last executing test programs:

1m45.99112803s ago: executing program 0 (id=1):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='bbr', 0x3)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
r2 = getpid()
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000080)={0x0, 0x2})
ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000000c0)=0x3)
syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
sendto$inet(r0, &(0x7f0000000280)="1d", 0x1, 0x200400c5, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)

1m44.860707977s ago: executing program 0 (id=10):
ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="000000000000250eb084000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r1 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
syz_usb_connect(0x7, 0x2d, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010000c113"], 0x0)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000080)=<r4=>0x0)
ptrace$getenv(0x4201, r4, 0x7359e736, &(0x7f0000000240))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3}, 0x18)
r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000500), 0xc0202, 0x0)
fcntl$dupfd(r5, 0x0, 0xffffffffffffffff)
read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8)
r6 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r6, 0xab00, r7)
ioctl$NBD_DO_IT(r6, 0xab03)
ioctl$NBD_CLEAR_SOCK(r6, 0xab04)
r8 = msgget(0x0, 0x40)
msgctl$MSG_INFO(r8, 0xc, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f00000000c0)={"0e00", 0x0, 0x6, 0x2, 0x0, 0x0, "11000200", "00007cda", "030200", "fcffffff", ["50d5c2a7c5ae5cace40000b6", "c08e00", "0c436d743c97c443084000"]})
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)

1m28.868728977s ago: executing program 32 (id=10):
ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="000000000000250eb084000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r1 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
syz_usb_connect(0x7, 0x2d, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010000c113"], 0x0)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000080)=<r4=>0x0)
ptrace$getenv(0x4201, r4, 0x7359e736, &(0x7f0000000240))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3}, 0x18)
r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000500), 0xc0202, 0x0)
fcntl$dupfd(r5, 0x0, 0xffffffffffffffff)
read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8)
r6 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r6, 0xab00, r7)
ioctl$NBD_DO_IT(r6, 0xab03)
ioctl$NBD_CLEAR_SOCK(r6, 0xab04)
r8 = msgget(0x0, 0x40)
msgctl$MSG_INFO(r8, 0xc, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f00000000c0)={"0e00", 0x0, 0x6, 0x2, 0x0, 0x0, "11000200", "00007cda", "030200", "fcffffff", ["50d5c2a7c5ae5cace40000b6", "c08e00", "0c436d743c97c443084000"]})
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)

24.406804734s ago: executing program 4 (id=112):
timer_create(0x3, 0x0, &(0x7f0000000300))
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0)
fanotify_mark(0xffffffffffffffff, 0x10f, 0x20000011, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0x14, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10)
r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0)
write$proc_mixer(r5, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'C'], 0x86)
r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0)
dup3(r6, r5, 0x0)
connect$unix(r2, 0x0, 0x0)
r7 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x7}, 0x1c)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r8, 0x0, 0x40)
sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x20, 0x4001c00)
socket$unix(0x1, 0x1, 0x0)
socket$unix(0x1, 0x1, 0x0)
openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)

23.040126442s ago: executing program 4 (id=113):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x6, &(0x7f0000000000)=0x9, 0x4)
getsockopt$inet6_tcp_int(r1, 0x6, 0x17, 0x0, &(0x7f00000001c0))
sched_setscheduler(0x0, 0x6, &(0x7f00000000c0)=0x2)
r2 = syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48)
r4 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
r5 = socket$kcm(0x29, 0x2, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94)
r7 = socket$kcm(0x2, 0x1, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000040)={r7, r6})
ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000040)={r4, r3})
close(r5)
r8 = syz_pidfd_open(r2, 0x0)
pidfd_getfd(r8, r6, 0x0)
r9 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000280)='gid', 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0)
write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000001fc0)={0x42, 0x3, 0x0, {0x0, 0x21, 0x0, '/proc/sys/net/ipv4/vs/secure_tcp\x00'}}, 0x42)

20.868128145s ago: executing program 4 (id=115):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
add_key$keyring(0x0, &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1ff, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r5, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0x8a010101}, 0x10, 0x0, 0x0, &(0x7f0000000240)}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00')
ioctl$EVIOCGKEY(r0, 0x80404518, 0x0)
ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000040)=0x1)
connect$netlink(0xffffffffffffffff, &(0x7f0000000100), 0xc)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r6, 0x1, 0x1}, 0x48)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl1\x00', 0x0})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000030000005800018044000400200001000a000004000000000000000000002d46000000000000000100000000120002000a00000000000000fe8000000000000000000000000000bb000000000d0001007564703a73"], 0x6c}}, 0x0)

20.06690864s ago: executing program 2 (id=118):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000004000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, 0x0, 0x4000000)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r5}, 0x10)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00')
preadv(r6, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/216, 0xd8}], 0x1, 0xa3, 0xd)
r7 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02)
writev(r7, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1)
read(r7, &(0x7f0000001400)=""/4076, 0xfffffeea)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0)
r10 = openat$cgroup_int(r8, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0)
write$cgroup_subtree(r10, &(0x7f00000000c0)=ANY=[], 0x6a)

16.192294243s ago: executing program 1 (id=121):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffc000/0x3000)=nil)
madvise(&(0x7f0000ff7000/0x8000)=nil, 0x8000, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x4040080)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mknodat(0xffffffffffffff9c, 0x0, 0xc000, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x672, 0x200)
ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000100)=""/218)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
madvise(&(0x7f0000400000/0x3000)=nil, 0x3000, 0xb)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80c80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r5, &(0x7f0000000200)={0x2020}, 0x2020)
mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200cd0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
read$FUSE(r6, &(0x7f0000006800)={0x2020}, 0x2020)
read$FUSE(r6, &(0x7f00000047c0)={0x2020}, 0x2020)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x0, 0xc, 0x8, 0x7c, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x2fff, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xdc}, {0x100000, 0xeeee0000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xf000, 0x3000, 0x9, 0x0, 0x0, 0x4, 0x20, 0xe, 0x0, 0x3c, 0x0, 0x1}, {0xdddd1000, 0x0, 0xd, 0x7, 0x0, 0x0, 0x2, 0xfe, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xf, 0x6, 0x5, 0x0, 0xb, 0x0, 0x4, 0x0, 0x0, 0xfe}, {0x80a0000, 0xdddd0000, 0x0, 0x1, 0x0, 0x1, 0x0, 0xa, 0x26, 0x0, 0xf8}, {0x80a0000, 0x4}, {0x6000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0x2d00, 0x0, [0x0, 0x0, 0x1]})

16.036456984s ago: executing program 4 (id=122):
syz_open_dev$MSR(&(0x7f0000000040), 0x6471, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0])
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x8}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8}]}, 0x24}}, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10)
open(&(0x7f0000000200)='./file0\x00', 0xc0, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local})
write$tun(r5, &(0x7f0000000040)={@val={0x0, 0x88f7}, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x66, 0x0, 0xfc, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0x8000, 0x8100, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x9, 0x5865, @void}}}}}}}}, 0x32)
newfstatat(0xffffffffffffff9c, &(0x7f00000044c0)='./file0\x00', &(0x7f0000004500)={0x0, 0x0, 0x0, 0x0, <r7=>0x0}, 0x4000)
setresuid(r7, 0xffffffffffffffff, 0x0)
request_key(&(0x7f0000000300)='logon\x00', 0x0, &(0x7f0000000380)='fscrypt:', 0x0)
r8 = socket$inet(0x2b, 0x801, 0x0)
getsockopt$IP_VS_SO_GET_SERVICE(r8, 0x0, 0x483, &(0x7f0000000100), &(0x7f0000000080)=0x68)
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x10000, &(0x7f0000000040))
openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
syz_clone(0x200011, 0x0, 0x0, 0x0, 0x0, 0x0)

16.035418064s ago: executing program 2 (id=123):
r0 = socket(0x1, 0x5, 0x0)
r1 = epoll_create1(0x80000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$pptp(0x18, 0x1, 0x2)
connect$pptp(r5, &(0x7f0000000700)={0x18, 0x2, {0x0, @multicast1}}, 0x1e)
connect$pptp(r5, &(0x7f00000001c0)={0x18, 0x2, {0x2, @local}}, 0x1e)
socket$nl_netfilter(0x10, 0x3, 0xc)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r9=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215, 0x100000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}, 0x1, 0xba01}, 0x0)
r10 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
ioctl$USBDEVFS_IOCTL(r10, 0xc0105512, &(0x7f0000000200))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000040)=ANY=[@ANYRESHEX=r4, @ANYRES32, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r11}, 0x10)
ioctl$USBDEVFS_IOCTL(r10, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000500)={0xe000200c})

13.246247241s ago: executing program 2 (id=125):
socket$nl_route(0x10, 0x3, 0x0)
add_key(&(0x7f0000001200)='id_resolver\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff)
bind$netrom(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f00000000c0)={0x0})
r0 = semget$private(0x0, 0x6, 0x3b1)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000440)="97"})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
getsockopt$sock_int(r1, 0x1, 0x4, 0x0, &(0x7f0000000080))
prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4f27, 0x5, 0x1, 0x0, 0x67, 0xcc7, 0x8, 0x7, 0xa, 0x4, 0x2, 0x1, 0x8, 0x1, 0x6, 0x101, 0x1, 0x1a449, 0x3, 0x40000003, 0x89, 0x2, 0xf27, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0xfffffff8]})
mmap(&(0x7f00000f4000/0x2000)=nil, 0x2000, 0x5000000, 0x11, r4, 0xffffd000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x109882, 0x60)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
semtimedop(r0, &(0x7f0000000000)=[{0x0, 0xffff, 0x1800}], 0x1f4, 0x0)
r5 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(r5, &(0x7f0000000040)={0x23, 0x0, 0x7, 0x1}, 0x64)
ioctl$SIOCPNENABLEPIPE(r5, 0x89ed, 0x0)

13.194760181s ago: executing program 4 (id=126):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4)
r1 = syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000280)='./file1\x00', 0x8008dc, &(0x7f00000002c0)=ANY=[@ANYBLOB='shortname=winnt,uni_xlate=1,rodir,uni_xlate=0,iocharset=macgaelic,shortname=lower,utf8=1,iocharset=iso8859-13,uni_xlate=1,rodir,shortname=win95,shortname=lower,codepage=874,shortname=lower,utf8=0,shortname=lower,uni_xlate=0,uni_xlate=0,nonumtail=0,short\b\x00\x00\x00\x00\x00\x00\x0095,rodir,uni_xlate=0,rodir,shortname=mixed,sFortname=lower,nnonumtail=1,showexec,\x00', @ANYBLOB="b0baffea7e7ba334f8fde1f7928de8eb76582a", @ANYRES16], 0x6, 0x2e7, &(0x7f0000000780)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
fcntl$notify(0xffffffffffffffff, 0x402, 0x80000006)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000004c00)=""/102392, 0x18ff8)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a80)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r5)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r6, 0x0, 0x0)
getdents(r6, 0xfffffffffffffffd, 0x58)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}}, 0x20040880)
sendmmsg$inet6(r3, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e41, 0x4d7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040)
sendmsg$tipc(r0, &(0x7f0000000200)={&(0x7f00000003c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000b00)="87", 0x1}], 0x1}, 0x4000001)
recvmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0xfffffffc}], 0x1, 0x0, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={<r7=>r0, 0x1, 0x1, 0x5})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
sendmsg$NL80211_CMD_LEAVE_IBSS(r7, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r8, 0x20, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800)

12.294308157s ago: executing program 1 (id=127):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
fsopen(0x0, 0x0)
request_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000080)='].\x00', 0x0)
sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x20040000)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r4], 0x44}}, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x13, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000", @ANYRES32=r5, @ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
write$cgroup_devices(0xffffffffffffffff, 0x0, 0x8)
write$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xa)
setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0)
r6 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508)

10.11602236s ago: executing program 1 (id=129):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prctl$PR_SET_IO_FLUSHER(0x39, 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYBLOB="a6cf4f07bfa737d5c00a58498791fb8c5db6216227df29560ea32946f233340303b2788d26"], 0x20}, 0x1, 0x0, 0x0, 0x20040080}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, 0x0, 0x4000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x18, 0x68, 0x1, 0x2, 0x7ffffffc}, 0x18}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r4)
sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x1c, r5, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}}, 0x64000)
ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000340)={0x88000003, 0x0, "679c51ecbc83d0e22e845e3ede5adc714d88a57474315dc49c00", 0x1, 0x0, 0x0, 0x200, 0x2})
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f786dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

