][ T4322] usbhid 5-1:0.0: can't add hid device: -71
[  296.674734][ T4322] usbhid: probe of 5-1:0.0 failed with error -71
[  296.692348][ T4322] usb 5-1: USB disconnect, device number 2
[  299.642889][   T26] audit: type=1326 audit(1789678239.382:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6229 comm="syz.4.452" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f98ff19e159 code=0x0
[  301.926467][ T6257] netlink: 4 bytes leftover after parsing attributes in process `syz.4.456'.
[  305.904712][ T4275] Bluetooth: hci4: Malformed LE Event: 0x0d
[  306.435792][ T6289] loop4: detected capacity change from 0 to 1024
[  307.711411][ T4449] hfsplus: b-tree write err: -5, ino 25
[  307.758276][ T4449] hfsplus: b-tree write err: -5, ino 4
[  307.764145][ T4449] hfsplus: b-tree write err: -5, ino 2
[  309.209900][ T6319] loop0: detected capacity change from 0 to 1024
[  312.950166][ T6345] xt_policy: output policy not valid in PREROUTING and INPUT
[  313.717180][ T6348] netlink: 'syz.2.480': attribute type 12 has an invalid length.
[  316.715846][ T6369] syz.1.496 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  316.730370][ T6369] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  317.297705][ T1282] ieee802154 phy0 wpan0: encryption failed: -22
[  317.304096][ T1282] ieee802154 phy1 wpan1: encryption failed: -22
[  319.553713][ T4279] Bluetooth: hci4: command 0x0406 tx timeout
[  319.850210][ T6378] mmap: syz.1.488 (6378) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  320.947360][ T6395] 9pnet_virtio: no channels available for device 127.0.0.1
[  321.186858][ T6399] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  322.175051][ T6412] loop0: detected capacity change from 0 to 32768
[  322.419762][ T6412] XFS (loop0): Mounting V5 Filesystem
[  322.548816][ T6412] XFS (loop0): Ending clean mount
[  322.575463][ T6412] XFS (loop0): Quotacheck needed: Please wait.
[  322.679026][ T6412] XFS (loop0): Quotacheck: Done.
[  323.537682][ T4274] XFS (loop0): Unmounting Filesystem
[  328.706858][ T6452] netlink: 16 bytes leftover after parsing attributes in process `syz.1.507'.
[  331.618069][ T6468] loop0: detected capacity change from 0 to 512
[  331.722096][ T6468] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e826c018, mo2=0002]
[  331.730743][ T6468] System zones: 1-12
[  331.784211][ T6468] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #15: comm syz.0.512: corrupted inode contents
[  331.801888][ T6468] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem
[  331.812958][ T6468] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #15: comm syz.0.512: corrupted inode contents
[  331.826074][ T6468] EXT4-fs error (device loop0): ext4_evict_inode:329: inode #15: comm syz.0.512: mark_inode_dirty error
[  331.841800][ T6468] EXT4-fs (loop0): 1 orphan inode deleted
[  331.847895][ T6468] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  332.006102][ T4274] EXT4-fs (loop0): unmounting filesystem.
[  332.292124][ T6473] loop4: detected capacity change from 0 to 32768
[  332.517456][ T6473] XFS (loop4): Mounting V5 Filesystem
[  332.882360][ T6473] XFS (loop4): Ending clean mount
[  333.032922][ T6473] XFS (loop4): Quotacheck needed: Please wait.
[  334.446499][ T6473] XFS (loop4): Quotacheck: Done.
