last executing test programs:

19.568678683s ago: executing program 4 (id=409):
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="050000000400000099000000"], 0x48)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400e, &(0x7f0000000300)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@sysvgroups}]}, 0x1, 0x42f, &(0x7f0000000940)="$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")
setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000001f00)=ANY=[], 0xe00f, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1c, 0x20000000000000bb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200), 0x3}, 0x38)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10)
sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c}, 0x1c}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028014000380"], 0x44}}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x9}, {0xfff3}}}, 0x24}}, 0x0)

18.343158034s ago: executing program 2 (id=412):
ioperm(0x0, 0x9, 0x5)

18.132496738s ago: executing program 2 (id=413):
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x15)
writev(r3, &(0x7f0000000280)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500", 0x1a}, {&(0x7f0000000580)="fa21bd2b5c40cc420740358ffc7f9f4b6e68fc8d1aa2597e7b484f301f11e35f22", 0x21}], 0x2)
socket$rxrpc(0x21, 0x2, 0xa)
syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c000280080005000100000014000700000000000000000500000000000000010800"], 0x74}}, 0x0)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x4001, 0x3, 0x2e4, 0x0, 0x0, 0x148, 0x0, 0x148, 0x250, 0x240, 0x240, 0x250, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x8000000, 0x0, 0x2, 0x0, 'syz1\x00'}}, @common=@addrtype={{0x2c}, {0x0, 0x280}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x2, 0x7}, {0x4, 0x2, 0x4}, 0xff}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x340)

17.516885528s ago: executing program 4 (id=414):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000240)='./file0\x00', 0x8c0, &(0x7f0000000100)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c001967b9b8a6cdd636d75428f2c5e8054d01858eef552755576e749526b36860cf2511040d1ce5a743ffd83d29d1ba3a54a59d8c7aa249f08d3c8c6d04ac105d67934db6190d59f2323b55a5a4"], 0x1, 0x4447, &(0x7f000000cd00)="$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")
openat(0xffffffffffffff9c, 0x0, 0x40242, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r0=>0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0)
io_submit(r0, 0x1, &(0x7f0000000200)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0x0, 0x1, 0xfffd, r1, 0x0, 0x0, 0x400a00}])

14.49292761s ago: executing program 2 (id=423):
fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x0, 0x0, 0x0, 0x1e}, 0x20)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events.local\x00', 0x26e1, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0xc0189436, &(0x7f0000000000)={'bridge_slave_1\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_emit_ethernet(0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x2, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/profiling', 0x149282, 0x1d4)
syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$cgroup_int(r5, &(0x7f0000000040)=0x902, 0x12)

12.990616926s ago: executing program 3 (id=425):
bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$evdev(0x0, 0x0, 0x60000)
pipe2$9p(&(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r3 = dup(r2)
write$FUSE_BMAP(r3, &(0x7f0000000300)={0x18, 0x0, 0x0, {0xfffffffffffffffa}}, 0x18)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}})
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
mknodat$loop(0xffffffffffffffff, &(0x7f0000000000)='./bus\x00', 0xc000, 0x0)
open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0)

12.340570527s ago: executing program 4 (id=427):
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x2004c000)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_BIND_MAP(0x23, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r0}, 0x10)
setpriority(0x1, 0xff, 0x9)
syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x1000)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x59, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x100, 0x0, 0x3)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x80000001)

11.273905496s ago: executing program 0 (id=428):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x9, @empty, 0x5}], 0x1c)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x3}, 0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0)

10.909575392s ago: executing program 4 (id=429):
capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb})
ioperm(0x284, 0x7f, 0xe3)
socket$netlink(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1})
memfd_create(&(0x7f0000001240)='[\v\xdbX\xae[\x1a\xad\xd1md\xc8\x85HX\xa9%\f\x1a,\xe2\x9c\xb4\xd7\xbc\xf1\xb3\x86\xe2/Op\xd0\xa2\x82\x1eb;(\xb5\xe1j\xc8\f\xe5\x89\x17\xee|J\x90=5\xed\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q%\x8a\xda\x05\x00f\xe3j%\x00\x00\x1c#\xc6\xd8\xdbD\x92P\xe16W\x10\xdau\xc7\x8f\xaa\x8d\xa9\x97\x9d\xcb\x1e\x80\xe7\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\xbdD\xcc\'\xa2\xaf`\xf6L\x0e\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecM\xe4H\xb7\xaf\xa8\x96dh\xa9\xab > \xac\x00O^\x14\xcbv\x17Hkb\xe7\xcb\x9d;\xd2\x9f\x05\xd1\x00\x8b\xd3\x9f\a\x99^v\xf7\xfa\xe5\xf0h\x87l\xd9\x15\xd2\x87~?\xb1\x9d\xc1\x92`\x8a\r\xfc\xeb\x14\xd1\x94\fv\x8a\xe3\x1d\x0fj}\x9f\xedsc\xd3\xee\xe6cXw\xa1\xbc\xd0o\xf9\x9cJ\b\x00\xd8;\\ik0+\xc8\xf2\x87\xdf\t\x97\x9dB\xc1\xa0\xa71\xf25GU|]A\x1eel \x8ff\xc6\nt\xd0\x91\x9d\x8c\xa4\xe5\xde\x06\x00\xffE\xf4\x96#\x92-9\xe5\xa7\xf8%\xb0I\xd4\x91r\xbf\x1bOS\xee}\x16\x87\x05\xf2\xb9\x81\x14\xe2NZ\\I\xd0[\xc4\xf2\"\x87\xf5\xb8\x95.M\xb1S\xbd\xe4i\x00\xc1b\t]?}0\t\xebV\xbci\xa5\x05\xca\xb6\xc22\x7fL\x89&\xa0\xcfMULr0rs\xb4\n\xa6)\xe23\xf0\x8d\x9dO\xb9\xc9\x83\xabS\x013\"\x1b\x97K\x17\x16\x89\a\xee\xc903\xad\x15\x1cH\xd2\x95\x91\xb4$\x1b\xbf\xaf\xf5\x9b\xc2\x85\xe7[\xe5\xfb}\x1d@f2\x11\x13Y\x98\xa4\xecWEE\x9eI\x05\v\x11\xad\x93!^T\xe5N\xf6LI\x9a6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\x1a\xc9(a\x06>g\xe5\x00:\x9au\xef\x14\t\x1f8E\x86\xcb\xd0e\x17\xfb\xc1', 0x1)
r4 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
recvmmsg(r4, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/82, 0x52}], 0x1}, 0x81}], 0x1, 0x2000, 0x0)
sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)

10.690841186s ago: executing program 3 (id=430):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="020000000100"/28], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0xfff, r1}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x6, r1}, 0x38)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x6, 0x10001, 0x34324152, 0x0, 0xb, [{0x4}, {0x10}, {0x2}, {}, {}, {}, {}, {0x0, 0x4}]}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, 0x0, &(0x7f0000000240))
lstat(&(0x7f00000000c0)='./file1\x00', 0x0)
setgroups(0x1, &(0x7f0000000300)=[0x0])
sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080086dd4803", 0x10000, 0x0, &(0x7f0000000140), 0x14)
ftruncate(0xffffffffffffffff, 0x8800000)
socket$nl_route(0x10, 0x3, 0x0)

10.092443436s ago: executing program 0 (id=431):
mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000340)='./cgroup\x00', &(0x7f0000000300)='squashfs\x00', 0x1a0c000, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000002080)=0x64, 0x23b)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/oops_count', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0)
r3 = userfaultfd(0x801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x44, &(0x7f0000000040), 0x5d)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000001e0007010000000000000000017c00000400fc800c00018008000600ffff00000c000280080072800400b60008000900", @ANYRES32, @ANYBLOB="27073ede56141d1dc1102b46bdb4b8309ed4b4c05f5988c00300ee3bb10d3703e6f0cf080ee8d411919724da1fad8ede20f7dc3f032113547f990f80"], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

8.857865307s ago: executing program 4 (id=432):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_io_uring_setup(0x26d7, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x0], 0x1}, 0x58)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

8.839369908s ago: executing program 0 (id=433):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x0, {0x401, 0x7, 0xf, 0x8, 0x3b8000, 0x4}})
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x9013, 0x100, 0x4, 0x165}, &(0x7f0000000000)=<r5=>0x0, &(0x7f0000000300)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, &(0x7f0000000400)="929a775c663f947979b88bafdc67bc877fb216e145578909651d9cb9d620520428cd9d4fd17b0e80ba61e01fe45464ff3114cd5aa2ceacb015276b", 0x3b, 0x40002020})
io_uring_enter(r4, 0x3517, 0x173d, 0x42, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30)
socket$inet6(0xa, 0x2, 0x0)
r7 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$apparmor_exec(r7, &(0x7f0000000440)=ANY=[], 0xb3)
readv(r7, &(0x7f0000000380)=[{&(0x7f0000000040)=""/11, 0xb}], 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$pppl2tp(0x18, 0x1, 0x1)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)

