last executing test programs:

6m47.960649539s ago: executing program 32 (id=11):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x583, &(0x7f0000000800)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0x8004587d, &(0x7f0000000080)={0x0, r1})
fchown(r0, 0x0, 0x0)

6m32.656696266s ago: executing program 33 (id=90):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x3, 0x7ffcfffc}]})
fremovexattr(r0, &(0x7f00000000c0)=@random={'btrfs.', '*%\xba@(${.]-%^\x00'})

6m27.055947461s ago: executing program 34 (id=121):
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x97, 0x2ae, &(0x7f0000000340)="$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")
openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)

6m12.128810888s ago: executing program 35 (id=204):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b19ccccf6bf531d9ec214627c11430", 0xf)

5m50.024967896s ago: executing program 36 (id=338):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b19ccccf6bf531d9ec214627c11430", 0xf)
r1 = accept4$alg(r0, 0x0, 0x0, 0x800)
sendmmsg$inet(r1, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="0d6886f71849fe7043a5265d8809a990aad0d5ab2459b6b609f53d86a1a12eaf195e6acafaaccb5a099f69f282aa6d444b0b7dc9b4770a24ee626fedde14994ff86da1f6d870e7c22fd2b787ed50f2e3ca4c92fdef9e0179fd2096ce8c0ec8bc5c0cf6b219fddd551e672bbce005b19bd216ee1b2e611df5926565681fd39346fca7847fed788a71fdf7b397398319", 0x8f}, {&(0x7f00000002c0)="6b84", 0x2}], 0x2, &(0x7f0000000800)=ANY=[], 0x1a0}}], 0x1, 0x0)

5m38.716094785s ago: executing program 37 (id=399):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x4000000)

5m38.671395179s ago: executing program 7 (id=401):
unshare(0x6020400)
r0 = openat$random(0xffffffffffffff9c, &(0x7f00000013c0), 0x300, 0x0)
ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000000c0)=ANY=[@ANYBLOB="fc9affff"])

5m38.565315987s ago: executing program 38 (id=401):
unshare(0x6020400)
r0 = openat$random(0xffffffffffffff9c, &(0x7f00000013c0), 0x300, 0x0)
ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000000c0)=ANY=[@ANYBLOB="fc9affff"])

5m25.70445075s ago: executing program 39 (id=462):
r0 = semget$private(0x0, 0x3, 0x2c1)
r1 = semget(0x1, 0x2, 0x200)
semtimedop(0x0, &(0x7f00000024c0)=[{0x2, 0x5, 0x1000}], 0x1, 0x0)
semtimedop(r0, &(0x7f0000002540)=[{0x4, 0x9, 0x1800}], 0x1, 0x0)
semop(r1, &(0x7f0000002600)=[{0x0, 0x0, 0x1800}], 0x1)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)

5m23.808898651s ago: executing program 40 (id=472):
syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000400), 0x1, 0xbaf, &(0x7f00000017c0)="$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")
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x3000)
fallocate(r0, 0x0, 0x0, 0x1000f4)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000007d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000840)
r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201)
pwritev2(r1, 0x0, 0x0, 0x7000, 0x0, 0x3)

4m56.997271433s ago: executing program 41 (id=591):
r0 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400})
ioctl$TUNSETTXFILTER(r0, 0x401054d5, &(0x7f0000000a80)=ANY=[])
r1 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102})

4m49.822671163s ago: executing program 42 (id=640):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1ec)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0)
syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xa0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x10000, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@metacopy_on}]})

4m0.050951931s ago: executing program 43 (id=1035):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000240)='./file0\x00')
fstatfs(0xffffffffffffffff, &(0x7f00000006c0)=""/82)

3m55.673725889s ago: executing program 4 (id=1083):
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x1, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfa}}, 0x10}, 0x1c)
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x4000000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xf32})
ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r0, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}})

3m55.548234669s ago: executing program 4 (id=1085):
r0 = epoll_create1(0x0)
r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x4e)
close(r1)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4)
sendto$inet(r2, &(0x7f0000000080)='v', 0x1, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000180), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno=', @ANYRESHEX=r0])

3m55.433562388s ago: executing program 4 (id=1087):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6e43be1712bf8b4dc", 0x20)
r1 = accept$alg(r0, 0x0, 0x0)
readv(r1, &(0x7f0000000740)=[{&(0x7f0000000500)=""/139, 0x8b}, {0x0}, {&(0x7f00000005c0)=""/254, 0xfe}], 0x3)
sendmmsg$alg(r1, &(0x7f0000005c40)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="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", 0x111}], 0x1, 0x0, 0x0, 0x44041}], 0x1, 0x4800)

3m54.451291886s ago: executing program 4 (id=1097):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

3m53.77996689s ago: executing program 4 (id=1100):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='xdp_exception\x00', r0}, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r3=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, r3}, 0x40)
syz_emit_ethernet(0xbc1, &(0x7f0000001880)={@broadcast, @random, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x22, 0xbb3, 0x66, 0x0, 0xe0, 0x2f, 0x0, @local, @local}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x1, {{0xc, 0x1, 0x80, 0x3, 0x1, 0x0, 0x3, 0x9}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x4, {{0x7, 0x2, 0x1, 0x3, 0x1, 0x0, 0x3, 0x4}, 0x2, {0x7, 0x1, 0x0, 0x5, 0x0, 0x0, 0x3, 0x1}}}, {0x8, 0x6558, 0x3, "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"}}}}}}, 0x0)

3m52.712928624s ago: executing program 4 (id=1110):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000280)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@acl}]}, 0x1, 0x42f, &(0x7f0000000940)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a)
fallocate(r0, 0x20, 0x0, 0x8000)

3m52.404181169s ago: executing program 44 (id=1110):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000280)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@acl}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a)
fallocate(r0, 0x20, 0x0, 0x8000)

3m43.057731682s ago: executing program 7 (id=1037):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x1d)
bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x10000}, 0xc)
close_range(r0, 0xffffffffffffffff, 0x0)

3m42.535291284s ago: executing program 7 (id=1166):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8a002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010100c00000000000000000000080"])

3m42.109942697s ago: executing program 7 (id=1172):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1, 0x22d, &(0x7f0000000740)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
creat(&(0x7f0000000300)='./bus\x00', 0x1a0)
mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0)
write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b)
rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00')

3m41.688805561s ago: executing program 7 (id=1181):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000200)={0x4, {{0xa, 0x4e23, 0x6, @local, 0x4}}, {{0xa, 0x4e23, 0x1000, @mcast1, 0x58f}}}, 0x108)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000180)="440f20c03505000000440f22c0f26df20f38f17a64b805000000b9e10d00000f01d9d8dd0f01728eb8010000000f01d94c0fc71d000000003ef245dbed410fc7f7", 0x41}], 0x1, 0x72, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@x86={0x57, 0x9, 0x36, 0x0, 0x0, 0x9, 0x3, 0x6, 0xe1, 0xe6, 0x6, 0xfa, 0x0, 0x5882, 0x1800, 0x0, 0x3, 0x1, 0x1, '\x00', 0x1, 0x9ae6})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3m41.07478583s ago: executing program 7 (id=1187):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000000, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000580)={0x7, 0x33, 0x1}, 0x7)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x2, 0x2, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil})
r3 = dup(r2)
ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000002c0)=0x10000)

3m40.656192653s ago: executing program 45 (id=1187):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000000, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000580)={0x7, 0x33, 0x1}, 0x7)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x2, 0x2, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil})
r3 = dup(r2)
ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000002c0)=0x10000)

2m30.826857426s ago: executing program 8 (id=1935):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000})
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

2m30.430384058s ago: executing program 8 (id=1939):
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@generic={0x91, 0x1, 0x1, 0x13}]}, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94)

2m30.019958s ago: executing program 8 (id=1943):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b00000007000000010001000600000001"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, 0x0, &(0x7f00000008c0)=r1}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)

2m29.854791464s ago: executing program 8 (id=1945):
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1, 0x22d, &(0x7f0000000740)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
creat(&(0x7f0000000300)='./bus\x00', 0x1a0)
mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0)
write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b)
rename(0x0, &(0x7f0000000200)='./file0\x00')

2m29.418126028s ago: executing program 6 (id=1947):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x3ea, 0xb, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2a6, 0x0, 0x0, 0x0, 0x3}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x401}, {0x85, 0x0, 0x0, 0xbba}}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x7d2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2m29.399385249s ago: executing program 8 (id=1948):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b19ccccf6bf531d9ec214627c11430c1", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x800)
sendmmsg$inet(r1, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="4253898f1853570ab2c1edf3f2e700", 0xf}, {&(0x7f00000001c0)="1d", 0x1}], 0x2}}], 0x1, 0x0)

2m29.178453627s ago: executing program 6 (id=1951):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0)
syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(0xffffffffffffffff, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x800000, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}})

2m28.932473977s ago: executing program 6 (id=1954):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd24, 0x25dffbf8, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040)

2m28.77200654s ago: executing program 8 (id=1955):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b00000007000000010001000600000001"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, 0x0, &(0x7f00000008c0)=r1}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)

2m28.413927918s ago: executing program 46 (id=1955):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b00000007000000010001000600000001"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, 0x0, &(0x7f00000008c0)=r1}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)

2m28.39024349s ago: executing program 6 (id=1958):
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="646f74732c646f74732c6e6f636173652c73686f77657865632c616c6c6f775f7574696d653d30303030303030303030303030303030303030303031312c0078dbf2a38cfdd691aa49974aa8b89366b8fc5030f440fecda030e3e12119f29194cf0196694f368823207ff8e15b6f1b613ee04d109ccec8ede3967c50d556a250c1ff79fef90455f90650a2a7b5eb07ddea340083486f00526aa018d8e94afeeb481e55a3aef13d28b85e1167602def5c6f8708b87c48c2426e2097bc6aaecd3bb0e3a30723c35fc2f7eccce2525c3654f701f473c13ca4a805a4f8e7524dedc4295758858cad71915d433e556ba304e59f2c077e66eb62ee892e9083e27599edc49d304fc38e1f707f24e3745a0b7be088ab04f6c50f938489addcc4955c1e19a3c6ee955b5ab3737e8ed507fa6509bb4abc74234c068e2163400c1e3be535837ad3dd4f1635e175aa378877973b3c6047e2e35cec6b03be1d86cc6243156392b027f9c6e6890b96ecfbece7a1b7"], 0x1, 0x22d, &(0x7f0000000740)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
creat(&(0x7f0000000300)='./bus\x00', 0x1a0)
mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0)
write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b)
rename(0x0, &(0x7f0000000200)='./file0\x00')

2m27.995965191s ago: executing program 6 (id=1961):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1008413, &(0x7f0000000000)={[{@noblock_validity}, {@barrier}]}, 0x0, 0x517, &(0x7f00000000c0)="$eJzs3c9vG1kdAPDvOHG2adJNFjjASuwu7KK0gtrJRrsb9VCKhOBUCSj3EhIniuLEVey0TVTRVPwBSAgBEie4cEHiD0BClbhwREiV4AwCBELQwgEk6CDb4zR17CS0rp0mn480nffDM9/3ks543sxkJoBT60o2PU7T9EJETGTluWz6ZD2zE/FWRDx6eGehPiWRptf+lkSSlbXWlTa8EmPNRRor+MoXI76e7I9b3dpenS+XSxtZvlhbu1Gsbm1fXFmbXy4tl9ZnZ2fen/tg7r256efp3tJYljgXEZc//6fvfuvHX7j888/c+v31v5z/RtJs8932fvx/hg+sbf4883GmbZGNZwt2LA3vSXT4VXd0L/svAgBAf9WPSz+UHedfiIkYOuR4FgAAAHj5pJ8dj/8krWt3+4x0KQcAAABeIrmIGI8kV8ju9x2PXK5QiMY9vB+Js7lypVr79FJlc32xXhcxGfnc0kq5NJ3d2zoZ+aSen2mkn+TfbcvPRsRrEfGdidFGvrBQKS8O+uQHAAAAnBJjbeP/f040x/8AAADACTM56AYAAAAAL5zxPwAAAJx8xv8AAABwon3p6tX6lLbef714c2tztXLz4mKpulpY21woLFQ2bhSWK5XlxjP71g5c2e6rA9c3bxdrpWqtWN3avr5W2VyvXV95+hXYAAAAQP+89ub93yYRsXNpNEYvjTbKRvbU/zt7T8DAGgi8MLun7CLJ5iP7P/S7V5vzP/apUUBfDA26AcDADA+6AcDA5AfdAGDgkkPqu96886ts/onetgcAAOi9qY89uf6/03b9P3fgkjsHVwPHno0YTi/X/+H0alz/73DLX0cOFuBEyTsCgFPvua//H8rfEAEAwKCNN6YkV8hO741HLlcoRJxrvBYgnyytlEvTEfFqRPxmIv9KPT/TWDI5dMwAAAAAAAAAAAAAAAAAAAAAAAAAADSlaRIpAAAAcKJF5P6c/KL5LP+piXfG288PjCT/mojsFaG3fnDte7fna7WNmXr533fLa9/Pyt8dxBkMAAAAoF1rnN4axwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABALz16eGehNfUz7l8/FxGTneIPx5nG/EzkI+LsP5IY3rNcEhFDPYi/cy8iPtopflJv1m7ITvFHX3z8mMx+Cp3ij/UgPpxm9+v7nyudtr9cvNWYd97+hiOeyj+r7vu/2N3/DXXZ/s8dMcbrD35a7Br/XsTrw533P634SZf4bx8x/te+ur3drS79YcRUx++f5KlYxdrajWJ1a/viytr8cmm5tD47O/P+3Adz781NF5dWyqXs344xvv3xnz0+qP9nu8SfPKT/7xyx//99cPvhh5vJfKf459/uEP+XP8o+sT9+Lvvu+1SWrtdPtdI7zfReb/zk128c1P/FLv0/7Pd//oj9v/Dlb/7hiB8FAPqgurW9Ol8ulzZObKI+Sj8GzZA4hom7+6vejK5LJcnBK0zTNK1vU8/RsKR79P4kkt2SQe+ZAACAXnty9D/olgAAAAAAAAAAAAAAAAAAAMDp1Y/nirXH3NlNJb14hDYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQE/8LwAA//9QUOfn")
r0 = socket(0x2, 0x2, 0x1)
bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e)
r1 = socket(0x2, 0x2, 0x1)
bind$unix(r1, &(0x7f0000000000)=@abs, 0x6e)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00')
preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/170, 0xaa}], 0x1, 0x9f, 0x106)

2m27.602387443s ago: executing program 6 (id=1962):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_read_part_table(0x635, &(0x7f0000000000)="$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")
r2 = dup(r1)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
rseq(0x0, 0x0, 0x20000000, 0x0)
openat$null(0xffffffffffffff9c, 0x0, 0x121140, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x5e0, 0x0, 0x2e0, 0x428, 0x2e0, 0x2e0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x4]}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x640)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28}, 0x94)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

2m27.066178235s ago: executing program 47 (id=1962):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_read_part_table(0x635, &(0x7f0000000000)="$eJzs3D9oXeUbB/DvSe899yaFtr8fTl1SncViZ28NSHqpdKp061IVJFQc4lSx5Ea6mCGDg7NLEbLUumjo4KAt4iROoYNacRWkqNQiPXLuOfdPBEFsOwifz5Dzvs953vd5n5yTMSf8py2kmxTjYS+dJMdf/kvGZiYJ6df5Sapue+/czuqp01VVVUWdcz7dPPn5oetJOu2S/nSbqqo2ppOTufrB0o13i1F353Zd9ObWgTq82BzjSPL0wbI/3mZuh1TVvoP1HuXvgX/n2uBWUVwp29lTvzxYST76efXs7pmt966/2IY3ki+T+vm/U78Xk+y3cvHYhc54WD/lN+f3/bW5lLPI7HEvprPvDKMr68PtlcHa3iRwdLjz6WvP/X7sRqoT+arsLExuFLP9ymT08O3X/R+u3/7tS4O1veHlxemNJ97//xdZbid3qypH6pL/y/hPZ/kRVAYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4HG4NriVZDTcTtb2hr02unp298xWmeSFV/tt6Pj8qgPt9WIu3KmvG1lPfvgk3fmkov4xjiyku9LEvl+unhkPOpP6vcVmcGmwtje8v5TcefbB0WGzKjc/OzErtzHdeTfPt6N7VWM82fy7JtsS1eEm7+v78/0XnWR9uD2uf/nHotM0/HExmh5zIcnrvbzSNFPdK9u1f8zaAAAAAAAAAAAAAAAAAAAAgIeyeur0G3fb8fl+kp/eXqjHVa/5L/diqdiX/20vWTyZXO2nGK0kuf3Sb+U3h7a+az8dMEovoyQHP9w81y4p920w/URAkap8nJ3xT/wZAAD//8Wbezo=")
r2 = dup(r1)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
rseq(0x0, 0x0, 0x20000000, 0x0)
openat$null(0xffffffffffffff9c, 0x0, 0x121140, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x5e0, 0x0, 0x2e0, 0x428, 0x2e0, 0x2e0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x4]}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x640)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28}, 0x94)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1m52.491614394s ago: executing program 0 (id=2205):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000100001002bbd70fdfcdb040000000000", @ANYRES32=r1, @ANYBLOB="fc3006000400000014001a80100002800c00018008002100"], 0x34}}, 0x4004090)