[  335.316461][ T4283] XFS (loop4): Unmounting Filesystem
[  336.435569][ T6527] loop0: detected capacity change from 0 to 1024
[  337.347092][ T6527] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  337.365860][   T26] audit: type=1326 audit(1789678277.162:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6509 comm="syz.3.521" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f16f719e159 code=0x0
[  337.447510][ T6527] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  337.484014][ T6527] EXT4-fs (loop0): invalid journal inode
[  337.502130][ T6527] EXT4-fs (loop0): can't get journal size
[  337.531304][ T6527] EXT4-fs (loop0): corrupt root inode, run e2fsck
[  337.538550][ T6527] EXT4-fs (loop0): mount failed
[  339.699918][ T6555] loop4: detected capacity change from 0 to 128
[  339.708028][ T6555] FAT-fs (loop4): invalid media value (0x07)
[  339.714083][ T6555] FAT-fs (loop4): Can't find a valid FAT filesystem
[  340.043740][ T6558] ubi0: attaching mtd0
[  340.058475][ T6558] ubi0: scanning is finished
[  340.063240][ T6558] ubi0: empty MTD device detected
[  340.363903][ T6558] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4
[  341.029301][ T6563] loop4: detected capacity change from 0 to 2048
[  341.040731][ T6563] UDF-fs: bad mount option "sk               Eth Pid" or missing value
[  342.367439][ T5119] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  342.936737][ T6569] overlayfs: failed to resolve './file0': -2
[  346.513613][ T6591] md/raid10:md0: chunk size must be at least PAGE_SIZE(4096) and be a power of 2.
[  346.590254][ T6591] md: pers->run() failed ...
[  349.658858][ T6627] overlayfs: failed to clone upperpath
[  350.807254][ T6637] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1
[  350.818943][ T6637] batman_adv: batadv0: Adding interface: ip6gretap1
[  350.825584][ T6637] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  350.851550][ T6637] batman_adv: batadv0: Interface activated: ip6gretap1
[  351.470104][ T6642] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING
[  351.868112][ T6647] md: could not open device unknown-block(1,1).
[  351.874808][ T6647] md: error, md_import_device() returned -16
[  352.218042][ T6657] loop0: detected capacity change from 0 to 512
[  353.409658][ T6663] netlink: 4 bytes leftover after parsing attributes in process `syz.3.561'.
[  353.418597][ T6663] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  353.777926][ T6661] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  354.031465][ T6668] nvmet_rdma: binding CM ID to 172.20.20.23:4420 failed (-99)
[  354.050130][ T6668] nvme_fabrics: unknown parameter or missing value 'trsvc' in ctrl creation request
[  354.083473][ T6661] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  354.268241][ T6663] batman_adv: batadv0: Removing interface: batadv_slave_1
[  356.115025][ T6685] loop0: detected capacity change from 0 to 512
[  356.218543][ T6687] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING
[  356.241009][ T6685] EXT4-fs: Ignoring removed nomblk_io_submit option
[  356.328607][ T6685] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  356.417849][ T6685] EXT4-fs (loop0): 1 truncate cleaned up
[  356.516732][ T6685] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  357.404495][ T6690] md/raid10:md0: chunk size must be at least PAGE_SIZE(4096) and be a power of 2.
[  357.617253][ T6690] md: pers->run() failed ...
[  357.769249][ T4274] EXT4-fs (loop0): unmounting filesystem.
[  358.165081][ T6709] af_packet: tpacket_rcv: packet too big, clamped from 20 to 4294967272. macoff=96
[  358.182413][ T6713] loop0: detected capacity change from 0 to 128
[  361.805814][ T6736] md: could not open device unknown-block(1,1).
[  361.822617][ T6736] md: error, md_import_device() returned -16
[  361.839479][ T6742] sctp: failed to load transform for md5: -2
[  361.867576][ T6753] loop4: detected capacity change from 0 to 128
[  361.966284][ T6753] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING
[  362.043185][ T6736] md/raid10:md0: chunk size must be at least PAGE_SIZE(4096) and be a power of 2.
[  362.063394][ T6736] md: pers->run() failed ...
[  362.588095][ T6768] xt_l2tp: missing protocol rule (udp|l2tpip)
[  363.189091][ T6772] trusted_key: encrypted_key: insufficient parameters specified
[  364.103617][ T6766] md/raid10:md0: chunk size must be at least PAGE_SIZE(4096) and be a power of 2.
[  364.139656][ T6766] md: pers->run() failed ...