8.354192326s ago: executing program 3 (id=434):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="020000000100"/28], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0xfff, r1}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x6, r1}, 0x38)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x6, 0x10001, 0x34324152, 0x0, 0xb, [{0x4}, {0x10}, {0x2}, {}, {}, {}, {}, {0x0, 0x4}]}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, 0x0, &(0x7f0000000240))
lstat(&(0x7f00000000c0)='./file1\x00', 0x0)
setgroups(0x1, &(0x7f0000000300)=[0x0])
sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080086dd4803", 0x10000, 0x0, &(0x7f0000000140), 0x14)
ftruncate(0xffffffffffffffff, 0x8800000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x3, 0x0)
getsockname$packet(r6, &(0x7f0000000440)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0xfff1, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x88)
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x6}, {0x0, 0xffff}}}, 0x24}}, 0x0)

8.325618786s ago: executing program 2 (id=435):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x0, {0x401, 0x7, 0xf, 0x8, 0x3b8000, 0x4}})
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x9013, 0x100, 0x4, 0x165}, &(0x7f0000000000)=<r5=>0x0, &(0x7f0000000300)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, &(0x7f0000000400)="929a775c663f947979b88bafdc67bc877fb216e145578909651d9cb9d620520428cd9d4fd17b0e80ba61e01fe45464ff3114cd5aa2ceacb015276b", 0x3b, 0x40002020})
io_uring_enter(r4, 0x3517, 0x173d, 0x42, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30)
socket$inet6(0xa, 0x2, 0x0)
r7 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$apparmor_exec(r7, &(0x7f0000000440)=ANY=[], 0xb3)
readv(r7, &(0x7f0000000380)=[{&(0x7f0000000040)=""/11, 0xb}], 0x1)
ioprio_set$uid(0x3, 0xffffffffffffffff, 0x2000)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040)={0x0, 0x2, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4000000, @void, @value}, 0x94)
socket$pppl2tp(0x18, 0x1, 0x1)
socket(0x15, 0x2, 0xfffffeff)

7.891808444s ago: executing program 1 (id=436):
bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$evdev(0x0, 0x0, 0x60000)
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000300)={0x18, 0x0, 0x0, {0xfffffffffffffffa}}, 0x18)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x4000000000010046)

6.013766916s ago: executing program 3 (id=437):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x0, {0x401, 0x7, 0xf, 0x8, 0x3b8000, 0x4}})
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x9013, 0x100, 0x4, 0x165}, &(0x7f0000000000)=<r5=>0x0, &(0x7f0000000300)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, &(0x7f0000000400)="929a775c663f947979b88bafdc67bc877fb216e145578909651d9cb9d620520428cd9d4fd17b0e80ba61e01fe45464ff3114cd5aa2ceacb015276b", 0x3b, 0x40002020})
io_uring_enter(r4, 0x3517, 0x173d, 0x42, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30)
socket$inet6(0xa, 0x2, 0x0)
r7 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$apparmor_exec(r7, &(0x7f0000000440)=ANY=[], 0xb3)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040)={0x0, 0x2, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4000000, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$pppl2tp(0x18, 0x1, 0x1)
socket(0x15, 0x2, 0xfffffeff)

5.867215819s ago: executing program 4 (id=438):
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x4)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0xc0100, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001640)=ANY=[], 0x50)
socket$kcm(0x10, 0x2, 0x0)
syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2)
socket$inet_tcp(0x2, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x6, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r4=>0x0})
bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r3, 0x1, 0x6, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00'})
setsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f0000000180)=0x1, 0x4)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)

5.81988209s ago: executing program 1 (id=439):
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x2004c000)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_BIND_MAP(0x23, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r0}, 0x10)
setpriority(0x1, 0xff, 0x9)
syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x1000)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x59, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x100, 0x0, 0x3)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x80000001)

4.600624911s ago: executing program 0 (id=440):
r0 = socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x18, 0x2, [@TCA_FLOW_ACT={0x4}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_KEYS={0x8, 0x1, 0x157ea}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)

4.532704142s ago: executing program 1 (id=441):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x9, @empty, 0x5}], 0x1c)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x3}, 0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0)

4.029704151s ago: executing program 1 (id=442):
bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pipe2$9p(&(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r3 = dup(r2)
write$FUSE_BMAP(r3, &(0x7f0000000300)={0x18, 0x0, 0x0, {0xfffffffffffffffa}}, 0x18)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
mknodat$loop(0xffffffffffffffff, &(0x7f0000000000)='./bus\x00', 0xc000, 0x0)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0)
sendfile(r5, 0xffffffffffffffff, 0x0, 0x4000000000010046)

3.149887006s ago: executing program 0 (id=443):
fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x0, 0x0, 0x0, 0x1e}, 0x20)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events.local\x00', 0x26e1, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0xc0189436, &(0x7f0000000000)={'bridge_slave_1\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_emit_ethernet(0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x2, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newtaction={0x78, 0x30, 0x9, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_TTL={0x5, 0x7, 0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}, {0x4}]}, 0x78}}, 0x0)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0)

2.962750319s ago: executing program 2 (id=444):
mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000340)='./cgroup\x00', &(0x7f0000000300)='squashfs\x00', 0x1a0c000, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000002080)=0x64, 0x23b)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/oops_count', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0)
r3 = userfaultfd(0x801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x44, &(0x7f0000000040), 0x5d)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000001e0007010000000000000000017c00000400fc800c00018008000600ffff00000c000280080072800400b60008000900", @ANYRES32, @ANYBLOB="27073ede56141d1dc1102b46bdb4b8309ed4b4c05f5988c00300ee3bb10d3703e6f0cf080ee8d411919724da1fad8ede20f7dc3f032113547f990f80"], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

2.763083662s ago: executing program 1 (id=445):
capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb})
ioperm(0x284, 0x7f, 0xe3)
socket$netlink(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1})
memfd_create(&(0x7f0000001240)='[\v\xdbX\xae[\x1a\xad\xd1md\xc8\x85HX\xa9%\f\x1a,\xe2\x9c\xb4\xd7\xbc\xf1\xb3\x86\xe2/Op\xd0\xa2\x82\x1eb;(\xb5\xe1j\xc8\f\xe5\x89\x17\xee|J\x90=5\xed\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q%\x8a\xda\x05\x00f\xe3j%\x00\x00\x1c#\xc6\xd8\xdbD\x92P\xe16W\x10\xdau\xc7\x8f\xaa\x8d\xa9\x97\x9d\xcb\x1e\x80\xe7\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\xbdD\xcc\'\xa2\xaf`\xf6L\x0e\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecM\xe4H\xb7\xaf\xa8\x96dh\xa9\xab > \xac\x00O^\x14\xcbv\x17Hkb\xe7\xcb\x9d;\xd2\x9f\x05\xd1\x00\x8b\xd3\x9f\a\x99^v\xf7\xfa\xe5\xf0h\x87l\xd9\x15\xd2\x87~?\xb1\x9d\xc1\x92`\x8a\r\xfc\xeb\x14\xd1\x94\fv\x8a\xe3\x1d\x0fj}\x9f\xedsc\xd3\xee\xe6cXw\xa1\xbc\xd0o\xf9\x9cJ\b\x00\xd8;\\ik0+\xc8\xf2\x87\xdf\t\x97\x9dB\xc1\xa0\xa71\xf25GU|]A\x1eel \x8ff\xc6\nt\xd0\x91\x9d\x8c\xa4\xe5\xde\x06\x00\xffE\xf4\x96#\x92-9\xe5\xa7\xf8%\xb0I\xd4\x91r\xbf\x1bOS\xee}\x16\x87\x05\xf2\xb9\x81\x14\xe2NZ\\I\xd0[\xc4\xf2\"\x87\xf5\xb8\x95.M\xb1S\xbd\xe4i\x00\xc1b\t]?}0\t\xebV\xbci\xa5\x05\xca\xb6\xc22\x7fL\x89&\xa0\xcfMULr0rs\xb4\n\xa6)\xe23\xf0\x8d\x9dO\xb9\xc9\x83\xabS\x013\"\x1b\x97K\x17\x16\x89\a\xee\xc903\xad\x15\x1cH\xd2\x95\x91\xb4$\x1b\xbf\xaf\xf5\x9b\xc2\x85\xe7[\xe5\xfb}\x1d@f2\x11\x13Y\x98\xa4\xecWEE\x9eI\x05\v\x11\xad\x93!^T\xe5N\xf6LI\x9a6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\x1a\xc9(a\x06>g\xe5\x00:\x9au\xef\x14\t\x1f8E\x86\xcb\xd0e\x17\xfb\xc1', 0x1)
r4 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
recvmmsg(r4, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/82, 0x52}], 0x1}, 0x81}], 0x1, 0x2000, 0x0)
sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)