1m47.632120071s ago: executing program 0 (id=2229):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0)
r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r1, r2, 0x0)
mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x800000, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}})

1m47.079600585s ago: executing program 0 (id=2232):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000ffff23bd7000f8fbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b000100697036746e6c"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040040)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0)

1m45.896006149s ago: executing program 0 (id=2239):
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x10000, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[])
r1 = open_tree(0xffffffffffffff9c, 0x0, 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0)

1m45.535343318s ago: executing program 0 (id=2243):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x4}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000080)={0x6, 0x9, 0x0, 0x2, 0x81, 0x8, 0x0, 0x5}, &(0x7f00000000c0)={0x1, 0x0, 0x8, 0x3, 0x8, 0x7, 0x0, 0xfffffffffffffff8}, 0x0, &(0x7f0000000180)={0x77359400}, &(0x7f0000000300)={&(0x7f00000002c0)={[0xa]}, 0x8})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
syz_emit_ethernet(0x52, &(0x7f0000000380)=ANY=[], 0x0)

1m45.031031787s ago: executing program 0 (id=2250):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0, r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000340)="c1fc0a0869fd0e76753a00000400", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m44.734478401s ago: executing program 48 (id=2250):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0, r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000340)="c1fc0a0869fd0e76753a00000400", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

24.673721848s ago: executing program 1 (id=2520):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d)
capget(0x0, 0x0)
add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000640)={'fscrypt:', @desc2}, 0x0, 0x0, 0xfffffffffffffffd)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000d0000000000002e26ad7dea3a4a2180e82989dea9162e223c9398dcf3088b6b3604fedd2527e531fe979c086c8d59163fbd1108d066268560f17ce62314fc46b56e38b285d019e736b1"], &(0x7f0000002cc0)=""/4104, 0x26, 0x1008, 0x1}, 0x28)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80277fbb26618b2c, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0)

23.454307055s ago: executing program 1 (id=2522):
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588)
r1 = socket$inet6(0xa, 0x3, 0x2)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e24, 0x3, @empty}, 0x1c)
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0)

19.23668134s ago: executing program 9 (id=2530):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b19ccccf6bf531d9ec214627c11430c1", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x800)
sendmmsg$inet(r1, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="406251b897ee94087b1861cb980b7b1ddb42c878da85e32798ead6475ba0ed4d150822b5baaec541d7", 0x29}, {&(0x7f0000000080)="e02f", 0x2}, {&(0x7f00000007c0)="a57cd6a9b40662e00fa88d79435ebab4e5fe610341aed59e5296b1bd444cc3de97cf300440e28923eb78c96202e867ca42361f8e84f09749e8cabb869ad24eba3bc55cc8c79ae8ba1c9b4339cfdc7e44de429bd70f0000000000000e05f340f7eaf054569db853518d5fa95050fd20499a6b060531f281f337886ef55db7f169b5b0b5c4b87db4d007aae0b94554095c310899983238951c7c4687a1b3139275cf4fd659b4be1e68539d732a5594bf4674b5cbba667e1d93e7d76587cbed4ada5a25cd55a40d2562223b87e84004770334202d927cff90e230aebb64d743696b6458ba6518", 0xe5}], 0x3}}], 0x1, 0x0)

19.073849683s ago: executing program 9 (id=2531):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r3 = epoll_create1(0x0)
r4 = inotify_init1(0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10)
r7 = dup(r4)
epoll_pwait(r3, &(0x7f0000000180)=[{}], 0x1, 0xffffffff, 0x0, 0x2b)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r7, &(0x7f0000000140)={0x13})
r8 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$DCCPDIAG_GETSOCK(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket$inet(0x2, 0x2, 0x0)

15.679993433s ago: executing program 2 (id=2540):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@gettfilter={0x24, 0x2e, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x3}}}, 0x24}}, 0x0)

12.147901643s ago: executing program 2 (id=2543):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000001380)={[{@checkpoint_diasble}, {}, {@fsync_mode_posix}, {@prjjquota}, {@inline_xattr}, {@disable_roll_forward}, {@background_gc_on}, {@inline_dentry}, {@checkpoint_diasble}, {@user_xattr}, {@fsync_mode_strict}, {@adaptive_mode}, {@discard_unit_block}, {@extent_cache}]}, 0x1, 0x550e, &(0x7f0000001e00)="$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")
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d)
r6 = timerfd_create(0x0, 0x80000)
read(r6, &(0x7f0000000240)=""/123, 0x7b)
r7 = open(&(0x7f0000000140)='./file1\x00', 0x141242, 0x40)
pwrite64(r7, &(0x7f0000000940)='2', 0x1, 0x8000c61)
fallocate(r7, 0x8, 0x0, 0x10000)

11.993841056s ago: executing program 1 (id=2544):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
socket$key(0xf, 0x3, 0x2)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000180)=ANY=[], 0x2c}], 0x1}, 0x240400d1)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r2 = eventfd(0xc)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000c40))
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3ff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)

10.968277797s ago: executing program 9 (id=2547):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f00000005c0), 0x10)
recvmmsg(r1, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0xc251}], 0x1, 0x10002, 0x0)
sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0)

10.788195052s ago: executing program 2 (id=2548):
r0 = socket(0x10, 0x803, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
getpriority(0x0, r1)
connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140))
statx(0xffffffffffffffff, 0x0, 0x400, 0x200, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x28, 0x0, 0x0, 0x7ffff024}, {0x6, 0x0, 0x10}]}, 0x10)

10.477133276s ago: executing program 9 (id=2550):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x4}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000540)=@security={'security\x00', 0x64, 0x4, 0x2a0, 0x100000c, 0x158, 0x0, 0xc0, 0xffffffff, 0xffffffff, 0x278, 0x278, 0x278, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x1000000000000}, [@common=@inet=@dscp={{0x28}, {0x10, 0x1}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ip={@multicast2, @private=0xa010101, 0xff000000, 0xff, 'veth0_macvtap\x00', 'vcan0\x00', {0xff}, {0xff}, 0x21}, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7f, 0x9, 0x8004, 0x6, 0x1, 0x7f, 0x1, 0x40]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300)
pselect6(0x40, &(0x7f0000000080)={0x6, 0x9, 0x0, 0x2, 0x81, 0x8, 0x0, 0x5}, &(0x7f00000000c0)={0x1, 0x0, 0x8, 0x3, 0x8, 0x7, 0x0, 0xfffffffffffffff8}, 0x0, &(0x7f0000000180)={0x77359400}, &(0x7f0000000300)={&(0x7f00000002c0)={[0xa]}, 0x8})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, 0x0, 0x0)
syz_emit_ethernet(0x52, &(0x7f0000000380)=ANY=[], 0x0)

9.228014426s ago: executing program 9 (id=2553):
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @remote}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x4100000000000000)

9.099273086s ago: executing program 5 (id=2554):
pivot_root(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000440)='net/ip_tables_targets\x00')
umount2(&(0x7f0000000280)='./cgroup.cpu/cpuset.cpus\x00', 0x5)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r3}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r4}, 0x20)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
lseek(r5, 0x9, 0x0)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0)
unshare(0x64000600)

8.727994616s ago: executing program 1 (id=2556):
socket$unix(0x1, 0x2, 0x0)
ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x300, 0x0, &(0x7f0000000180)=[0x6bd1a312, 0x2ec66, 0x8, 0x8, 0x7, 0x800000000000009, 0x0, 0x1001, 0x10000, 0x100, 0x9004, 0x40000000000000, 0x3, 0x5, 0x5, 0x49, 0x3ff, 0x2, 0x0, 0xb, 0x8000000008, 0x4391, 0x1c1, 0x1000000003, 0x2, 0x2, 0x9, 0x7, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x9, 0x7, 0x23b, 0x3, 0x2, 0x8890, 0x8, 0x8, 0x6, 0x6, 0x3, 0xa3de, 0x4, 0x8, 0x5c3e, 0x622, 0x1, 0x5, 0xfffffffffffffff8, 0x1, 0xe, 0x7, 0x4, 0x100000000, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0x0, 0xd, 0x9, 0xe8, 0x80000000, 0xfffffffffffffc00, 0x2, 0x4, 0x2, 0xcdc, 0x7, 0x2, 0x3, 0x2, 0x5, 0xfff, 0x6, 0x4, 0x6, 0xab6, 0x8000000, 0x4, 0xfff, 0xffffffffffffff81, 0x9, 0x8000000000000000, 0x5, 0xff8, 0x5, 0x400000000008061d, 0x6, 0x8, 0xf6, 0x7, 0x6, 0x200, 0x7, 0xe53a, 0x30, 0x2, 0x2293332f, 0x6, 0x34, 0x0, 0xd, 0x2, 0x4000005, 0x2, 0x2, 0x7, 0x8, 0xfffd, 0xb, 0x8, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0x3ffc00000, 0x8, 0x3]})
ioctl$KVM_CAP_X86_GUEST_MODE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6, 0x3, 0x8000000000005, 0x180, 0x3, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x200, 0x9, 0x0, 0x6, 0x6, 0x100000000000bdb], 0xffff1001, 0x124182})
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x808d1, &(0x7f00000001c0)={0xa, 0x4e22, 0x1, @private0, 0x6}, 0x1c)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40})
ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000700)={[0x60000000002, 0x1000000000, 0x9d, 0x43, 0x2000001, 0x20002, 0x2004cb, 0x802, 0x1000000, 0x6904, 0x8, 0xdda, 0x3, 0x0, 0x6, 0x10000000000000], 0xdddd1000, 0x212})
ioctl$KVM_RUN(r0, 0xae80, 0x0)

7.750416063s ago: executing program 5 (id=2557):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000"], 0x48)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"})

6.997351743s ago: executing program 1 (id=2558):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
r1 = gettid()
socket$nl_xfrm(0x10, 0x3, 0x6)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = eventfd2(0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, 0x0, 0x0)
read$eventfd(r2, &(0x7f0000000040), 0x8)
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2b1245d, 0x0, 0xfc, 0x0, &(0x7f00000000c0))

6.748022093s ago: executing program 3 (id=2559):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6e43be1712bf8b4dc", 0x20)
r1 = accept$alg(r0, 0x0, 0x0)
readv(r1, &(0x7f0000000740), 0x0)
sendmmsg$alg(r1, &(0x7f0000005c40)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="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", 0x111}], 0x1, 0x0, 0x0, 0x44041}], 0x1, 0x4800)

6.357070164s ago: executing program 3 (id=2560):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r0}, 0x10)
syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x1, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @rand_addr=0x64010100}]}}}, @IFLA_MASTER={0x8, 0x3, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000000)

5.955856536s ago: executing program 1 (id=2561):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000001000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r4}, 0xc)
fchdir(0xffffffffffffffff)

5.65077339s ago: executing program 2 (id=2562):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6e43be1712bf8b4dc", 0x20)
r1 = accept$alg(r0, 0x0, 0x0)
readv(r1, &(0x7f0000000740)=[{&(0x7f0000000500)=""/139, 0x8b}, {&(0x7f0000000100)=""/116, 0x74}], 0x2)
sendmmsg$alg(r1, &(0x7f0000005c40)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="ceaaf6bd51d2672882ca41befb3a4a578485513759e92125d72e5499cb74e7008da2467d6f9169d5e32316c2ef3200eee8a7e8cc95d04086f092ed6234e23ee27ba73ef0e3a6c85870200175c6a3c9b1074bfd1bc797ca5823d761d6a3f1421237b746f2929b3d53656b23b78e2ee894220b730f24ce3203a9c8bef006795d902a71acf73824f7905a6d63451e7838b4600000000000000000000000000000000025b1dd9e3cab64f3c480e0c3c5b4374b421c5e0f8fd6c9db2a88d0c3e6824e86", 0xc1}], 0x1, 0x0, 0x0, 0x44041}], 0x1, 0x4800)

5.64995439s ago: executing program 3 (id=2563):
r0 = socket(0x10, 0x3, 0x0)
connect$netlink(r0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setpgid(0x0, 0x0)
syz_emit_ethernet(0x46, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x68, 0x30, 0x829, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xa}}]}, {0xff89}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0xc010}, 0x4044040)

4.456016535s ago: executing program 5 (id=2564):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0)
readv(r1, &(0x7f0000002140), 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x54)
chdir(&(0x7f0000000140)='./bus\x00')
pipe2$9p(&(0x7f0000000000)={<r2=>0xffffffffffffffff}, 0x0)
r3 = creat(&(0x7f0000000100)='./bus\x00', 0x110)
splice(r2, 0x0, r3, 0x0, 0x10000000000016, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={0x0}, 0x18)
socket$inet_udp(0x2, 0x2, 0x0)
socket$key(0xf, 0x3, 0x2)

4.387056241s ago: executing program 2 (id=2565):
r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000002600)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41f}}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000001c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x83, 0x2, '\x00\x00'}, 0x0, 0x0})

3.089136204s ago: executing program 5 (id=2566):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100))
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x80000000, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
sendmsg$inet(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4041)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = epoll_create1(0x0)
r2 = epoll_create1(0x80000)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet6_udplite(0xa, 0x2, 0x88)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa000000d})
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000400)={0xa})
epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0)
socket(0xa, 0x1, 0x0)
socket$inet(0x2, 0x802, 0x1)
setgroups(0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)=<r5=>0x0)
socket(0x1, 0x803, 0x0)
select(0x0, 0x0, 0x0, 0x0, 0x0)
timer_settime(r5, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)

3.038601788s ago: executing program 3 (id=2567):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018ed8, &(0x7f0000000180)={[{@sysvgroups}, {@noload}, {@nobh}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@norecovery}, {@errors_continue}, {@quota}]}, 0x1, 0x644, &(0x7f00000006c0)="$eJzs3c9rHG0dAPDvzCZ5kzS+6SsiNigGPLQgTZNarHqxrQd7KFiwBxEPDU1SQ7c/SFKwtdAEPCgoiHgt0ov/gHfp3ZsI6s2zUEUqFrR0ZWZnm81mN7ttsrtJ5vOBzT7zzLN5nm9mn8wzM/vsBFBas9mPNOJUxNubScR007qpqK+cLcq9+teTW9kjiVrtu/9MIinyGuWT4vlEsTAeEX+8EvHpyu561x89vrNYrdU9jTi3cffBufVHj8+u3l28vXx7+d7C+a9duDj/9YULC00N/XAniuer177z+V/85IdfXflT9WwSl+LG6I+XoiWOgzIbs/G2CLE5fyQiLmaJNn+Xo+YYhFBqleL9OBoRn43pqORLddOx+vOhNg7oq1olora3pFsB4KjSvaGsGuOAxrF9b8fBN/o8Khmcl5frB0C74x8pTjmM58dGk6+SpiOj+rmNkwdQf1bHmyfjz948mXkWO85DvH63dUYOoJ5ONrci4nPt4k/ytp3MI83iT3cc6ycRMR8RY0X7vrWPNiRN6X6ch9lLj/FXsvibt0MaEZeK5yz/ygfW33paa9DxA1BOLy4XO/LNbGl7/5eNPRrjn9ge/zxtvG5q/5dkcsPe/3Ue/zX29+P5uCdtGYdlY5br7X/laGvG33529Ved6q+P/2aeNR5Z/Y2x4CC83IqYaYn/p1mwxfgniz9pM/7Nity81Fsd3/7zP652Wjfs+GvPI063Pf7ZHpVmqT2uT55bWa0uz9d/tq3j93/4wW871d8+/o/6EGl72faf7BB/0/ZPW1+X/U0etP+VW60Zv7v+/G6n+qe6bv/072NJ/XhzrMj50dbGxtpCxFhyrShS5C9ubKyd3zveepnXtfx5oR7/mS+17/873v8tUU00/mX24MH37rzqtO5D3v9NF5Pf1npsQydZ/Evdt/+u/p/l/bLHOv7z/Ydf6LSuffzJvmICAAAAAACAskrza7BJOvcunaZzc/X5sp+JybR6f33jyyv3H95bijiTfx5yNI00yT8yMl1fTlZWq8sLxedhG8vnW5a/EhGfRMSvKxP58tyt+9WlYQcPAAAAAAAAAAAAAAAAAAAAh8SJYv5/4z7V/67U5/8DJdH9BnO77v8AHBP9vMEkcLjl/X+vXfzHg2sLMFj2/1Be+j+Ul/4P5aX/Q3np/1Be+j+Ul/4P5aX/AwAAAMCx9MkXX/w1iYjNb0zkj8xYsc6kXzjeRt+rdKVv7QAGT4+G8np36d9gH0qnp/H/f4svB+x/c4AhSNpl5oOD2t6d/0XbV27b2n/bAAAAAAAAAAAAAIC606c6z/9/v7nBwFFj2h+U1z7m//vqADjifPU/lJdjfKDLLP4Y77Si2/x/AAAAAAAAAAAAAODATOWPJJ0r5gJPRZrOzUV8KiJOxmiyslpdno+IjyPiL5XRj7LlhWE3GgAAAAAAAAAAAAAAAAAAAI6Z9UeP7yxWq8trzYn/7co53onGXVC7F671UGbPxDfjPV8VyeD/LBMRMfSN0rfESFNOErGZbflD0bC19TgczcgTQ/7HBAAAAAAAAAAAAAAAAAAAJdQ097i9md8MuEUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMHjb9//vkliarL+gp8I7E8OOEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4mv4fAAD//6AzO/k=")
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000002540)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000140)={0x0, 0x2, 0x7fffffff, 0x7ec, 0x2000010000, 0x2000000000002, 0x3, 0x0, 0x7ffc})