[  364.222336][ T6784] loop4: detected capacity change from 0 to 128
[  365.839193][ T6786] sctp: failed to load transform for md5: -2
[  365.846794][ T6791] sctp: failed to load transform for md5: -2
[  369.616345][ T6854] overlayfs: failed to clone upperpath
[  369.640096][ T6851] autofs4:pid:6851:autofs_fill_super: called with bogus options
[  371.676967][ T4279] Bluetooth: hci4: command 0x0405 tx timeout
[  371.703653][ T6873] netlink: 20 bytes leftover after parsing attributes in process `syz.2.611'.
[  371.755390][ T6876] loop4: detected capacity change from 0 to 128
[  372.142571][ T6882] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING
[  372.263341][ T6884] bridge0: port 4(team0) entered blocking state
[  372.269970][ T6884] bridge0: port 4(team0) entered disabled state
[  372.277608][ T6884] device team0 entered promiscuous mode
[  372.283200][ T6884] device team_slave_0 entered promiscuous mode
[  372.290286][ T6884] device team_slave_1 entered promiscuous mode
[  372.297746][ T6884] bridge0: port 4(team0) entered blocking state
[  372.304091][ T6884] bridge0: port 4(team0) entered forwarding state
[  374.643729][ T6909] md: could not open device unknown-block(1,1).
[  374.662329][ T6909] md: error, md_import_device() returned -16
[  374.952578][ T6909] md/raid10:md0: chunk size must be at least PAGE_SIZE(4096) and be a power of 2.
[  374.978888][ T6909] md: pers->run() failed ...
[  375.846242][ T6926] loop4: detected capacity change from 0 to 512
[  375.892024][ T6926] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  375.958194][ T6926] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802e028, mo2=0002]
[  376.007205][ T6926] System zones: 0-2, 18-18, 34-35
[  376.014804][ T6926] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  376.024256][ T6926] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  377.290008][ T4279] Bluetooth: hci4: failed to read key size for handle 200
[  377.796805][   T26] audit: type=1800 audit(1789678316.502:12): pid=6946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.627" name="bus" dev="loop4" ino=19 res=0 errno=0
[  377.859424][ T4283] EXT4-fs (loop4): unmounting filesystem.
[  378.662922][ T1282] ieee802154 phy0 wpan0: encryption failed: -22
[  378.671832][ T1282] ieee802154 phy1 wpan1: encryption failed: -22
[  379.428527][ T6971] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING
[  379.429886][ T6973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.640'.
[  379.597537][ T6975] SET target dimension over the limit!
[  380.497285][ T6982] md: could not open device unknown-block(1,1).
[  380.503769][ T6982] md: error, md_import_device() returned -16
[  380.642015][ T6982] md/raid10:md0: chunk size must be at least PAGE_SIZE(4096) and be a power of 2.
[  380.657008][ T6982] md: pers->run() failed ...
[  380.745133][ T6985] md: could not open device unknown-block(1,2).
[  380.782380][ T6985] md: error, md_import_device() returned -16
[  380.970998][ T6990] md/raid10:md0: chunk size must be at least PAGE_SIZE(4096) and be a power of 2.
[  380.991089][ T6990] md: pers->run() failed ...
[  381.185415][ T6992] md: could not open device unknown-block(1,2).
[  381.257606][ T6992] md: error, md_import_device() returned -16
[  382.975484][ T7013] sctp: failed to load transform for md5: -4
[  382.979425][ T7011] sctp: failed to load transform for md5: -2
[  385.028332][ T7050] ip6t_srh: unknown srh match flags  4000
[  385.893095][ T7055] netlink: 8 bytes leftover after parsing attributes in process `syz.3.662'.
[  386.842154][ T7069] Process accounting resumed
[  387.046888][ T7075] loop0: detected capacity change from 0 to 2048
[  387.183433][ T7075] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  387.224211][ T7075] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  387.330440][ T7075] futex_wake_op: syz.0.666 tries to shift op by 144; fix this program
[  387.430709][ T7082] xt_connbytes: Forcing CT accounting to be enabled
[  387.437454][ T7082] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING
[  387.689367][ T7084] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  387.714845][ T7075] UDF-fs: error (device loop0): udf_verify_fi: directory (ino 1376) has entry where CRC length (28) does not match entry length (36)
[  387.753079][ T7075] UDF-fs: error (device loop0): udf_verify_fi: directory (ino 1376) has entry where CRC length (28) does not match entry length (36)
[  388.041571][ T7093] loop0: detected capacity change from 0 to 256
[  389.572399][ T7113] xt_CT: You must specify a L4 protocol and not use inversions on it
[  390.562809][ T7127] sctp: [Deprecated]: syz.3.680 (pid 7127) Use of struct sctp_assoc_value in delayed_ack socket option.