2.006269465s ago: executing program 3 (id=446):
bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$evdev(0x0, 0x0, 0x60000)
pipe2$9p(&(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000300)={0x18, 0x0, 0x0, {0xfffffffffffffffa}}, 0x18)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r1}})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x4000000000010046)

1.859836468s ago: executing program 2 (id=447):
fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x0, 0x0, 0x0, 0x1e}, 0x20)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events.local\x00', 0x26e1, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0xc0189436, &(0x7f0000000000)={'bridge_slave_1\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_emit_ethernet(0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x2, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newtaction={0x78, 0x30, 0x9, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_TTL={0x5, 0x7, 0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}, {0x4}]}, 0x78}}, 0x0)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/profiling', 0x149282, 0x1d4)
r6 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0)
ioctl$SNDRV_PCM_IOCTL_REWIND(r6, 0x80044100, 0x0)
write$cgroup_int(r5, &(0x7f0000000040)=0x902, 0x12)

835.254605ms ago: executing program 0 (id=448):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_io_uring_setup(0x26d7, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x0], 0x1}, 0x58)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

85.773028ms ago: executing program 3 (id=449):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x7, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000, 0x8c0, 0x80000000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_io_uring_setup(0x26d7, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x0], 0x1}, 0x58)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57)
recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r4}, 0x10)
r5 = getpid()
r6 = syz_pidfd_open(r5, 0x0)
process_madvise(r6, 0x0, 0x0, 0x64, 0x0)