10.02152896s ago: executing program 3 (id=130):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000002640)=0x1, 0x4)
r0 = io_uring_setup(0x4505, &(0x7f0000000840)={0x0, 0x9a3d, 0x40, 0x1, 0x151})
io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0xffffdc29, 0x1}}, 0x20)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x0)
sendto(r3, &(0x7f0000000400)="a0b7f4681b2c5a98568dcde245c59f04ad5c8c27c22f55a05985de53f9d50647958899b3909b4f26a0115aae78e12e5844470229939cfdba9360cbc7a19e7b5a87dcd9a0309cb46e8746b5ffccdc3aba786d0d42942ddaf3766a6f9f503048effc9ad53dd3b0c97ee0fd04db964d16557648a9b0a27a2e6130c36bec01580c121b3c", 0x82, 0x4000054, 0x0, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
r5 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='9', 0x1, 0xffffffffffffffff)
keyctl$chown(0x4, r5, 0xee00, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000000240)={&(0x7f0000001000)=[0x3, 0xfc, 0x7, 0xa812, 0x1, 0xa, 0x2866, 0x1, 0x5, 0x178, 0xff, 0x10, 0x3, 0x4, 0x200, 0xffff, 0x4, 0x204c, 0xe, 0x0, 0x3, 0x83, 0x1, 0x7fffffff, 0x8, 0x80, 0x6, 0x8, 0x4, 0x7, 0x80, 0x6, 0x80000000, 0x9, 0x7, 0x1, 0x6, 0x7fff, 0x5, 0x10, 0xffff, 0x80000001, 0x8, 0x6, 0x9, 0x81, 0xcc, 0x0, 0x5, 0x2, 0xcd0, 0x8, 0xfffffffe, 0x7, 0x6, 0x2, 0x4, 0x5, 0xffffffff, 0x7, 0x66, 0x101, 0xdda9, 0xa, 0x7fff, 0x3ff, 0x6c, 0x4, 0x8e1, 0x5, 0x16842694, 0xa3, 0x5, 0x81, 0x306, 0x4, 0x4, 0x4, 0x2, 0x0, 0x9, 0x0, 0xd, 0x7, 0x1, 0x1, 0x10b, 0x6, 0x80, 0xa, 0x3ff, 0x1, 0x8, 0xfffffffa, 0x4, 0x10001, 0x7, 0x7a9d, 0x8, 0x10001, 0x9, 0x5, 0x0, 0x9, 0x8, 0xc886, 0xfffffffe, 0x456f7a28, 0x400, 0x6, 0x4, 0xd5e, 0x25fd, 0x9, 0x646c, 0x7d, 0x2, 0x5, 0x0, 0x7, 0x10001, 0x7, 0x3, 0x8, 0x8, 0x8, 0x3, 0x0, 0x2, 0x8, 0x0, 0x3, 0x4d, 0x8, 0x3, 0x9, 0x8, 0x5, 0x831, 0x1, 0x1, 0x3, 0x15f46af2, 0x27, 0x88b1, 0x9, 0x8000, 0x9, 0x3, 0x8, 0x3ff, 0x6, 0x8, 0x80000001, 0x5, 0x9, 0x6f, 0x5, 0x10000, 0x1, 0x4, 0x5, 0x6, 0x8001, 0x28ca, 0x800, 0x9, 0x7, 0x6, 0x9, 0x6, 0x253c, 0x5, 0x1, 0x2185, 0x0, 0x3, 0x7, 0x9, 0xf0, 0x3, 0xec00, 0x101, 0x5, 0x2, 0x2, 0xfffffff8, 0x9, 0x7fffffff, 0xc, 0x4, 0x4, 0x400, 0xe, 0x6, 0x4, 0xe, 0x200, 0x80000000, 0x8, 0x1, 0xf, 0x47e9, 0xffffffff, 0x6, 0x5, 0x1, 0x7, 0x9, 0x9, 0xff, 0x101, 0x2, 0xde, 0x200, 0xcc, 0x6, 0x3, 0x40000, 0x46, 0xfffffff3, 0x101, 0x8, 0x80, 0xaf7, 0x1, 0x6, 0x2, 0x80000001, 0xfffffff8, 0x8, 0x80000001, 0x20ab, 0x0, 0xc, 0xfffffff4, 0x10000, 0x7, 0x401, 0x10000, 0x3, 0x5, 0x9, 0xfffffff3, 0xffffaa3e, 0x2, 0x200, 0x7, 0x6, 0x8, 0x9, 0x7, 0x6, 0x5, 0x1, 0x8, 0xfff, 0x0, 0x2, 0x10001, 0x4, 0x7, 0x1, 0x401, 0x2, 0x7d, 0x101, 0x8, 0x8001, 0x3, 0x1c2, 0x3, 0x0, 0x4902, 0x81, 0x7, 0xff, 0x5, 0x4, 0x8, 0x398c, 0x3457, 0x0, 0x6, 0x8, 0x0, 0x1, 0xffffffff, 0xfffffffc, 0x2, 0x9, 0x5, 0x6, 0x10001, 0x1, 0xd8d6, 0xfffffffd, 0x0, 0x2, 0x8666, 0x2, 0x0, 0x7, 0x0, 0x0, 0x2, 0x4, 0x4, 0x6ddb, 0x0, 0x0, 0x2, 0x9, 0x8, 0x2, 0xfecd, 0x3cf7, 0xc232, 0x2, 0x6, 0xa, 0x1, 0x4, 0x0, 0xfff, 0xe70e, 0xc, 0x81, 0xa, 0x60, 0xfffffffd, 0x7fffffff, 0x627037ff, 0x0, 0x9, 0x4e, 0x4, 0x2d, 0x6, 0x9, 0x1, 0x8001, 0x28c66e0e, 0x0, 0x7fffffff, 0x7fff, 0x8001, 0x0, 0xfffffffb, 0x6, 0x0, 0x47b7, 0x45, 0x5, 0xcb, 0x0, 0x0, 0x2, 0x7, 0x9, 0x4, 0x34c, 0x2, 0x6, 0x2, 0x7, 0x85d3, 0xfffffff8, 0xfffffffe, 0x58, 0x6, 0x3ff, 0x0, 0x1, 0x40, 0x2, 0x8001, 0x3, 0x0, 0x100, 0x40, 0x7, 0x8, 0x3, 0xfffffff8, 0x9, 0xfb, 0x6, 0xdaf40614, 0x4, 0x7, 0x1, 0x8, 0x2, 0x6, 0x3, 0x7f, 0x7, 0x8, 0x8629, 0x2, 0x8, 0x4, 0x7ff, 0x1, 0x7f, 0xd63, 0xfffffffd, 0x101, 0x6, 0x3, 0x10a507f1, 0x5, 0x7fffffff, 0x1, 0x10000000, 0x5, 0x1000, 0xfff, 0x0, 0xc444, 0x3, 0xa0d3, 0x1, 0xe, 0x1, 0xfffffffa, 0x4, 0xb4e5, 0x4, 0x3, 0x6, 0x100, 0x657d089b, 0x4, 0x6, 0x2365, 0x6, 0x4423ef34, 0x2, 0x1, 0xbc1, 0xff, 0xac5, 0x4, 0x7, 0x5, 0x3, 0xb89, 0xb8b7, 0x0, 0x1000, 0x7, 0x7, 0x4, 0x2, 0xb, 0xfc5a, 0x10001, 0x1d, 0x4434, 0xad9759c, 0x4, 0x7, 0x6, 0x52e, 0xe, 0x80000001, 0x9, 0x5cde, 0x80000001, 0x5, 0xc6b7c933, 0x0, 0x400, 0x1, 0x2, 0x7f, 0x2, 0x3, 0x2, 0xdce, 0x35d, 0xff, 0x0, 0x3, 0x0, 0x0, 0x1, 0x5816, 0x4, 0x1400e336, 0x7, 0x0, 0xb, 0x7fffffff, 0x6, 0x40, 0x3, 0x8001, 0x5, 0xff, 0x36, 0x7, 0x20be51fd, 0x3525, 0xffffff4d, 0x3, 0x7, 0x5, 0x3, 0x1000, 0x7, 0x6, 0x3, 0x2, 0x6, 0xfff, 0xd, 0x7, 0xb, 0x3, 0x100, 0x2, 0x9, 0x3d2, 0x10000, 0x3, 0x3, 0x9, 0x3, 0x1ff, 0x100, 0x8, 0x7bbc, 0xa89, 0x8, 0x100, 0x9, 0x0, 0x4, 0xff, 0x4, 0xe, 0x6, 0x0, 0xffff, 0x8000, 0xec74, 0x6, 0x6, 0xc23, 0x6, 0x8, 0xfff, 0xe, 0x10, 0x7, 0x80000001, 0x1, 0x32, 0xb19c, 0x0, 0x0, 0x6, 0xb, 0x8, 0xbf6, 0x85, 0x21b, 0x8, 0x9, 0x4, 0x7, 0x4, 0x81, 0x4, 0xb3b5, 0xd, 0x8e3, 0xb3, 0x4, 0x2, 0xfffffffd, 0x3, 0xc0000000, 0x18, 0x5, 0x6, 0x100, 0x2, 0xf4f7, 0x8, 0x7, 0x1, 0x0, 0x0, 0x3, 0xfffffffd, 0x0, 0x8b7, 0x80000001, 0x7c7f, 0x8001, 0x12, 0x5, 0xc400, 0xa, 0xc, 0x1fc, 0x800, 0xfffffffc, 0x7, 0x8, 0x2, 0x6, 0x2, 0x8, 0x0, 0x7, 0x3, 0x3, 0xbe, 0x0, 0x100, 0x6, 0x7f, 0x7c, 0xfffffffe, 0x3d, 0x8, 0x1, 0x7, 0x4, 0xfffff000, 0x2, 0x7f, 0x0, 0x4, 0x9, 0x5, 0x9, 0x3, 0x5, 0x4996, 0x6, 0x2, 0x800, 0x80, 0x4, 0xf83e, 0x10000, 0x7, 0x1, 0x8b, 0x6, 0x2, 0x4, 0x51, 0xc, 0x0, 0xfff, 0xcf6b, 0x0, 0x9, 0x3, 0x5c, 0x4, 0x100000, 0x7ff, 0xffffffff, 0x5f0b, 0x5, 0x8, 0x8000, 0x27, 0x9, 0x40, 0x7fff, 0xf, 0xffffffff, 0x1, 0x3, 0x6, 0x1, 0x9, 0xd, 0x6, 0x1, 0x2, 0x3, 0x3, 0x7fffffff, 0x6, 0x10, 0x4, 0xbc4, 0xfffffff7, 0x7c, 0x0, 0x1ff, 0x6, 0x7fffffff, 0x5, 0xcd, 0xffffffff, 0x100, 0x4, 0x4, 0x3, 0x8a, 0x9, 0x9, 0x1, 0x3, 0x5, 0x6, 0xc6a9, 0x101, 0x1, 0x5, 0x800, 0x30, 0x4, 0x7f, 0x4, 0x10000, 0x9, 0xf6, 0xffff0000, 0xffffffff, 0x7, 0xc, 0x1, 0x27, 0x3, 0x7, 0x1000, 0x20006, 0x4, 0x3, 0x1, 0x6, 0x5, 0x2, 0x0, 0x81, 0xe4f, 0x7905, 0x9, 0x4, 0x9, 0x4, 0x10, 0x4, 0x8, 0x100, 0xa1e5, 0x0, 0x0, 0x2, 0xf0, 0x0, 0xffffffff, 0x200000, 0x10, 0x1000, 0x765, 0x8001, 0xfff, 0x232fdfda, 0x8, 0xd, 0x0, 0x400000, 0x2, 0x6, 0x3d, 0x9, 0xd0b, 0x3, 0xf, 0x466c472a, 0x3, 0x4, 0x1, 0x101, 0x0, 0x4, 0x3, 0x8, 0x8b, 0x7, 0x8, 0x5, 0x8d2c, 0x1, 0x12c8, 0xfffffff6, 0x3, 0xf7a, 0x400, 0x9, 0x10, 0x6, 0x7, 0x7, 0xd1a, 0x1, 0xfffffffd, 0xffffffff, 0x5, 0x100, 0x2, 0xfffffffb, 0x9, 0xa7, 0x1d, 0xc68c, 0x40, 0x6, 0x1, 0x4, 0x0, 0x2d01, 0x3, 0x401, 0xc, 0x1, 0x8, 0x8000, 0x349b, 0x6, 0xfffffffb, 0x7, 0x6, 0x0, 0x200, 0xe, 0x0, 0x101, 0x8, 0x7, 0x3, 0xfff, 0x6, 0x8001, 0x2, 0xfffffff8, 0x6, 0x0, 0x10, 0xe, 0x7dc5, 0xffff, 0x7, 0x3, 0x639, 0x8, 0x200, 0xe4, 0xe, 0x5, 0x35887acc, 0xca0, 0xb6, 0x7f, 0x60, 0x6, 0x0, 0x7fff, 0x1ff, 0x99e, 0x2, 0x8, 0x3, 0x4, 0x3, 0xfe0000, 0x7, 0x4, 0x7ff, 0x8, 0x5d9, 0x3, 0x0, 0x3d, 0x4, 0x0, 0x5, 0xffffff7f, 0xfffffffa, 0xef35, 0xe287844, 0x3, 0x9, 0x0, 0x80000000, 0x10000, 0xc, 0xcd40, 0x400, 0x204a, 0x8, 0x7, 0x7095, 0x5, 0x9, 0x400, 0x8000, 0x8, 0x1, 0x8, 0x8a3, 0x7, 0x40, 0x4, 0x20, 0x8, 0xfffffff9, 0xffff, 0x9, 0x6, 0x1, 0x2, 0x5, 0x7, 0x1, 0x10000, 0x0, 0x7, 0x6, 0x1, 0x4, 0x2, 0x80, 0xfffffffe, 0x7, 0x1, 0x8000, 0x101, 0x8, 0x1, 0x1, 0x1, 0x8, 0x80, 0x10000, 0xb, 0xa0, 0x8, 0xd8, 0x2f88c62c, 0x6, 0x0, 0x400, 0xfffffff9, 0x2, 0x10000, 0x9, 0x63f5, 0x3ff, 0x98a, 0x7f, 0x4, 0xd, 0xd5, 0x7, 0x5, 0x5c1, 0x7fff, 0x0, 0x2, 0x4, 0x0, 0x2, 0x800, 0x6, 0x8, 0x4, 0xc, 0x7, 0x7f, 0x1, 0x8001, 0x800, 0x1, 0x5, 0x9, 0x8, 0x6178, 0x8, 0x2, 0x0, 0x2, 0x3, 0x6d, 0x0, 0xe6a6, 0xc1e, 0x2, 0x41cc, 0x7, 0x2, 0x5, 0x8, 0x2, 0x9, 0x0, 0x9, 0x3, 0xfff, 0x0, 0x4, 0x4, 0x5, 0x6, 0x7, 0x80000000, 0x800, 0x3, 0x8, 0x9, 0x4], 0x4, 0x400, 0x9})
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
r6 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000003c0)=[@mss={0x2, 0x8}, @timestamp, @sack_perm, @window={0x3, 0x8000, 0xfffc}, @sack_perm, @sack_perm, @window={0x3, 0xfff, 0x4}, @window={0x3, 0x5}], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11)
recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25)