[  390.562809][ T7127] Use struct sctp_sack_info instead
[  391.585946][ T7134] loop0: detected capacity change from 0 to 128
[  391.621429][ T7135] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  391.985850][ T7138] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING
[  393.822170][ T7158] futex_wake_op: syz.2.692 tries to shift op by 144; fix this program
[  395.062891][ T7163] loop4: detected capacity change from 0 to 4096
[  395.118150][ T7163] ntfs: (device loop4): parse_options(): Invalid gid option argument: 0xffffffffffffffff
[  396.913910][ T7179] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  397.062100][ T7183] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  399.634682][ T7200] loop0: detected capacity change from 0 to 128
[  400.071719][ T7202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  402.340424][ T7211] netlink: 'syz.4.708': attribute type 2 has an invalid length.
[  405.051509][ T7247] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  406.834159][ T7272] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  408.284959][ T7276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.728'.
[  408.490006][ T7283] capability: warning: `syz.2.724' uses 32-bit capabilities (legacy support in use)
[  408.946943][ T7284] SET target dimension over the limit!
[  409.535115][ T7295] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING
[  409.709804][ T7300] loop4: detected capacity change from 0 to 128
[  410.078375][ T7307] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING
[  414.324154][ T7324] sctp: failed to load transform for md5: -2
[  414.592090][ T7305] bridge0: port 3(wlan1) entered blocking state
[  414.601372][ T7305] bridge0: port 3(wlan1) entered disabled state
[  414.612753][ T7305] device wlan1 entered promiscuous mode
[  414.627172][ T7305] bridge0: port 3(wlan1) entered blocking state
[  414.633686][ T7305] bridge0: port 3(wlan1) entered forwarding state
[  414.689362][ T4366] bridge0: port 3(wlan1) entered disabled state
[  415.097819][ T7354] loop4: detected capacity change from 0 to 128
[  415.926523][ T7368] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING
[  419.187178][ T7386] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  422.102122][ T7408] netlink: 8 bytes leftover after parsing attributes in process `syz.3.760'.
[  422.203700][ T7408] SET target dimension over the limit!
[  426.787234][ T7434] sctp: failed to load transform for md5: -2
[  429.110371][ T7474] device bond_slave_0 entered promiscuous mode
[  429.117497][ T7474] device bond_slave_1 entered promiscuous mode
[  429.134226][ T7474] device bond_slave_0 left promiscuous mode
[  429.140759][ T7474] device bond_slave_1 left promiscuous mode
[  429.437527][ T7487] md: could not open device unknown-block(1,1).
[  429.597504][ T7487] md: error, md_import_device() returned -16
[  430.295269][ T7487] md/raid10:md0: chunk size must be at least PAGE_SIZE(4096) and be a power of 2.
[  430.332069][ T7487] md: pers->run() failed ...
[  430.341159][ T4279] Bluetooth: Wrong link type (-57)
[  430.545255][ T7502] loop0: detected capacity change from 0 to 2048
[  430.588414][ T7502] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  432.444058][ T7516] sctp: failed to load transform for md5: -2
[  433.748807][ T7535] capability: warning: `syz.0.786' uses deprecated v2 capabilities in a way that may be insecure
[  437.007041][ T7563] zram0: detected capacity change from 0 to 8
[  437.333632][ T7568] block nbd0: NBD_DISCONNECT
[  438.103146][ T7574] md: array md0 already has disks!
[  438.108985][ T7574] md: could not open device unknown-block(1,1).
[  438.125613][ T7574] md: error, md_import_device() returned -16
[  439.345122][ T7574] md/raid10:md0: chunk size must be at least PAGE_SIZE(4096) and be a power of 2.