0s ago: executing program 1 (id=450):
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="050000000400000099000000"], 0x48)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400e, &(0x7f0000000300)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@sysvgroups}]}, 0x1, 0x42f, &(0x7f0000000940)="$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")
setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000001f00)=ANY=[], 0xe00f, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1c, 0x20000000000000bb, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200), 0x3}, 0x38)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10)
sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c}, 0x1c}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028014000380"], 0x44}}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x9}, {0xfff3}}}, 0x24}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.183' (ED25519) to the list of known hosts.
[   84.056502][ T4240] cgroup: Unknown subsys name 'net'
[   84.190597][ T4240] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   85.842755][ T4240] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k FS
[   87.708344][ T4269] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   87.708554][ T4270] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   87.718273][ T4269] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   87.735508][ T4270] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   87.735930][ T4269] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   87.745194][ T4270] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   87.753865][ T4269] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   87.762250][ T4270] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   87.770019][ T4269] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   87.777385][ T4270] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   87.784933][ T4269] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   87.792551][ T4270] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   87.800717][ T4269] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   87.808254][ T4270] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   87.816194][ T4269] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   87.825901][ T4270] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   87.833492][ T4269] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   87.841408][ T4270] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   87.849051][ T4269] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   87.858804][ T4270] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   87.864138][ T4269] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   87.872395][ T4270] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   87.880620][ T4269] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   87.889791][ T4270] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   87.897393][ T4269] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   87.907968][ T4270] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   87.932199][ T4269] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   87.942277][ T4269] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   87.957589][ T4263] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   87.967469][ T4270] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   88.495015][ T4255] chnl_net:caif_netlink_parms(): no params data found
[   88.639409][ T4251] chnl_net:caif_netlink_parms(): no params data found
[   88.691314][ T4252] chnl_net:caif_netlink_parms(): no params data found
[   88.738705][ T4253] chnl_net:caif_netlink_parms(): no params data found
[   88.787535][ T4255] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.797794][ T4255] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.807633][ T4255] device bridge_slave_0 entered promiscuous mode
[   88.818777][ T4257] chnl_net:caif_netlink_parms(): no params data found
[   88.843776][ T4255] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.851683][ T4255] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.862909][ T4255] device bridge_slave_1 entered promiscuous mode
[   88.979238][ T4255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.995313][ T4252] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.002960][ T4252] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.011570][ T4252] device bridge_slave_0 entered promiscuous mode
[   89.043459][ T4255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.057334][ T4252] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.065610][ T4252] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.074746][ T4252] device bridge_slave_1 entered promiscuous mode
[   89.091312][ T4251] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.101758][ T4251] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.110740][ T4251] device bridge_slave_0 entered promiscuous mode
[   89.155892][ T4251] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.164146][ T4251] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.173134][ T4251] device bridge_slave_1 entered promiscuous mode
[   89.182099][ T4253] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.189661][ T4253] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.198885][ T4253] device bridge_slave_0 entered promiscuous mode
[   89.219578][ T4255] team0: Port device team_slave_0 added
[   89.239896][ T4252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.261255][ T4253] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.269304][ T4253] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.278398][ T4253] device bridge_slave_1 entered promiscuous mode
[   89.287886][ T4255] team0: Port device team_slave_1 added
[   89.308182][ T4252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.318791][ T4257] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.328200][ T4257] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.338410][ T4257] device bridge_slave_0 entered promiscuous mode
[   89.383846][ T4257] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.392162][ T4257] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.400602][ T4257] device bridge_slave_1 entered promiscuous mode
[   89.410356][ T4251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.430612][ T4255] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.439152][ T4255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.467849][ T4255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.501676][ T4251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.514430][ T4253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.533703][ T4255] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.541516][ T4255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.569841][ T4255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.585350][ T4252] team0: Port device team_slave_0 added
[   89.610268][ T4253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.635926][ T4252] team0: Port device team_slave_1 added
[   89.646250][ T4257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.682910][ T4253] team0: Port device team_slave_0 added
[   89.704031][ T4257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.719038][ T4251] team0: Port device team_slave_0 added
[   89.728513][ T4253] team0: Port device team_slave_1 added
[   89.758153][ T4251] team0: Port device team_slave_1 added
[   89.793744][ T4252] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.801485][ T4252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.832104][ T4252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.859202][ T4257] team0: Port device team_slave_0 added
[   89.887834][ T4252] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.896185][ T4252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.925470][ T4252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.949592][ T4257] team0: Port device team_slave_1 added
[   89.957054][ T4253] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.965391][ T4253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.994328][ T4271] Bluetooth: hci2: command 0x0409 tx timeout
[   90.002177][ T4253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.020835][ T4255] device hsr_slave_0 entered promiscuous mode
[   90.029008][ T4255] device hsr_slave_1 entered promiscuous mode
[   90.054674][ T4251] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.062223][ T4271] Bluetooth: hci1: command 0x0409 tx timeout
[   90.062760][ T4269] Bluetooth: hci4: command 0x0409 tx timeout
[   90.070353][ T4271] Bluetooth: hci3: command 0x0409 tx timeout
[   90.078600][ T4269] Bluetooth: hci0: command 0x0409 tx timeout
[   90.078855][ T4251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.122590][ T4251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.149449][ T4253] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.160197][ T4253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.192340][ T4253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.214664][ T4251] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.222662][ T4251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.252076][ T4251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.308059][ T4257] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.316273][ T4257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.344892][ T4257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.379271][ T4252] device hsr_slave_0 entered promiscuous mode
[   90.387554][ T4252] device hsr_slave_1 entered promiscuous mode
[   90.395724][ T4252] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   90.404462][ T4252] Cannot create hsr debugfs directory
[   90.412276][ T4257] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.419512][ T4257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.447106][ T4257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.476295][ T4253] device hsr_slave_0 entered promiscuous mode
[   90.484591][ T4253] device hsr_slave_1 entered promiscuous mode
[   90.491516][ T4253] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   90.499598][ T4253] Cannot create hsr debugfs directory
[   90.613836][ T4251] device hsr_slave_0 entered promiscuous mode
[   90.621556][ T4251] device hsr_slave_1 entered promiscuous mode
[   90.630119][ T4251] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   90.638862][ T4251] Cannot create hsr debugfs directory
[   90.657198][ T4257] device hsr_slave_0 entered promiscuous mode
[   90.665914][ T4257] device hsr_slave_1 entered promiscuous mode
[   90.673601][ T4257] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   90.682124][ T4257] Cannot create hsr debugfs directory
[   91.014692][ T4255] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   91.029728][ T4255] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   91.042834][ T4255] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   91.054492][ T4255] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   91.163064][ T4252] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   91.185272][ T4252] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   91.198565][ T4252] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   91.214016][ T4252] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   91.240244][ T4257] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   91.277034][ T4257] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   91.315202][ T4257] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   91.339118][ T4253] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   91.362968][ T4255] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.372533][ T4257] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   91.385191][ T4253] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   91.398972][ T4253] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   91.419523][ T4253] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   91.460305][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   91.474763][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   91.493792][ T4255] 8021q: adding VLAN 0 to HW filter on device team0
[   91.527576][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   91.538458][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   91.550391][ T4281] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.559205][ T4281] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.606588][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   91.617796][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   91.628695][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   91.640393][ T4281] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.648514][ T4281] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.658829][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   91.705970][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   91.727192][ T4251] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   91.742228][ T4251] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   91.768105][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   91.780233][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   91.791057][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   91.816054][ T4251] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   91.836236][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   91.848063][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   91.858996][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   91.870277][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   91.888446][ T4252] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.904642][  T127] cfg80211: failed to load regulatory.db
[   91.917868][ T4251] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   91.929756][ T4255] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   91.949973][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   91.960863][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   91.972969][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   92.023323][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   92.035581][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   92.061993][ T4271] Bluetooth: hci2: command 0x041b tx timeout
[   92.074588][ T4257] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.087384][ T4252] 8021q: adding VLAN 0 to HW filter on device team0