2.513904589s ago: executing program 3 (id=2568):
socket$unix(0x1, 0x2, 0x0)
ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x300, 0x0, &(0x7f0000000180)=[0x6bd1a312, 0x2ec66, 0x8, 0x8, 0x7, 0x800000000000009, 0x0, 0x1001, 0x10000, 0x100, 0x9004, 0x40000000000000, 0x3, 0x5, 0x5, 0x49, 0x3ff, 0x2, 0x0, 0xb, 0x8000000008, 0x4391, 0x1c1, 0x1000000003, 0x2, 0x2, 0x9, 0x7, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x9, 0x7, 0x23b, 0x3, 0x2, 0x8890, 0x8, 0x8, 0x6, 0x6, 0x3, 0xa3de, 0x4, 0x8, 0x5c3e, 0x622, 0x1, 0x5, 0xfffffffffffffff8, 0x1, 0xe, 0x7, 0x4, 0x100000000, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0x0, 0xd, 0x9, 0xe8, 0x80000000, 0xfffffffffffffc00, 0x2, 0x4, 0x2, 0xcdc, 0x7, 0x2, 0x3, 0x2, 0x5, 0xfff, 0x6, 0x4, 0x6, 0xab6, 0x8000000, 0x4, 0xfff, 0xffffffffffffff81, 0x9, 0x8000000000000000, 0x5, 0xff8, 0x5, 0x400000000008061d, 0x6, 0x8, 0xf6, 0x7, 0x6, 0x200, 0x7, 0xe53a, 0x30, 0x2, 0x2293332f, 0x6, 0x34, 0x0, 0xd, 0x2, 0x4000005, 0x2, 0x2, 0x7, 0x8, 0xfffd, 0xb, 0x8, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0x3ffc00000, 0x8, 0x3]})
ioctl$KVM_CAP_X86_GUEST_MODE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6, 0x3, 0x8000000000005, 0x180, 0x3, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x200, 0x9, 0x0, 0x6, 0x6, 0x100000000000bdb], 0xffff1001, 0x124182})
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x808d1, &(0x7f00000001c0)={0xa, 0x4e22, 0x1, @private0, 0x6}, 0x1c)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40})
ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000700)={[0x60000000002, 0x1000000000, 0x9d, 0x43, 0x2000001, 0x20002, 0x2004cb, 0x802, 0x1000000, 0x6904, 0x8, 0xdda, 0x3, 0x0, 0x6, 0x10000000000000], 0xdddd1000, 0x212})
ioctl$KVM_RUN(r0, 0xae80, 0x0)

2.090190244s ago: executing program 3 (id=2569):
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r3 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
socket$tipc(0x1e, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@mcast2, 0x0, 0x0, 0x1, 0x4, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xbd1, 0x0, 0x3}, {0x81, 0x2}, 0x1fffffc, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8000, 0x2b}, 0x0, @in6=@empty, 0x1, 0x0, 0x0, 0x7, 0x7, 0x0, 0x2}}, 0xe8)
sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xffe0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000d80)={[{@mblk_io_submit}, {@dioread_nolock}, {@bh}, {@errors_continue}, {@nouid32}, {@quota}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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")
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b)
fdatasync(r4)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r4)

1.968075333s ago: executing program 5 (id=2570):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6e43be1712bf8b4dc", 0x20)
r1 = accept$alg(r0, 0x0, 0x0)
readv(r1, &(0x7f0000000740), 0x0)
sendmmsg$alg(r1, &(0x7f0000005c40)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="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", 0x111}], 0x1, 0x0, 0x0, 0x44041}], 0x1, 0x4800)

1.805621776s ago: executing program 2 (id=2571):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r4, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x10)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000010850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="8c0000000001010400000000ffffff8802000000240001801400018008000100ac1414bb08000200ac1414bb0c00028005000100000000002400028014000180080001000000004008000200ac1414bb0c000280050001000000000008000740000000002800"], 0x8c}, 0x1, 0x600000000000000, 0x0, 0x40}, 0x0)

1.761843719s ago: executing program 5 (id=2572):
fsopen(&(0x7f0000000040)='sysfs\x00', 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000))
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000004c0)=0x8, 0x1, 0x0)
getpid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x1}, 0x18)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
readlinkat(r4, &(0x7f0000000380)='./mnt\x00', &(0x7f0000000180)=""/1, 0x1)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c)
sendto$inet6(r5, 0x0, 0x0, 0x20000045, 0x0, 0x0)
r6 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x2301)
ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x4, 0x40, &(0x7f0000000000)={0x40, 0x14, 0x8, 0x1}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x20000, 0x0})

0s ago: executing program 9 (id=2573):
fdatasync(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x4, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000140), 0x5, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='hrtimer_start\x00', r1}, 0x18)
timer_create(0x0, 0x0, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)

kernel console output (not intermixed with test programs):