8.288905991s ago: executing program 3 (id=131):
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000bc0)=[{0x22, 0x0, [0x5, 0xb, 0x9, 0x2, 0xfffffffd, 0x1, 0x3ff, 0x0, 0x0, 0x400, 0x9, 0x5, 0x0, 0x5, 0xfffffffc]}, {0x1, 0x0, [0x7, 0x7ff, 0xfffffff3, 0x2, 0x0, 0xfffffffc, 0x2, 0x81, 0x8, 0xf, 0x8, 0xc, 0x80, 0x5e, 0x80, 0x7]}, {0x3, 0x0, [0x1bb, 0x3, 0xf1d, 0x10001, 0x100007, 0x7fff, 0xf833, 0x7, 0xfffffffc, 0x1f53, 0x0, 0x7, 0x7, 0x1, 0x200, 0x5]}, {0x2c, 0x0, [0x8, 0x8, 0x0, 0x10001, 0xaab, 0xb, 0x0, 0x9, 0x9, 0xe2de, 0xffffffff, 0x3, 0x0, 0xf, 0xffff, 0xd]}, {0x2, 0x0, [0x3, 0x4a8d2598, 0x9, 0x10, 0x7, 0x8, 0x1, 0xffff, 0x6, 0x9, 0x6, 0x2393, 0x2, 0xd8, 0x101]}, {0x5, 0x0, [0x5, 0x8, 0x1d4, 0x0, 0x6, 0xecb, 0x64d8, 0x3, 0x9, 0x1ff, 0x8, 0x10000000, 0x5d8, 0x367, 0xfffffffe, 0x6]}], 0xffffffffffffffff, 0x1, 0x1, 0x1b0}}, 0x20)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
getpeername$qrtr(0xffffffffffffffff, 0x0, &(0x7f0000000500))
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842)
ioctl$EVIOCGBITSND(r2, 0x40044591, 0x0)
epoll_create1(0x80000)
r3 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x707c, 0x400, 0x3, 0x288}, &(0x7f0000000340)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x1, {0xfffe}})
io_uring_enter(r3, 0x12a8f, 0xf264, 0x40, 0x0, 0x0)
timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x81, 0x4, @thr={&(0x7f0000000580)="c8d230f043403b865fdbb40c25c4d6f8b41feded49d0f42e159f43ec38470d70d1af2e33bf85cc290b73c72fd3f613e667384fedf409245536a660724e3b8c5cd49f0a09335cd7da878565864a5aa18516120a27a44f0c29261303428542fdd154c6346d55f8f7b37660d7437c5cd8ac", &(0x7f0000000e40)="56dfb83af419151252dbfd4d258d2bfae512c79214d391f8696ec0dd5b5c2731d9b239ea09779dff95d0bd788e1413ad9550348c32f6e436144db80a7724b3e71a8ced59f60728baf39f43f07ed63f028c650e4c4810ac5d50a4a83f87e11161cef4e576b2ddd4f4500d3ffb9616b4f443e2ab3a8be34dad322cc2a6ac057552be9370629b79c93d4e34c55dee8ded7de616d2e706fb65ff41e79f3c9a9cc46f237859a7f745d90fd5b258d5d43241a1e81df07659ae6df69ef31c6c5aeecddee9c07f0d5847a08d07aa6be7eab1d415ce"}}, &(0x7f0000bbdffc))
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000000)=ANY=[], 0xfe37, 0x0)
r6 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0)
r7 = userfaultfd(0x1)
ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1})
syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f00000005c0)="1c681411f7a496c0dacc6a3c24465b016f64b4c00b5f7c691cb24cb8000000001a0000200000000000201500", 0x0, 0x48)
ioctl$UFFDIO_WAKE(r7, 0x8010aa02, &(0x7f00000002c0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000})
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x2, 0x7fff0000}]})
close_range(r8, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

8.265001191s ago: executing program 2 (id=132):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0)
sendmmsg$inet6(r1, &(0x7f0000004900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x11)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = socket$phonet_pipe(0x23, 0x5, 0x2)
openat$vimc0(0xffffff9c, &(0x7f0000000340), 0x2, 0x0)
connect$phonet_pipe(r3, 0x0, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x20040010)
ptrace$ARCH_MAP_VDSO_X32(0x1e, 0x0, 0x2, 0x2001)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x84)
bind$inet6(r4, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
shutdown(r4, 0x0)
setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8)
sendto$inet6(r4, &(0x7f0000000100)="bc", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
close(r4)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)

6.374913242s ago: executing program 1 (id=133):
clock_nanosleep(0x8, 0x1, &(0x7f0000000080), 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0x6ea, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2, 0x7}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8004}, 0x0)
r3 = getpid()
sched_setparam(r3, &(0x7f0000000240)=0x4)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000900)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x40000c0)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x2, 0x0, {0x1, 0x5, 0x9}}, 0x28)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100))
recvmmsg(0xffffffffffffffff, &(0x7f00000034c0), 0x0, 0x10720, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYRES8], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94)
set_mempolicy(0x8006, &(0x7f0000000040)=0x1002, 0x5)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)

6.108760033s ago: executing program 3 (id=134):
unshare(0x2000000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3, 0x0, 0x1e0000}, 0x18)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x36, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000b, 0x59033, 0xffffffffffffffff, 0x0)
r4 = userfaultfd(0x801)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000582000/0x2000)=nil, 0x800000})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$kcm(0x10, 0x100000000002, 0x4)
sendmsg$kcm(r6, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000100000883795c04a31ba377a1b2cc32b38d37400"/57, 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0)
getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000000080), &(0x7f00000000c0)=0x8)
prlimit64(0x0, 0xe, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
unshare(0x24000000)
fcntl$F_SET_FILE_RW_HINT(r7, 0x40e, 0x0)
r8 = gettid()
rt_sigqueueinfo(r8, 0x21, &(0x7f00000000c0)={0x10, 0x8, 0x200})

4.891442521s ago: executing program 3 (id=135):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10f1}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x80, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x2}, 0x50)
r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000100)='.log\x00', 0x40, 0xa)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x6, [@restrict={0x8, 0x0, 0x0, 0xb, 0x1}, @fwd={0xf}, @float={0x6, 0x0, 0x0, 0x10, 0xa}, @struct={0xa, 0x2, 0x0, 0x4, 0x0, 0xffff2970, [{0x3, 0x3, 0x7}, {0x8, 0x0, 0x9}]}, @decl_tag={0x7, 0x0, 0x0, 0x11, 0x4, 0x4}, @volatile={0x2, 0x0, 0x0, 0x9, 0x5}]}, {0x0, [0x30, 0x5f, 0x5e, 0x5f]}}, &(0x7f0000000440)=""/70, 0x82, 0x46, 0x0, 0xfffffffa, 0x10000}, 0x28)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x50)
r6 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x100, 0x2)
read$msr(r6, &(0x7f00000022c0)=""/4093, 0xffd)
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4}, 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_tracing={0x1a, 0x2a, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x7fff}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@alu={0x4, 0x1, 0x9, 0x4, 0xa, 0x100, 0x4}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x71, &(0x7f0000000200)=""/113, 0x0, 0x40, '\x00', 0x0, 0x1a, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xa625, r0, 0x5, &(0x7f0000000900)=[r5, r6, r7], &(0x7f0000000940)=[{0x5, 0x2, 0x8, 0xb}, {0x3, 0x1, 0xa, 0x6}, {0x3, 0x2, 0x3, 0x1}, {0x1, 0x4, 0x8, 0xa}, {0x1, 0x5, 0x1, 0x2}], 0x10, 0x81}, 0x94)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000a80)={<r8=>0x0}, &(0x7f0000000ac0)=0xc)
r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r9)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r10 = gettid()
r11 = syz_open_procfs(r10, &(0x7f0000000040)='timerslack_ns\x00')
write$FUSE_NOTIFY_RETRIEVE(r11, &(0x7f0000000240)={0x30, 0x5, 0x0, {0x0, 0x0, 0x3, 0x7c}}, 0x30)
ptrace$pokeuser(0x6, r8, 0xa950, 0x3)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000000)={0x0, 0xfffffffffffffff7, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f0000000500)={0x3ff, 0x8000, 0x400000000001, 0x9, 0x9143, 0xf, 0x80000002, 0x2}, 0x0, 0x0)

3.525033229s ago: executing program 2 (id=136):
timer_create(0x0, 0x0, 0x0)
r0 = socket(0x32, 0xa, 0xffffffff)
sched_getaffinity(0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x44080)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_int(r1, 0x0, 0xe, 0x0, &(0x7f0000000100))
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000ff3000/0xc000)=nil, 0xc000, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x20}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x10000, {0xa, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0)
r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r5, 0xc0a85352, &(0x7f0000000200)={{0x80, 0x9}, 'port0\x00', 0x89, 0x90010, 0x4, 0x8, 0x0, 0x0, 0x200000, 0x0, 0x4875c99660ff2b2d})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0xc0)
r7 = fanotify_init(0x1, 0x2)
r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
fanotify_mark(r7, 0x455, 0x40000008, r8, 0x0)
fanotify_mark(r7, 0x41, 0x8000038, r8, 0x0)
fanotify_mark(r7, 0x80, 0x20, r8, 0x0)
write$binfmt_script(r6, 0x0, 0x0)
getsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000000c0), 0x10)

3.27601715s ago: executing program 3 (id=137):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
listen(r1, 0x0)
close(r1)
sendmmsg$inet6(r0, &(0x7f0000001fc0)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)="f6edfb7dc9e14e00452c3dca1231a6434468f76c8f", 0x15}, {&(0x7f0000000140)="d8bda61aa52b76e4ffdbb80d3bd13788a48740434dc6", 0x16}, {&(0x7f0000000180)="404137d02fa9f1182d1a9f2267117d1d1e9cadc7570c4da22c7c60183a9c81ea559f5abbb5606df97a9328ec1df4990ea2e437d6ad85df91debc7a979adf4c02266318bb456c859bedfa03a330c55faa6b6781d9a17fb5c23479", 0x5a}, {&(0x7f0000000200)="4eaa67acdc4b3a2ef0fd7249d88586498edde1170111cc948c08829ee386", 0x1e}, {&(0x7f0000000240)="a491e38e506111665af75c04093e3052b3056e2b8e4b2c7061718cb6e02918fbf57416e383774d94531ae5f77c9211062d33ba44edb701de4bee5f58b55dbc107afeb6f607b845a4", 0x48}, {&(0x7f00000002c0)="2f91c617539b284660cae3b262d05fb7aa85027478bbdafbc5a96a4a4df90773819f189d273dc1fe04c3f30a4cc4cff010841c2fe1e7e293293a961b18da9c73dfcae318e6887ce8c656b092b5003db95b615ec958296f", 0x57}, {&(0x7f0000001340)="9acedf9ece80077eed8c594c9ead06fc0005753956ce0392f3383ad1f14256b40d9ff39b5c69d7b184d80f3504d340ede8c8b9bd9e8a1e891e53fe1498b68f803de4442467ce5e7342cd0c5140cb63ac3f80688841dcfea117", 0x59}, {&(0x7f0000001400)="66823506ee5a84263c7cf6b714d4874d51869938878eeb968b797ec4a7f63765cea08ffa325226b0ce57f3f8170c04059c6bcbb8a284433fddca1046f0765dc5548d1de9d11831", 0x47}], 0x9}}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001580)="66c5a4feaf377e5d22ae40f6926e028241c843d7efd5e33d5868453ac616c191521cc440f44a029d67905f940821ef9f9106ecec22dba1157d2620e80c2a76af34361137f4abf10147f9c869875404868d9ac2ce8ab7c1316dc286ee432256cca6c4133cb42bc3d297dae4adf7db244553b34e8a436dbaa51420203122a4202a9fd51557a72594884493d7d305bc74282a59fea139498a5dcada52e59e9787f95e4c95a5f6dd9a42a22653a87b442397a6ea87120328ed47a742946c87015c89e493f8c3d5f643623467cf08626bb6cad20615c000766e4bdd3b719c5b46e2bda0a300d19951bbf6b052", 0xea}, {&(0x7f0000001680)="84a28dae94144de0c308120f2e04c79e54109c0cfb67ac38f3ef4bec0085e54b470e8efc26adb43a6a2513f56e33e5ffc33c0a15f7c82d381b799fdec6b500941c18812a846e7bd6aeef7f3cd309c97fbee4021379d904e96c91c9de98f1cd05dec045206009b49fcce14f2d35a1c5725986371aa14f646958966000edca05dccf7ba26b54ca103dbaa1fc2866dd77a12f15f53796090297e26056017df7d1b6fab3552e7316033f70de5226ceb261f158ba88c1e1e8", 0xb6}, {&(0x7f0000001740)="8daec49939c6286ba3d93a29b042e5764522837e24f5c0ba7018c820ed", 0x1d}], 0x3}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000001800)="bda7df097900172296d2eaef5e658debb91712e4fd99e761a6b0736fc75523654f7891630bb6f9d837d988f11fc10c7a3d9d7299be6cda32a41a76a4715b31a28be196fe2e1752eaedd96ceac045451f7e3c49926ea2195f575ef495b56b4d0cb5d4c9f1f39a97f08e88e1f101b666ce9e831322085356c9270bc45fb9eb1e2904fd6d2c333375dbc7005d783f394c95efc84528901c9d61cdbf2f94bf5a3f57098c87fbe59990cfa7fc24822cde39f8de7c216604fc2caae78c40ab0baf3171254bee383ab5f5de482384af72359f4ffa714a887de87e384a9d4e", 0xdb}], 0x1}}, {{&(0x7f0000001940)={0xa, 0x4e23, 0x8fe, @dev={0xfe, 0x80, '\x00', 0x38}, 0x1}, 0x1c, &(0x7f0000001a80)=[{&(0x7f0000001980)="15fdb597f9c5a710871080e26890e63cffcf8edf6aba5f42bc7f0891388572f0426a0d920dfeeb0d1282bccbd24bc615056fafa46d7bfb2922a505aa2f36a5e8ca7c7fc752325a74fa0f8a91d93e8312003bd0d17edf48f245a70eeb72427678735f1be4d8918f47aa34fc89f08d29f4a5b1bb9e09f86d5061e5c54db97899231131", 0x82}, {&(0x7f0000001a40)="522cf7707ff0bfc88bb05ab2ec73b67e45bcac341e8b522dab", 0x19}], 0x2}}, {{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000001c80)="42c2abe57e8f", 0x6}, {0x0}], 0x2}}], 0x5, 0xc004)
r2 = epoll_create1(0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
close(r3)
r4 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
socket$rds(0x15, 0x5, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x0, 0x408d7d4a, 0x0, 0x0, 0x9}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffffd, 0xa}, 0x0, 0x0)
sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)="67d8902400aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c14498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x427}], 0x2}, 0x0)
setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4)
sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000040)=0x3f, 0x4)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)={0xa002a008})
socket$inet6_tcp(0xa, 0x1, 0x0)