[  439.380260][ T7574] md: pers->run() failed ...
[  439.395664][ T7588] netlink: 'syz.2.799': attribute type 8 has an invalid length.
[  440.574374][ T1282] ieee802154 phy0 wpan0: encryption failed: -22
[  440.580885][ T1282] ieee802154 phy1 wpan1: encryption failed: -22
[  442.829901][ T7605] overlayfs: failed to clone upperpath
[  443.078367][ T7610] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING
[  443.872165][ T7612] md: could not open device unknown-block(1,1).
[  443.897099][ T7612] md: error, md_import_device() returned -16
[  444.176324][ T7612] md/raid10:md0: chunk size must be at least PAGE_SIZE(4096) and be a power of 2.
[  444.282505][ T7612] md: pers->run() failed ...
[  444.480865][ T7616] md: could not open device unknown-block(1,2).
[  444.503291][ T7616] md: error, md_import_device() returned -16
[  445.575616][ T7635] md: array md0 already has disks!
[  445.605920][ T7635] md: could not open device unknown-block(1,1).
[  446.047152][ T7635] md: error, md_import_device() returned -16
[  447.237918][ T7644] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  447.247446][ T7644] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  447.254980][ T7644] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  447.297934][ T7637] md/raid10:md0: chunk size must be at least PAGE_SIZE(4096) and be a power of 2.
[  447.317257][ T7637] md: pers->run() failed ...
[  451.047210][ T7676] md: could not open device unknown-block(1,1).
[  451.053583][ T7676] md: error, md_import_device() returned -16
[  451.182987][ T7662] sctp: failed to load transform for md5: -2
[  452.228678][ T7676] md/raid10:md0: chunk size must be at least PAGE_SIZE(4096) and be a power of 2.
[  452.267670][ T7676] md: pers->run() failed ...
[  454.264574][ T7719] sctp: failed to load transform for md5: -2
[  454.355311][ T4279] Bluetooth: hci4: failed to read key size for handle 200
[  454.554662][ T7720] autofs4:pid:7720:autofs_fill_super: called with bogus options
[  454.867238][ T7731] loop0: detected capacity change from 0 to 1024
[  455.282306][ T7731] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  456.327727][ T7739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.836'.
[  456.930897][   T26] audit: type=1800 audit(1789678393.670:13): pid=7745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.835" name="file1" dev="loop0" ino=15 res=0 errno=0
[  459.547190][   T26] audit: type=1800 audit(1789678393.680:14): pid=7745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.835" name="file1" dev="loop0" ino=15 res=0 errno=0
[  459.710609][ T4274] EXT4-fs (loop0): unmounting filesystem.
[  460.815813][ T7766] netlink: 'syz.0.840': attribute type 12 has an invalid length.
[  464.142590][ T7793] loop0: detected capacity change from 0 to 128
[  464.404544][ T7793] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  464.531935][ T7793] ext4 filesystem being mounted at /170/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  464.963418][ T4274] EXT4-fs (loop0): unmounting filesystem.
[  465.725662][ T7807] loop0: detected capacity change from 0 to 128
[  466.917115][ T7817] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING
[  468.987184][ T7829] netlink: 16 bytes leftover after parsing attributes in process `syz.4.859'.
[  471.995266][ T7854] gadgetfs: bound to dummy_udc driver
[  472.846969][  T954] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  472.854785][    C0] gadgetfs: connected
[  472.867683][ T7865] Process accounting resumed
[  472.895114][  T954] gadgetfs: disconnected
[  473.015719][ T7849] gadgetfs: suspended from state 2
[  473.270116][  T954] usb 1-1: device not accepting address 5, error -71
[  473.741844][  T954] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  474.528633][  T954] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  474.546358][  T954] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  474.575426][  T954] usb 1-1: config 0 descriptor??