: batadv_slave_0
[  255.981181][ T8196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  255.992677][ T8196] batman_adv: batadv0: Interface activated: batadv_slave_0
[  256.000560][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  256.016825][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  256.029723][ T8393] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  256.041379][ T8196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  256.060306][ T8196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  256.076526][ T8196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  256.087081][ T8196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  256.099016][ T8196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  256.109562][ T8196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  256.129079][ T8196] batman_adv: batadv0: Interface activated: batadv_slave_1
[  256.146604][ T5881] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  256.156865][ T5881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  256.174150][ T8196] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  256.190364][ T8196] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  256.199601][ T8196] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  256.211616][ T4266] Bluetooth: hci1: command 0x0419 tx timeout
[  256.227103][ T8196] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  256.350116][ T4360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  256.380838][ T4360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  256.390639][ T8393] 8021q: adding VLAN 0 to HW filter on device bond0
[  256.406070][ T4570] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  256.420871][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  256.429658][ T4570] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  256.432564][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  256.445778][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  256.458647][ T8393] 8021q: adding VLAN 0 to HW filter on device team0
[  256.468356][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  256.494038][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  256.522964][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  256.570589][   T51] bridge0: port 1(bridge_slave_0) entered blocking state
[  256.577891][   T51] bridge0: port 1(bridge_slave_0) entered forwarding state
[  256.622389][ T8625] 9pnet_fd: Insufficient options for proto=fd
[  256.642577][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  256.655310][ T8626] loop6: detected capacity change from 0 to 1024
[  256.662409][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  256.686107][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  256.705328][   T51] bridge0: port 2(bridge_slave_1) entered blocking state
[  256.712554][   T51] bridge0: port 2(bridge_slave_1) entered forwarding state
[  256.738758][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  256.748158][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  256.764415][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  256.772714][ T8626] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  256.802214][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  256.825727][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  256.834609][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  256.848443][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  256.857621][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  256.867013][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  256.884778][ T8393] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  256.914989][ T8393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  256.924994][ T5881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  256.944712][ T5881] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  256.968439][ T8626] ext4: Unknown parameter '/dev/net/tun'
[  257.002013][ T8633] tap0: tun_chr_ioctl cmd 1074025675
[  257.007571][ T8633] tap0: persist enabled
[  257.009912][ T8626] EXT4-fs (loop6): re-mounted. Quota mode: writeback.
[  257.292146][ T6691] EXT4-fs (loop6): unmounting filesystem.
[  257.578174][ T8658] loop7: detected capacity change from 0 to 512
[  257.962659][   T51] FAT-fs (loop7): Invalid FSINFO signature: 0x28c2ff80, 0x00000000 (sector = 1)
[  258.191021][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  258.199756][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  258.227294][ T8393] 8021q: adding VLAN 0 to HW filter on device batadv0
[  258.586541][ T4360] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.732091][ T4360] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.835091][ T4360] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.940003][ T4360] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.579369][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  259.600095][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  259.666173][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  259.691325][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  259.719823][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  259.742815][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  259.818065][ T4266] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  259.829218][ T4266] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  259.843215][ T4266] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  259.846171][ T8393] device veth0_vlan entered promiscuous mode
[  259.861588][ T4266] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  259.869440][ T4266] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  259.877176][ T4266] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  259.996538][ T8393] device veth1_vlan entered promiscuous mode
[  260.020554][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  260.187264][ T6175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  260.200979][ T6175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  260.240305][ T8393] device veth0_macvtap entered promiscuous mode
[  260.287823][ T8393] device veth1_macvtap entered promiscuous mode
[  260.394888][ T8393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  260.431669][ T8393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  260.455708][ T8393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  260.481633][ T8393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  260.491845][ T8393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  260.518865][ T8393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  260.545812][ T8393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  260.567568][ T8393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  260.592549][ T8393] batman_adv: batadv0: Interface activated: batadv_slave_0
[  260.762244][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  260.775168][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  260.819098][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  260.844604][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  260.872964][ T8393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  260.905859][ T8393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  260.929830][ T8393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  260.953765][ T8393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  260.969116][ T8393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  260.989892][ T8393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  261.019699][ T8393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  261.057556][ T8393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  261.087164][ T8393] batman_adv: batadv0: Interface activated: batadv_slave_1
[  261.262053][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  261.293825][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  261.356842][ T8770] device macvtap1 entered promiscuous mode
[  261.368603][ T8770] device vlan0 entered promiscuous mode
[  261.409658][ T8770] device vlan0 left promiscuous mode
[  261.889442][ T8393] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  261.927145][ T8393] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  261.956672][ T8393] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  261.966083][   T47] Bluetooth: hci0: command 0x0409 tx timeout
[  261.997352][ T8393] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  262.141187][ T8730] chnl_net:caif_netlink_parms(): no params data found
[  262.243446][ T4360] device hsr_slave_0 left promiscuous mode
[  262.251908][ T4360] device hsr_slave_1 left promiscuous mode
[  262.262799][ T4360] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  262.270266][ T4360] batman_adv: batadv0: Removing interface: batadv_slave_0
[  262.294369][ T4360] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  262.303442][ T4360] batman_adv: batadv0: Removing interface: batadv_slave_1
[  262.319098][ T4360] device bridge_slave_1 left promiscuous mode
[  262.339258][ T4360] bridge0: port 2(bridge_slave_1) entered disabled state
[  262.363408][ T4360] device bridge_slave_0 left promiscuous mode
[  262.374291][ T4360] bridge0: port 1(bridge_slave_0) entered disabled state
[  262.477177][ T4360] device veth1_macvtap left promiscuous mode
[  262.490460][ T4360] device veth0_macvtap left promiscuous mode
[  262.501868][ T4360] device veth1_vlan left promiscuous mode
[  262.507736][ T4360] device veth0_vlan left promiscuous mode
[  263.661012][ T8838] loop6: detected capacity change from 0 to 512
[  264.061604][   T47] Bluetooth: hci0: command 0x041b tx timeout
[  264.239718][ T4360] team0 (unregistering): Port device team_slave_1 removed
[  264.347939][ T4360] team0 (unregistering): Port device team_slave_0 removed
[  264.514491][ T4360] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  264.606301][ T4360] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  266.106225][ T4360] bond0 (unregistering): Released all slaves
[  266.121862][   T47] Bluetooth: hci0: command 0x040f tx timeout
[  266.301774][ T4570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  266.327022][ T4570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  266.388219][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  266.415816][ T4570] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  266.457217][ T4570] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  266.499529][ T8730] bridge0: port 1(bridge_slave_0) entered blocking state
[  266.506992][ T8730] bridge0: port 1(bridge_slave_0) entered disabled state
[  266.550426][ T8730] device bridge_slave_0 entered promiscuous mode
[  266.575191][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  266.615232][ T8730] bridge0: port 2(bridge_slave_1) entered blocking state
[  266.632083][ T8730] bridge0: port 2(bridge_slave_1) entered disabled state
[  266.652823][ T8730] device bridge_slave_1 entered promiscuous mode
[  266.756134][ T8730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  266.846117][ T8730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  267.020360][ T8730] team0: Port device team_slave_0 added
[  267.048183][ T8730] team0: Port device team_slave_1 added
[  267.212770][ T8730] batman_adv: batadv0: Adding interface: batadv_slave_0
[  267.261473][ T8730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  267.327926][ T8730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  267.350134][ T8966] loop2: detected capacity change from 0 to 7
[  267.353123][ T8730] batman_adv: batadv0: Adding interface: batadv_slave_1
[  267.398402][ T8966] Dev loop2: unable to read RDB block 7
[  267.404771][ T8730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  267.448169][ T8966]  loop2: unable to read partition table
[  267.464452][ T8966] loop2: partition table beyond EOD, truncated
[  267.479679][ T8966] loop_reread_partitions: partition scan of loop2 (ţ被xü—źŃŕ– ) failed (rc=-5)
[  267.511553][ T8730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  267.661315][ T8975] fuse: Bad value for 'fd'
[  267.691413][ T8730] device hsr_slave_0 entered promiscuous mode
[  267.715975][ T8730] device hsr_slave_1 entered promiscuous mode
[  267.722204][ T4266] Bluetooth: hci2: command 0x0406 tx timeout
[  267.768375][ T8730] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  267.785719][ T8730] Cannot create hsr debugfs directory
[  268.201739][   T47] Bluetooth: hci0: command 0x0419 tx timeout
[  268.580453][ T9014] fuse: Bad value for 'fd'
[  268.648120][ T8730] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  268.664714][ T8730] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  268.691206][ T8730] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  268.708538][ T9017] fuse: Bad value for 'fd'
[  268.716835][ T8730] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  268.985658][ T8730] 8021q: adding VLAN 0 to HW filter on device bond0
[  269.046154][ T5881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  269.074769][ T5881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  269.118556][ T8730] 8021q: adding VLAN 0 to HW filter on device team0
[  269.145147][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  269.173357][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  269.194258][   T38] bridge0: port 1(bridge_slave_0) entered blocking state
[  269.201558][   T38] bridge0: port 1(bridge_slave_0) entered forwarding state
[  269.268607][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  269.289635][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  269.336611][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  269.369930][   T38] bridge0: port 2(bridge_slave_1) entered blocking state
[  269.377144][   T38] bridge0: port 2(bridge_slave_1) entered forwarding state
[  269.401962][ T9044] loop2: detected capacity change from 0 to 7
[  269.409576][ T6768]  loop2:
[  269.418943][ T6768] loop2: partition table partially beyond EOD, truncated
[  269.426495][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  269.437526][ T9044]  loop2:
[  269.440614][ T9044] loop2: partition table partially beyond EOD, truncated
[  269.465187][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  269.535140][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  269.574218][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  269.632012][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  269.665661][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  269.692601][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  269.722679][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  269.746142][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  269.773445][ T9052] fuse: Bad value for 'fd'
[  269.780565][ T8730] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  269.809265][ T8730] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  269.839178][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  269.851918][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  269.894377][ T9055] fuse: Bad value for 'fd'
[  270.780537][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  270.792152][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  270.834564][ T8730] 8021q: adding VLAN 0 to HW filter on device batadv0
[  270.856133][ T9090] loop6: detected capacity change from 0 to 512
[  270.947572][ T9093] fuse: Bad value for 'fd'
[  272.012862][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  272.028779][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  272.078658][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  272.105536][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  272.135400][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  272.162704][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  272.187699][ T8730] device veth0_vlan entered promiscuous mode
[  272.220271][ T8730] device veth1_vlan entered promiscuous mode
[  272.296944][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  272.309467][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  272.329159][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  272.341230][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  272.356655][ T8730] device veth0_macvtap entered promiscuous mode
[  272.376338][ T8730] device veth1_macvtap entered promiscuous mode
[  272.401194][ T8730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  272.429761][ T8730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  272.446331][ T8730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  272.463272][ T8730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  272.481364][ T8730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  272.510434][ T8730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  272.539051][ T8730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  272.570078][ T8730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  272.609367][ T8730] batman_adv: batadv0: Interface activated: batadv_slave_0
[  272.633695][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  272.665336][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  272.677039][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  272.689440][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  272.701774][ T8730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  272.717771][ T8730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  272.728699][ T8730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  272.746065][ T8730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  272.757302][ T8730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  272.769019][ T8730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  272.779388][ T8730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  272.791087][ T8730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  272.804196][ T8730] batman_adv: batadv0: Interface activated: batadv_slave_1
[  272.842377][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  272.883262][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  272.914157][ T8730] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  272.953464][ T8730] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  272.972113][ T8730] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  272.987498][ T8730] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  273.227710][ T4567] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  273.271777][ T4567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  273.303035][ T4570] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  273.311334][ T4570] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  273.315616][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  273.382231][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  274.064172][ T9202] loop2: detected capacity change from 0 to 7
[  274.079524][ T6768] Dev loop2: unable to read RDB block 7
[  274.085650][ T6768]  loop2: unable to read partition table
[  274.092096][ T6768] loop2: partition table beyond EOD, truncated
[  274.099367][ T9202] Dev loop2: unable to read RDB block 7
[  274.114861][ T9202]  loop2: unable to read partition table
[  274.132171][ T9202] loop2: partition table beyond EOD, truncated
[  274.151879][ T9202] loop_reread_partitions: partition scan of loop2 (ţ被xü—źŃŕ– ) failed (rc=-5)
[  274.415464][ T9211] loop8: detected capacity change from 0 to 512
[  275.685524][ T9260] loop8: detected capacity change from 0 to 512
[  276.336567][ T9283] loop9: detected capacity change from 0 to 512
[  276.422081][ T9283] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  276.482630][ T9283] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  276.809250][ T8730] EXT4-fs (loop9): unmounting filesystem.
[  276.818774][ T9300] loop2: detected capacity change from 0 to 7
[  276.866776][ T6768] Dev loop2: unable to read RDB block 7
[  276.873271][ T6768]  loop2: unable to read partition table
[  276.906226][ T6768] loop2: partition table beyond EOD, truncated
[  276.952102][ T9300] Dev loop2: unable to read RDB block 7
[  276.971597][ T9300]  loop2: unable to read partition table
[  277.021321][ T9300] loop2: partition table beyond EOD, truncated
[  277.061800][ T9300] loop_reread_partitions: partition scan of loop2 (ţ被xü—źŃŕ– ) failed (rc=-5)
[  277.171723][ T9314] loop8: detected capacity change from 0 to 1024
[  277.237414][ T9314] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  277.291747][ T9314] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  277.378900][ T9314] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5915: Corrupt filesystem
[  277.423289][ T9314] EXT4-fs error (device loop8): ext4_dirty_inode:6119: inode #15: comm syz.8.1376: mark_inode_dirty error
[  277.447971][ T9314] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5915: Corrupt filesystem
[  277.470180][ T9314] EXT4-fs error (device loop8): ext4_dirty_inode:6119: inode #15: comm syz.8.1376: mark_inode_dirty error
[  277.489424][ T9314] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5915: Corrupt filesystem
[  277.507584][ T9314] EXT4-fs error (device loop8): ext4_dirty_inode:6119: inode #15: comm syz.8.1376: mark_inode_dirty error
[  277.529052][ T9314] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5915: Corrupt filesystem
[  277.571081][ T9314] EXT4-fs error (device loop8): ext4_dirty_inode:6119: inode #15: comm syz.8.1376: mark_inode_dirty error
[  277.621572][ T9314] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5915: Corrupt filesystem
[  277.645278][ T9314] EXT4-fs error (device loop8): ext4_dirty_inode:6119: inode #15: comm syz.8.1376: mark_inode_dirty error
[  277.708844][ T9314] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117
[  277.722677][ T9314] EXT4-fs (loop8): This should not happen!! Data will be lost
[  277.722677][ T9314] 
[  277.822952][ T4567] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  277.846836][ T4567] EXT4-fs (loop8): This should not happen!! Data will be lost
[  277.846836][ T4567] 
[  277.876855][ T8393] EXT4-fs (loop8): unmounting filesystem.
[  277.979302][ T9336] Process accounting resumed
[  279.856778][ T9386] loop8: detected capacity change from 0 to 1024
[  279.885794][ T9386] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  279.899556][ T9386] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  279.933187][ T9386] EXT4-fs error (device loop8): ext4_ext_check_inode:520: inode #2: comm syz.8.1400: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 2, max 1(4), depth 0(0)
[  280.011875][ T9386] EXT4-fs (loop8): no journal found
[  280.868706][ T9386] loop8: detected capacity change from 0 to 1024
[  280.962278][ T9386] EXT4-fs: Ignoring removed bh option
[  281.116968][ T9386] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  281.235151][ T9412] fuse: Bad value for 'fd'
[  281.408471][ T8393] EXT4-fs (loop8): unmounting filesystem.
[  283.047141][ T9456] loop6: detected capacity change from 0 to 512
[  283.124826][ T9456] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  283.134839][ T9459] fuse: Bad value for 'fd'
[  283.255427][ T9456] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  283.273060][ T9456] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  283.763743][ T6691] EXT4-fs (loop6): unmounting filesystem.
[  283.969976][ T9493] fuse: Bad value for 'fd'
[  284.232869][ T9502] fuse: Bad value for 'fd'
[  285.292841][ T9536] fuse: Bad value for 'fd'
[  287.073612][ T9601] loop8: detected capacity change from 0 to 512
[  287.204531][ T9601] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  287.247022][ T9601] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  287.374950][ T8393] EXT4-fs (loop8): unmounting filesystem.
[  288.550020][ T9647] 9pnet_fd: Insufficient options for proto=fd