[   92.111106][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   92.128504][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   92.142649][ T4271] Bluetooth: hci0: command 0x041b tx timeout
[   92.149719][ T4271] Bluetooth: hci3: command 0x041b tx timeout
[   92.157201][ T4270] Bluetooth: hci4: command 0x041b tx timeout
[   92.164196][ T4269] Bluetooth: hci1: command 0x041b tx timeout
[   92.204622][ T4257] 8021q: adding VLAN 0 to HW filter on device team0
[   92.224202][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   92.241481][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   92.260615][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.268948][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.279183][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   92.290510][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   92.301381][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.309400][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.321558][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   92.357161][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   92.387892][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   92.414116][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   92.429008][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.437758][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.455960][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   92.470275][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   92.487112][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.495473][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.504944][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   92.519774][ T4253] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.560855][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   92.577756][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   92.625982][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   92.636743][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   92.646425][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   92.658937][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   92.668070][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   92.678618][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   92.693164][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   92.703297][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   92.714507][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   92.726527][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   92.737614][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   92.747861][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   92.759088][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   92.770098][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   92.786992][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   92.798392][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   92.807716][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   92.819760][ T4255] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.838134][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   92.850421][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   92.863581][ T4253] 8021q: adding VLAN 0 to HW filter on device team0
[   92.893758][ T4251] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.908156][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   92.919921][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   92.936863][ T4252] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   92.951500][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   92.981515][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   92.996765][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   93.006509][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   93.018467][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   93.030467][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.038133][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.048157][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   93.058417][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   93.077061][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   93.090229][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   93.101059][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   93.113951][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.123297][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.140007][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   93.159557][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   93.168763][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   93.179044][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   93.192743][ T4251] 8021q: adding VLAN 0 to HW filter on device team0
[   93.237996][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   93.250849][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   93.263767][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   93.308179][ T4255] device veth0_vlan entered promiscuous mode
[   93.332732][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   93.348766][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   93.361723][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   93.377002][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   93.398083][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   93.429939][ T4253] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   93.445037][ T4253] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   93.466392][ T4255] device veth1_vlan entered promiscuous mode
[   93.486279][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   93.497326][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   93.507849][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   93.521630][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   93.534578][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   93.544583][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   93.555169][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   93.565219][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   93.579030][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   93.591153][   T41] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.599876][   T41] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.645261][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   93.656462][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   93.669297][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   93.679646][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   93.690351][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   93.705224][   T41] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.713318][   T41] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.722648][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   93.766615][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   93.800766][ T4255] device veth0_macvtap entered promiscuous mode
[   93.843570][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   93.870540][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   93.896159][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   93.925230][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   93.949014][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   93.989848][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   94.018621][ T4255] device veth1_macvtap entered promiscuous mode
[   94.067704][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   94.094533][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   94.105656][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   94.117604][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   94.128758][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   94.139860][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   94.160423][ T4269] Bluetooth: hci2: command 0x040f tx timeout
[   94.169757][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   94.201349][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   94.224620][ T4269] Bluetooth: hci3: command 0x040f tx timeout
[   94.224649][ T4271] Bluetooth: hci4: command 0x040f tx timeout
[   94.231574][ T4269] Bluetooth: hci0: command 0x040f tx timeout
[   94.246061][ T4269] Bluetooth: hci1: command 0x040f tx timeout
[   94.254197][ T4255] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.288076][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   94.299899][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   94.318422][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   94.329042][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   94.340891][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   94.350757][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   94.362868][ T4255] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.371197][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   94.383299][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   94.399253][ T4257] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.424123][ T4255] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.436520][ T4255] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.449077][ T4255] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.460625][ T4255] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.491708][ T4253] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.512648][ T4252] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.522075][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   94.530809][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   94.623317][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   94.640142][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   94.699031][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   94.711273][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   94.727825][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   94.741429][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   94.757694][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   94.769601][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   94.780902][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   94.791781][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   94.830065][ T4253] device veth0_vlan entered promiscuous mode
[   94.846999][ T4257] device veth0_vlan entered promiscuous mode
[   94.868252][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   94.885518][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   94.898069][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   94.911340][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   94.947719][ T4257] device veth1_vlan entered promiscuous mode
[   94.973618][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   94.987420][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   94.999739][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   95.018464][ T4253] device veth1_vlan entered promiscuous mode
[   95.056954][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   95.068982][ T4316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.081707][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   95.090910][ T4316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.095653][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   95.115381][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   95.125311][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   95.157988][ T4252] device veth0_vlan entered promiscuous mode
[   95.167796][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   95.180980][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   95.201442][ T4251] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.222678][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   95.234494][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   95.245164][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   95.274553][ T4257] device veth0_macvtap entered promiscuous mode
[   95.294717][ T4316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.308488][ T4257] device veth1_macvtap entered promiscuous mode
[   95.317075][ T4316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.334340][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   95.344703][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   95.360878][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   95.371695][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   95.383267][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   95.395366][ T4252] device veth1_vlan entered promiscuous mode
[   95.413290][ T4253] device veth0_macvtap entered promiscuous mode
[   95.454566][ T4253] device veth1_macvtap entered promiscuous mode
[   95.484685][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   95.497734][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.520292][ T4257] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.543182][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   95.553726][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   95.564340][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   95.574002][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   95.588724][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   95.598409][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   95.615883][ T4252] device veth0_macvtap entered promiscuous mode
[   95.639368][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   95.653822][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.670555][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   95.684573][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.699276][ T4253] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.711181][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   95.724838][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.739244][ T4257] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.755510][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   95.773592][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   95.790242][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   95.839270][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   95.860995][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   95.880862][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   95.898629][ T4252] device veth1_macvtap entered promiscuous mode