[  476.447849][ T7920] loop4: detected capacity change from 0 to 128
[  477.247966][ T7920] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING
[  477.644610][  T954] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[  477.655126][  T954] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  477.688424][  T954] [drm:udl_init] *ERROR* Selecting channel failed
[  477.748388][ T7934] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  478.539583][ T7946] loop0: detected capacity change from 0 to 8
[  479.308465][  T954] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2
[  479.316033][  T954] [drm] Initialized udl on minor 2
[  479.325859][  T954] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  479.337917][  T954] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  479.348547][  T954] usb 1-1: USB disconnect, device number 6
[  479.365552][ T7924] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed
[  479.388080][ T7949] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  479.423331][ T7924] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed
[  479.440970][ T7924] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  481.447466][ T7968] device bond1 entered promiscuous mode
[  481.475153][ T7968] 8021q: adding VLAN 0 to HW filter on device bond1
[  481.530995][ T7977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.890'.
[  481.593969][ T7954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.886'.
[  483.425998][ T8001] loop4: detected capacity change from 0 to 128
[  484.027551][ T8005] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING
[  485.150180][ T8012] ==================================================================
[  485.158323][ T8012] BUG: KASAN: use-after-free in dvb_device_open+0xc5/0x360
[  485.165748][ T8012] Read of size 8 at addr ffff888141654c18 by task syz.0.906/8012
[  485.173515][ T8012] 
[  485.175975][ T8012] CPU: 0 PID: 8012 Comm: syz.0.906 Not tainted syzkaller #0
[  485.183300][ T8012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  485.193437][ T8012] Call Trace:
[  485.196740][ T8012]  <TASK>
[  485.199755][ T8012]  dump_stack_lvl+0x188/0x24e
[  485.204615][ T8012]  ? read_lock_is_recursive+0x10/0x10
[  485.210143][ T8012]  ? show_regs_print_info+0x12/0x12
[  485.215474][ T8012]  ? load_image+0x410/0x410
[  485.220098][ T8012]  ? _raw_spin_lock_irqsave+0xbc/0x100
[  485.225686][ T8012]  ? __virt_addr_valid+0x188/0x540
[  485.230908][ T8012]  ? __virt_addr_valid+0x467/0x540
[  485.236074][ T8012]  ? dvb_device_open+0xc5/0x360
[  485.240964][ T8012]  print_report+0xa8/0x210
[  485.245427][ T8012]  kasan_report+0x10b/0x140
[  485.250069][ T8012]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  485.255747][ T8012]  ? dvb_device_open+0xc5/0x360
[  485.260638][ T8012]  dvb_device_open+0xc5/0x360
[  485.265461][ T8012]  chrdev_open+0x585/0x5f0
[  485.269935][ T8012]  ? cd_forget+0x160/0x160
[  485.274583][ T8012]  ? fsnotify_perm+0x39b/0x550
[  485.279585][ T8012]  ? cd_forget+0x160/0x160
[  485.284043][ T8012]  do_dentry_open+0x7dd/0x10b0
[  485.288858][ T8012]  path_openat+0x2674/0x2f10
[  485.293568][ T8012]  ? verify_lock_unused+0x140/0x140
[  485.298820][ T8012]  ? do_sys_openat2+0xdd/0x4f0
[  485.303642][ T8012]  ? do_filp_open+0x420/0x420
[  485.308460][ T8012]  do_filp_open+0x1ee/0x420
[  485.313004][ T8012]  ? vfs_tmpfile+0x470/0x470
[  485.317641][ T8012]  ? _raw_spin_unlock+0x24/0x40
[  485.322536][ T8012]  ? alloc_fd+0x590/0x640
[  485.326975][ T8012]  do_sys_openat2+0x14b/0x4f0
[  485.331701][ T8012]  ? do_sys_open+0xe0/0xe0