2.285412206s ago: executing program 1 (id=138):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341)
ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0x2fe, 0xe5, 0xe0, 0x0, 0x0})
close(r2)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r5 = fsopen(&(0x7f00000000c0)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = gettid()
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
tkill(r6, 0xb)
r7 = landlock_create_ruleset(&(0x7f0000000100)={0xb001, 0x1, 0x3}, 0x18, 0x0)
landlock_restrict_self(r7, 0x6)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r8, &(0x7f0000000280)={0xa, 0x4e23, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffe}, 0x1c)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r4, 0x0)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0)
syz_emit_ethernet(0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaac29d776d30658d23280045000028db49679db09bd90064010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02000090780000"], 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd601b00000020060000000000000000000000ffffac1e0101fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="84c20000907800001e0c7b785e98aa1c6f580000"], 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r11, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f000c000000080026000816"], 0x40}}, 0x200040b4)
sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="04140000", @ANYRES16=r0, @ANYBLOB="000226bd7000fbdbdf2567000000080001000800000008000300", @ANYRES32=r11, @ANYBLOB="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"], 0x1404}, 0x1, 0x0, 0x0, 0x20004000}, 0x8800)
pwritev2(r4, &(0x7f0000002d00)=[{&(0x7f0000000140)="6c9c7f46efa79f5e44e790aefae0e076c70eb620193ba825dd53543c76cb89b56d587d5cbc11f1d6c55d28772d197fa815b5a893b4b8fa61c1b593ca273f9ff77f29813b23988ab5ebdee0a2941a", 0x4e}, {&(0x7f0000001b40)="b5d1a28f08d17f95877d3b6ffa45943a2479c74b02d9f56640a706ca59113c268e9adfabc9deaa5b0a87ebc7f3addf35986ecf13865a7e8bd66a0df45e8d1a274370309210aa38ea4412cd1a0267fc41152d1073539cc22e0ab75177fa79c098ab31c950d3b171d33fb94b4a7f0ffb668d62e7203d0b6962c6de695c5b8f3ef750ab82db5b7615d87596e4b39d0a06c3849807a6424e2759681480ffb64352f4df9138c84d2103932dd1d44ba7509b164d15daf9b9a9035f065f17c680d7f11e7607e5e0bcd2ab96e958ece21ff24e7cbe9894f7829ef1abaecc22210eacb7d4b3bbd76a0cf70dd6c5a8c760429f3df2503683b660863b58e7f1c263ab720d1a0a1a235fc695a12e96cd527040c9e60941c313de86267a6f4f16d722d32f52f31d922caaae11dd34ffcb4f063a372716923500e45dfe0a29427c7dbc2796eb4339fdeba33f055b0bfaf1a501f76855b18cce4118971a0b842d201f7ac6c266072b6c5c15ed64893ee9156fb30a013f9509a72d740c3256fad3979ef99757ffd0204ef18b55b0fe73b43ed6c7a263a16989176c62c9f5f64ba066f8aa7a81a5c69b78f4de4b858cfc1381cfe9a2ec9a87760a5d1b5e8826cde9bffa01353a625a4b273e31daba0bb8d82f6022de03ef071bd5481b048aa85383dcbaf6824d65832114b8aa5c6270694c37e3184eefc5df34684fb483087f84a21bdb3d254b3db4e06f6878329edf856a59a3ffcefadeaa99500acaff1bd989be45c83250b690f49379dc4f87ac03ccc38c8da3ab889daa70794f3e9c84d63b5c77f86886e34cddbe26e9b8dfbebfc0bc0ca3bd5b1f1514c47521832df5f139ec7c85c03936eb0b822f5e4aea16b09201698f1abf5bfd8a81f3b85eefe3cacae6efdfc8c44627ce30e952f753b78e6181bf5f91a7778c983ff06177e6d43bd5ddc1323455bc8ae5d9baaa7d0d02df3a5d6e81fa1276c2baf4aceb477b0db497b365f8c962628546b93f5b30cdcf5c65863409791031a1efbc33477b3d441dd197418cbcb11cfb40b29db1a49119631ee9678f57018911e91c29bafaf883bcd97dcc36995ca1e4a4716d319dd5879cac557766838dc0628acaba68212135fde5e5822023d7bf1955b27f30c69caab1c3e2aa27e7259e334f8d28715fed7858b298e6ad9c50635d516648e35b35a95b9ce424d83b08c3d59c1342dc4a3f1a16a7b27f704f2f6939202fe8d4e818cf2387073eedc6891f3f2dce950de5706486ffa9d88b6349124e1a1dad9e6770cd17ca9536f61a00ec5db90330cdb0f55ee0d0ddff7c862892bac6962a93a17d41df36c683c2299daa6d16b31bd2419719860c5a7de848bd787eee2750c2d9ab054b9dac221803cba2f88eeee7b4686323ca30fc252ea1d01002c13eaebf9d2b3cb7d10f6e092e20538585571f007b9987650385e2120ad9a64fac6110070580857fd05a4cb5d986f6295aafce888f26fb54856c50789cbdef1aaeb108ec42dc2ceed61546a5fe27c6c7342bfb9b355145fd349f9ca1aa358a22546345d2cdc15ee1a4e97cfffc8c154392bab6fc6764b52efdb7bf61fd874578b50b7cba0fe91ea08100557f3f4a0e13d37039b2d303f258e1cccf713d7c1a14d2a7aae495917431498b377c36ebe7bcbf946ceb3aec470974428e9f7cfd4dc91ce0ede9ac6eb51e9cdd80bcd7a63ea77f3bb7adc0966e7accb34c43fc6089b5ef451266bd5747ab8775ea97a7a3ba03ffe2e0aeb2bc76cf328d8cebdc49f270287741de071ff1854cf05bb6d5185da941b1a026a5716711949242a35eeaaa385f3f019c0d7d78c1c37106dc25819c6144594d578313341c32365316183c0b3de29a0bff555f8261dbba75c989ce5fdfd7e2f9842987fafe8618a103561a22077ad1dc9f2c4fb464e79c2ef4a23346743e7d1e40cb517e375f7120165b9d70bab4ffeb53d1ee016283751e42efbeead04370749edc44e7048503217956ff6363c653a1004f7db4b53b8cf4b796dcaf6aa1fa1809d20dea27ca3038d3cc9a4838220778c821e447e3ed991ac9a740d3e9dd5fbd3729c7855dd01c4dd0ec40df5ed6670f9fc690b9f6820ba012cd1b9fb6848553f7d721dd475560014de1b9f2d520ac81471f7fd441656884a6ebc8a7ac745944f1d365ffc2624b6ce2df68d3233f6b4541a3e7519dd817556c400958c1eb7a1242342603841c40594f9a9dff8a89941c2603885fd2c9554e56e1bb349a2bc94e73627929b35e00e8179a9ad0201d85a297b0663ecb0df421d023a9a0a85e9ad25838b4b4b7e9c9af39cd4983f3d54e8524c151d04e91ac27f99d51c6cb6983877a7acd4286ced4edbb00ded999814c5db67b0833bd19cba91fa11cc6978ec1eed651957be955d72d9fec21fe04cee7cde6cb30ef8e11462f3560e1dddaf2d903df2dd612459badfa1751ecb889f5591acc204767065e269b8c1afa54b3ce101ae3a2b8e99bc3527cde8fe730725d2e6ae8894b5327d28cdc3838c876b2698d98bb3366884883f40700a43992c38c6142f16088849c9fe30743881d0f525ef71906d712621e50245a51cccabe4807fde1cf9a7cd28bfa06d701f254a1fe6d6943cee27958916055402ba0d42b5d116ca8569254fe76a3bab7be2ff84412d2bdac48091777d25e4f9880bbcde1ffe76036e0d6b0767729efa6d4ba69aac74d23a60837f66d0385e4c23f36a98fa8657482dddafd2e1e40449d778a5fbeb17b7bd0873e7506b9d5bbceff39c32341696b601b2506f9638584cbd0d333953c81ed2899384a674e00315c8ad2d09b91dadd2cd5cd2e3896babaf0ead63bbcfbfa6af8f611084ced0a7fa0f18b7d5e1a0670106961576e2427b80913ba3f52d16d76383cf673731d580b60a8d2810099b9e156baa07a4975e19dbeae4078236f224a996bb9e5e555b8ecb3f484687be6ba6e96e0969109e429f137286d6c8042cd5af5b8f178c328ecfb53b8bbe529c2abeeb0624db6babef9e4fc2cf44780a0b6565e7bbc921660c10f9c9627031b837e17ff4f2f5ab54feab3bbd989138ecd79faa36b06d93592b7823e4072b9f4335c6949a99196c93659d33aa4fa6a43ba72b4e8e55604b08d1e295b38125b80db371d1280ed7c4014adf78bf2a9d96c82db3bc498cfdabde22d34bd991956276b8b0711e9ea0999f8fb272bfadc989b05156158a6a210b4076aa875f0c8afd43e47572073ff44c565b9b39e410e5215eddbf54662fedd40c3fc5557f634b94321b93b5d046ce60284638740c08aaf5cf272bdc18391b3c0e423dcb50f9bf90118c93c16bab321ec437b5379ceefd81c4af7d45239987f2ccc36a6cfc70f9ddede7137437f0444a096b5c9348b813197934f44aae4c8d6ff3db201e5a065870a0d01f847be04402eb544c95325b43756797a971ed76191780674450588a3485b95cb5bc93de7d96530988f84319513b7619d9f372c23ea28298c99ffda7926c854271a0b7a3a547a5347d6e88b30566d5399e3661b98644e9e64457746bf8bd853e3121b9a494651e7d2d3097702c31e748e321049e0580c1edcbe6761a36b41017a983e32a4d12ef54b081f0050866050ba17de5fe806fd9b2188b3d80532937f593b106c68f840c647c8252a29c9f6c50ee1d5954ed33503b6c0121291254136d09f928eb1ca4a7a9e13c68b4b58f4fb82c13227c2ff0ef7c31b45054b4df322ba083eb39006a454853fb98a07626f4c55aa743af27761f8a11672060d81cb5075a5fe4b5f124be1db70b0261988f62d579a6400a3ea96e7a2f7bdd78e301e10e81177b4686a75a2f8ac6d72f4238b29f0c113bbb6ab01522beb483f16bfd562504d0185e2dda9220e88c6f422fac67eab8596c70d50b53c63e46d108e4cdaeb6b983295764eb43952201f015a4e58524d867d22747ed8096a11147b30f6f77aded7dba2e0a98f66f2176261cce626b3b6627d9437545f4c1fa641325bd062976ecc98cbdb291aab92ac7a5db171b56ebb1dd4e04626db6dfb04613e81513481cc20cbc09ee7cc302ae2baefab2d2b56982846359e66d1b52214038f3b1f973c53a335326c8865c8ab615d5357613bce17016a3d90d0caa0a9dc36ee434b832887b3afe020f5fcc580e2d7fcb66a743d0e362990ff1ff76fbd90804b1f1aa1c0696e551722902e113b1bc6adb0aa7a15e53a4a10349537ac48c7747d10d202fd61344017ff5641b61b5f77c971ad5225a6fb31ca5be21b5b23f4282c7b2c08c877f3439a083c06f906b6092147e4c5548389709426ef55297e57a8c24ab6e424ad17c465fcd9ae7199ee43aa8fe858941a1503ff8c08d31b00f1f2dc88943b4dcec1ddb8e9b2a7a62308317188c824fc7bd4e831302ac77ef10af33ae88ac59880d7b71d26980dad41047c63029fc5c3b3dc69ab18ab05a9ee91445d5aec2fa5eed75bea07cc5b1cbd421453169b6f515332021d38692386505e396286ebe0940a286dd335d1961168ce0760b83a10910a5c48feb355f8b28592f46822f7a044dda1c5da5a49999682841ccba4141624829c9617163087f12d802011faa3cc351d23edda17d9e9bceb02527bdf801f58a7d56e328e614fe2cd8d66854a3dfec7cba54690dca7c3f6ccd31a42b4725a6063dbf4e7859e23a8f1c48e975166f5ae66fb3ed9ff9c914dd5ebca9ce6d5dfd5e5c1d27b10fe2bda5ce12e5969654ba9e21b9be6dd352ae1a3c6e614d64f13e6d26489ea089eef0b8a9018bfbd62b48f95ad695e80e563199e100b4d8841dd131ffefa2b9bffa177bf5680ad5af91aa39a8f7f4a55a811f7c050f3114481a0e5086c6b923e66197bc3fe746f247833de1eecfede475315b633cbbcebd43b5a9bb1de08b3f9103e9216ca0d89b1edbbddb1d51de7e6808522954081a0964d4e386c23d763402cfebcaa861457eb3b5069c8b7ce029f7cf832528bd478733672e43688617eabe179929921f096c662a8a60b57b58e288a26cfc5a4891cefbf7a0cfdf53545b0d31681874d1e3a5c5633c3ceb8f21677b3b05ec4b7713e41cc7bdbe8b00b726e3648d9154968da6fe8d2400925d8d2d251b5463ad4ab9f07bb8bf2a414e6f6c9f8914ed5ccf26241de178ad916ff91270f97f5c194b160a483b738190542904ed50ee17147d256036d668b2ae463f6054a703a6502001095b38e34b99e8e0b5228c311e9b32d7ca67fce6fa7e6255545e60d3c83f470fd384974afb2071e2e080ed206c02705a47599d4db7369fc2e4b06be7f96922d0f2976b06fba1b813592eb2973b4d99ddc8dc5f33d0fc70ddf309c48bcffbfda2af35b8da49ccbd5076cc20349918cee5b6353ca7c0ca35b974f42f2e261a081a9d0d7f4b303545569e3203dac61b90cac148f0358aec3cf908f496a9906a319c24e737ab56064cf0946ffa4dedfe4c96ce20e0199ffd68b234b57f334dc67c5485a8e417a1677586634213482d4a059f6dd06835797eba5c29e8cef5e21f00ea7d59b3e7b65cdfd842f4ab889ba502b02c69a321d3357de412cdf22e4cd3be3b82be3424b4cfd5f73f43124cd1c945c6975e05c705054856c417d0a67d8d0c803cbb965a1d430d02df334f198cc9cb42e5fedd8095d1c669e146b287117cc748de653adf3d96d94972ded7e7ed5173f8809431a4bff3965d6dea4e3e9c4a8ebe15d2eabfcaa7b5a4c464a170cba732ffea32739ab919aa91c5a817836144d77c296beef7c5b", 0xfd0}, {&(0x7f0000000580)="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", 0x180}, {&(0x7f0000002b40)="cbe033ca3209e1e3433fb8d3c2f83c8b2ab32c7efc59b21725f20f9facb473224d99b8e92278fa4cded7d73d639ae29e28e481d627d43b9778d3ea8e45b8ffa1b5cd9df12491612c9d52e2cfd1a03253879b002b71684717d6ebb3afc8b12b2c88395d19f2ed5c6a9962e55743a35b660e6b", 0x72}, {&(0x7f0000002c40)}, {&(0x7f0000000400)="2f15c90119bbbb2cefd972e769a7d3273dbe463bc66e08fed4479067db8ff7fe629c7e2874162f4b05c84a7d5e44f451aabc4472697d29a5371d7f8f9fe9cbde2dfbad7011052d9201f02b90d1eb71551093c6500669ff0398133a584d4dcd3550eaef444c8088094fa5687601", 0x6d}, {&(0x7f0000000340)="0cac4265", 0x4}], 0x7, 0xe43, 0x2, 0x1)