[   95.914147][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   95.932695][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.944830][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   95.957144][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.971102][ T4253] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.986677][ T4257] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.998409][ T4257] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.008339][ T4257] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.018418][ T4257] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.031667][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   96.048180][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   96.059498][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   96.098294][ T4253] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.122912][ T4253] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.137616][ T4253] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.150043][ T4253] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.185057][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   96.198876][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.214137][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   96.226411][ T4269] Bluetooth: hci2: command 0x0419 tx timeout
[   96.242027][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.270399][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   96.290667][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.302335][ T4271] Bluetooth: hci1: command 0x0419 tx timeout
[   96.312216][ T4269] Bluetooth: hci4: command 0x0419 tx timeout
[   96.313025][ T4271] Bluetooth: hci0: command 0x0419 tx timeout
[   96.318930][ T4269] Bluetooth: hci3: command 0x0419 tx timeout
[   96.342085][ T4252] batman_adv: batadv0: Interface activated: batadv_slave_0
[   96.431581][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   96.453222][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   96.466410][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   96.495998][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.521390][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   96.543451][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.562084][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   96.581891][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.603597][ T4252] batman_adv: batadv0: Interface activated: batadv_slave_1
[   96.630137][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   96.640353][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   96.689837][ T4252] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.731901][ T4252] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.749266][ T4252] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.759762][ T4252] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.777134][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   96.799170][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   96.983657][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   97.010107][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   97.056916][ T4316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.063351][ T4251] device veth0_vlan entered promiscuous mode
[   97.085567][ T4316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.094633][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   97.108368][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   97.120699][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   97.148928][ T4251] device veth1_vlan entered promiscuous mode
[   97.209289][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.217285][ T4281] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.245109][ T4281] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.260190][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.291315][ T4251] device veth0_macvtap entered promiscuous mode
[   97.313331][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   97.324068][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   97.327408][ T4350] syz.3.7[4350] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   97.334561][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   97.337444][ T4350] syz.3.7[4350] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   97.353034][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   97.379830][ T4350] capability: warning: `syz.3.7' uses deprecated v2 capabilities in a way that may be insecure
[   97.380468][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   97.402354][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   97.414933][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   97.467690][ T4251] device veth1_macvtap entered promiscuous mode
[   97.472121][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.500087][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.621203][   T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.637452][   T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.645128][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   97.656203][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   97.683929][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   97.741315][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.743363][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   97.773995][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.799925][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.822024][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   97.853042][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.899009][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   97.931888][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.943881][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   97.970996][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.003157][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_0
[   98.035144][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   98.049702][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.071662][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   98.092909][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.121381][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   98.163243][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.231929][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   98.290901][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.314671][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_1
[   98.323017][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   98.334676][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   98.348240][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   98.360003][   T27] audit: type=1326 audit(1749324695.981:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4359 comm="syz.1.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f987d58e929 code=0x7ffc0000
[   99.156454][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   99.187505][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   99.202662][   T27] audit: type=1326 audit(1749324695.981:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4359 comm="syz.1.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f987d58e929 code=0x7ffc0000
[   99.285685][   T27] audit: type=1326 audit(1749324696.731:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4359 comm="syz.1.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f987d58e929 code=0x7ffc0000
[   99.472658][   T27] audit: type=1326 audit(1749324696.731:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4359 comm="syz.1.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f987d58e929 code=0x7ffc0000
[   99.536500][ T4251] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.548460][ T4251] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.569820][   T27] audit: type=1326 audit(1749324696.731:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4359 comm="syz.1.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f987d58e929 code=0x7ffc0000
[   99.602075][   T27] audit: type=1326 audit(1749324696.771:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4359 comm="syz.1.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f987d58e929 code=0x7ffc0000
[   99.631909][ T4251] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.649020][   T27] audit: type=1326 audit(1749324696.771:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4359 comm="syz.1.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f987d58e929 code=0x7ffc0000
[   99.671922][ T4251] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.684568][   T27] audit: type=1326 audit(1749324696.771:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4359 comm="syz.1.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f987d58e929 code=0x7ffc0000
[   99.713834][   T27] audit: type=1326 audit(1749324696.771:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4359 comm="syz.1.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f987d58e929 code=0x7ffc0000
[   99.849018][ T4370] loop1: detected capacity change from 0 to 512
[   99.860217][   T27] audit: type=1326 audit(1749324696.781:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4359 comm="syz.1.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f987d58e929 code=0x7ffc0000
[   99.935769][ T4370] EXT4-fs: Ignoring removed mblk_io_submit option
[   99.963135][ T4370] ext4: Unknown parameter 'seclabel'
[  100.018098][ T4266] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  100.078908][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.153178][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.249920][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  100.587025][ T4371] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.761852][ T4382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13'.
[  101.395651][ T4384] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.418241][ T4384] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.424305][ T4382] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[  101.437748][ T4382] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[  101.449755][ T4382] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  101.549062][ T4388] loop2: detected capacity change from 0 to 2048
[  101.600582][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  101.631323][ T4389] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15'.
[  101.652141][ T4389] device hsr_slave_0 left promiscuous mode
[  101.670850][ T4389] device hsr_slave_1 left promiscuous mode
[  101.763111][ T4391] loop0: detected capacity change from 0 to 128
[  101.824036][ T4388] Zero length message leads to an empty skb
[  101.967849][ T4371] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.162917][ T4392] syz.0.16: attempt to access beyond end of device
[  102.162917][ T4392] loop0: rw=0, sector=121, nr_sectors = 120 limit=128
[  102.340845][ T4323] kworker/u4:7: attempt to access beyond end of device
[  102.340845][ T4323] loop0: rw=1, sector=241, nr_sectors = 800 limit=128
[  102.359336][ T4371] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.679616][ T4371] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.725136][ T4413] loop0: detected capacity change from 0 to 128
[  102.735809][ T4410] loop1: detected capacity change from 0 to 1764
[  103.026874][ T4415] syz.0.19: attempt to access beyond end of device
[  103.026874][ T4415] loop0: rw=2049, sector=145, nr_sectors = 480 limit=128
[  103.191168][ T4371] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  103.266684][ T4422] loop2: detected capacity change from 0 to 512
[  103.305952][ T4422] EXT4-fs: Ignoring removed oldalloc option
[  103.337278][ T4371] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  103.382346][ T4425] loop4: detected capacity change from 0 to 512
[  103.411453][ T4371] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  103.463922][ T4425] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  103.493992][ T4371] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  103.525877][ T4425] EXT4-fs (loop4): orphan cleanup on readonly fs
[  103.589012][ T4425] __quota_error: 16 callbacks suppressed
[  103.589031][ T4425] Quota error (device loop4): v2_read_file_info: Block with free entry 1 out of range (1, 6).
[  103.611148][ T4422] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.23: Parent and EA inode have the same ino 15
[  103.680143][ T4431] netlink: 16 bytes leftover after parsing attributes in process `syz.0.25'.
[  103.686122][ T4425] EXT4-fs warning (device loop4): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  103.738752][ T4425] EXT4-fs (loop4): Cannot turn on quotas: error -117
[  103.798108][ T4425] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.24: bg 0: block 40: padding at end of block bitmap is not set
[  103.850213][ T4425] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6170: Corrupt filesystem
[  103.890285][ T4425] EXT4-fs (loop4): 1 truncate cleaned up
[  103.915729][ T4425] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  104.006512][ T4422] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  104.044320][ T4422] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.23: Parent and EA inode have the same ino 15
[  104.078142][ T4425] netlink: 4 bytes leftover after parsing attributes in process `syz.4.24'.
[  104.108599][ T4422] EXT4-fs (loop2): 1 orphan inode deleted
[  104.117828][ T4422] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  104.459255][ T4257] EXT4-fs (loop2): unmounting filesystem.
[  104.472436][ T4440] loop0: detected capacity change from 0 to 512
[  104.496311][ T4440] =======================================================
[  104.496311][ T4440] WARNING: The mand mount option has been deprecated and
[  104.496311][ T4440]          and is ignored by this kernel. Remove the mand
[  104.496311][ T4440]          option from the mount to silence this warning.
[  104.496311][ T4440] =======================================================
[  104.639521][ T4440] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  104.677955][ T4440] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  105.395856][ T4438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.28'.
[  105.432499][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  105.594897][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  105.841285][ T4252] EXT4-fs (loop0): unmounting filesystem.