[  289.408787][ T9687] 9pnet_fd: Insufficient options for proto=fd
[  291.331445][    C0] sched: RT throttling activated
[  291.992639][ T9725] 9pnet_fd: Insufficient options for proto=fd
[  296.108338][ T9882] 9pnet_fd: Insufficient options for proto=fd
[  298.340240][ T9960] loop6: detected capacity change from 0 to 512
[  298.424647][ T9960] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  298.449637][ T9960] ext4 filesystem being mounted at /178/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  298.481348][ T9960] EXT4-fs error (device loop6): ext4_do_update_inode:5254: inode #2: comm syz.6.1592: corrupted inode contents
[  298.525920][ T9960] EXT4-fs error (device loop6): ext4_dirty_inode:6119: inode #2: comm syz.6.1592: mark_inode_dirty error
[  298.590518][ T9960] EXT4-fs error (device loop6): ext4_do_update_inode:5254: inode #2: comm syz.6.1592: corrupted inode contents
[  298.693067][ T9960] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #2: comm syz.6.1592: mark_inode_dirty error
[  299.191793][ T6691] EXT4-fs (loop6): unmounting filesystem.
[  301.558990][T10068] loop8: detected capacity change from 0 to 512
[  301.604691][T10068] EXT4-fs: Ignoring removed orlov option
[  301.635742][T10068] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem
[  301.670548][T10068] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002]
[  301.709740][T10068] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2195: inode #15: comm syz.8.1628: corrupted in-inode xattr
[  301.816008][T10068] EXT4-fs error (device loop8): ext4_orphan_get:1405: comm syz.8.1628: couldn't read orphan inode 15 (err -117)
[  301.889270][T10068] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  302.036128][T10068] EXT4-fs error (device loop8): ext4_check_dx_root:2266: inode #2: comm syz.8.1628: Corrupt dir, invalid name_len for '..', running e2fsck is recommended
[  302.189635][ T8393] EXT4-fs (loop8): unmounting filesystem.
[  302.375727][T10104] loop9: detected capacity change from 0 to 512
[  302.480179][T10104] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  302.517394][T10104] ext4 filesystem being mounted at /62/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  302.604924][T10104] "syz.9.1639" (10104) uses obsolete ecb(arc4) skcipher
[  302.892660][ T8730] EXT4-fs (loop9): unmounting filesystem.
[  304.261253][T10180] loop6: detected capacity change from 0 to 512
[  304.337990][T10180] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  304.352424][T10180] ext4 filesystem being mounted at /190/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  304.578123][ T6691] EXT4-fs (loop6): unmounting filesystem.
[  305.519678][T10223] loop9: detected capacity change from 0 to 512
[  305.607817][T10223] EXT4-fs error (device loop9): ext4_orphan_get:1400: inode #15: comm syz.9.1679: iget: bad extended attribute block 1
[  305.635671][T10223] EXT4-fs error (device loop9): ext4_orphan_get:1405: comm syz.9.1679: couldn't read orphan inode 15 (err -117)
[  305.696234][T10223] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  305.792461][T10223] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters
[  305.928337][ T8730] EXT4-fs (loop9): unmounting filesystem.
[  306.655953][T10266] program syz.6.1689 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  307.713412][T10308] overlayfs: failed to clone upperpath
[  308.549190][T10341] loop6: detected capacity change from 0 to 512
[  308.681672][ T4266] Bluetooth: hci3: command 0x0406 tx timeout
[  308.702188][T10350] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  308.800899][T10341] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  308.831582][T10341] ext4 filesystem being mounted at /199/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  309.084693][ T6691] EXT4-fs (loop6): unmounting filesystem.
[  309.291249][T10374] loop6: detected capacity change from 0 to 512
[  310.009938][T10398] loop9: detected capacity change from 0 to 2048
[  310.088562][T10398]  loop9: p1 < > p3
[  310.095416][T10398] loop9: p3 size 134217728 extends beyond EOD, truncated
[  310.932702][T10436] loop6: detected capacity change from 0 to 256
[  311.108510][T10442] overlayfs: failed to clone upperpath
[  311.166932][T10439] loop8: detected capacity change from 0 to 4096
[  311.255959][T10439] EXT4-fs (loop8): Test dummy encryption mode enabled
[  311.302874][T10439] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  311.338291][T10439] System zones: 0-5
[  311.368842][T10439] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  311.568158][ T8393] EXT4-fs (loop8): unmounting filesystem.
[  312.420026][T10496] loop9: detected capacity change from 0 to 512
[  313.466509][T10537] loop6: detected capacity change from 0 to 512
[  314.326100][T10561] kvm: pic: non byte read
[  314.637879][T10578] loop9: detected capacity change from 0 to 512
[  315.837404][T10623] loop6: detected capacity change from 0 to 512
[  316.845971][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  316.852537][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  317.787331][T10687] loop6: detected capacity change from 0 to 128
[  317.912726][T10687] syz.6.1826: attempt to access beyond end of device
[  317.912726][T10687] loop6: rw=34817, sector=102, nr_sectors = 32 limit=128
[  318.047153][T10693] loop9: detected capacity change from 0 to 2048
[  318.158459][T10693] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  318.200039][T10693] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  318.427439][ T8730] EXT4-fs (loop9): unmounting filesystem.
[  322.458188][T10833] 9pnet_fd: Insufficient options for proto=fd
[  322.525619][   T27] audit: type=1326 audit(1756371023.523:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10837 comm="syz.5.1875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3d5f8ebe9 code=0x7ffc0000
[  322.603100][   T27] audit: type=1326 audit(1756371023.563:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10837 comm="syz.5.1875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3d5f8ebe9 code=0x7ffc0000
[  322.712764][   T27] audit: type=1326 audit(1756371023.563:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10837 comm="syz.5.1875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3d5f8ebe9 code=0x7ffc0000
[  322.818107][   T27] audit: type=1326 audit(1756371023.563:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10837 comm="syz.5.1875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fa3d5f8ebe9 code=0x7ffc0000
[  322.832001][T10846] device ipvlan1 entered promiscuous mode
[  322.848306][   T27] audit: type=1326 audit(1756371023.563:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10837 comm="syz.5.1875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3d5f8ebe9 code=0x7ffc0000
[  322.892721][   T27] audit: type=1326 audit(1756371023.563:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10837 comm="syz.5.1875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3d5f8ebe9 code=0x7ffc0000
[  322.943075][   T27] audit: type=1326 audit(1756371023.563:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10837 comm="syz.5.1875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa3d5f8ebe9 code=0x7ffc0000
[  322.974440][T10845] device ipvlan1 left promiscuous mode
[  322.979449][   T27] audit: type=1326 audit(1756371023.563:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10837 comm="syz.5.1875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa3d5f8ebe9 code=0x7ffc0000
[  323.508027][T10865] loop9: detected capacity change from 0 to 512
[  323.855513][T10876] 9pnet_fd: Insufficient options for proto=fd
[  323.981049][T10880] loop9: detected capacity change from 0 to 128
[  324.015399][T10880] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  324.087623][T10880] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  325.309025][ T4567] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  325.753361][T10913] 9pnet_fd: Insufficient options for proto=fd
[  326.099473][T10925] overlayfs: failed to clone upperpath
[  326.380030][T10932] loop6: detected capacity change from 0 to 2048
[  326.507458][T10932]  loop6: p1 < > p3
[  326.542174][T10932] loop6: p3 size 134217728 extends beyond EOD, truncated
[  326.602831][T10942] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  326.674507][T10942] overlayfs: failed to set xattr on upper
[  326.680397][T10942] overlayfs: ...falling back to index=off,metacopy=off.
[  326.733044][T10947] 9pnet_fd: Insufficient options for proto=fd
[  326.779018][T10951] loop8: detected capacity change from 0 to 128
[  327.706397][T10988] 9pnet_fd: Insufficient options for proto=fd
[  327.870254][T10993] loop8: detected capacity change from 0 to 128
[  327.911833][T10993] EXT4-fs: Ignoring removed nobh option
[  327.981180][T10993] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  327.999384][T10993] ext4 filesystem being mounted at /128/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  328.300544][ T8393] EXT4-fs (loop8): unmounting filesystem.
[  328.376057][T11004] loop6: detected capacity change from 0 to 1024
[  328.506544][T11004] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  328.530748][T11004] ext4 filesystem being mounted at /241/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  328.659561][   T27] audit: type=1800 audit(1756371029.653:51): pid=11004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1929" name="file1" dev="loop6" ino=15 res=0 errno=0
[  328.813801][ T6691] EXT4-fs (loop6): unmounting filesystem.
[  329.078656][T11031] loop6: detected capacity change from 0 to 512
[  329.105811][T11033] 9pnet_fd: Insufficient options for proto=fd
[  329.139503][T11031] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  329.264537][T11031] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  329.302035][T11031] ext4 filesystem being mounted at /242/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  329.647889][ T6691] EXT4-fs (loop6): unmounting filesystem.
[  329.870723][T11056] loop8: detected capacity change from 0 to 512
[  330.307823][ T4360] FAT-fs (loop8): Invalid FSINFO signature: 0x28c2ff80, 0x00000000 (sector = 1)
[  330.567274][T11071] 9pnet_fd: Insufficient options for proto=fd
[  330.866130][ T6197] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  331.044236][ T6197] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  331.265414][ T6197] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  331.283493][T11086] loop6: detected capacity change from 0 to 512
[  331.447533][ T6197] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  331.615002][ T2935] FAT-fs (loop6): Invalid FSINFO signature: 0x28c2ff80, 0x00000000 (sector = 1)
[  332.072410][   T47] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  332.091885][   T47] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  332.102484][   T47] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  332.110483][   T47] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  332.118559][   T47] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  332.126667][   T47] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  332.571111][T11111] 9pnet_fd: Insufficient options for proto=fd
[  332.998736][T11128] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1967'.
[  333.145581][T11102] chnl_net:caif_netlink_parms(): no params data found
[  333.320824][T11133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1968'.
[  333.457017][ T4266] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  333.479528][ T4266] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  333.492473][ T4266] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  333.525545][ T4266] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  333.537753][ T4266] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  333.545267][ T4266] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  333.869376][T11102] bridge0: port 1(bridge_slave_0) entered blocking state
[  333.882553][T11102] bridge0: port 1(bridge_slave_0) entered disabled state
[  333.890879][T11102] device bridge_slave_0 entered promiscuous mode
[  333.977050][T11102] bridge0: port 2(bridge_slave_1) entered blocking state
[  334.001580][T11102] bridge0: port 2(bridge_slave_1) entered disabled state
[  334.009992][T11102] device bridge_slave_1 entered promiscuous mode
[  334.105835][ T6197] device hsr_slave_0 left promiscuous mode
[  334.115236][ T6197] device hsr_slave_1 left promiscuous mode
[  334.145200][ T6197] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  334.161509][ T6197] batman_adv: batadv0: Removing interface: batadv_slave_0
[  334.199564][ T6197] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  334.207462][ T4266] Bluetooth: hci1: command 0x0409 tx timeout
[  334.221802][ T6197] batman_adv: batadv0: Removing interface: batadv_slave_1
[  334.240066][ T6197] device bridge_slave_1 left promiscuous mode
[  334.246681][ T6197] bridge0: port 2(bridge_slave_1) entered disabled state
[  334.256272][ T6197] device bridge_slave_0 left promiscuous mode
[  334.263473][ T6197] bridge0: port 1(bridge_slave_0) entered disabled state
[  334.361247][ T6197] device veth1_macvtap left promiscuous mode
[  334.379358][ T6197] device veth0_macvtap left promiscuous mode
[  334.396731][ T6197] device veth1_vlan left promiscuous mode
[  334.418865][ T6197] device veth0_vlan left promiscuous mode
[  335.641553][ T4266] Bluetooth: hci3: command 0x0409 tx timeout
[  335.702616][ T6197] team0 (unregistering): Port device team_slave_1 removed
[  335.783011][ T6197] team0 (unregistering): Port device team_slave_0 removed
[  335.911299][ T6197] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  336.092212][ T6197] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  336.281701][ T4266] Bluetooth: hci1: command 0x041b tx timeout
[  336.924714][T11185] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  336.936651][T11185] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[  336.949369][T11185] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  337.268238][ T6197] bond0 (unregistering): Released all slaves
[  337.393538][T11102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  337.432514][T11102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  337.569246][T11102] team0: Port device team_slave_0 added
[  337.611202][T11102] team0: Port device team_slave_1 added
[  337.723596][T11102] batman_adv: batadv0: Adding interface: batadv_slave_0
[  337.725897][ T4266] Bluetooth: hci3: command 0x041b tx timeout
[  337.730579][T11102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  337.891620][T11102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  337.963149][T11102] batman_adv: batadv0: Adding interface: batadv_slave_1
[  337.971502][T11102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  337.998354][T11102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  338.153305][T11102] device hsr_slave_0 entered promiscuous mode
[  338.189360][T11102] device hsr_slave_1 entered promiscuous mode
[  338.250663][T11102] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  338.282646][T11102] Cannot create hsr debugfs directory
[  338.305291][T11136] chnl_net:caif_netlink_parms(): no params data found
[  338.361680][ T4279] Bluetooth: hci1: command 0x040f tx timeout
[  338.517517][T11230] 9pnet_fd: Insufficient options for proto=fd
[  338.609868][T11136] bridge0: port 1(bridge_slave_0) entered blocking state
[  338.642334][T11136] bridge0: port 1(bridge_slave_0) entered disabled state
[  338.661047][T11136] device bridge_slave_0 entered promiscuous mode
[  338.709642][T11136] bridge0: port 2(bridge_slave_1) entered blocking state
[  338.737494][T11136] bridge0: port 2(bridge_slave_1) entered disabled state
[  338.768037][T11136] device bridge_slave_1 entered promiscuous mode
[  338.893702][T11136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  338.932714][T11136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  339.087596][ T6197] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  339.230532][T11136] team0: Port device team_slave_0 added
[  339.289676][ T6197] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  339.311026][T11136] team0: Port device team_slave_1 added
[  339.398195][ T6197] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  339.444915][T11136] batman_adv: batadv0: Adding interface: batadv_slave_0
[  339.460612][T11136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  339.500999][T11136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  339.538118][T11136] batman_adv: batadv0: Adding interface: batadv_slave_1
[  339.551571][T11136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  339.602810][T11136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  339.659558][ T6197] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  339.798825][T11136] device hsr_slave_0 entered promiscuous mode
[  339.805326][ T4279] Bluetooth: hci3: command 0x040f tx timeout
[  339.812789][T11136] device hsr_slave_1 entered promiscuous mode
[  339.827158][T11136] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  339.836446][T11136] Cannot create hsr debugfs directory
[  340.415129][T11102] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  340.440305][T11102] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  340.451584][ T4279] Bluetooth: hci1: command 0x0419 tx timeout
[  340.458473][T11272] overlayfs: failed to clone upperpath
[  340.597380][T11102] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  340.880321][T11102] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  341.210071][T11102] 8021q: adding VLAN 0 to HW filter on device bond0
[  341.242221][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  341.252715][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  341.319686][T11102] 8021q: adding VLAN 0 to HW filter on device team0
[  341.340174][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  341.359267][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  341.378046][ T4570] bridge0: port 1(bridge_slave_0) entered blocking state
[  341.385461][ T4570] bridge0: port 1(bridge_slave_0) entered forwarding state
[  341.460064][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  341.472265][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  341.492259][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  341.504524][ T4570] bridge0: port 2(bridge_slave_1) entered blocking state
[  341.511744][ T4570] bridge0: port 2(bridge_slave_1) entered forwarding state
[  341.528889][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  341.538218][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  341.598425][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  341.625314][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  341.640051][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  341.864574][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  341.882170][ T4279] Bluetooth: hci3: command 0x0419 tx timeout
[  341.904493][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  341.915018][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  341.933935][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  342.280886][T11328] loop9: detected capacity change from 0 to 512
[  342.309660][T11102] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  342.342946][T11102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  342.364112][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  342.383893][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  342.423263][T11328] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  342.443741][T11328] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  342.730021][ T8730] EXT4-fs (loop9): unmounting filesystem.
[  342.872073][ T6197] device hsr_slave_0 left promiscuous mode
[  342.888834][ T6197] device hsr_slave_1 left promiscuous mode
[  342.908963][ T6197] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  342.926224][ T6197] batman_adv: batadv0: Removing interface: batadv_slave_0
[  342.936832][ T6197] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  342.945576][ T6197] batman_adv: batadv0: Removing interface: batadv_slave_1
[  342.955030][ T6197] device bridge_slave_1 left promiscuous mode
[  342.965376][ T6197] bridge0: port 2(bridge_slave_1) entered disabled state
[  342.978395][ T6197] device bridge_slave_0 left promiscuous mode
[  342.988890][ T6197] bridge0: port 1(bridge_slave_0) entered disabled state
[  343.017928][ T6197] device veth1_macvtap left promiscuous mode
[  343.025047][ T6197] device veth0_macvtap left promiscuous mode
[  343.031285][ T6197] device veth1_vlan left promiscuous mode
[  343.038143][ T6197] device veth0_vlan left promiscuous mode
[  343.208244][ T6197] bond1 (unregistering): Released all slaves
[  343.605933][ T6197] team0 (unregistering): Port device team_slave_1 removed
[  343.656044][ T6197] team0 (unregistering): Port device team_slave_0 removed
[  343.697922][ T6197] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  343.767391][ T6197] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  343.990054][T11362] overlayfs: failed to clone upperpath
[  344.900916][ T6197] bond0 (unregistering): Released all slaves
[  345.050190][T11387] overlayfs: failed to clone upperpath
[  345.250068][T11136] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  345.310639][T11136] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  345.358966][T11136] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  345.387896][T11136] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  345.497140][ T2935] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  345.508594][ T2935] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  345.563616][T11102] 8021q: adding VLAN 0 to HW filter on device batadv0
[  345.660176][ T2935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  345.673671][ T2935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  345.803776][T11136] 8021q: adding VLAN 0 to HW filter on device bond0
[  345.823780][ T2935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  345.845184][ T2935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  345.863872][T11102] device veth0_vlan entered promiscuous mode
[  345.897321][ T2935] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  345.912767][ T2935] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  345.931201][ T2935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  345.950946][ T2935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  345.976190][T11136] 8021q: adding VLAN 0 to HW filter on device team0
[  346.004919][T11102] device veth1_vlan entered promiscuous mode
[  346.059668][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  346.078048][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  346.110389][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  346.137175][ T4360] bridge0: port 1(bridge_slave_0) entered blocking state
[  346.144403][ T4360] bridge0: port 1(bridge_slave_0) entered forwarding state
[  346.155017][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  346.171672][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  346.189868][ T4360] bridge0: port 2(bridge_slave_1) entered blocking state
[  346.197074][ T4360] bridge0: port 2(bridge_slave_1) entered forwarding state
[  346.223557][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  346.243778][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  346.284623][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  346.363234][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  346.374856][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  346.413365][T11102] device veth0_macvtap entered promiscuous mode