2.194651967s ago: executing program 2 (id=139):
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404)
r1 = epoll_create1(0x0)
syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9, 0x8, 0x2, 0x11f}, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r5 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x2, 0x40024e}, &(0x7f0000000340)=<r6=>0x0, &(0x7f0000000040))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x8, 0x4004, @fd=r4, 0x10, 0x0, 0x0, 0x18, 0x1, {0x2, r7}})
r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000003c0)={{0x1, 0x1, 0x18, <r9=>r1, {0x5}}, './file0\x00'})
ioctl$COMEDI_DEVCONFIG(r9, 0x40946400, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r10 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r10, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f00000000c0)={'pcl818\x00', [0x4f27, 0x5, 0x2, 0x3ff, 0x1, 0xcc7, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x8002, 0x1, 0x1, 0x6115, 0x9, 0xe1cb, 0x0, 0x40, 0xb, 0x40000001, 0x89, 0xfffffffd, 0x0, 0x20001e56, 0xb, 0xe69, 0x3c, 0x2, 0x106, 0x8000000, 0xdffffff8]})
io_uring_enter(r5, 0x627, 0x4c1, 0x43, 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x80044940, &(0x7f0000000880))
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1})
r11 = syz_open_dev$vbi(&(0x7f0000000180), 0x1, 0x2)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002e00010000000000fbdbdf250401f2800c00180008ac0f00000000001400010000000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e88234ac26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d7"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r11, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}})
ioctl$VIDIOC_QBUF(r11, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4e, 0x0, 0x0, {}, {0x1, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800})
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x94, &(0x7f0000000400)=0xfffffffc, 0x0, 0x4)

1.856110919s ago: executing program 4 (id=140):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x4091, 0x4)
connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
getpid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mkdir(&(0x7f0000000040)='./file0\x00', 0x1be)
chdir(&(0x7f00000003c0)='./bus\x00')
r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r5, &(0x7f0000001fc0)=""/184, 0x20002078)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000001000080004000006000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x4000084}, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000240))
sendto(r1, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0)
sendmmsg$inet6(r0, &(0x7f0000007380)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001440)=[{0x0}, {0x0}], 0x2}}], 0x2, 0x4001c00)

698.076856ms ago: executing program 3 (id=141):
r0 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000000)={'ip6gre0\x00', <r1=>0x0, 0x4, 0x6, 0x81, 0x80000000, 0x47, @ipv4={'\x00', '\xff\xff', @local}, @loopback, 0x700, 0x8, 0x3, 0x1}})
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_emit_ethernet(0xbe, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket(0x15, 0x2, 0x80000000)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x5, 0x20, 0x8, 0x1}, &(0x7f0000000280)=0x18)
getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0)
rseq(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0)
pipe(&(0x7f0000000500)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f00000005c0)='fd', 0x0, r6)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
r8 = fsmount(r7, 0x0, 0x2)
symlinkat(&(0x7f0000000440)='./file0\x00', r8, &(0x7f00000000c0)='./file0\x00')
sync()
sendfile(r5, r4, &(0x7f00000000c0)=0x8b, 0x100000500)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x44080)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r1, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x0, 0x8, 0x2, 0x8}})
io_setup(0xea, &(0x7f00000000c0))

0s ago: executing program 1 (id=142):
unshare(0x2000000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3, 0x0, 0x1e0000}, 0x18)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x36, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000b, 0x59033, 0xffffffffffffffff, 0x0)
r4 = userfaultfd(0x801)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000582000/0x2000)=nil, 0x800000})
r5 = socket$kcm(0x10, 0x100000000002, 0x4)
sendmsg$kcm(r5, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000100000883795c04a31ba377a1b2cc32b38d37400"/57, 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0)
getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000080), &(0x7f00000000c0)=0x8)
prlimit64(0x0, 0xe, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
unshare(0x24000000)
fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, &(0x7f0000000140)=0x1)
r7 = gettid()
rt_sigqueueinfo(r7, 0x21, &(0x7f00000000c0)={0x10, 0x8, 0x200})