[  485.336161][ T8012]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  485.342217][ T8012]  ? lock_chain_count+0x20/0x20
[  485.347145][ T8012]  __x64_sys_openat+0x135/0x160
[  485.352048][ T8012]  do_syscall_64+0x4c/0xa0
[  485.356502][ T8012]  ? clear_bhb_loop+0x60/0xb0
[  485.361223][ T8012]  ? clear_bhb_loop+0x60/0xb0
[  485.365941][ T8012]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  485.371894][ T8012] RIP: 0033:0x7fdc9995e98e
[  485.376440][ T8012] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  485.396098][ T8012] RSP: 002b:00007fdc9a7b2b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  485.404592][ T8012] RAX: ffffffffffffffda RBX: 00007fdc9a7b36c0 RCX: 00007fdc9995e98e
[  485.412607][ T8012] RDX: 0000000000000002 RSI: 00007fdc9a7b2c00 RDI: ffffffffffffff9c
[  485.420621][ T8012] RBP: 00007fdc9a7b2c00 R08: 0000000000000000 R09: 0000000000000000
[  485.428713][ T8012] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  485.436717][ T8012] R13: 00007fdc99c26128 R14: 00007fdc99c26090 R15: 00007ffe1b9bf738
[  485.444736][ T8012]  </TASK>
[  485.447789][ T8012] 
[  485.450137][ T8012] Allocated by task 6094:
[  485.454626][ T8012]  kasan_set_track+0x4b/0x70
[  485.459325][ T8012]  __kasan_kmalloc+0x8e/0xa0
[  485.463958][ T8012]  btf_new_fd+0x23d/0x760
[  485.468428][ T8012]  __sys_bpf+0x612/0x780
[  485.472724][ T8012]  __x64_sys_bpf+0x78/0x90
[  485.477202][ T8012]  do_syscall_64+0x4c/0xa0
[  485.481665][ T8012]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  485.487611][ T8012] 
[  485.489956][ T8012] The buggy address belongs to the object at ffff888141654c00
[  485.489956][ T8012]  which belongs to the cache kmalloc-256 of size 256
[  485.504102][ T8012] The buggy address is located 24 bytes inside of
[  485.504102][ T8012]  256-byte region [ffff888141654c00, ffff888141654d00)
[  485.517332][ T8012] 
[  485.519802][ T8012] The buggy address belongs to the physical page:
[  485.526306][ T8012] page:ffffea0005059500 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888141654c00 pfn:0x141654
[  485.538028][ T8012] head:ffffea0005059500 order:1 compound_mapcount:0 compound_pincount:0
[  485.546387][ T8012] flags: 0x57ff00000010200(slab|head|node=1|zone=2|lastcpupid=0x7ff)
[  485.554585][ T8012] raw: 057ff00000010200 ffffea0005005e88 ffffea0005049b88 ffff888017441b40
[  485.563210][ T8012] raw: ffff888141654c00 000000000010000f 00000001ffffffff 0000000000000000
[  485.571825][ T8012] page dumped because: kasan: bad access detected
[  485.578342][ T8012] page_owner tracks the page as allocated
[  485.584134][ T8012] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 18534295801, free_ts 0
[  485.604171][ T8012]  post_alloc_hook+0x173/0x1a0
[  485.609273][ T8012]  get_page_from_freelist+0x206b/0x2180
[  485.614891][ T8012]  __alloc_pages+0x1ec/0x4f0
[  485.619555][ T8012]  alloc_page_interleave+0x24/0x1e0
[  485.624824][ T8012]  alloc_slab_page+0x5d/0x180
[  485.629629][ T8012]  new_slab+0x87/0x2d0
[  485.633775][ T8012]  ___slab_alloc+0xbc5/0x1240
[  485.638488][ T8012]  __kmem_cache_alloc_node+0x126/0x270
[  485.644072][ T8012]  kmalloc_trace+0x26/0xe0
[  485.648580][ T8012]  bus_add_driver+0xdc/0x5d0
[  485.653209][ T8012]  driver_register+0x32d/0x430
[  485.658038][ T8012]  usb_register_driver+0x1a6/0x350
[  485.663261][ T8012]  au0828_init+0x135/0x162
[  485.667799][ T8012]  do_one_initcall+0x257/0x800
[  485.672645][ T8012]  do_initcall_level+0x13d/0x1ed
[  485.677666][ T8012]  do_initcalls+0x4b/0x8a
[  485.682035][ T8012] page_owner free stack trace missing
[  485.687423][ T8012] 