[  346.421662][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  346.433093][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  346.450971][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  346.460579][T11422] overlayfs: failed to clone upperpath
[  346.460782][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  346.475977][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  346.485766][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  346.496102][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  346.510883][T11136] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  346.523151][T11136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  346.534320][T11102] device veth1_macvtap entered promiscuous mode
[  346.555167][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  346.566578][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  346.592646][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  346.601329][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  346.681638][T11102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  346.711634][T11102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  346.741168][T11102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  346.770301][T11102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  346.791087][T11102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  346.819372][T11102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  346.845896][T11102] batman_adv: batadv0: Interface activated: batadv_slave_0
[  346.870387][T11102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  346.893400][T11102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  346.915021][T11102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  346.941990][T11102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  346.958716][T11102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  346.969751][T11102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  346.997673][T11102] batman_adv: batadv0: Interface activated: batadv_slave_1
[  347.006447][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  347.028344][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  347.045647][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  347.059667][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  347.081164][T11102] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  347.095960][T11102] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  347.107031][T11102] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  347.121690][T11102] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  347.273288][ T4570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  347.293433][ T4570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  347.348945][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  347.389449][   T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  347.444635][   T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  347.510834][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  347.623545][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  347.631094][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  347.714598][T11136] 8021q: adding VLAN 0 to HW filter on device batadv0
[  347.794034][ T2935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  347.811156][ T2935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  347.897560][T11136] device veth0_vlan entered promiscuous mode
[  347.913194][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  347.925057][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  347.964415][T11136] device veth1_vlan entered promiscuous mode
[  347.975320][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  347.996733][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  348.015412][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  348.127897][ T6197] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  348.147872][ T6197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  348.182586][ T6197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  348.209975][T11136] device veth0_macvtap entered promiscuous mode
[  348.229890][T11136] device veth1_macvtap entered promiscuous mode
[  348.276142][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  348.295814][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  348.321237][T11136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  348.344744][T11136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  348.358057][T11462] overlayfs: failed to resolve './file1': -2
[  348.364871][T11136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  348.375987][T11136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  348.386855][T11136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  348.398341][T11136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  348.413889][T11136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  348.427727][T11136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  348.457266][T11136] batman_adv: batadv0: Interface activated: batadv_slave_0
[  348.473158][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  348.492605][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  348.534049][T11136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  348.568070][T11136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  348.586621][T11136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  348.597889][T11136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  348.614012][T11136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  348.628947][T11136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  348.639090][T11136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  348.649750][T11136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  348.674011][T11136] batman_adv: batadv0: Interface activated: batadv_slave_1
[  348.694867][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  348.709305][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  348.743430][T11136] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  348.764705][T11136] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  348.796539][T11136] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  348.847950][T11136] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  348.973708][T11479] loop9: detected capacity change from 0 to 4096
[  349.083678][   T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  349.095153][ T6197] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  349.107216][T11479] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  349.165788][   T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  349.172317][ T6197] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  349.213349][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  349.253132][   T27] audit: type=1800 audit(1756371050.253:52): pid=11479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2071" name="file1" dev="loop9" ino=15 res=0 errno=0
[  349.267502][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  349.398726][ T8730] EXT4-fs (loop9): unmounting filesystem.
[  349.407033][T11493] 9pnet_fd: Insufficient options for proto=fd
[  349.669175][T11500] loop9: detected capacity change from 0 to 512
[  349.801173][T11500] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  349.847404][T11500] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  349.873298][T11514] loop2: detected capacity change from 0 to 512
[  349.942413][T11500] overlayfs: failed to resolve './file1': -2
[  349.969258][T11516] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  349.982550][T11516] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[  349.993186][T11514] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.2082: casefold flag without casefold feature
[  350.062742][T11516] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  350.089889][T11514] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.2082: couldn't read orphan inode 15 (err -117)
[  350.117297][T11514] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  350.163024][ T8730] EXT4-fs (loop9): unmounting filesystem.
[  350.790109][T11136] EXT4-fs (loop2): unmounting filesystem.
[  352.211116][T11574] overlayfs: failed to resolve './file1': -2
[  352.232262][T11579] 9pnet_fd: Insufficient options for proto=fd
[  352.601338][T11601] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  352.631868][T11601] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[  352.642496][T11601] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  353.018504][T11613] loop2: detected capacity change from 0 to 512
[  353.767071][T11613] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e000c018, mo2=0002]
[  353.806903][T11613] System zones: 0-2, 18-18, 34-35
[  353.840302][T11613] EXT4-fs error (device loop2): ext4_quota_enable:7022: inode #4: comm syz.2.2109: iget: bad i_size value: 5910974510929920
[  353.893199][T11613] EXT4-fs error (device loop2): ext4_quota_enable:7025: comm syz.2.2109: Bad quota inode: 4, type: 1
[  353.904853][T11613] EXT4-fs warning (device loop2): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  353.926884][T11613] EXT4-fs (loop2): mount failed
[  354.226670][T11635] 9pnet_fd: Insufficient options for proto=fd
[  354.306575][T11639] loop9: detected capacity change from 0 to 512
[  354.410660][T11639] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  354.442970][T11639] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  354.643223][ T8730] EXT4-fs (loop9): unmounting filesystem.
[  354.870930][T11659] netlink: 'syz.5.2124': attribute type 4 has an invalid length.
[  354.920945][T11659] netlink: 'syz.5.2124': attribute type 4 has an invalid length.
[  356.060634][T11681] 9pnet_fd: Insufficient options for proto=fd
[  357.862572][ T4266] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  357.873412][ T4266] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  357.882863][ T4266] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  357.934871][ T4266] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  358.051600][ T4266] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  358.060961][ T4266] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  358.095914][T11725] 9pnet_fd: Insufficient options for proto=fd
[  358.335686][ T2935] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  358.544531][ T2935] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  358.804447][ T2935] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  359.229848][ T2935] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  359.961333][T11716] chnl_net:caif_netlink_parms(): no params data found
[  360.132248][ T4279] Bluetooth: hci4: command 0x0409 tx timeout
[  360.167476][T11773] 9pnet_fd: Insufficient options for proto=fd
[  360.420393][T11716] bridge0: port 1(bridge_slave_0) entered blocking state
[  360.451581][T11716] bridge0: port 1(bridge_slave_0) entered disabled state
[  360.459902][T11716] device bridge_slave_0 entered promiscuous mode
[  360.506601][T11716] bridge0: port 2(bridge_slave_1) entered blocking state
[  360.554349][T11716] bridge0: port 2(bridge_slave_1) entered disabled state
[  360.573011][T11716] device bridge_slave_1 entered promiscuous mode
[  360.958780][T11716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  361.186550][T11716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  361.984607][T11716] team0: Port device team_slave_0 added
[  362.087877][T11716] team0: Port device team_slave_1 added
[  362.212227][ T4279] Bluetooth: hci4: command 0x041b tx timeout
[  362.316401][T11716] batman_adv: batadv0: Adding interface: batadv_slave_0
[  362.325455][T11716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  362.411249][T11716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  362.540234][T11716] batman_adv: batadv0: Adding interface: batadv_slave_1
[  362.571142][T11716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  362.614170][T11716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  362.884451][T11716] device hsr_slave_0 entered promiscuous mode
[  362.930110][T11716] device hsr_slave_1 entered promiscuous mode
[  364.282915][ T4279] Bluetooth: hci4: command 0x040f tx timeout
[  364.807702][ T2935] device hsr_slave_0 left promiscuous mode
[  364.829323][ T2935] device hsr_slave_1 left promiscuous mode
[  364.865218][ T2935] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  364.888101][ T2935] batman_adv: batadv0: Removing interface: batadv_slave_0
[  364.912791][ T2935] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  364.938614][ T2935] batman_adv: batadv0: Removing interface: batadv_slave_1
[  364.963413][ T2935] device bridge_slave_1 left promiscuous mode
[  364.985523][ T2935] bridge0: port 2(bridge_slave_1) entered disabled state
[  365.011668][ T2935] device bridge_slave_0 left promiscuous mode
[  365.030783][ T2935] bridge0: port 1(bridge_slave_0) entered disabled state
[  365.085519][ T2935] device veth1_macvtap left promiscuous mode
[  365.099818][ T2935] device veth0_macvtap left promiscuous mode
[  365.115313][ T2935] device veth1_vlan left promiscuous mode
[  365.128315][ T2935] device veth0_vlan left promiscuous mode
[  366.371993][ T4266] Bluetooth: hci4: command 0x0419 tx timeout
[  366.665290][T11907] loop2: detected capacity change from 0 to 128
[  366.744423][T11907] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  366.764128][T11907] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  366.872073][T11907] syz.2.2198 (pid 11907) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  366.983750][T11136] EXT4-fs (loop2): unmounting filesystem.
[  368.621086][ T2935] team0 (unregistering): Port device team_slave_1 removed
[  368.864002][ T2935] team0 (unregistering): Port device team_slave_0 removed
[  368.985584][ T2935] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  369.126149][ T2935] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  371.604007][ T2935] bond0 (unregistering): Released all slaves
[  371.801046][T11989] pim6reg0: tun_chr_ioctl cmd 2147767511
[  372.340519][T11716] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  372.358223][T11716] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  372.381316][T11716] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  372.440523][T11716] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  373.432923][T12027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2232'.
[  373.451498][T12027] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2232'.
[  373.569229][T11716] 8021q: adding VLAN 0 to HW filter on device bond0
[  373.673385][ T6454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  373.703448][ T6454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  373.741295][T11716] 8021q: adding VLAN 0 to HW filter on device team0
[  373.769874][ T6454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  373.790436][ T6454] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  373.832886][ T6454] bridge0: port 1(bridge_slave_0) entered blocking state
[  373.840080][ T6454] bridge0: port 1(bridge_slave_0) entered forwarding state
[  373.888688][ T6454] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  373.916068][T12046] overlayfs: failed to clone upperpath
[  373.923531][ T6454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  373.953246][ T6454] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  373.980994][ T6454] bridge0: port 2(bridge_slave_1) entered blocking state
[  373.988328][ T6454] bridge0: port 2(bridge_slave_1) entered forwarding state
[  374.040976][ T6454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  374.115731][ T6454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  374.144837][ T6454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  374.202353][ T6454] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  374.213091][ T6454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  374.228477][ T6454] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  374.356278][T11716] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  374.388473][T11716] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  374.427745][ T6454] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  374.438598][ T6454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  374.466491][ T6454] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  374.474005][T12064] loop9: detected capacity change from 0 to 128
[  374.484877][ T6454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  374.497548][ T6454] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  374.514135][ T6454] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  374.598976][T12064] syz.9.2248: attempt to access beyond end of device
[  374.598976][T12064] loop9: rw=2049, sector=138, nr_sectors = 2 limit=128
[  374.660821][T12064] syz.9.2248: attempt to access beyond end of device
[  374.660821][T12064] loop9: rw=2049, sector=138, nr_sectors = 2 limit=128
[  374.661955][ T4567] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  374.805227][ T4567] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  374.935005][ T4567] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  375.070852][ T4567] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  375.573330][T12079] loop2: detected capacity change from 0 to 4096
[  375.646986][T12079] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  375.724960][ T5501] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  375.741886][ T5501] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  375.755559][T11716] 8021q: adding VLAN 0 to HW filter on device batadv0
[  375.832088][ T4279] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  375.842589][ T4279] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  375.851102][ T4279] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  375.876776][ T4279] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  375.889047][ T4279] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  375.896605][ T4279] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  375.990765][T11136] EXT4-fs (loop2): unmounting filesystem.
[  377.899568][T12129] loop2: detected capacity change from 0 to 1024
[  377.915352][T12129] EXT4-fs: Ignoring removed i_version option
[  377.921635][T12129] EXT4-fs: inline encryption not supported
[  377.962606][ T4279] Bluetooth: hci1: command 0x0409 tx timeout
[  378.034476][T12129] EXT4-fs (loop2): Test dummy encryption mode enabled
[  378.145561][T12129] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  378.530295][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  378.540136][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  378.565558][T12090] chnl_net:caif_netlink_parms(): no params data found
[  378.752408][T11136] EXT4-fs (loop2): unmounting filesystem.
[  379.193045][T12090] bridge0: port 1(bridge_slave_0) entered blocking state
[  379.200830][T12090] bridge0: port 1(bridge_slave_0) entered disabled state
[  379.209522][T12090] device bridge_slave_0 entered promiscuous mode
[  379.219905][T12090] bridge0: port 2(bridge_slave_1) entered blocking state
[  379.228110][T12090] bridge0: port 2(bridge_slave_1) entered disabled state
[  379.236494][T12090] device bridge_slave_1 entered promiscuous mode
[  379.345471][ T5501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  379.369327][ T5501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  380.270486][ T4279] Bluetooth: hci1: command 0x041b tx timeout
[  380.326831][ T5501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  380.447383][ T5501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  380.573564][ T5501] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  380.707963][ T5501] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  381.131025][T12090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  381.475190][ T4567] device hsr_slave_0 left promiscuous mode
[  381.489102][ T4567] device hsr_slave_1 left promiscuous mode
[  381.516494][ T4567] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  381.534385][ T4567] batman_adv: batadv0: Removing interface: batadv_slave_0
[  381.551819][ T4567] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  381.566202][ T4567] batman_adv: batadv0: Removing interface: batadv_slave_1
[  381.578688][ T4567] device bridge_slave_1 left promiscuous mode
[  381.591910][ T4567] bridge0: port 2(bridge_slave_1) entered disabled state
[  381.609103][ T4567] device bridge_slave_0 left promiscuous mode
[  381.627696][ T4567] bridge0: port 1(bridge_slave_0) entered disabled state
[  381.860954][ T4567] device veth1_macvtap left promiscuous mode
[  381.871110][ T4567] device veth0_macvtap left promiscuous mode
[  381.878095][ T4567] device veth1_vlan left promiscuous mode
[  381.890209][ T4567] device veth0_vlan left promiscuous mode
[  382.362607][ T4279] Bluetooth: hci1: command 0x040f tx timeout
[  383.803679][ T4567] team0 (unregistering): Port device team_slave_1 removed
[  383.992173][ T4567] team0 (unregistering): Port device team_slave_0 removed
[  384.177587][ T4567] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  384.440911][ T4567] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  384.449728][ T4279] Bluetooth: hci1: command 0x0419 tx timeout
[  384.500763][T12203] loop2: detected capacity change from 0 to 40427
[  384.538196][T12203] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  384.547706][T12203] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  384.614456][T12203] F2FS-fs (loop2): Found nat_bits in checkpoint
[  384.777993][T12203] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  384.810863][T12203] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  384.923766][T12203] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix.
[  384.923833][T12203] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix.
[  384.934012][T12203] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix.
[  384.941896][T12203] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix.
[  384.950120][T12203] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix.
[  384.958872][T12203] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix.
[  384.966966][T12203] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix.
[  385.481784][ T4279] Bluetooth: hci0: command 0x0406 tx timeout
[  385.563694][ T4567] bond0 (unregistering): Released all slaves
[  385.771676][T11716] device veth0_vlan entered promiscuous mode
[  385.796000][T11716] device veth1_vlan entered promiscuous mode
[  385.810914][T12090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  386.055322][T12224] loop2: detected capacity change from 0 to 2048
[  386.426897][T12224] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  386.721568][T12227] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set
[  386.876293][T12090] team0: Port device team_slave_0 added
[  386.948388][T12090] team0: Port device team_slave_1 added
[  387.131460][T12090] batman_adv: batadv0: Adding interface: batadv_slave_0
[  387.228372][T12090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  387.472367][T12090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  387.489784][T12090] batman_adv: batadv0: Adding interface: batadv_slave_1
[  387.497014][T12090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  387.717005][T12090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  388.796198][T12234] IPv6: ADDRCONF(NETDEV_CHANGE): wg2: link becomes ready
[  388.925108][ T6175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  388.945238][ T6175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  388.954280][T11136] EXT4-fs (loop2): unmounting filesystem.
[  388.997873][T11716] device veth0_macvtap entered promiscuous mode
[  389.084387][T11716] device veth1_macvtap entered promiscuous mode
[  389.158186][T12090] device hsr_slave_0 entered promiscuous mode
[  389.173691][T12250] loop2: detected capacity change from 0 to 256