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.130' (ED25519) to the list of known hosts.
[   57.092702][ T4255] cgroup: Unknown subsys name 'net'
[   57.250069][ T4255] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.470146][ T4255] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k FS
[   59.777054][ T4275] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   59.787079][ T4281] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   59.789201][ T4280] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   59.797016][ T4281] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   59.803213][ T4280] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   59.810329][ T4281] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   59.817390][ T4280] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   59.824950][ T4281] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   59.832205][ T4280] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   59.839014][ T4281] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   59.846426][ T4280] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   59.861045][ T4280] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   59.861318][ T4281] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   59.869780][ T4280] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   59.876029][ T4281] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   59.883584][ T4280] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   59.891067][ T4281] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   59.897415][ T4280] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   59.905035][ T4281] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   59.911518][ T4280] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   59.919990][ T4282] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   59.925184][ T4280] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   59.932346][ T4282] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   59.939308][ T4280] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   59.945823][ T4282] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   59.953464][ T4280] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   59.960847][ T4282] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   59.967100][ T4280] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   60.010200][   T48] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   60.030979][ T4275] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   60.426071][ T4267] chnl_net:caif_netlink_parms(): no params data found
[   60.461772][ T4274] chnl_net:caif_netlink_parms(): no params data found
[   60.567315][ T4267] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.574457][ T4267] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.583886][ T4267] device bridge_slave_0 entered promiscuous mode
[   60.596544][ T4265] chnl_net:caif_netlink_parms(): no params data found
[   60.617871][ T4266] chnl_net:caif_netlink_parms(): no params data found
[   60.627413][ T4267] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.634551][ T4267] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.642855][ T4267] device bridge_slave_1 entered promiscuous mode
[   60.669177][ T4276] chnl_net:caif_netlink_parms(): no params data found
[   60.726774][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.734284][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.742921][ T4274] device bridge_slave_0 entered promiscuous mode
[   60.751915][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.759204][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.767262][ T4274] device bridge_slave_1 entered promiscuous mode
[   60.786193][ T4267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.821277][ T4267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.865329][ T4265] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.872498][ T4265] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.880301][ T4265] device bridge_slave_0 entered promiscuous mode
[   60.889137][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.910045][ T4267] team0: Port device team_slave_0 added
[   60.916356][ T4265] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.923490][ T4265] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.931617][ T4265] device bridge_slave_1 entered promiscuous mode
[   60.940051][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.966869][ T4266] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.974002][ T4266] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.981976][ T4266] device bridge_slave_0 entered promiscuous mode
[   60.991357][ T4267] team0: Port device team_slave_1 added
[   61.026010][ T4266] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.033146][ T4266] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.041142][ T4266] device bridge_slave_1 entered promiscuous mode
[   61.073441][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.080741][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.088809][ T4276] device bridge_slave_0 entered promiscuous mode
[   61.104376][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.111620][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.138399][ T4267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.151722][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.158772][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.185220][ T4267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.198068][ T4265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.211057][ T4265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.224168][ T4274] team0: Port device team_slave_0 added
[   61.232172][ T4274] team0: Port device team_slave_1 added
[   61.238211][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.245620][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.253465][ T4276] device bridge_slave_1 entered promiscuous mode
[   61.300785][ T4266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.312788][ T4266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.353343][ T4265] team0: Port device team_slave_0 added
[   61.359926][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.367136][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.393091][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.405880][ T4276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.433358][ T4265] team0: Port device team_slave_1 added
[   61.440534][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.447711][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.476365][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.489219][ T4276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.510653][ T4266] team0: Port device team_slave_0 added
[   61.544987][ T4267] device hsr_slave_0 entered promiscuous mode
[   61.551697][ T4267] device hsr_slave_1 entered promiscuous mode
[   61.560083][ T4266] team0: Port device team_slave_1 added
[   61.589060][ T4276] team0: Port device team_slave_0 added
[   61.606709][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.613709][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.639994][ T4265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.652836][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.660024][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.687044][ T4265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.700101][ T4274] device hsr_slave_0 entered promiscuous mode
[   61.707365][ T4274] device hsr_slave_1 entered promiscuous mode
[   61.714164][ T4274] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   61.722720][ T4274] Cannot create hsr debugfs directory
[   61.730008][ T4276] team0: Port device team_slave_1 added
[   61.778271][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.785548][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.811646][ T4266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.843786][ T4265] device hsr_slave_0 entered promiscuous mode
[   61.850680][ T4265] device hsr_slave_1 entered promiscuous mode
[   61.858012][ T4265] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   61.865787][ T4265] Cannot create hsr debugfs directory
[   61.871858][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.879082][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.905508][ T4276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.921081][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.928344][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.954737][ T4276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.967697][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.975251][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.002083][ T4266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.055442][ T4280] Bluetooth: hci2: command 0x0409 tx timeout
[   62.055450][ T4272] Bluetooth: hci3: command 0x0409 tx timeout
[   62.055652][ T4272] Bluetooth: hci4: command 0x0409 tx timeout
[   62.061829][ T4280] Bluetooth: hci0: command 0x0409 tx timeout
[   62.068074][ T4272] Bluetooth: hci1: command 0x0409 tx timeout
[   62.153105][ T4266] device hsr_slave_0 entered promiscuous mode
[   62.160232][ T4266] device hsr_slave_1 entered promiscuous mode
[   62.167074][ T4266] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   62.174705][ T4266] Cannot create hsr debugfs directory
[   62.189623][ T4276] device hsr_slave_0 entered promiscuous mode
[   62.196513][ T4276] device hsr_slave_1 entered promiscuous mode
[   62.203024][ T4276] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   62.210769][ T4276] Cannot create hsr debugfs directory
[   62.438917][ T4267] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   62.457949][ T4267] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   62.471678][ T4267] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   62.487202][ T4267] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   62.516671][ T4274] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   62.530824][ T4274] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   62.557261][ T4274] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   62.571487][ T4274] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   62.616817][ T4265] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   62.645390][ T4265] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   62.668815][ T4265] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   62.692352][ T4265] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   62.739216][ T4276] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   62.779794][ T4276] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   62.790022][ T4276] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   62.814952][ T4267] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.825855][ T4276] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   62.851399][ T4266] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   62.868849][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.881582][ T4266] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   62.903897][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   62.914018][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   62.924306][ T4266] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   62.938996][ T4266] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   62.966417][ T4274] 8021q: adding VLAN 0 to HW filter on device team0
[   62.977183][ T4267] 8021q: adding VLAN 0 to HW filter on device team0
[   62.991396][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   62.999793][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   63.008290][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   63.018283][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   63.027916][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.035616][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.071418][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   63.083433][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   63.092871][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   63.103613][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.110793][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.119293][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   63.128859][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   63.137656][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.144887][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.152578][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   63.161662][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   63.171741][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.179018][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.187203][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   63.201154][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   63.245340][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   63.254514][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   63.264380][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   63.277495][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   63.286901][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   63.296869][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   63.306729][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   63.316012][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   63.325085][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   63.334357][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   63.343221][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   63.351825][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   63.360257][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   63.369254][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   63.377416][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   63.403609][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.413814][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   63.424533][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   63.455128][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   63.464182][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   63.474035][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   63.490492][ T4266] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.504879][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   63.513711][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   63.523061][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   63.532629][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   63.552689][ T4276] 8021q: adding VLAN 0 to HW filter on device team0
[   63.560786][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   63.583014][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   63.597091][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   63.615923][ T4266] 8021q: adding VLAN 0 to HW filter on device team0
[   63.627562][ T4265] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.641153][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   63.666080][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   63.675674][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.682890][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.730156][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   63.743683][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   63.757272][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   63.767766][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.774953][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.783823][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   63.801957][ T4265] 8021q: adding VLAN 0 to HW filter on device team0
[   63.818953][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   63.827962][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   63.838226][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   63.848387][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   63.858211][   T33] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.865355][   T33] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.873482][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   63.883605][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   63.892768][   T33] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.900146][   T33] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.933541][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   63.959184][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   63.974349][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   63.990190][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   64.000407][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   64.009994][   T33] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.017206][   T33] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.027698][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   64.037336][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   64.047206][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   64.056770][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   64.087099][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   64.096550][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   64.110501][   T33] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.117859][   T33] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.127307][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   64.135536][ T4272] Bluetooth: hci0: command 0x041b tx timeout
[   64.135576][ T4272] Bluetooth: hci4: command 0x041b tx timeout
[   64.135601][ T4272] Bluetooth: hci2: command 0x041b tx timeout
[   64.135644][ T4272] Bluetooth: hci3: command 0x041b tx timeout
[   64.135670][ T4272] Bluetooth: hci1: command 0x041b tx timeout
[   64.167789][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   64.176625][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   64.186859][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   64.195634][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   64.204281][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   64.213425][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   64.242723][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   64.251403][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   64.259968][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   64.268231][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   64.277439][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   64.286168][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   64.294525][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   64.303896][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   64.315406][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   64.324623][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   64.333868][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   64.342944][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   64.357764][ T4276] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   64.369405][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   64.399394][ T4266] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   64.410832][ T4266] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   64.423949][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   64.434239][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   64.442653][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   64.451578][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   64.461225][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   64.468972][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   64.476677][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   64.487023][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   64.497481][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   64.506342][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   64.515077][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   64.526271][ T4267] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.543809][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.560027][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   64.570680][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   64.597514][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   64.700109][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   64.711705][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   64.771230][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   64.782948][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   64.809364][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   64.838630][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   64.867768][ T4267] device veth0_vlan entered promiscuous mode
[   64.899777][ T4267] device veth1_vlan entered promiscuous mode
[   64.970375][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   65.001256][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   65.011193][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   65.055628][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   65.082928][ T4267] device veth0_macvtap entered promiscuous mode
[   65.129374][ T4267] device veth1_macvtap entered promiscuous mode
[   65.190521][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.211583][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   65.220206][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   65.234060][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   65.243169][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   65.267287][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.284118][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.294251][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   65.302912][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   65.310849][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   65.320222][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   65.329408][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   65.337752][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   65.359437][ T4267] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.373104][ T4267] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.391019][ T4267] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.401389][ T4267] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.440990][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   65.449771][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   65.464261][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.480447][ T4265] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.496841][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   65.518024][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   65.573763][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   65.583018][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   65.591844][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   65.601178][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   65.609997][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   65.618338][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   65.627968][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   65.638456][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   65.649339][ T4266] device veth0_vlan entered promiscuous mode
[   65.691811][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   65.701115][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   65.757382][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   65.768861][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   65.779542][ T4276] device veth0_vlan entered promiscuous mode
[   65.790564][ T4274] device veth0_vlan entered promiscuous mode
[   65.806536][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   65.810920][ T4360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.815405][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   65.827376][ T4360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.830766][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   65.847053][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   65.856440][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   65.864858][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   65.873146][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   65.886911][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   65.895418][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   65.903817][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   65.912306][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   65.922177][ T4266] device veth1_vlan entered promiscuous mode
[   65.931183][ T4265] device veth0_vlan entered promiscuous mode
[   65.947834][ T4274] device veth1_vlan entered promiscuous mode