[  105.892062][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  105.903548][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  105.914233][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  105.923997][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  106.005116][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  106.107421][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  106.123849][ T4251] EXT4-fs (loop4): unmounting filesystem.
[  106.382347][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  106.414428][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  107.272652][ T4472] netlink: 10504 bytes leftover after parsing attributes in process `syz.2.37'.
[  109.761744][ T4493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.43'.
[  115.378502][ T4537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.57'.
[  116.008744][   T93] block nbd2: Attempted send on invalid socket
[  116.016705][   T93] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[  116.028309][ T4542] kernel profiling enabled (shift: 63)
[  116.055241][ T4540] SQUASHFS error: Failed to read block 0x0: -5
[  116.090718][ T4542] profiling shift: 63 too large
[  116.152840][ T4540] unable to read squashfs_super_block
[  119.395077][ T4582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.72'.
[  120.967145][ T4598] kernel profiling enabled (shift: 63)
[  120.974020][ T4598] profiling shift: 63 too large
[  123.770458][ T4620] netlink: 8 bytes leftover after parsing attributes in process `syz.0.83'.
[  126.401164][ T4660] netlink: 10504 bytes leftover after parsing attributes in process `syz.2.93'.
[  127.181740][ T4668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.97'.
[  130.061124][ T4700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.111'.
[  132.865208][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  135.511743][ T4733] loop3: detected capacity change from 0 to 512
[  135.549768][ T4733] EXT4-fs: Ignoring removed i_version option
[  135.652206][ T4733] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  135.822207][ T4733] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  135.886082][ T4738] netlink: 'syz.1.123': attribute type 1 has an invalid length.
[  136.050721][ T4739] kernel profiling enabled (shift: 63)
[  136.057082][ T4739] profiling shift: 63 too large
[  136.207169][ T4733] EXT4-fs (loop3): 1 truncate cleaned up
[  136.391970][ T4733] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  136.998751][ T4255] EXT4-fs (loop3): unmounting filesystem.
[  139.018652][ T4773] netlink: 10504 bytes leftover after parsing attributes in process `syz.2.131'.
[  141.015796][   T93] block nbd3: Attempted send on invalid socket
[  141.022909][   T93] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[  141.033918][ T4784] SQUASHFS error: Failed to read block 0x0: -5
[  141.070602][ T4784] unable to read squashfs_super_block
[  142.939985][ T4793] loop3: detected capacity change from 0 to 512
[  142.950274][ T4793] EXT4-fs: Ignoring removed i_version option
[  142.991987][ T4793] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  143.062558][ T4793] EXT4-fs (loop3): 1 truncate cleaned up
[  143.079936][ T4793] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  143.527071][ T4255] EXT4-fs (loop3): unmounting filesystem.
[  145.147756][ T4826] kernel profiling enabled (shift: 63)
[  145.174527][ T4826] profiling shift: 63 too large
[  145.669734][   T52] block nbd3: Attempted send on invalid socket
[  145.677039][   T52] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[  145.714302][ T4830] SQUASHFS error: Failed to read block 0x0: -5
[  145.812084][ T4830] unable to read squashfs_super_block
[  146.569300][ T4829] kernel profiling enabled (shift: 63)
[  146.722354][ T4829] profiling shift: 63 too large
[  147.887898][ T4845] kernel profiling enabled (shift: 63)
[  147.906670][ T4845] profiling shift: 63 too large
[  149.464409][ T4853] netlink: 10504 bytes leftover after parsing attributes in process `syz.4.155'.
[  152.446568][   T52] block nbd0: Attempted send on invalid socket
[  152.453265][   T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[  152.485537][ T4876] SQUASHFS error: Failed to read block 0x0: -5
[  152.501702][ T4876] unable to read squashfs_super_block
[  155.390484][ T4899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.165'.
[  155.399687][ T4899] netlink: 'syz.2.165': attribute type 5 has an invalid length.
[  155.412047][ T4899] netlink: 20 bytes leftover after parsing attributes in process `syz.2.165'.
[  155.603013][ T4899] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  155.688491][ T4899] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  155.755736][ T4899] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  155.787360][ T4905] kernel profiling enabled (shift: 63)
[  155.793524][ T4899] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  155.803343][ T4905] profiling shift: 63 too large
[  155.813084][ T4899] device geneve2 entered promiscuous mode
[  157.668587][ T4913] netlink: 'syz.3.173': attribute type 1 has an invalid length.
[  158.418977][   T52] block nbd3: Attempted send on invalid socket
[  158.425454][   T52] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[  158.469583][ T4923] SQUASHFS error: Failed to read block 0x0: -5
[  158.514805][ T4923] unable to read squashfs_super_block
[  160.426123][ T4940] loop1: detected capacity change from 0 to 512
[  160.482764][ T4940] EXT4-fs: Ignoring removed i_version option
[  160.580589][ T4940] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  161.435202][ T4940] EXT4-fs (loop1): 1 truncate cleaned up
[  161.641479][ T4940] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  161.846330][ T4253] EXT4-fs (loop1): unmounting filesystem.
[  162.690435][   T52] block nbd2: Attempted send on invalid socket
[  162.696977][   T52] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[  162.712944][ T4965] SQUASHFS error: Failed to read block 0x0: -5
[  162.752074][    T7] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  162.755503][ T4965] unable to read squashfs_super_block
[  163.000967][    T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  163.068560][    T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  163.078605][    T7] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  163.362598][    T7] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  163.371697][    T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.414774][    T7] usb 4-1: config 0 descriptor??
[  163.676333][   T27] audit: type=1326 audit(1749324761.301:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4953 comm="syz.3.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4fe58e929 code=0x7fc00000
[  165.301524][   T27] audit: type=1326 audit(1749324762.921:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4953 comm="syz.3.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa4fe58e929 code=0x7fc00000
[  165.460738][    T7] usbhid 4-1:0.0: can't add hid device: -71
[  165.487744][    T7] usbhid: probe of 4-1:0.0 failed with error -71
[  165.621658][    T7] usb 4-1: USB disconnect, device number 2
[  165.699627][ T4984] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  167.412035][   T93] block nbd3: Attempted send on invalid socket
[  167.418313][   T93] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[  167.436077][ T5006] SQUASHFS error: Failed to read block 0x0: -5
[  167.485283][ T5006] unable to read squashfs_super_block
[  168.214236][ T5009] kernel profiling enabled (shift: 63)
[  168.219834][ T5009] profiling shift: 63 too large
[  169.650420][ T5024] netlink: 8 bytes leftover after parsing attributes in process `syz.3.206'.
[  169.662900][ T5024] netlink: 'syz.3.206': attribute type 5 has an invalid length.
[  169.670758][ T5024] netlink: 20 bytes leftover after parsing attributes in process `syz.3.206'.
[  169.726806][ T5024] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  169.760492][ T5024] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  169.780528][ T5024] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  169.797088][ T5024] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  169.811091][ T5024] device geneve2 entered promiscuous mode
[  174.354546][   T52] block nbd4: Attempted send on invalid socket
[  174.360827][   T52] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[  174.381713][ T5052] SQUASHFS error: Failed to read block 0x0: -5
[  174.388099][ T5052] unable to read squashfs_super_block
[  180.176708][   T52] block nbd1: Attempted send on invalid socket
[  180.191924][   T52] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[  180.212362][ T5092] SQUASHFS error: Failed to read block 0x0: -5
[  180.218584][ T5092] unable to read squashfs_super_block
[  185.721826][ T5125] kernel profiling enabled (shift: 63)
[  185.758919][ T5125] profiling shift: 63 too large
[  193.663932][ T5179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.251'.
[  193.672803][ T5179] netlink: 'syz.2.251': attribute type 5 has an invalid length.
[  193.680522][ T5179] netlink: 20 bytes leftover after parsing attributes in process `syz.2.251'.
[  194.304343][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  198.377845][ T5220] loop4: detected capacity change from 0 to 512
[  198.388481][ T5220] EXT4-fs: Ignoring removed i_version option
[  198.446068][ T5220] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  198.677641][ T5220] EXT4-fs (loop4): 1 truncate cleaned up
[  198.791907][ T5220] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  198.930235][   T52] block nbd3: Attempted send on invalid socket
[  198.936569][   T52] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[  198.946453][ T5224] SQUASHFS error: Failed to read block 0x0: -5
[  199.045799][ T5224] unable to read squashfs_super_block
[  200.078188][ T4251] EXT4-fs (loop4): unmounting filesystem.
[  200.551936][ T4584] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  201.253539][ T4584] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  201.312597][ T4584] usb 1-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  201.387568][ T4584] usb 1-1: config 0 interface 0 has no altsetting 0
[  201.416500][ T4584] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  201.457793][ T4584] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  201.609345][ T4584] usb 1-1: Product: syz
[  201.619513][ T4584] usb 1-1: Manufacturer: syz
[  201.624583][ T4584] usb 1-1: SerialNumber: syz
[  201.638397][ T4584] usb 1-1: config 0 descriptor??
[  201.795972][ T4584] snd-usb-audio: probe of 1-1:0.0 failed with error -22
[  201.827750][ T4266] udevd[4266]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  201.861924][ T4584] usb 1-1: USB disconnect, device number 2
[  205.218586][   T52] block nbd4: Attempted send on invalid socket
[  205.224929][   T52] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[  205.242407][ T5275] SQUASHFS error: Failed to read block 0x0: -5
[  205.269304][ T5275] unable to read squashfs_super_block
[  207.849261][ T5301] netlink: 10504 bytes leftover after parsing attributes in process `syz.0.279'.
[  210.677364][ T5317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  210.787953][ T5317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  211.742021][ T4269] Bluetooth: hci2: command 0x0406 tx timeout
[  211.751850][ T4267] Bluetooth: hci1: command 0x0406 tx timeout
[  211.753263][ T4271] Bluetooth: hci3: command 0x0406 tx timeout
[  211.757974][ T4270] Bluetooth: hci0: command 0x0406 tx timeout
[  211.763945][   T48] Bluetooth: hci4: command 0x0406 tx timeout
[  212.112907][ T5336] bridge0: port 2(bridge_slave_1) entered disabled state
[  212.122222][ T5336] bridge0: port 1(bridge_slave_0) entered disabled state
[  212.441619][ T5340] device bridge_slave_1 left promiscuous mode
[  212.587968][ T5340] bridge0: port 2(bridge_slave_1) entered disabled state
[  213.042887][ T5340] device bridge_slave_0 left promiscuous mode
[  213.068550][ T5340] bridge0: port 1(bridge_slave_0) entered disabled state
[  218.131377][ T5384] netlink: 10504 bytes leftover after parsing attributes in process `syz.2.298'.
[  218.371328][ T5391] netlink: 8 bytes leftover after parsing attributes in process `syz.4.297'.
[  218.385188][ T5391] netlink: 'syz.4.297': attribute type 5 has an invalid length.
[  218.405684][ T5391] netlink: 20 bytes leftover after parsing attributes in process `syz.4.297'.
[  218.550648][ T5391] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  218.592940][ T5391] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  218.602667][ T5391] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  218.613107][ T5391] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  218.622717][ T5391] device geneve2 entered promiscuous mode
[  228.594773][ T5458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.320'.
[  228.604094][ T5458] netlink: 'syz.4.320': attribute type 5 has an invalid length.
[  228.614085][ T5458] netlink: 20 bytes leftover after parsing attributes in process `syz.4.320'.
[  238.572565][ T5548] loop0: detected capacity change from 0 to 512
[  238.602770][ T5548] EXT4-fs: Ignoring removed i_version option
[  238.632844][ T5548] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  238.831077][ T5548] EXT4-fs (loop0): 1 truncate cleaned up
[  238.875177][ T5548] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  239.119743][ T5554] kernel profiling enabled (shift: 63)
[  239.171993][ T5554] profiling shift: 63 too large
[  239.256502][ T4252] EXT4-fs (loop0): unmounting filesystem.
[  241.442290][ T5565] loop1: detected capacity change from 0 to 32768
[  241.721335][ T5565] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  241.843327][ T5575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.355'.
[  241.880044][ T5565] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  241.950942][ T5575] netlink: 'syz.3.355': attribute type 5 has an invalid length.
[  242.209380][ T5575] netlink: 20 bytes leftover after parsing attributes in process `syz.3.355'.
[  243.017558][ T4253] ocfs2: Unmounting device (7,1) on (node local)
[  244.270213][ T5592] ceph: No mds server is up or the cluster is laggy
[  245.144660][ T5599] loop0: detected capacity change from 0 to 512
[  245.215877][ T5599] EXT4-fs: Ignoring removed i_version option
[  245.291522][ T5599] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  245.388782][ T5599] EXT4-fs (loop0): 1 truncate cleaned up