[  389.180445][T12090] device hsr_slave_1 entered promiscuous mode
[  389.188088][T12090] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  389.240664][T12090] Cannot create hsr debugfs directory
[  389.267358][T12250] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  389.301277][T11716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  389.341503][T11716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  389.361431][T11716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  389.381461][T11716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  389.391338][T11716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  389.445562][T11716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  389.472335][T11716] batman_adv: batadv0: Interface activated: batadv_slave_0
[  389.543205][ T6454] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  389.576787][ T6454] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  389.600615][ T6454] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  389.618970][ T6454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  389.642380][T11716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  389.668691][T11716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  389.701548][T11716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  389.732911][T11716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  389.745007][T11716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  389.779774][T11716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  389.814755][T11716] batman_adv: batadv0: Interface activated: batadv_slave_1
[  389.877119][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  389.895052][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  389.927279][T11716] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  389.949049][T11716] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  389.967953][T11716] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  389.988189][T11716] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  390.865913][ T4307] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  391.317792][ T4307] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  391.354487][ T4307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  391.389181][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  391.411680][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  391.426305][ T4307] usb 3-1: config 0 descriptor??
[  391.477036][ T6454] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  391.598109][ T6454] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  391.615795][ T6454] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  391.751288][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  391.889965][T12296] loop5: detected capacity change from 0 to 512
[  391.950934][T12296] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  391.962574][T12296] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  392.076397][T12090] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  392.115773][T12090] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  392.128401][T11716] EXT4-fs (loop5): unmounting filesystem.
[  392.167298][T12090] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  392.212943][T12090] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  392.461308][T12090] 8021q: adding VLAN 0 to HW filter on device bond0
[  392.488206][ T6454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  392.507448][ T6454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  392.521215][T12090] 8021q: adding VLAN 0 to HW filter on device team0
[  392.538095][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  392.548208][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  392.558996][ T4546] bridge0: port 1(bridge_slave_0) entered blocking state
[  392.566374][ T4546] bridge0: port 1(bridge_slave_0) entered forwarding state
[  392.583774][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  392.597017][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  392.609694][ T4546] bridge0: port 2(bridge_slave_1) entered blocking state
[  392.617070][ T4546] bridge0: port 2(bridge_slave_1) entered forwarding state
[  392.627539][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  392.644202][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  392.661253][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  392.690662][T11719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  392.699150][T12094] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  392.720967][T11719] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  392.736960][T11719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  392.748490][T11719] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  392.767224][T11719] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  392.783907][ T6454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  392.795574][ T6454] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  392.820128][T12090] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  392.842875][T12090] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  392.859210][ T6454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  392.869666][ T6454] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  392.894046][T12094] usb 10-1: config 0 has an invalid interface number: 28 but max is 0
[  392.908607][T12094] usb 10-1: config 0 has no interface number 0
[  392.922743][T12094] usb 10-1: config 0 interface 28 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  392.939174][T12094] usb 10-1: config 0 interface 28 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  392.952213][T12094] usb 10-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00
[  392.966668][T12094] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  393.000317][T12094] usb 10-1: config 0 descriptor??
[  393.101136][ T4307] usb 3-1: USB disconnect, device number 2
[  393.227053][T12094] usbhid 10-1:0.28: can't add hid device: -71
[  393.242474][T12094] usbhid: probe of 10-1:0.28 failed with error -71
[  393.352470][T12094] usb 10-1: USB disconnect, device number 2
[  394.925180][T12401] loop9: detected capacity change from 0 to 1024
[  395.012287][T12401] EXT4-fs: Ignoring removed oldalloc option
[  395.084861][T12401] EXT4-fs: test_dummy_encryption requires encrypt feature
[  395.197698][T12407] loop5: detected capacity change from 0 to 1024
[  395.342628][T12407] EXT4-fs: Ignoring removed nobh option
[  395.491594][T12407] EXT4-fs: Ignoring removed bh option
[  395.670827][T12407] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  395.846102][T12400] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  395.854496][T12400] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  395.884733][T12090] 8021q: adding VLAN 0 to HW filter on device batadv0
[  395.968995][ T5501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  395.984775][ T5501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  396.112940][T12429] overlayfs: conflicting lowerdir path
[  396.367460][T12428] loop9: detected capacity change from 0 to 2048
[  396.376247][T12090] device veth0_vlan entered promiscuous mode
[  396.428887][T12428] EXT4-fs: Ignoring removed nobh option
[  396.474516][T12090] device veth1_vlan entered promiscuous mode
[  396.636036][ T5501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  396.647350][T11716] EXT4-fs (loop5): unmounting filesystem.
[  396.650421][ T5501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  396.719215][ T5501] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  396.748178][ T5501] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  396.773422][ T5501] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  396.800621][ T5501] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  396.879478][ T5501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  397.612588][T12444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2331'.
[  397.956176][ T5501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  398.078499][T12449] loop5: detected capacity change from 0 to 512
[  398.113920][T12090] device veth0_macvtap entered promiscuous mode
[  398.142060][   T27] audit: type=1800 audit(1756371099.133:53): pid=12444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2331" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0
[  398.142415][T12444] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[  398.171989][T12444] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[  398.182031][T12444] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  398.322453][T12447] loop9: detected capacity change from 0 to 4096
[  398.354443][T12447] EXT4-fs: Ignoring removed mblk_io_submit option
[  398.373744][T12090] device veth1_macvtap entered promiscuous mode
[  398.385371][T12449] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  398.407674][T12449] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  398.444595][T12447] EXT4-fs (loop9): Test dummy encryption mode enabled
[  398.473780][T12090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  398.528035][T12447] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  398.559227][T12090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  398.677075][T12090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  398.721347][T12090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  398.763914][T12090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  398.801490][T12090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  398.822863][T12090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  398.857945][T12463] fscrypt (loop9): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))")
[  398.861476][T12090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  398.944001][T12090] batman_adv: batadv0: Interface activated: batadv_slave_0
[  398.965308][T11716] EXT4-fs (loop5): unmounting filesystem.
[  398.973547][T12396] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  398.998131][T12396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  399.072931][T12090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  399.104361][T12090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  399.181571][T12090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  399.198249][ T8730] EXT4-fs (loop9): unmounting filesystem.
[  399.321089][T12090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  399.371523][T12090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  399.425950][T12090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  399.467511][T12090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  399.469678][T12479] loop9: detected capacity change from 0 to 256
[  399.515308][T12090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  399.541726][T12479] exfat: Unknown parameter '˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙0xffffffffffffffff˙˙˙˙'
[  399.559244][T12090] batman_adv: batadv0: Interface activated: batadv_slave_1
[  399.591754][T12396] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  399.600609][T12396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  399.732984][T12090] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  399.819397][T12090] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  400.028642][T12090] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  400.220221][T12090] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  400.649163][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  400.779665][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  400.855385][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  400.870841][ T4422] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  400.908671][ T4422] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  401.227251][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  401.894095][T12510] loop9: detected capacity change from 0 to 512
[  402.005895][T12510] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  402.052245][T12510] ext4 filesystem being mounted at /214/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  402.153664][T12515] loop5: detected capacity change from 0 to 512
[  402.221954][T12515] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 not in group (block 7)!
[  402.265988][T12515] EXT4-fs (loop5): group descriptors corrupted!
[  402.383205][ T8730] EXT4-fs (loop9): unmounting filesystem.
[  402.835238][T12536] loop5: detected capacity change from 0 to 512
[  404.261019][T12536] EXT4-fs (loop5): 1 orphan inode deleted
[  404.309121][T12536] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  404.400811][T12536] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  404.416905][    T9] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  404.441599][    T9] EXT4-fs error (device loop5): ext4_release_dquot:6850: comm kworker/u4:0: Failed to release dquot type 1
[  404.562784][   T27] audit: type=1800 audit(2000000005.220:54): pid=12536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2353" name="bus" dev="loop5" ino=18 res=0 errno=0
[  404.773304][T12556] loop2: detected capacity change from 0 to 512
[  404.775309][ T5850] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  404.781354][T12556] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  404.802942][T11716] EXT4-fs (loop5): unmounting filesystem.
[  404.849337][ T5850] EXT4-fs error (device loop5): ext4_release_dquot:6850: comm kworker/u4:14: Failed to release dquot type 1
[  405.306847][T12556] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002]
[  405.558833][T12556] EXT4-fs (loop2): orphan cleanup on readonly fs
[  405.670989][T12556] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.2356: attempt to clear invalid blocks 1024 len 1
[  405.717578][T12556] EXT4-fs (loop2): Remounting filesystem read-only
[  405.749241][T12556] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.2356: bg 0: block 361: padding at end of block bitmap is not set
[  405.814196][T12556] EXT4-fs (loop2): Remounting filesystem read-only
[  405.820955][T12556] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6170: Corrupt filesystem
[  405.858475][T12556] EXT4-fs (loop2): Remounting filesystem read-only
[  405.868186][T12556] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.2356: invalid indirect mapped block 1811939328 (level 0)
[  405.896236][T12556] EXT4-fs (loop2): Remounting filesystem read-only
[  405.908550][T12556] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.2356: invalid indirect mapped block 2185560079 (level 1)
[  405.981346][T12556] EXT4-fs (loop2): Remounting filesystem read-only
[  406.034764][T12556] EXT4-fs (loop2): 1 truncate cleaned up
[  406.040584][T12556] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  406.117641][T12556] EXT4-fs (loop2): re-mounted. Quota mode: none.
[  406.952403][T11136] EXT4-fs (loop2): unmounting filesystem.
[  407.410696][T12594] loop3: detected capacity change from 0 to 512
[  407.836257][T12594] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  407.847130][T12594] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  409.728601][T12090] EXT4-fs (loop3): unmounting filesystem.
[  410.707516][T12625] loop3: detected capacity change from 0 to 512
[  410.780702][T12629] device syzkaller0 entered promiscuous mode
[  410.888281][T12625] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  410.920876][T12625] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  411.117364][T12600] loop2: detected capacity change from 0 to 40427
[  411.162041][T12600] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  411.190940][T12600] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  411.295590][T12600] F2FS-fs (loop2): Found nat_bits in checkpoint
[  411.440382][T12090] EXT4-fs (loop3): unmounting filesystem.
[  411.829122][T12653] loop5: detected capacity change from 0 to 256
[  411.925127][T12653] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d)
[  412.025315][T12653] exFAT-fs (loop5): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  413.807523][T12682] loop9: detected capacity change from 0 to 512
[  413.911312][T12682] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  413.921706][T12682] ext4 filesystem being mounted at /221/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  414.364129][ T8730] EXT4-fs (loop9): unmounting filesystem.
[  414.380999][T12704] loop2: detected capacity change from 0 to 256
[  414.436201][T12704] FAT-fs (loop2): Unrecognized mount option "nnonumtail=1" or missing value
[  415.074107][T12727] syz.2.2402 uses obsolete (PF_INET,SOCK_PACKET)
[  415.189834][T12731] overlayfs: failed to clone upperpath
[  415.541867][T12741] loop5: detected capacity change from 0 to 512
[  415.604150][T12741] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  415.631899][T12741] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  415.853417][T11716] EXT4-fs (loop5): unmounting filesystem.
[  416.061045][T12757] syz.2.2408[12757] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  416.061160][T12757] syz.2.2408[12757] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  416.194893][T12753] device syzkaller0 entered promiscuous mode
[  416.983734][T12777] loop5: detected capacity change from 0 to 2048
[  417.360166][T12777] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  419.170937][T11716] EXT4-fs (loop5): unmounting filesystem.
[  419.379078][T12796] loop5: detected capacity change from 0 to 512
[  419.470214][T12796] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  419.527751][T12796] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  419.658210][T12802] loop3: detected capacity change from 0 to 256
[  419.692708][T12802] exfat: Unknown parameter '˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙0xffffffffffffffff˙˙˙˙'
[  419.863289][T11716] EXT4-fs (loop5): unmounting filesystem.
[  420.101584][    T7] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[  420.331763][    T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  420.361145][    T7] usb 3-1: New USB device found, idVendor=046d, idProduct=c22e, bcdDevice= 0.00
[  420.395172][    T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  420.436703][    T7] usb 3-1: config 0 descriptor??
[  420.640113][T12823] loop5: detected capacity change from 0 to 128
[  421.307020][T12810] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  422.568740][    T7] lg-g15 0003:046D:C22E.0001: hidraw0: USB HID v1.01 Device [HID 046d:c22e] on usb-dummy_hcd.2-1/input0
[  422.757305][   T26] usb 3-1: USB disconnect, device number 3
[  422.904788][T12830] fido_id[12830]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  423.054253][T12839] loop5: detected capacity change from 0 to 256
[  423.064756][T12839] exfat: Deprecated parameter 'namecase'
[  423.070463][T12839] exfat: Deprecated parameter 'utf8'
[  423.143503][T12839] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  423.694919][T12847] loop5: detected capacity change from 0 to 512
[  423.806507][T12847] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  423.831700][T12847] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  423.924824][T11716] EXT4-fs (loop5): unmounting filesystem.
[  426.588282][T12880] loop2: detected capacity change from 0 to 40427
[  426.635919][T12880] F2FS-fs (loop2): invalid crc value
[  426.656290][T12880] F2FS-fs (loop2): Found nat_bits in checkpoint
[  426.730092][T12880] F2FS-fs (loop2): Start checkpoint disabled!
[  426.785501][T12880] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  427.457512][   T11] kworker/u4:1: attempt to access beyond end of device
[  427.457512][   T11] loop2: rw=1, sector=77824, nr_sectors = 4096 limit=40427
[  427.575971][   T11] kworker/u4:1: attempt to access beyond end of device
[  427.575971][   T11] loop2: rw=1, sector=49152, nr_sectors = 4096 limit=40427
[  427.699447][   T11] kworker/u4:1: attempt to access beyond end of device
[  427.699447][   T11] loop2: rw=1, sector=57344, nr_sectors = 8192 limit=40427
[  427.739821][   T11] kworker/u4:1: attempt to access beyond end of device
[  427.739821][   T11] loop2: rw=1, sector=69632, nr_sectors = 8 limit=40427
[  427.760874][   T11] kworker/u4:1: attempt to access beyond end of device
[  427.760874][   T11] loop2: rw=1, sector=69640, nr_sectors = 8 limit=40427
[  427.783428][   T11] kworker/u4:1: attempt to access beyond end of device
[  427.783428][   T11] loop2: rw=1, sector=69648, nr_sectors = 8 limit=40427
[  427.802630][   T11] kworker/u4:1: attempt to access beyond end of device
[  427.802630][   T11] loop2: rw=1, sector=69656, nr_sectors = 8 limit=40427
[  427.816796][   T11] kworker/u4:1: attempt to access beyond end of device
[  427.816796][   T11] loop2: rw=1, sector=69664, nr_sectors = 8 limit=40427
[  427.834007][   T11] kworker/u4:1: attempt to access beyond end of device
[  427.834007][   T11] loop2: rw=1, sector=69672, nr_sectors = 8 limit=40427
[  427.849331][   T11] kworker/u4:1: attempt to access beyond end of device
[  427.849331][   T11] loop2: rw=1, sector=69680, nr_sectors = 8 limit=40427
[  428.024367][T12891] loop5: detected capacity change from 0 to 1024
[  428.035376][T12891] EXT4-fs: Ignoring removed i_version option
[  428.041740][T12891] EXT4-fs: inline encryption not supported
[  428.121466][T12891] EXT4-fs (loop5): Test dummy encryption mode enabled
[  428.243324][T12891] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  429.140541][T12873] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  430.977963][T12903] binder: 12901:12903 unknown command 1074553619
[  431.021606][T12903] binder: 12901:12903 ioctl c0306201 200000000040 returned -22
[  431.132815][T12905] binder: 12901:12905 unknown command 1074553620
[  431.139483][T12905] binder: 12901:12905 ioctl c0306201 200000000640 returned -22
[  431.306388][T11716] EXT4-fs (loop5): unmounting filesystem.
[  431.698573][T12916] loop9: detected capacity change from 0 to 512
[  431.783115][T12916] EXT4-fs (loop9): revision level too high, forcing read-only mode
[  431.805679][T12916] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  431.841077][T12916] System zones: 0-1, 15-15, 18-18, 34-34
[  431.874211][T12916] EXT4-fs (loop9): orphan cleanup on readonly fs
[  431.903842][T12916] Quota error (device loop9): v2_read_header: Failed header read: expected=8 got=0
[  431.941548][T12916] EXT4-fs warning (device loop9): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  431.963990][T12916] EXT4-fs (loop9): Cannot turn on quotas: error -22
[  431.971270][T12916] EXT4-fs error (device loop9): ext4_orphan_get:1426: comm syz.9.2453: bad orphan inode 16
[  432.013759][T12916] ext4_test_bit(bit=15, block=18) = 1
[  432.031594][T12916] is_bad_inode(inode)=0
[  432.035927][T12916] NEXT_ORPHAN(inode)=0
[  432.040031][T12916] max_ino=32
[  432.077471][T12916] i_nlink=2
[  432.080734][T12916] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  432.130511][T12926] loop5: detected capacity change from 0 to 512
[  432.251683][T12926] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  432.260728][T12926] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  432.315102][T12934] loop3: detected capacity change from 0 to 256
[  432.323201][T12934] exfat: Deprecated parameter 'namecase'
[  432.329655][T12934] exfat: Deprecated parameter 'utf8'
[  432.391980][T12934] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  432.544611][T12934] overlayfs: filesystem on './file0' not supported
[  432.620344][T11716] EXT4-fs (loop5): unmounting filesystem.
[  432.776086][T12938] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2453'.
[  432.786350][T12938] netlink: 'syz.9.2453': attribute type 3 has an invalid length.
[  432.794583][T12938] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2453'.