[   65.957046][ T4276] device veth1_vlan entered promiscuous mode
[   65.992954][ T4265] device veth1_vlan entered promiscuous mode
[   66.018339][   T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.029059][   T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.047231][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   66.055668][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   66.063688][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   66.072248][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   66.081221][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   66.090087][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   66.099326][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   66.108107][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   66.116829][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   66.125053][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   66.133517][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   66.145360][ T4266] device veth0_macvtap entered promiscuous mode
[   66.156519][ T4266] device veth1_macvtap entered promiscuous mode
[   66.168767][ T4274] device veth0_macvtap entered promiscuous mode
[   66.180603][ T4274] device veth1_macvtap entered promiscuous mode
[   66.210325][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   66.218648][ T4275] Bluetooth: hci1: command 0x040f tx timeout
[   66.224898][ T4272] Bluetooth: hci3: command 0x040f tx timeout
[   66.225907][ T4280] Bluetooth: hci2: command 0x040f tx timeout
[   66.231326][ T4272] Bluetooth: hci4: command 0x040f tx timeout
[   66.237416][ T4277] Bluetooth: hci0: command 0x040f tx timeout
[   66.251066][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   66.260919][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   66.269717][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   66.278735][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   66.287919][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   66.297737][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   66.309746][ T4276] device veth0_macvtap entered promiscuous mode
[   66.326528][ T4265] device veth0_macvtap entered promiscuous mode
[   66.337558][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   66.351031][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   66.360127][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   66.369093][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   66.390800][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   66.409369][ T4276] device veth1_macvtap entered promiscuous mode
[   66.444365][ T4265] device veth1_macvtap entered promiscuous mode
[   66.453683][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.467873][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.491954][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.617476][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   66.626520][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   66.634433][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   66.643381][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   66.653718][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.664398][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.702598][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.870127][ T4384] loop3: detected capacity change from 0 to 128
[   67.006465][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.121714][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.272780][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.285041][ T4384] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   67.300110][ T4384] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   67.307502][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.364752][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.375600][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.386488][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.397214][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.412191][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.422711][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   67.432682][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   67.442142][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   67.450986][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   67.462285][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.472881][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.485624][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.495335][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.509984][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.524466][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.541089][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.553544][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.599704][ T4266] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.614540][ T4266] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.624038][ T4266] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.642028][ T4266] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.668151][ T4267] EXT4-fs (loop3): unmounting filesystem.
[   67.675990][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.687840][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.698900][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.758274][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.777996][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.792589][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.810794][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.831027][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.843706][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.858286][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.874197][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.888473][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.900637][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.915987][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.930025][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.947793][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.965104][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   67.974504][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   67.985308][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   67.993887][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   68.002981][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   68.012265][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   68.022296][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   68.031426][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   68.784332][ T4274] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.793431][ T4280] Bluetooth: hci4: command 0x0419 tx timeout
[   68.800556][ T4280] Bluetooth: hci3: command 0x0419 tx timeout
[   68.807764][ T4274] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.817201][ T4274] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.826224][ T4274] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.965122][ T4277] Bluetooth: hci0: command 0x0419 tx timeout
[   68.971185][ T4277] Bluetooth: hci2: command 0x0419 tx timeout
[   68.977630][ T4277] Bluetooth: hci1: command 0x0419 tx timeout
[   69.137499][ T4276] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.195792][ T4276] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.209257][ T4276] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.218411][ T4276] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.243218][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.253876][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.268699][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.279811][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.289905][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.334278][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.418587][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.430055][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.757928][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.774536][ T4265] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.787123][ T4265] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.796540][ T4265] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.805611][ T4265] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.830541][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   69.839710][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   69.859409][ T4402] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.870012][ T4402] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.884271][   T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.900231][   T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.910078][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   69.920877][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   70.025037][   T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.037567][ T4403] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.043045][   T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.060653][ T4403] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.089962][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   70.101452][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   70.163465][   T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.219819][   T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.257493][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   70.308537][ T4402] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.318801][ T4402] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.437065][ T4400] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.456683][ T4400] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.523645][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   70.583861][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   70.621903][ T4400] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.642602][ T4400] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.845496][ T4416] loop4: detected capacity change from 0 to 8192
[   71.239381][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   71.300575][ T4416] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   71.339582][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[   71.342183][ T4416] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[   71.346250][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[   71.400081][ T4416] REISERFS (device loop4): using ordered data mode
[   71.412958][ T4416] reiserfs: using flush barriers
[   71.416680][ T4413] delete_channel: no stack
[   71.426520][ T4416] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   71.471029][  T128] cfg80211: failed to load regulatory.db
[   71.480886][ T4416] REISERFS (device loop4): checking transaction log (loop4)
[   71.550471][ T4416] REISERFS (device loop4): Using r5 hash to sort names
[   71.579493][ T4416] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[   72.941436][ T4450] loop1: detected capacity change from 0 to 64
[   73.211885][ T4445] loop3: detected capacity change from 0 to 512
[   73.502690][ T4457] tipc: Started in network mode
[   73.503035][ T4457] tipc: Node identity 4, cluster identity 4711
[   73.503069][ T4457] tipc: Node number set to 4
[   73.981818][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   73.981864][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   73.981912][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   73.981959][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   73.982007][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   73.982053][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   73.982836][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   73.983008][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   73.983054][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   73.983101][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   75.666437][ T4451] block nbd0: shutting down sockets
[   75.703016][ T4440] tty tty29: ldisc open failed (-12), clearing slot 28
[   75.713785][ T4446] ttyS ttyS3: ldisc open failed (-12), clearing slot 3
[   75.722955][ T4448] ttyS ttyS3: ldisc open failed (-12), clearing slot 3
[   75.801335][ T3910] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   76.074972][ T3910] usb 3-1: device descriptor read/64, error -71
[   76.876349][ T4470] loop1: detected capacity change from 0 to 512
[   76.955375][ T4470] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   77.108766][ T4470] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   77.113259][ T4476] 9pnet_virtio: no channels available for device syz
[   77.280794][ T4478] overlayfs: failed to decode file handle (len=6, type=196859, flags=0, err=-22)
[   77.291562][ T4478] netlink: 40 bytes leftover after parsing attributes in process `syz.3.16'.
[   77.815516][ T4470] EXT4-fs (loop1): 1 truncate cleaned up
[   77.821969][ T4470] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   78.934951][ T4280] Bluetooth: hci4: command 0x0405 tx timeout
[   79.683070][ T4276] EXT4-fs (loop1): unmounting filesystem.
[   79.883110][ T4490] loop4: detected capacity change from 0 to 16
[   80.085964][ T4491] ptrace attach of "./syz-executor exec"[4492] was attempted by "./syz-executor exec"[4491]
[   80.766319][ T4490] erofs: (device loop4): mounted with root inode @ nid 36.
[   81.237405][ T4498] loop2: detected capacity change from 0 to 32768
[   81.258622][ T4502] autofs4:pid:4502:autofs_fill_super: called with bogus options
[   81.431349][ T4498] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.22 (4498)
[   81.545462][ T4498] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[   81.555965][ T4498] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[   81.565643][ T4498] BTRFS info (device loop2): enabling disk space caching
[   81.572731][ T4498] BTRFS info (device loop2): force clearing of disk cache
[   81.582656][ T4498] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[   81.592349][ T4498] BTRFS info (device loop2): use zstd compression, level 3
[   81.599690][ T4498] BTRFS info (device loop2): disk space caching is enabled
[   81.824229][ T4513] tipc: Can't bind to reserved service type 1
[   81.961600][ T4513] sp0: Synchronizing with TNC
[   83.108033][ T4529] tmpfs: Bad value for 'gid'
[   83.438283][ T4498] BTRFS info (device loop2): enabling ssd optimizations
[   83.449476][ T4498] BTRFS info (device loop2): rebuilding free space tree
[   83.475402][ T4498] BTRFS info (device loop2): disabling free space tree
[   83.482377][ T4498] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   83.492242][ T4498] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   83.899650][ T4280] Bluetooth: hci4: command 0x0405 tx timeout
[   84.205041][ T4535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24'.
[   85.719169][ T4544] loop1: detected capacity change from 0 to 64
[   86.235315][ T4543] Zero length message leads to an empty skb
[   86.512060][ T4266] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[   86.563014][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   86.571493][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   86.579451][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   87.701819][ T4553] vxcan1 speed is unknown, defaulting to 1000
[   87.727642][ T4553] vxcan1 speed is unknown, defaulting to 1000
[   87.744619][ T4553] vxcan1 speed is unknown, defaulting to 1000
[   88.001529][ T4553] infiniband syz2: set active
[   88.006588][ T4553] infiniband syz2: added vxcan1
[   88.014031][ T4553] rdma_rxe: unable to create cq
[   88.019473][ T4553] infiniband syz2: Couldn't create ib_mad CQ
[   88.025928][ T4553] infiniband syz2: Couldn't open port 1
[   88.045194][ T4325] vxcan1 speed is unknown, defaulting to 1000
[   88.060900][ T4553] RDS/IB: syz2: added
[   88.065515][ T4553] smc: adding ib device syz2 with port count 1
[   88.071993][ T4553] smc:    ib device syz2 port 1 has pnetid 
[   88.085024][ T4553] vxcan1 speed is unknown, defaulting to 1000
[   88.143057][ T4553] vxcan1 speed is unknown, defaulting to 1000
[   88.196831][ T4553] vxcan1 speed is unknown, defaulting to 1000
[   88.252852][ T4553] vxcan1 speed is unknown, defaulting to 1000
[   88.305756][ T4553] vxcan1 speed is unknown, defaulting to 1000
[   88.385928][  T125] vxcan1 speed is unknown, defaulting to 1000
[   88.687839][ T4462] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 12 /dev/loop2 scanned by udevd (4462)
[   88.711061][ T4562] loop4: detected capacity change from 0 to 1024
[   88.887042][ T4565] binder: 4564:4565 ioctl 4018620d 0 returned -22
[   89.332217][ T4571] hfsplus: found bad thread record in catalog
[   89.342761][ T4571] hfsplus: found bad thread record in catalog
[   89.822757][ T4569] hfsplus: xattr searching failed
[   89.832356][ T4570] hfsplus: xattr searching failed
[   89.904977][   T26] audit: type=1804 audit(1762225022.335:2): pid=4570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.32" name="/newroot/6/file0/bus" dev="loop4" ino=26 res=1 errno=0
[   90.032984][ T4400] hfsplus: b-tree write err: -5, ino 4
[   90.090935][   T26] audit: type=1800 audit(1762225022.345:3): pid=4570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.32" name="bus" dev="loop4" ino=26 res=0 errno=0
[   91.469692][ T4583] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   92.338444][ T4592] netlink: 68 bytes leftover after parsing attributes in process `syz.3.36'.
[   92.460910][ T4592] (syz.3.36,4592,0):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options
[   92.470699][ T4592] (syz.3.36,4592,0):ocfs2_fill_super:1176 ERROR: status = -22
[   93.147742][ T4596] rdma_rxe: rxe_register_device failed with error -23
[   93.157160][ T4596] rdma_rxe: failed to add vxcan1
[   94.633708][ T4605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.39'.
[   95.151879][ T4604] loop2: detected capacity change from 0 to 16
[   95.161843][ T4604] erofs: (device loop2): mounted with root inode @ nid 36.
[   95.546757][ T4277] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   95.556357][ T4275] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   95.564485][ T4277] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   95.573540][ T4277] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   95.585539][ T4277] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   95.594356][ T4275] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   96.681632][ T4606] vxcan1 speed is unknown, defaulting to 1000
[   96.798492][ T4619] loop3: detected capacity change from 0 to 128
[   96.861591][ T4619] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[   96.882741][ T4619] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  100.737490][ T4630] loop2: detected capacity change from 0 to 16
[  100.744934][ T4277] Bluetooth: hci1: command 0x0409 tx timeout
[  100.758948][ T4630] erofs: (device loop2): mounted with root inode @ nid 36.
[  101.514923][ T4402] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.486303][ T4277] Bluetooth: hci1: command 0x041b tx timeout
[  104.495238][ T4643] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  104.503689][ T4643] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  104.624812][ T4643] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  105.574735][ T4277] Bluetooth: hci1: command 0x040f tx timeout
[  105.924135][ T4402] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.967882][ T4659] vxcan1 speed is unknown, defaulting to 1000
[  106.356484][ T4606] chnl_net:caif_netlink_parms(): no params data found
[  106.763953][ T4554] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  106.934143][ T4672] sp0: Synchronizing with TNC
[  106.964827][ T4402] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.990035][ T4664] ptrace attach of "./syz-executor exec"[4671] was attempted by "./syz-executor exec"[4664]
[  107.010366][ T4554] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  107.025728][ T4673] syz.1.51 (4673) used greatest stack depth: 20680 bytes left
[  107.109834][ T4554] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  107.140481][ T4554] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  107.178505][ T4554] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.186869][ T4402] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.189143][ T4554] usb 4-1: Product: syz
[  107.199209][ T4683] loop1: detected capacity change from 0 to 256
[  107.215888][ T4554] usb 4-1: Manufacturer: syz
[  107.219377][ T4683] =======================================================
[  107.219377][ T4683] WARNING: The mand mount option has been deprecated and
[  107.219377][ T4683]          and is ignored by this kernel. Remove the mand
[  107.219377][ T4683]          option from the mount to silence this warning.
[  107.219377][ T4683] =======================================================
[  107.310353][ T4606] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.318327][ T4554] usb 4-1: SerialNumber: syz
[  107.324518][ T4606] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.337301][ T4554] usb 4-1: config 0 descriptor??
[  107.346093][ T4606] device bridge_slave_0 entered promiscuous mode
[  107.360717][ T4606] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.379316][ T4606] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.387923][ T4606] device bridge_slave_1 entered promiscuous mode
[  107.433039][ T4683] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf059ff26, utbl_chksum : 0xe619d30d)
[  107.475951][ T4606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  107.699573][   T22] usb 4-1: USB disconnect, device number 2
[  108.259939][ T4277] Bluetooth: hci1: command 0x0419 tx timeout
[  108.610046][ T4698] netlink: 4 bytes leftover after parsing attributes in process `syz.3.55'.
[  109.341671][ T4698] loop3: detected capacity change from 0 to 40427
[  109.569659][ T4698] F2FS-fs (loop3): Unrecognized mount option "4" or missing value
[  109.570012][ T4606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  110.137672][ T4708] loop4: detected capacity change from 0 to 16
[  110.457086][ T4708] erofs: (device loop4): mounted with root inode @ nid 36.
[  111.239894][ T4606] team0: Port device team_slave_0 added
[  111.282934][ T4714] loop3: detected capacity change from 0 to 64
[  111.384177][ T4606] team0: Port device team_slave_1 added
[  111.397920][ T4714] hfs: get root inode failed
[  111.444933][ T4462] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  112.365032][ T4721] loop2: detected capacity change from 0 to 2048
[  113.021960][ T4721] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  113.401863][ T4606] batman_adv: batadv0: Adding interface: batadv_slave_0
[  113.637016][ T4738] gfs2: not a GFS2 filesystem
[  113.668050][ T4738] binfmt_misc: register: failed to install interpreter file ./file0
[  113.993901][ T4606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  114.541435][ T4606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  114.565147][ T4606] batman_adv: batadv0: Adding interface: batadv_slave_1
[  114.572143][ T4606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  114.694776][ T4606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  116.937550][ T4772] binder: 4761:4772 ioctl c0306201 0 returned -14
[  117.899553][ T4777] loop2: detected capacity change from 0 to 128
[  117.946899][ T4606] device hsr_slave_0 entered promiscuous mode
[  117.968105][ T4606] device hsr_slave_1 entered promiscuous mode
[  118.034000][ T4606] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  118.093227][ T4777] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  118.102477][ T4606] Cannot create hsr debugfs directory
[  118.140287][ T4777] ext4 filesystem being mounted at /16/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  119.245753][  T125] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  119.271616][ T4789] vxcan1 speed is unknown, defaulting to 1000
[  119.398213][ T4776] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  119.457715][  T125] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  119.511728][  T125] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  119.520628][ T4776] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  119.543496][  T125] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  119.573640][  T125] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.612792][  T125] usb 2-1: Product: syz
[  119.635065][  T125] usb 2-1: Manufacturer: syz
[  119.639708][  T125] usb 2-1: SerialNumber: syz
[  119.654100][  T125] usb 2-1: config 0 descriptor??
[  119.954622][ T4793] loop3: detected capacity change from 0 to 40427