[  245.418879][ T5599] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  245.813909][ T4252] EXT4-fs (loop0): unmounting filesystem.
[  250.996296][ T5641] bridge0: port 2(bridge_slave_1) entered disabled state
[  251.003708][ T5641] bridge0: port 1(bridge_slave_0) entered disabled state
[  251.111327][ T5644] device bridge_slave_1 left promiscuous mode
[  251.221524][ T5644] bridge0: port 2(bridge_slave_1) entered disabled state
[  251.234885][ T5645] ceph: No mds server is up or the cluster is laggy
[  251.253204][ T5644] device bridge_slave_0 left promiscuous mode
[  251.261628][ T5644] bridge0: port 1(bridge_slave_0) entered disabled state
[  255.745225][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  256.622190][ T4258] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  257.287066][ T4258] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  257.310438][ T4258] usb 1-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  257.342883][ T4258] usb 1-1: config 0 interface 0 has no altsetting 0
[  257.363193][ T4258] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  257.379851][ T4258] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  257.461502][ T4258] usb 1-1: Product: syz
[  257.485134][ T4258] usb 1-1: Manufacturer: syz
[  257.520505][ T4258] usb 1-1: SerialNumber: syz
[  257.552665][ T4258] usb 1-1: config 0 descriptor??
[  257.700102][ T4258] snd-usb-audio: probe of 1-1:0.0 failed with error -22
[  257.764443][ T4266] udevd[4266]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  257.795266][ T5709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.391'.
[  257.838509][ T4258] usb 1-1: USB disconnect, device number 3
[  257.892097][ T5709] netlink: 'syz.1.391': attribute type 5 has an invalid length.
[  258.021564][ T5709] netlink: 20 bytes leftover after parsing attributes in process `syz.1.391'.
[  258.450292][ T5709] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  258.597877][ T5709] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  258.739097][ T5709] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  259.796447][ T5709] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  259.835173][ T5709] device geneve2 entered promiscuous mode
[  263.058466][ T5736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.400'.
[  263.067433][ T5736] netlink: 'syz.2.400': attribute type 5 has an invalid length.
[  263.075185][ T5736] netlink: 20 bytes leftover after parsing attributes in process `syz.2.400'.
[  264.466043][ T5746] bridge0: port 2(bridge_slave_1) entered disabled state
[  264.473474][ T5746] bridge0: port 1(bridge_slave_0) entered disabled state
[  264.904556][ T5747] device bridge_slave_1 left promiscuous mode
[  265.072309][ T5747] bridge0: port 2(bridge_slave_1) entered disabled state
[  265.088228][ T5747] device bridge_slave_0 left promiscuous mode
[  265.173393][ T5747] bridge0: port 1(bridge_slave_0) entered disabled state
[  265.962993][ T5754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.403'.
[  265.972459][ T5754] netlink: 'syz.4.403': attribute type 5 has an invalid length.
[  265.980152][ T5754] netlink: 20 bytes leftover after parsing attributes in process `syz.4.403'.
[  266.112130][ T4319] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  267.145425][ T4319] usb 1-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  267.211700][ T4319] usb 1-1: config 0 interface 0 has no altsetting 0
[  267.250998][ T4319] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  267.277397][ T4319] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  267.291955][ T4319] usb 1-1: Product: syz
[  267.296190][ T4319] usb 1-1: Manufacturer: syz
[  267.348046][ T4319] usb 1-1: SerialNumber: syz
[  267.379274][ T4319] usb 1-1: config 0 descriptor??
[  267.462308][ T5771] loop4: detected capacity change from 0 to 512
[  267.473897][ T5771] EXT4-fs: Ignoring removed i_version option
[  267.494890][ T5771] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  267.526526][ T5771] EXT4-fs (loop4): 1 truncate cleaned up
[  267.532372][ T5771] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  268.508140][ T4319] snd-usb-audio: probe of 1-1:0.0 failed with error -22
[  268.796264][ T4266] udevd[4266]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  268.813840][ T5778] netlink: 10504 bytes leftover after parsing attributes in process `syz.1.411'.
[  268.834976][ T4319] usb 1-1: USB disconnect, device number 4
[  269.290316][ T4251] EXT4-fs (loop4): unmounting filesystem.
[  269.405350][ T5796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.413'.
[  269.414665][ T5796] netlink: 'syz.2.413': attribute type 5 has an invalid length.
[  269.433416][ T5796] netlink: 20 bytes leftover after parsing attributes in process `syz.2.413'.
[  270.637194][   T93] block nbd1: Attempted send on invalid socket
[  270.644113][   T93] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[  270.654489][ T5806] SQUASHFS error: Failed to read block 0x0: -5
[  270.660707][ T5806] unable to read squashfs_super_block
[  273.658627][ T5826] kernel profiling enabled (shift: 63)
[  273.691267][ T5826] profiling shift: 63 too large
[  276.933664][   T52] block nbd0: Attempted send on invalid socket
[  276.939905][   T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[  276.965428][ T5857] SQUASHFS error: Failed to read block 0x0: -5
[  276.991856][ T5857] unable to read squashfs_super_block
[  283.775916][   T93] block nbd2: Attempted send on invalid socket
[  283.782207][   T93] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[  283.792143][ T5910] SQUASHFS error: Failed to read block 0x0: -5
[  283.798361][ T5910] unable to read squashfs_super_block
[  285.059668][ T5918] 9pnet_fd: Insufficient options for proto=fd
[  286.969917][ T5931] loop1: detected capacity change from 0 to 512
[  287.062892][ T5931] EXT4-fs: Ignoring removed i_version option
[  287.262651][ T5931] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  287.420353][ T5931] EXT4-fs (loop1): 1 truncate cleaned up
[  287.452913][ T5931] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  287.578840][ T5931] 
[  287.581241][ T5931] ======================================================
[  287.588281][ T5931] WARNING: possible circular locking dependency detected
[  287.595342][ T5931] 6.1.141-syzkaller #0 Not tainted
[  287.600444][ T5931] ------------------------------------------------------
[  287.607455][ T5931] syz.1.450/5931 is trying to acquire lock:
[  287.613373][ T5931] ffff888071226850 (&sb->s_type->i_mutex_key#8/1){+.+.}-{3:3}, at: ext4_xattr_inode_lookup_create+0x18b5/0x1d10
[  287.625284][ T5931] 
[  287.625284][ T5931] but task is already holding lock:
[  287.632666][ T5931] ffff8880712252c8 (&ei->i_data_sem/3){++++}-{3:3}, at: ext4_setattr+0x13d4/0x19f0
[  287.642041][ T5931] 
[  287.642041][ T5931] which lock already depends on the new lock.
[  287.642041][ T5931] 
[  287.652476][ T5931] 
[  287.652476][ T5931] the existing dependency chain (in reverse order) is:
[  287.661507][ T5931] 
[  287.661507][ T5931] -> #1 (&ei->i_data_sem/3){++++}-{3:3}:
[  287.669360][ T5931]        down_write+0x36/0x60
[  287.674055][ T5931]        ext4_xattr_inode_lookup_create+0x15c4/0x1d10
[  287.680852][ T5931]        ext4_xattr_ibody_set+0x1fe/0x690
[  287.686596][ T5931]        ext4_xattr_set_handle+0xa7c/0x12b0
[  287.692520][ T5931]        ext4_xattr_set+0x22a/0x320
[  287.697726][ T5931]        __vfs_setxattr+0x3e0/0x420
[  287.702932][ T5931]        __vfs_setxattr_noperm+0x129/0x5e0
[  287.708747][ T5931]        vfs_setxattr+0x168/0x2f0
[  287.713792][ T5931]        setxattr+0x2b2/0x2d0
[  287.718468][ T5931]        path_setxattr+0x142/0x280
[  287.723603][ T5931]        __x64_sys_setxattr+0xb7/0xd0
[  287.728995][ T5931]        do_syscall_64+0x4c/0xa0
[  287.733955][ T5931]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  287.740382][ T5931] 
[  287.740382][ T5931] -> #0 (&sb->s_type->i_mutex_key#8/1){+.+.}-{3:3}:
[  287.749170][ T5931]        __lock_acquire+0x2cf8/0x7c50
[  287.754562][ T5931]        lock_acquire+0x1b4/0x490
[  287.759615][ T5931]        down_write+0x36/0x60
[  287.764309][ T5931]        ext4_xattr_inode_lookup_create+0x18b5/0x1d10
[  287.771104][ T5931]        ext4_xattr_block_set+0x23a/0x32a0
[  287.776934][ T5931]        ext4_expand_extra_isize_ea+0x109b/0x19b0
[  287.783370][ T5931]        __ext4_expand_extra_isize+0x301/0x3e0
[  287.789528][ T5931]        __ext4_mark_inode_dirty+0x47f/0x770
[  287.795512][ T5931]        ext4_setattr+0x1457/0x19f0
[  287.800710][ T5931]        notify_change+0xc74/0xf40
[  287.805933][ T5931]        do_truncate+0x197/0x220
[  287.810900][ T5931]        path_openat+0x27f2/0x2e70
[  287.816011][ T5931]        do_filp_open+0x1c1/0x3c0
[  287.821034][ T5931]        do_sys_openat2+0x142/0x490
[  287.826238][ T5931]        __x64_sys_openat+0x135/0x160
[  287.831614][ T5931]        do_syscall_64+0x4c/0xa0
[  287.836555][ T5931]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  287.842979][ T5931] 
[  287.842979][ T5931] other info that might help us debug this:
[  287.842979][ T5931] 
[  287.853198][ T5931]  Possible unsafe locking scenario:
[  287.853198][ T5931] 
[  287.860648][ T5931]        CPU0                    CPU1
[  287.866008][ T5931]        ----                    ----
[  287.871370][ T5931]   lock(&ei->i_data_sem/3);
[  287.875963][ T5931]                                lock(&sb->s_type->i_mutex_key#8/1);
[  287.884036][ T5931]                                lock(&ei->i_data_sem/3);
[  287.891147][ T5931]   lock(&sb->s_type->i_mutex_key#8/1);
[  287.896697][ T5931] 
[  287.896697][ T5931]  *** DEADLOCK ***
[  287.896697][ T5931] 
[  287.904835][ T5931] 5 locks held by syz.1.450/5931:
[  287.909852][ T5931]  #0: ffff888075128460 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90
[  287.918997][ T5931]  #1: ffff888071225440 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: do_truncate+0x183/0x220
[  287.929270][ T5931]  #2: ffff8880712255e0 (mapping.invalidate_lock){++++}-{3:3}, at: ext4_setattr+0xe6f/0x19f0
[  287.939475][ T5931]  #3: ffff8880712252c8 (&ei->i_data_sem/3){++++}-{3:3}, at: ext4_setattr+0x13d4/0x19f0
[  287.949269][ T5931]  #4: ffff888071225108 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3fe/0x770
[  287.959558][ T5931] 
[  287.959558][ T5931] stack backtrace:
[  287.965454][ T5931] CPU: 0 PID: 5931 Comm: syz.1.450 Not tainted 6.1.141-syzkaller #0
[  287.973442][ T5931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  287.983527][ T5931] Call Trace:
[  287.986821][ T5931]  <TASK>
[  287.989758][ T5931]  dump_stack_lvl+0x168/0x22e
[  287.994456][ T5931]  ? load_image+0x3b0/0x3b0
[  287.998958][ T5931]  ? show_regs_print_info+0x12/0x12
[  288.004162][ T5931]  ? print_circular_bug+0x12b/0x1a0
[  288.009370][ T5931]  check_noncircular+0x274/0x310
[  288.014314][ T5931]  ? add_chain_block+0x940/0x940
[  288.019251][ T5931]  ? lockdep_lock+0xdc/0x1e0
[  288.023843][ T5931]  ? verify_lock_unused+0x140/0x140
[  288.029040][ T5931]  ? _find_first_zero_bit+0xcf/0x100
[  288.034324][ T5931]  __lock_acquire+0x2cf8/0x7c50
[  288.039177][ T5931]  ? __lock_acquire+0x7c50/0x7c50
[  288.044210][ T5931]  ? verify_lock_unused+0x140/0x140
[  288.049413][ T5931]  ? mark_buffer_dirty+0x2d8/0x7a0
[  288.054535][ T5931]  lock_acquire+0x1b4/0x490
[  288.059037][ T5931]  ? ext4_xattr_inode_lookup_create+0x18b5/0x1d10
[  288.065458][ T5931]  ? __might_sleep+0xd0/0xd0
[  288.070052][ T5931]  ? read_lock_is_recursive+0x10/0x10
[  288.075429][ T5931]  ? __ext4_mark_inode_dirty+0x4eb/0x770
[  288.081068][ T5931]  down_write+0x36/0x60
[  288.085226][ T5931]  ? ext4_xattr_inode_lookup_create+0x18b5/0x1d10
[  288.091677][ T5931]  ext4_xattr_inode_lookup_create+0x18b5/0x1d10
[  288.097937][ T5931]  ? ext4_xattr_ibody_set+0x690/0x690
[  288.103342][ T5931]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  288.109322][ T5931]  ? lock_chain_count+0x20/0x20
[  288.114180][ T5931]  ext4_xattr_block_set+0x23a/0x32a0
[  288.119505][ T5931]  ? __might_sleep+0xd0/0xd0
[  288.124108][ T5931]  ? __getblk_gfp+0x4f/0xb20
[  288.128729][ T5931]  ? xattr_find_entry+0x12b/0x2f0
[  288.133757][ T5931]  ? ext4_xattr_block_find+0x2b0/0x2b0
[  288.139218][ T5931]  ? ext4_xattr_block_find+0x241/0x2b0
[  288.144678][ T5931]  ext4_expand_extra_isize_ea+0x109b/0x19b0
[  288.150611][ T5931]  __ext4_expand_extra_isize+0x301/0x3e0
[  288.156249][ T5931]  __ext4_mark_inode_dirty+0x47f/0x770
[  288.161707][ T5931]  ext4_setattr+0x1457/0x19f0
[  288.166417][ T5931]  ? ext4_write_inode+0x5e0/0x5e0
[  288.171470][ T5931]  notify_change+0xc74/0xf40
[  288.176077][ T5931]  do_truncate+0x197/0x220
[  288.180506][ T5931]  ? aa_get_current_label+0x110/0x1d0
[  288.185886][ T5931]  ? put_page_bootmem+0x2c0/0x2c0
[  288.190925][ T5931]  ? ima_bprm_check+0x1f0/0x1f0
[  288.195782][ T5931]  ? bpf_lsm_path_truncate+0x5/0x10
[  288.200992][ T5931]  path_openat+0x27f2/0x2e70
[  288.205610][ T5931]  ? do_sys_openat2+0xcf/0x490
[  288.210380][ T5931]  ? __x64_sys_openat+0x135/0x160
[  288.215422][ T5931]  ? do_filp_open+0x3c0/0x3c0
[  288.220116][ T5931]  do_filp_open+0x1c1/0x3c0
[  288.224625][ T5931]  ? vfs_tmpfile+0x480/0x480
[  288.229225][ T5931]  ? _raw_spin_unlock+0x24/0x40
[  288.234083][ T5931]  ? alloc_fd+0x58f/0x630
[  288.238425][ T5931]  do_sys_openat2+0x142/0x490
[  288.243121][ T5931]  ? do_sys_open+0xe0/0xe0
[  288.247545][ T5931]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  288.253537][ T5931]  ? lock_chain_count+0x20/0x20
[  288.258400][ T5931]  __x64_sys_openat+0x135/0x160
[  288.263265][ T5931]  do_syscall_64+0x4c/0xa0
[  288.267689][ T5931]  ? clear_bhb_loop+0x60/0xb0
[  288.272368][ T5931]  ? clear_bhb_loop+0x60/0xb0
[  288.277050][ T5931]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  288.282960][ T5931] RIP: 0033:0x7f987d58e929
[  288.287414][ T5931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  288.307037][ T5931] RSP: 002b:00007f987e42b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  288.315460][ T5931] RAX: ffffffffffffffda RBX: 00007f987d7b5fa0 RCX: 00007f987d58e929
[  288.323438][ T5931] RDX: 0000000000000242 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  288.331415][ T5931] RBP: 00007f987d610b39 R08: 0000000000000000 R09: 0000000000000000
[  288.339395][ T5931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  288.347369][ T5931] R13: 0000000000000000 R14: 00007f987d7b5fa0 R15: 00007ffcd317c078
[  288.355350][ T5931]  </TASK>
[  289.794648][ T4253] EXT4-fs (loop1): unmounting filesystem.