[  433.465433][ T8730] EXT4-fs (loop9): unmounting filesystem.
[  433.667208][T12948] loop9: detected capacity change from 0 to 128
[  433.748888][T12948] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  433.810027][ T4567] Bluetooth: hci5: Frame reassembly failed (-84)
[  433.917484][T12948] ext4 filesystem being mounted at /227/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  435.188580][T12969] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2465'.
[  435.930311][T12969] syz.5.2465 (12969) used greatest stack depth: 17248 bytes left
[  436.066052][ T8730] EXT4-fs (loop9): unmounting filesystem.
[  436.233636][ T4266] Bluetooth: hci5: command 0x1003 tx timeout
[  436.242205][ T4279] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  436.691605][T12082] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  436.898296][T12082] usb 6-1: Using ep0 maxpacket: 8
[  436.905589][T12082] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[  436.928555][T12082] usb 6-1: config 179 has no interface number 0
[  436.951931][T12082] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  436.998170][T12082] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  437.030440][T12082] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  437.064368][T12082] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  437.105183][T12082] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  437.156275][T12082] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  437.176573][T12082] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  437.227355][T12974] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  437.539309][T13017] mmap: syz.9.2469 (13017) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  437.694144][T12894] usb 6-1: USB disconnect, device number 2
[  437.694197][    C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  437.709240][    C0] dummy_hcd dummy_hcd.5: timer fired with no URBs pending?
[  437.971612][ T4335] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  438.183324][ T4335] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  438.231696][ T4335] usb 3-1: config 0 interface 0 has no altsetting 0
[  438.238405][ T4335] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00
[  438.283948][ T4335] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  438.313065][ T4335] usb 3-1: config 0 descriptor??
[  438.576650][ T4335] usbhid 3-1:0.0: can't add hid device: -71
[  438.584332][ T4335] usbhid: probe of 3-1:0.0 failed with error -71
[  438.637794][ T4335] usb 3-1: USB disconnect, device number 4
[  439.403278][T13046] netlink: 'syz.3.2476': attribute type 4 has an invalid length.
[  439.411075][T13046] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2476'.
[  439.779991][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  439.786695][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  439.850622][T12082] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  439.994481][T12082] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  440.171724][   T22] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  440.204307][T13056] fido_id[13056]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  440.251683][T13058] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2480'.
[  440.313964][T13062] loop9: detected capacity change from 0 to 256
[  440.371678][   T22] usb 6-1: Using ep0 maxpacket: 8
[  440.384415][   T22] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  440.421466][   T22] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  440.467495][   T22] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  440.497181][   T22] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  440.546687][   T22] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  440.575775][   T22] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  440.609562][   T22] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  440.647153][   T22] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  440.676249][   T22] usb 6-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a
[  440.704312][   T22] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  440.720561][   T22] usb 6-1: config 0 descriptor??
[  440.938675][ T4268] usb 6-1: USB disconnect, device number 3
[  443.186090][T13072] loop9: detected capacity change from 0 to 40427
[  443.263861][T13072] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12
[  443.326010][T13072] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[  443.399474][T13072] F2FS-fs (loop9): invalid crc value
[  444.763068][T13106] loop5: detected capacity change from 0 to 4096
[  444.774159][T13072] F2FS-fs (loop9): Failed to initialize F2FS segment manager (-4)
[  445.057991][T13106] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  446.956564][T13120] bridge0: port 3(vlan2) entered blocking state
[  447.031173][T13123] loop9: detected capacity change from 0 to 256
[  447.032758][T11716] EXT4-fs (loop5): unmounting filesystem.
[  447.052208][T13120] bridge0: port 3(vlan2) entered disabled state
[  447.056289][T13123] exfat: Deprecated parameter 'namecase'
[  447.096595][T13123] exFAT-fs (loop9): Medium has reported failures. Some data may be lost.
[  447.145636][T13123] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d)
[  448.859453][T13147] random: crng reseeded on system resumption
[  449.947001][T13138] loop3: detected capacity change from 0 to 40427
[  450.075971][T13138] F2FS-fs (loop3): invalid crc value
[  450.202526][T13138] F2FS-fs (loop3): Found nat_bits in checkpoint
[  450.961606][T12894] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  451.071327][T13138] F2FS-fs (loop3): Start checkpoint disabled!
[  451.244130][T12894] usb 10-1: config 0 has no interfaces?
[  451.257185][T12894] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  451.306775][T13189] loop5: detected capacity change from 0 to 512
[  451.311451][T12894] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  451.361503][T12894] usb 10-1: Manufacturer: syz
[  451.379230][T13189] EXT4-fs: Ignoring removed mblk_io_submit option
[  451.412490][T12894] usb 10-1: config 0 descriptor??
[  451.436808][T13189] EXT4-fs: Ignoring removed bh option
[  451.471477][T13189] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  451.524418][T13189] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  451.568695][T13189] EXT4-fs (loop5): 1 truncate cleaned up
[  451.581066][T13189] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  451.757542][T13204] netlink: 'syz.5.2506': attribute type 27 has an invalid length.
[  453.086571][T12894] usb 10-1: USB disconnect, device number 3
[  453.274442][T13216] loop3: detected capacity change from 0 to 1024
[  453.302884][T13216] EXT4-fs: Ignoring removed nobh option
[  453.308505][T13216] EXT4-fs: Ignoring removed bh option
[  453.342921][T13216] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  453.414453][T13216] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  454.696921][T13204] bridge0: port 2(bridge_slave_1) entered disabled state
[  454.704598][T13204] bridge0: port 1(bridge_slave_0) entered disabled state
[  454.716254][T12090] EXT4-fs (loop3): unmounting filesystem.
[  454.915232][T13240] loop9: detected capacity change from 0 to 1024
[  454.982692][T13240] EXT4-fs: Ignoring removed i_version option
[  454.988954][T13240] EXT4-fs: inline encryption not supported
[  455.105910][T13247] loop2: detected capacity change from 0 to 256
[  455.250016][T13247] FAT-fs (loop2): Directory bread(block 64) failed
[  455.302326][T13247] FAT-fs (loop2): Directory bread(block 65) failed
[  455.310350][T13240] EXT4-fs (loop9): Test dummy encryption mode enabled
[  455.835424][T13247] FAT-fs (loop2): Directory bread(block 66) failed
[  455.995544][T13247] FAT-fs (loop2): Directory bread(block 67) failed
[  456.062071][T13247] FAT-fs (loop2): Directory bread(block 68) failed
[  456.134373][T13240] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  456.141671][T13247] FAT-fs (loop2): Directory bread(block 69) failed
[  456.149998][T13247] FAT-fs (loop2): Directory bread(block 70) failed
[  456.171496][T13247] FAT-fs (loop2): Directory bread(block 71) failed
[  456.178177][T13247] FAT-fs (loop2): Directory bread(block 72) failed
[  456.206634][T13247] FAT-fs (loop2): Directory bread(block 73) failed
[  456.218866][T13254] xt_hashlimit: size too large, truncated to 1048576
[  456.820592][T13259] loop3: detected capacity change from 0 to 1024
[  456.877412][T13259] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  456.928690][T13259] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  456.943636][T13259] JBD2: no valid journal superblock found
[  456.962625][T13259] EXT4-fs (loop3): error loading journal
[  457.161548][ T4279] Bluetooth: hci3: command 0x0406 tx timeout
[  458.826907][ T8730] EXT4-fs (loop9): unmounting filesystem.
[  459.151232][T13204] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  459.201955][T13268] fuseblk: Bad value for 'fd'
[  459.276809][T13204] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  459.481859][T12094] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  459.673293][T12094] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 19, changing to 8
[  459.688869][T12094] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 17801, setting to 1024
[  459.701089][T12094] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  459.714663][T12094] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  459.727848][T12094] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  459.755145][T12094] usb 4-1: config 0 descriptor??
[  459.761500][T13270] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  460.040993][T13204] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  460.061637][T13204] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  460.070606][T13204] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  460.141889][T13204] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  460.189218][T12094] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving
[  460.247470][T12094] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  460.622415][T13205] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  460.652160][T13205] 8021q: adding VLAN 0 to HW filter on device bond0
[  460.692010][T13205] 8021q: adding VLAN 0 to HW filter on device team0
[  460.703294][T13205] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  460.875802][    C1] plantronics 0003:047F:FFFF.0003: hid_field_extract() called with n (132) > 32! (syz.3.2525)
[  460.922693][T11716] EXT4-fs (loop5): unmounting filesystem.
[  461.124997][T12094] usb 4-1: USB disconnect, device number 2
[  461.744113][T13305] loop2: detected capacity change from 0 to 1024
[  462.186304][T13305] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  463.725051][T13325] loop5: detected capacity change from 0 to 256
[  463.856241][T11136] EXT4-fs (loop2): unmounting filesystem.
[  463.980185][T13331] loop3: detected capacity change from 0 to 256
[  464.517993][T13331] loop3: detected capacity change from 0 to 1024
[  466.763452][T13331] EXT4-fs warning (device loop3): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop3.
[  468.214760][T13346] loop2: detected capacity change from 0 to 40427
[  468.225902][T13346] F2FS-fs (loop2): Invalid log blocks per segment (83886089)
[  468.233381][T13346] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  468.243647][T13346] F2FS-fs (loop2): invalid crc value
[  468.312273][T13346] F2FS-fs (loop2): Found nat_bits in checkpoint
[  468.358897][T13346] F2FS-fs (loop2): Start checkpoint disabled!
[  468.368302][ T6768] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  468.422013][T13346] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[  468.430146][T13346] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  468.513778][T13353] bio_check_eod: 452 callbacks suppressed
[  468.513798][T13353] syz.2.2543: attempt to access beyond end of device
[  468.513798][T13353] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  468.559621][T13353] syz.2.2543: attempt to access beyond end of device
[  468.559621][T13353] loop2: rw=0, sector=45096, nr_sectors = 8 limit=40427
[  468.889192][T13359] syz.9.2547[13359] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  468.889300][T13359] syz.9.2547[13359] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  468.951521][T13357] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2546'.
[  469.007395][ T4567] kworker/u4:10: attempt to access beyond end of device
[  469.007395][ T4567] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  469.106203][T13357] unsupported nlmsg_type 40
[  470.606502][T13381] ipt_CLUSTERIP: Please specify destination IP
[  474.415492][T13432] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2563'.
[  474.424680][T13432] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2563'.
[  475.661443][ T4379] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  475.861526][ T4379] usb 3-1: Using ep0 maxpacket: 16
[  475.868915][ T4379] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  475.922668][ T4379] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  475.977672][ T4379] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  476.036134][ T4379] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  476.090323][ T4379] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  476.149572][ T4379] usb 3-1: Product: syz
[  476.181498][ T4379] usb 3-1: Manufacturer: syz
[  476.206590][ T4379] usb 3-1: SerialNumber: syz
[  476.522353][T13446] loop3: detected capacity change from 0 to 1024
[  476.529629][T13446] EXT4-fs: Ignoring removed nobh option
[  476.573394][T13446] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #11: comm syz.3.2567: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  476.650119][T13446] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.2567: couldn't read orphan inode 11 (err -117)
[  476.733024][ T4379] usb 3-1: 0:2 : does not exist
[  476.741728][T13446] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  476.799152][T13446] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:477: comm syz.3.2567: Invalid block bitmap block 0 in block_group 0
[  476.879716][T13446] Quota error (device loop3): write_blk: dquota write failed
[  476.900287][T13446] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  476.926101][T13446] EXT4-fs error (device loop3): ext4_acquire_dquot:6814: comm syz.3.2567: Failed to acquire dquot type 0
[  477.062042][ T4546] EXT4-fs error (device loop3): __ext4_get_inode_loc:4507: comm kworker/u4:9: Invalid inode table block 8589934593 in block_group 0
[  477.117793][T12090] EXT4-fs (loop3): unmounting filesystem.
[  477.155909][ T4379] usb 3-1: 1:0: cannot get min/max values for control 4 (id 1)
[  477.295781][ T4379] usb 3-1: USB disconnect, device number 5
[  477.635208][ T6768] udevd[6768]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  478.012616][T13471] loop3: detected capacity change from 0 to 512
[  478.114545][T13471] EXT4-fs: Ignoring removed mblk_io_submit option
[  478.121053][T13471] EXT4-fs: Ignoring removed bh option
[  478.129034][T13471] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  478.224072][T13471] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  478.264425][T13481] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  478.363637][T13471] EXT4-fs (loop3): 1 truncate cleaned up
[  478.369440][T13471] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  479.707408][T13491] 
[  479.709804][T13491] ======================================================
[  479.716841][T13491] WARNING: possible circular locking dependency detected
[  479.723882][T13491] 6.1.148-syzkaller #0 Not tainted
[  479.729003][T13491] ------------------------------------------------------
[  479.736040][T13491] syz.9.2573/13491 is trying to acquire lock:
[  479.742171][T13491] ffff8880b8f281d8 (krc.lock){..-.}-{2:2}, at: kvfree_call_rcu+0x184/0x870
[  479.750826][T13491] 
[  479.750826][T13491] but task is already holding lock:
[  479.758270][T13491] ffff8880b8f2a598 (hrtimer_bases.lock){-.-.}-{2:2}, at: hrtimer_start_range_ns+0xec/0xfc0
[  479.768408][T13491] 
[  479.768408][T13491] which lock already depends on the new lock.
[  479.768408][T13491] 
[  479.778927][T13491] 
[  479.778927][T13491] the existing dependency chain (in reverse order) is:
[  479.787980][T13491] 
[  479.787980][T13491] -> #1 (hrtimer_bases.lock){-.-.}-{2:2}:
[  479.795918][T13491]        _raw_spin_lock_irqsave+0xa4/0xf0
[  479.801786][T13491]        hrtimer_start_range_ns+0xec/0xfc0
[  479.807624][T13491]        kvfree_call_rcu+0x6d0/0x870
[  479.812929][T13491]        rtnl_register_internal+0x489/0x590
[  479.818825][T13491]        rtnl_register+0x2e/0x70
[  479.823855][T13491]        ip_rt_init+0x323/0x3b5
[  479.828798][T13491]        ip_init+0xa/0x14
[  479.833126][T13491]        inet_init+0x2bd/0x3cf
[  479.837891][T13491]        do_one_initcall+0x214/0x7a0
[  479.843181][T13491]        do_initcall_level+0x137/0x1e4
[  479.848634][T13491]        do_initcalls+0x4b/0x8a
[  479.853488][T13491]        kernel_init_freeable+0x3fa/0x5ac
[  479.859199][T13491]        kernel_init+0x19/0x1b0
[  479.864221][T13491]        ret_from_fork+0x1f/0x30
[  479.869166][T13491] 
[  479.869166][T13491] -> #0 (krc.lock){..-.}-{2:2}:
[  479.876205][T13491]        __lock_acquire+0x2cf8/0x7c50
[  479.881581][T13491]        lock_acquire+0x1b4/0x490
[  479.886624][T13491]        _raw_spin_lock+0x2a/0x40
[  479.891672][T13491]        kvfree_call_rcu+0x184/0x870
[  479.896970][T13491]        trie_delete_elem+0x52d/0x690
[  479.902352][T13491]        bpf_prog_2c29ac5cdc6b1842+0x3a/0x3e
[  479.908335][T13491]        bpf_trace_run2+0x1cd/0x3b0
[  479.913536][T13491]        enqueue_hrtimer+0x36e/0x3f0
[  479.918818][T13491]        hrtimer_start_range_ns+0xaea/0xfc0
[  479.924709][T13491]        futex_wait_queue+0xa8/0x1b0
[  479.930000][T13491]        futex_wait+0x19b/0x530
[  479.934861][T13491]        do_futex+0x310/0x320
[  479.939631][T13491]        __se_sys_futex+0x14a/0x440
[  479.944838][T13491]        do_syscall_64+0x4c/0xa0
[  479.949793][T13491]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  479.956366][T13491] 
[  479.956366][T13491] other info that might help us debug this:
[  479.956366][T13491] 
[  479.966606][T13491]  Possible unsafe locking scenario:
[  479.966606][T13491] 
[  479.974144][T13491]        CPU0                    CPU1
[  479.979510][T13491]        ----                    ----
[  479.984894][T13491]   lock(hrtimer_bases.lock);
[  479.989578][T13491]                                lock(krc.lock);
[  479.995909][T13491]                                lock(hrtimer_bases.lock);
[  480.003121][T13491]   lock(krc.lock);
[  480.006929][T13491] 
[  480.006929][T13491]  *** DEADLOCK ***
[  480.006929][T13491] 
[  480.015068][T13491] 2 locks held by syz.9.2573/13491:
[  480.020264][T13491]  #0: ffff8880b8f2a598 (hrtimer_bases.lock){-.-.}-{2:2}, at: hrtimer_start_range_ns+0xec/0xfc0
[  480.030980][T13491]  #1: ffffffff8cb2ade0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0xda/0x3b0
[  480.040383][T13491] 
[  480.040383][T13491] stack backtrace:
[  480.046263][T13491] CPU: 1 PID: 13491 Comm: syz.9.2573 Not tainted 6.1.148-syzkaller #0
[  480.054588][T13491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  480.064755][T13491] Call Trace:
[  480.068046][T13491]  <TASK>
[  480.070980][T13491]  dump_stack_lvl+0x168/0x22e
[  480.075681][T13491]  ? load_image+0x3b0/0x3b0
[  480.080220][T13491]  ? show_regs_print_info+0x12/0x12
[  480.085476][T13491]  ? print_circular_bug+0x12b/0x1a0
[  480.090694][T13491]  check_noncircular+0x274/0x310
[  480.095652][T13491]  ? add_chain_block+0x940/0x940
[  480.100598][T13491]  ? lockdep_lock+0xdc/0x1e0
[  480.105196][T13491]  ? _find_first_zero_bit+0xcf/0x100
[  480.110490][T13491]  __lock_acquire+0x2cf8/0x7c50
[  480.115353][T13491]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  480.121260][T13491]  ? verify_lock_unused+0x140/0x140
[  480.126494][T13491]  ? kasan_save_stack+0x4c/0x60
[  480.131355][T13491]  ? kasan_save_stack+0x3a/0x60
[  480.136206][T13491]  ? __kasan_record_aux_stack+0xb2/0xc0
[  480.141767][T13491]  ? kvfree_call_rcu+0x108/0x870
[  480.146824][T13491]  ? trie_delete_elem+0x52d/0x690
[  480.151867][T13491]  ? bpf_prog_2c29ac5cdc6b1842+0x3a/0x3e
[  480.157512][T13491]  ? bpf_trace_run2+0x1cd/0x3b0
[  480.162373][T13491]  ? enqueue_hrtimer+0x36e/0x3f0
[  480.167535][T13491]  ? hrtimer_start_range_ns+0xaea/0xfc0
[  480.173200][T13491]  ? futex_wait_queue+0xa8/0x1b0
[  480.178153][T13491]  ? futex_wait+0x19b/0x530
[  480.182662][T13491]  ? do_futex+0x310/0x320
[  480.187000][T13491]  ? __se_sys_futex+0x14a/0x440
[  480.191859][T13491]  ? do_syscall_64+0x4c/0xa0
[  480.196455][T13491]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  480.202532][T13491]  lock_acquire+0x1b4/0x490
[  480.207043][T13491]  ? kvfree_call_rcu+0x184/0x870
[  480.211989][T13491]  ? read_lock_is_recursive+0x10/0x10
[  480.217374][T13491]  ? __phys_addr+0xb6/0x170
[  480.221968][T13491]  _raw_spin_lock+0x2a/0x40
[  480.226473][T13491]  ? kvfree_call_rcu+0x184/0x870
[  480.231500][T13491]  kvfree_call_rcu+0x184/0x870
[  480.236268][T13491]  ? verify_lock_unused+0x140/0x140
[  480.241561][T13491]  ? rcu_leak_callback+0x10/0x10
[  480.246509][T13491]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  480.252426][T13491]  ? _raw_spin_unlock+0x40/0x40
[  480.257289][T13491]  trie_delete_elem+0x52d/0x690
[  480.262147][T13491]  bpf_prog_2c29ac5cdc6b1842+0x3a/0x3e
[  480.267693][T13491]  bpf_trace_run2+0x1cd/0x3b0
[  480.272385][T13491]  ? bpf_trace_run2+0xda/0x3b0
[  480.277184][T13491]  ? bpf_trace_run1+0x3b0/0x3b0
[  480.282045][T13491]  ? debug_object_activate+0x2d7/0x490
[  480.287513][T13491]  enqueue_hrtimer+0x36e/0x3f0
[  480.292288][T13491]  hrtimer_start_range_ns+0xaea/0xfc0
[  480.297664][T13491]  ? futex_wait_queue+0x23/0x1b0
[  480.302603][T13491]  futex_wait_queue+0xa8/0x1b0
[  480.307553][T13491]  futex_wait+0x19b/0x530
[  480.311967][T13491]  ? try_to_wake_up+0x67c/0x1080
[  480.316907][T13491]  ? futex_wait_setup+0x260/0x260
[  480.321941][T13491]  ? __remove_hrtimer+0x470/0x470
[  480.326978][T13491]  ? seqcount_lockdep_reader_access+0x120/0x1c0
[  480.333224][T13491]  ? lockdep_hardirqs_on+0x94/0x140
[  480.338427][T13491]  do_futex+0x310/0x320
[  480.342595][T13491]  ? _copy_from_user+0x10b/0x170
[  480.347537][T13491]  ? __ia32_sys_get_robust_list+0x80/0x80
[  480.353354][T13491]  ? preempt_count_add+0x8d/0x190
[  480.358380][T13491]  ? ktime_get+0x247/0x270
[  480.362796][T13491]  __se_sys_futex+0x14a/0x440
[  480.367483][T13491]  ? __x64_sys_futex+0xf0/0xf0
[  480.372253][T13491]  ? __x64_sys_futex+0x1d/0xf0
[  480.377029][T13491]  do_syscall_64+0x4c/0xa0
[  480.381441][T13491]  ? clear_bhb_loop+0x60/0xb0
[  480.386114][T13491]  ? clear_bhb_loop+0x60/0xb0
[  480.390788][T13491]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  480.396686][T13491] RIP: 0033:0x7f3984d8ebe9
[  480.401105][T13491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  480.420796][T13491] RSP: 002b:00007ffd47d3b468 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  480.429297][T13491] RAX: ffffffffffffffda RBX: 00000000000751b0 RCX: 00007f3984d8ebe9
[  480.437276][T13491] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3984fb5fac
[  480.445251][T13491] RBP: 0000000000000032 R08: 002756881936d852 R09: 0000000947d3b75f
[  480.453225][T13491] R10: 00007ffd47d3b560 R11: 0000000000000246 R12: 00007f3984fb5fac
[  480.461195][T13491] R13: 00007ffd47d3b560 R14: 00000000000751e2 R15: 00007ffd47d3b580
[  480.469257][T13491]  </TASK>
[  480.786873][T12090] EXT4-fs (loop3): unmounting filesystem.
[  482.761459][ T4279] Bluetooth: hci4: command 0x0406 tx timeout