[  119.974130][ T4793] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  119.982637][ T4793] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  119.998686][ T4793] F2FS-fs (loop3): invalid crc value
[  120.065308][ T4793] F2FS-fs (loop3): Found nat_bits in checkpoint
[  120.109270][ T4793] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  120.116589][ T4793] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  121.027399][ T4811] loop4: detected capacity change from 0 to 256
[  121.728585][ T4325] usb 2-1: USB disconnect, device number 2
[  122.432352][   T26] audit: type=1800 audit(1762225054.925:4): pid=4812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.71" name="file2" dev="loop4" ino=1048597 res=0 errno=0
[  122.842749][    C1] vkms_vblank_simulate: vblank timer overrun
[  123.510404][ T4606] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  123.541474][ T4606] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  123.586493][ T4822] loop4: detected capacity change from 0 to 64
[  125.184668][ T4606] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  125.236516][ T4606] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  125.543111][   T26] audit: type=1326 audit(1762225058.035:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4833 comm="syz.4.76" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f11e3d8f6c9 code=0x0
[  125.635393][ T4402] device hsr_slave_0 left promiscuous mode
[  125.666998][ T4402] device hsr_slave_1 left promiscuous mode
[  125.675344][ T4402] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  125.682859][ T4402] batman_adv: batadv0: Removing interface: batadv_slave_0
[  125.933646][ T4402] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  126.067758][ T4852] autofs4:pid:4852:autofs_fill_super: called with bogus options
[  126.745173][ T4402] batman_adv: batadv0: Removing interface: batadv_slave_1
[  127.178569][ T4402] device bridge_slave_1 left promiscuous mode
[  127.186984][ T4402] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.322374][ T4402] device bridge_slave_0 left promiscuous mode
[  127.341962][ T4402] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.476882][ T4402] device veth1_macvtap left promiscuous mode
[  127.483541][ T4402] device veth0_macvtap left promiscuous mode
[  127.490322][ T4402] device veth1_vlan left promiscuous mode
[  127.502581][ T4402] device veth0_vlan left promiscuous mode
[  127.927069][ T4266] EXT4-fs (loop2): unmounting filesystem.
[  129.723083][ T4871] siw: device registration error -23
[  130.391842][ T4882] netlink: 40 bytes leftover after parsing attributes in process `syz.1.81'.
[  131.125051][ T4891] loop1: detected capacity change from 0 to 256
[  132.644193][ T4402] team0 (unregistering): Port device team_slave_1 removed
[  132.736605][ T4402] team0 (unregistering): Port device team_slave_0 removed
[  132.771974][   T26] audit: type=1326 audit(1762225065.265:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4895 comm="syz.1.84" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd4e8d8f6c9 code=0x0
[  132.806432][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[  132.813431][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[  132.820161][ T4402] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  132.890658][ T4402] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  132.960709][ T4899] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8)
[  132.967676][ T4899] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  133.013128][ T4899] vhci_hcd vhci_hcd.0: Device attached
[  133.336303][ T4557] usb 35-1: new high-speed USB device number 2 using vhci_hcd
[  133.891834][ T4900] vhci_hcd: connection reset by peer
[  133.903600][   T46] vhci_hcd: stop threads
[  133.911079][   T46] vhci_hcd: release socket
[  133.946561][   T46] vhci_hcd: disconnect device
[  134.570072][ T4402] bond0 (unregistering): Released all slaves
[  134.677890][ T4606] 8021q: adding VLAN 0 to HW filter on device bond0
[  134.726606][ T4606] 8021q: adding VLAN 0 to HW filter on device team0
[  134.748018][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  134.763400][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  134.934810][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  135.623133][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  135.677426][ T4360] bridge0: port 1(bridge_slave_0) entered blocking state
[  135.684698][ T4360] bridge0: port 1(bridge_slave_0) entered forwarding state
[  135.789751][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  135.810939][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  135.821991][ T4360] bridge0: port 2(bridge_slave_1) entered blocking state
[  135.829153][ T4360] bridge0: port 2(bridge_slave_1) entered forwarding state
[  135.845245][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  135.910114][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  136.070950][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  136.090732][ T4908] loop2: detected capacity change from 0 to 512
[  136.205833][   T26] audit: type=1326 audit(1762225068.705:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4913 comm="syz.1.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e8d8f6c9 code=0x7ffc0000
[  136.653528][ T4916] loop1: detected capacity change from 0 to 2048
[  137.309610][ T4916] hpfs: filesystem error: improperly stopped
[  137.309640][ T4908] FAT-fs (loop2): count of clusters too big (2147483660)
[  137.323217][ T4916] ; already mounted read-only
[  137.328291][ T4916] hpfs: filesystem error: sector(s) 'dir_band' badly placed at 7b318cc2
[  137.340313][ T4908] FAT-fs (loop2): Can't find a valid FAT filesystem
[  137.705101][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  137.817653][   T26] audit: type=1326 audit(1762225068.735:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4913 comm="syz.1.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7fd4e8d8f6c9 code=0x7ffc0000
[  138.187561][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  138.291376][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  138.454749][ T4557] vhci_hcd: vhci_device speed not set
[  138.496299][   T26] audit: type=1326 audit(1762225068.735:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4913 comm="syz.1.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e8d8f6c9 code=0x7ffc0000
[  139.810473][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  139.993127][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  140.045974][   T26] audit: type=1326 audit(1762225068.735:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4913 comm="syz.1.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd4e8d915e7 code=0x7ffc0000
[  140.145959][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  140.269077][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  140.347957][   T26] audit: type=1326 audit(1762225068.735:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4913 comm="syz.1.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e8d8f6c9 code=0x7ffc0000
[  140.386363][ T4277] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  140.395922][ T4277] Bluetooth: hci4: Injecting HCI hardware error event
[  140.406105][ T4280] Bluetooth: hci4: hardware error 0x00
[  140.456037][ T4606] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  140.510802][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  140.626075][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  140.631400][   T26] audit: type=1326 audit(1762225068.735:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4913 comm="syz.1.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fd4e8d8f6c9 code=0x7ffc0000
[  140.665477][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  140.818344][   T26] audit: type=1326 audit(1762225068.735:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4913 comm="syz.1.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e8d8f6c9 code=0x7ffc0000
[  140.876326][ T4927] netlink: 'syz.1.90': attribute type 3 has an invalid length.
[  140.924742][   T26] audit: type=1326 audit(1762225068.735:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4913 comm="syz.1.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd4e8d8f6c9 code=0x7ffc0000
[  141.869154][   T26] audit: type=1326 audit(1762225068.735:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4913 comm="syz.1.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e8d8f6c9 code=0x7ffc0000
[  141.869292][ T4924] netlink: 160 bytes leftover after parsing attributes in process `syz.1.90'.
[  142.037328][ T4924] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  142.085509][   T26] audit: type=1326 audit(1762225068.735:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4913 comm="syz.1.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e8d8f6c9 code=0x7ffc0000
[  142.114407][ T4924] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  142.639540][ T4280] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  143.024796][   T26] audit: type=1326 audit(1762225068.735:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4913 comm="syz.1.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fd4e8d8f6c9 code=0x7ffc0000
[  143.052348][ T4924] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  143.055626][ T4949] loop3: detected capacity change from 0 to 16
[  143.097995][ T4946] IPv6: Can't replace route, no match found
[  143.128026][ T4949] erofs: (device loop3): mounted with root inode @ nid 36.
[  143.215589][ T4606] 8021q: adding VLAN 0 to HW filter on device batadv0
[  143.222710][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  143.258860][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  143.432188][   T26] audit: type=1326 audit(1762225068.735:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4913 comm="syz.1.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e8d8f6c9 code=0x7ffc0000
[  144.346130][   T26] audit: type=1326 audit(1762225068.735:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4913 comm="syz.1.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e8d8f6c9 code=0x7ffc0000
[  144.405408][   T26] audit: type=1326 audit(1762225068.735:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4913 comm="syz.1.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd4e8d8f6c9 code=0x7ffc0000
[  144.427982][    C1] vkms_vblank_simulate: vblank timer overrun
[  144.896842][   T26] audit: type=1326 audit(1762225068.735:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4913 comm="syz.1.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e8d8f6c9 code=0x7ffc0000
[  144.924158][   T26] audit: type=1326 audit(1762225068.735:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4913 comm="syz.1.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e8d8f6c9 code=0x7ffc0000
[  144.948492][   T26] audit: type=1326 audit(1762225068.755:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4913 comm="syz.1.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd4e8d8df10 code=0x7ffc0000
[  145.302706][ T4977] netlink: 348 bytes leftover after parsing attributes in process `syz.1.96'.
[  145.314927][ T4977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.96'.
[  146.026687][ T4982] loop3: detected capacity change from 0 to 512
[  146.368149][   T26] audit: type=1326 audit(1762225068.755:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4913 comm="syz.1.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e8d8f6c9 code=0x7ffc0000
[  146.391160][   T26] audit: type=1326 audit(1762225068.755:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4913 comm="syz.1.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e8d8f6c9 code=0x7ffc0000
[  146.424019][   T26] audit: type=1326 audit(1762225068.755:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4913 comm="syz.1.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd4e8d8f6c9 code=0x7ffc0000
[  146.446113][    C1] vkms_vblank_simulate: vblank timer overrun
[  146.681056][ T4982] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  146.690413][ T4982] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  146.802985][ T4988] loop1: detected capacity change from 0 to 1024
[  147.097387][ T4267] EXT4-fs (loop3): unmounting filesystem.
[  147.965114][ T4998] netlink: 4 bytes leftover after parsing attributes in process `syz.2.100'.
[  148.371447][ T5003] loop1: detected capacity change from 0 to 1024
[  148.429191][ T4462] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  148.568866][ T5005] loop3: detected capacity change from 0 to 4096
[  148.595519][ T5005] EXT4-fs: Ignoring removed mblk_io_submit option
[  149.486112][ T5014] capability: warning: `syz.1.103' uses deprecated v2 capabilities in a way that may be insecure
[  150.942345][ T5033] Bluetooth: MGMT ver 1.22
[  150.942567][ T5032] loop2: detected capacity change from 0 to 128
[  151.032554][ T5027] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  151.039115][ T5027] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  151.053460][ T5027] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  151.062212][ T5027] Bluetooth: hci0: Suspend notifier action (1) failed: -4
[  151.071120][ T5027] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  151.077193][ T5027] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  151.096933][ T5027] Bluetooth: hci2: Suspend notifier action (1) failed: -4
[  151.103709][ T5032] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  151.105467][ T5027] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  151.118614][ T5027] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  151.152412][ T5005] EXT4-fs (loop3): Test dummy encryption mode enabled
[  151.167242][ T5005] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  151.236436][ T5039] loop1: detected capacity change from 0 to 2048
[  151.243858][ T5039] UDF-fs: bad mount option "lastblock=0000004­½OÌü‹0000L000000005" or missing value
[  151.245436][ T5032] ext4 filesystem being mounted at /24/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  151.304001][ T5027] Bluetooth: hci3: Suspend notifier action (1) failed: -4
[  151.311458][ T5027] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  151.317487][ T5027] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  151.362198][ T5027] Bluetooth: hci1: Suspend notifier action (1) failed: -4
[  151.401118][ T4257] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  152.349754][ T4267] EXT4-fs (loop3): unmounting filesystem.
[  152.450187][   T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  153.014741][ T4277] Bluetooth: hci0: command 0x0c1a tx timeout
[  153.022405][ T4280] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  153.094713][ T4277] Bluetooth: hci2: command 0x0c1a tx timeout
[  153.106684][ T4266] EXT4-fs (loop2): unmounting filesystem.
[  153.131919][ T5056] loop3: detected capacity change from 0 to 64
[  153.139961][ T4277] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  153.151598][ T4277] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  153.171034][ T4277] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  153.178111][ T4275] Bluetooth: hci3: command 0x0c1a tx timeout
[  153.195884][ T4277] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  153.207413][ T4277] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  153.214980][ T4277] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  153.256982][ T5056] MINIX-fs: mounting unchecked file system, running fsck is recommended
[  154.530806][ T5047] vxcan1 speed is unknown, defaulting to 1000
[  154.612467][ T5072] loop2: detected capacity change from 0 to 128
[  155.249650][ T4277] Bluetooth: hci0: command 0x0406 tx timeout
[  155.251534][ T4280] Bluetooth: hci2: command 0x0406 tx timeout
[  155.259905][ T4272] Bluetooth: hci5: command 0x0409 tx timeout
[  155.268105][ T4277] Bluetooth: hci3: command 0x0406 tx timeout
[  155.796390][ T5056] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  157.363569][ T4280] Bluetooth: hci5: command 0x041b tx timeout
[  157.369669][ T4280] Bluetooth: hci0: command 0x0c1a tx timeout
[  158.375727][ T4831] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  159.484695][ T4277] Bluetooth: hci0: command 0x0c1a tx timeout
[  159.492820][ T4277] Bluetooth: hci5: command 0x040f tx timeout
[  159.973922][ T5095] xt_TCPMSS: Only works on TCP SYN packets
[  161.345762][ T5102] netlink: 12 bytes leftover after parsing attributes in process `syz.4.115'.
[  161.355812][ T5102] tipc: Started in network mode
[  161.360708][ T5102] tipc: Node identity 0000000000002d460000000000000001, cluster identity 4711
[  161.369640][ T5102] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  161.574903][ T4280] Bluetooth: hci5: command 0x0419 tx timeout
[  161.898589][ T5134] syz.4.122 uses obsolete (PF_INET,SOCK_PACKET)
[  161.911892][ T5138] autofs4:pid:5138:autofs_fill_super: called with bogus options
[  162.312126][ T5141] hub 9-0:1.0: USB hub found
[  162.320417][ T5141] hub 9-0:1.0: 1 port detected
[  162.838877][ T4402] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  164.136293][ T4401] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  164.481964][ T5047] chnl_net:caif_netlink_parms(): no params data found
[  165.112681][ T5154] loop4: detected capacity change from 0 to 256
[  165.424512][ T5162] comedi comedi3: pcl812: I/O port conflict (0x4f27,16)
[  168.616632][ T4758] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  169.125569][ T5047] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.205569][ T5047] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.227173][ T5047] device bridge_slave_0 entered promiscuous mode
[  169.269773][ T5047] bridge0: port 2(bridge_slave_1) entered blocking state
[  169.297401][ T5047] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.320213][ T5047] device bridge_slave_1 entered promiscuous mode
[  169.896291][ T4401] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  171.193699][ T5047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  171.347445][ T5047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  173.670954][ T5047] team0: Port device team_slave_0 added
[  173.826245][ T5047] team0: Port device team_slave_1 added
[  174.025011][ T5047] batman_adv: batadv0: Adding interface: batadv_slave_0
[  174.041977][ T5047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  174.067909][    C0] vkms_vblank_simulate: vblank timer overrun
[  174.077241][   T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  174.144247][ T5047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  174.192493][ T5047] batman_adv: batadv0: Adding interface: batadv_slave_1
[  174.213559][ T5047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  174.239585][    C0] vkms_vblank_simulate: vblank timer overrun
[  175.232334][ T5047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  175.521189][ T5047] device hsr_slave_0 entered promiscuous mode
[  175.531749][ T5047] device hsr_slave_1 entered promiscuous mode
[  175.539801][ T5047] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  175.547102][ T4411] libceph: connect (1)[c::]:6789 error -101
[  175.547741][ T5047] Cannot create hsr debugfs directory
[  175.570925][ T4411] libceph: mon0 (1)[c::]:6789 connect error
[  175.917629][   T22] libceph: connect (1)[c::]:6789 error -101
[  175.928314][   T22] libceph: mon0 (1)[c::]:6789 connect error
[  175.986776][ T4403] device hsr_slave_0 left promiscuous mode
[  175.999015][ T4403] device hsr_slave_1 left promiscuous mode
[  176.011164][ T4403] batman_adv: batadv0: Removing interface: batadv_slave_0
[  176.065317][ T4403] batman_adv: batadv0: Removing interface: batadv_slave_1
[  176.086104][ T5240] overlayfs: overlapping lowerdir path
[  176.346194][   T75] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  176.712929][ T4411] libceph: connect (1)[c::]:6789 error -101
[  176.719106][ T4411] libceph: mon0 (1)[c::]:6789 connect error
[  176.735919][ T4403] device bridge_slave_1 left promiscuous mode
[  176.742351][ T4403] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.753999][ T5225] ceph: No mds server is up or the cluster is laggy
[  176.821335][ T4403] device bridge_slave_0 left promiscuous mode
[  176.858018][ T4403] bridge0: port 1(bridge_slave_0) entered disabled state
[  177.509509][ T5250] comedi comedi3: pcl818: I/O port conflict (0x4f27,16)
[  177.518486][ T5250] general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] PREEMPT SMP KASAN
[  177.530240][ T5250] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f]
[  177.538679][ T5250] CPU: 0 PID: 5250 Comm: syz.2.139 Not tainted syzkaller #0
[  177.545978][ T5250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  177.556046][ T5250] RIP: 0010:pcl818_ai_cancel+0x65/0x3e0
[  177.561625][ T5250] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 fd 6e 15 fa 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 dc 6e 15 fa 4d 8b 24 24 48 83 c3
[  177.581245][ T5250] RSP: 0018:ffffc90003bc7a18 EFLAGS: 00010206
[  177.587317][ T5250] RAX: 0000000000000005 RBX: ffff8880298b2580 RCX: 0000000000080000
[  177.595293][ T5250] RDX: ffffc9000f361000 RSI: 0000000000002aa7 RDI: 0000000000002aa8
[  177.603264][ T5250] RBP: 0000000000000001 R08: dffffc0000000000 R09: ffffed1005ce5626
[  177.611238][ T5250] R10: ffffed1005ce5626 R11: 1ffff11005ce5625 R12: 0000000000000028
[  177.619212][ T5250] R13: dffffc0000000000 R14: ffff88802e72b000 R15: dffffc0000000000
[  177.627192][ T5250] FS:  00007f68fe7416c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  177.636134][ T5250] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  177.642769][ T5250] CR2: 0000001b2f815ff8 CR3: 0000000079579000 CR4: 00000000003506f0
[  177.650744][ T5250] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  177.658717][ T5250] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  177.666692][ T5250] Call Trace:
[  177.669975][ T5250]  <TASK>
[  177.672910][ T5250]  pcl818_detach+0x62/0xd0
[  177.677371][ T5250]  comedi_device_detach_locked+0x16e/0x710
[  177.683198][ T5250]  comedi_device_attach+0x5c9/0x700
[  177.688415][ T5250]  comedi_unlocked_ioctl+0x5a6/0x1050
[  177.693797][ T5250]  ? __lock_acquire+0x7c50/0x7c50
[  177.698826][ T5250]  ? tomoyo_path_number_perm+0x4ae/0x600
[  177.704463][ T5250]  ? comedi_poll+0x8b0/0x8b0
[  177.709077][ T5250]  ? __fget_files+0x28/0x4d0
[  177.713685][ T5250]  ? bpf_lsm_file_ioctl+0x5/0x10
[  177.718639][ T5250]  ? security_file_ioctl+0x7c/0xa0
[  177.723766][ T5250]  ? comedi_poll+0x8b0/0x8b0
[  177.728365][ T5250]  __se_sys_ioctl+0xfa/0x170
[  177.732984][ T5250]  do_syscall_64+0x4c/0xa0
[  177.737415][ T5250]  ? clear_bhb_loop+0x60/0xb0
[  177.742096][ T5250]  ? clear_bhb_loop+0x60/0xb0
[  177.746777][ T5250]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  177.752675][ T5250] RIP: 0033:0x7f68fd98f6c9
[  177.757102][ T5250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  177.776724][ T5250] RSP: 002b:00007f68fe741038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  177.785146][ T5250] RAX: ffffffffffffffda RBX: 00007f68fdbe6090 RCX: 00007f68fd98f6c9
[  177.793121][ T5250] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000008
[  177.801095][ T5250] RBP: 00007f68fda11f91 R08: 0000000000000000 R09: 0000000000000000
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  177.809114][ T5250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  177.817105][ T5250] R13: 00007f68fdbe6128 R14: 00007f68fdbe6090 R15: 00007ffce87f9868
[  177.825095][ T5250]  </TASK>
[  177.828130][ T5250] Modules linked in:
[  177.856729][ T5250] ---[ end trace 0000000000000000 ]---
[  177.862369][ T5250] RIP: 0010:pcl818_ai_cancel+0x65/0x3e0
[  177.868124][ T5250] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 fd 6e 15 fa 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 dc 6e 15 fa 4d 8b 24 24 48 83 c3
[  177.887975][ T5250] RSP: 0018:ffffc90003bc7a18 EFLAGS: 00010206
[  177.894153][ T5250] RAX: 0000000000000005 RBX: ffff8880298b2580 RCX: 0000000000080000
[  177.902336][ T5250] RDX: ffffc9000f361000 RSI: 0000000000002aa7 RDI: 0000000000002aa8
[  177.910672][ T5250] RBP: 0000000000000001 R08: dffffc0000000000 R09: ffffed1005ce5626
[  177.919206][ T5250] R10: ffffed1005ce5626 R11: 1ffff11005ce5625 R12: 0000000000000028
[  177.927424][ T5250] R13: dffffc0000000000 R14: ffff88802e72b000 R15: dffffc0000000000
[  177.935554][ T5250] FS:  00007f68fe7416c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  177.944738][ T5250] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  177.951454][ T5250] CR2: 0000001b2f80eff8 CR3: 0000000079579000 CR4: 00000000003506f0
[  177.959568][ T5250] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  177.967740][ T5250] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  177.975870][ T5250] Kernel panic - not syncing: Fatal exception
[  177.982186][ T5250] Kernel Offset: disabled
[  177.986500][ T5250] Rebooting in 86400 seconds..