[  485.689766][ T8012] Memory state around the buggy address:
[  485.695439][ T8012]  ffff888141654b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  485.703538][ T8012]  ffff888141654b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  485.711676][ T8012] >ffff888141654c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  485.719851][ T8012]                             ^
[  485.724722][ T8012]  ffff888141654c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  485.732849][ T8012]  ffff888141654d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  485.740956][ T8012] ==================================================================
[  485.837645][ T8012] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  485.844909][ T8012] CPU: 0 PID: 8012 Comm: syz.0.906 Not tainted syzkaller #0
[  485.852220][ T8012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  485.862304][ T8012] Call Trace:
[  485.865715][ T8012]  <TASK>
[  485.868768][ T8012]  dump_stack_lvl+0x188/0x24e
[  485.873479][ T8012]  ? memcpy+0x3c/0x60
[  485.877511][ T8012]  ? show_regs_print_info+0x12/0x12
[  485.882789][ T8012]  ? load_image+0x410/0x410
[  485.887441][ T8012]  panic+0x2d3/0x710
[  485.891412][ T8012]  ? bpf_jit_dump+0xd0/0xd0
[  485.895966][ T8012]  ? check_panic_on_warn+0x6c/0xa0
[  485.901161][ T8012]  check_panic_on_warn+0x80/0xa0
[  485.906189][ T8012]  ? dvb_device_open+0xc5/0x360
[  485.911114][ T8012]  end_report+0x66/0x110
[  485.915400][ T8012]  kasan_report+0x118/0x140
[  485.919941][ T8012]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  485.925631][ T8012]  ? dvb_device_open+0xc5/0x360
[  485.930527][ T8012]  dvb_device_open+0xc5/0x360
[  485.935249][ T8012]  chrdev_open+0x585/0x5f0
[  485.939774][ T8012]  ? cd_forget+0x160/0x160
[  485.944233][ T8012]  ? fsnotify_perm+0x39b/0x550
[  485.949032][ T8012]  ? cd_forget+0x160/0x160
[  485.953489][ T8012]  do_dentry_open+0x7dd/0x10b0
[  485.958333][ T8012]  path_openat+0x2674/0x2f10
[  485.962967][ T8012]  ? verify_lock_unused+0x140/0x140
[  485.968219][ T8012]  ? do_sys_openat2+0xdd/0x4f0
[  485.973028][ T8012]  ? do_filp_open+0x420/0x420
[  485.977866][ T8012]  do_filp_open+0x1ee/0x420
[  485.982441][ T8012]  ? vfs_tmpfile+0x470/0x470
[  485.987106][ T8012]  ? _raw_spin_unlock+0x24/0x40
[  485.992005][ T8012]  ? alloc_fd+0x590/0x640
[  485.996384][ T8012]  do_sys_openat2+0x14b/0x4f0
[  486.001104][ T8012]  ? do_sys_open+0xe0/0xe0
[  486.005565][ T8012]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  486.011600][ T8012]  ? lock_chain_count+0x20/0x20
[  486.016557][ T8012]  __x64_sys_openat+0x135/0x160
[  486.021473][ T8012]  do_syscall_64+0x4c/0xa0
[  486.025933][ T8012]  ? clear_bhb_loop+0x60/0xb0
[  486.030649][ T8012]  ? clear_bhb_loop+0x60/0xb0
[  486.035364][ T8012]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  486.041317][ T8012] RIP: 0033:0x7fdc9995e98e
[  486.045796][ T8012] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  486.065581][ T8012] RSP: 002b:00007fdc9a7b2b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  486.074040][ T8012] RAX: ffffffffffffffda RBX: 00007fdc9a7b36c0 RCX: 00007fdc9995e98e
[  486.082047][ T8012] RDX: 0000000000000002 RSI: 00007fdc9a7b2c00 RDI: ffffffffffffff9c
[  486.090177][ T8012] RBP: 00007fdc9a7b2c00 R08: 0000000000000000 R09: 0000000000000000
[  486.098202][ T8012] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  486.106222][ T8012] R13: 00007fdc99c26128 R14: 00007fdc99c26090 R15: 00007ffe1b9bf738
[  486.114244][ T8012]  </TASK>
[  486.118022][ T8012] Kernel Offset: disabled
[  486.122373][ T8012] Rebooting in 86400 seconds..