last executing test programs:

5m31.99234066s ago: executing program 2 (id=3):
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x9, 0x3, 0x10004, 0x5}, 0x50)
syz_clone(0xc510c080, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0)
socketpair(0xa, 0x3, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r1, &(0x7f0000000280), 0x9)
r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000c40), 0x12)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_subtree(r3, &(0x7f0000000140), 0x2, 0x0)
syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12)
write$cgroup_subtree(r4, &(0x7f0000000100)={[{0x2b, 'pids'}]}, 0x6)

5m30.092036161s ago: executing program 2 (id=7):
syz_emit_vhci(&(0x7f0000001800)=ANY=[@ANYBLOB="040e0c"], 0xf)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r0}, 0x18)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff)
setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x5, &(0x7f0000000140)=0x9, 0x4)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_access\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000001000000000000000400010000000000080000000000000020"], 0x24, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
add_key(&(0x7f0000000140)='syzkaller\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)="ed0e15c6af26165c6cb448f7da5f86bc8655", 0x12, 0x0)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
r3 = socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r3, 0x110, 0x4, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x30, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x58}}, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c)
getpid()
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x7f, 0xc8, 0x57}}}, 0x7)

5m27.3918258s ago: executing program 2 (id=10):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
syz_open_dev$sndpcmp(0x0, 0xffffffffffffffff, 0x422080)
recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x771, &(0x7f0000001280)="$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")
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x82400, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})

5m12.236637077s ago: executing program 32 (id=10):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
syz_open_dev$sndpcmp(0x0, 0xffffffffffffffff, 0x422080)
recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x771, &(0x7f0000001280)="$eJzs3M9rHGUfAPDvTLJJm+Z9Ny+84I+DCC1YKN0kzaU9NV68FQoFrzUkmxAyyYbspnZjwdazUJuLgiDi2aMXD0Kpf4A3KSh4F0RrBMXLymx+1Ka7m02TZrX9fGCy32eemfk+393Jww7sTADPrVfzP0nEcERcjoji1vo0Igaa0bGIm5vbbTy4MZ0vSTQaV35O8t1io1HcOVay9XoimrvEixFxrxBx5r3H81brawtTWVZe2WqP1haXR6v1taH5xam58lx5aXziwtj5iYnzYxN71vBCl7WeevPC8TvfvLG+/u0Xtduv9J9NYrJZd2zV1uVh9mXzPSnE5K71S08jWQ8lvR4AAABdyb/n90VEf/NbajH6mlFrX/5+pEMDAAAADkljsAEAAAA885Lo0HmsUycAAADw77D9O4Dte3s73wc7cOi/P/jp9YgYaZW/v3kPccSxKETE0EbyyJ0JyeZucCA3b0XE3cnd599n+Rl284DHHtvVfvQe6cP/X2L/7ubzz2Sr+SfdmX+ixfzTv/3shANqP/89zN/XZv673GWOrz55qdA2/62Il/tb5U928idt8r/VZf7b6+/f2WubVvn/nmv7+RBnH38+xOTsfNbx8QP3/jx9v11fXv9Qu/zNo7b+/POu5T0r3/TOxq8L7eaSPP/pk50//1bvf35OfLA1jjQi7my95u31XTlOLn73daf6ZyIaT/L5f9pl/T98Pni9y00BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgKY2I4UjS0k6cpqVSxImI+H8MpVmlWjszW1ldmsn7IkaikM7OZ+WxiChutpO8Pd6MH7bP7WpPRMT/vj++mXQ+K5emK9lMr4sHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgx4mIGI4kLUVEGhG/FdO0VIro72LfwSMYHwAAAHBIRno9AAAAAOCpc/0PAAAAz74W1/+FbvZLnsJYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgGfW5UuX8qWx8eDGdN6euVZfXahcOztTri6UFlenS9OVleXSXKUyl5VL05XFvY6XVSrL4xdi9fporVytjVbra1cXK6tLtavzi1Nz5avlwpFUBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwH4NN5ckLUVE2ozTtFSK+E9EjEQhmZ3PymMR8d+IuF8sDObt8V4PGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgENXra8tTGVZeUUgEBxZ8G5E/AOG0SHo9cwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAvVOtrC1NZVl6p9nokAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Fb6YxIR+fJa8dTwrs6+geSPYh4MRMTbH1/58PpUrbYyHjGQ/LKzvvbR1vpzPSkAAAAAngcX97Px9nX69nU8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAt6r1tYWpLCuvHCy4GPW1RtJmm17XCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPJm/AgAA///ossUV")
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x82400, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})

3m53.71938756s ago: executing program 4 (id=140):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10)
ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d2, 0x0)
r7 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff)
writev(0xffffffffffffffff, &(0x7f0000000440)=[{0x0}, {0x0}], 0x2)
r8 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
r9 = add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_MOVE(0x1e, r7, r8, r9, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x18}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1a}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xa, 0x9}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

3m52.087758904s ago: executing program 4 (id=142):
r0 = socket$inet6(0xa, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
ptrace$getenv(0x4201, 0x0, 0x7f, &(0x7f0000000040))
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = shmget$private(0x0, 0x2000, 0x100, &(0x7f0000ff9000/0x2000)=nil)
r6 = syz_open_pts(0xffffffffffffffff, 0x83)
ioctl$TIOCGWINSZ(r6, 0x5413, &(0x7f00000000c0))
shmat(r5, &(0x7f0000000000/0x2000)=nil, 0x5000)
shmctl$SHM_LOCK(r5, 0xb)
shmctl$SHM_UNLOCK(r5, 0xc)
shmctl$SHM_STAT_ANY(r5, 0xf, &(0x7f0000000580)=""/160)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x938b962ab0b0156c)
io_setup(0x6, &(0x7f00000003c0))
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, 0x0, 0x0)
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x1, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'})

3m50.867032715s ago: executing program 4 (id=144):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f0000000080)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@dax_always}, {@inlinecrypt}]}, 0x2, 0x246, &(0x7f0000000e40)="$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")
socket$unix(0x1, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r4}, 0x18)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r5}, 0x18)

3m49.297907082s ago: executing program 4 (id=148):
syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000000)='.\x02\x00', 0x8c48, &(0x7f0000000240)=ANY=[@ANYBLOB='nojoliet,mode=0x00000000000000e4,dmode=0x0000000000000005,check=relaxed,overriderockperm,utf8,mode=0x0000000000000000,nojoliet,cruft,mode=0xfffffffffffffffb,utf8,session=0x0000000000000043,hide,dmode=0x000000000000001f,uid=', @ANYRESDEC, @ANYBLOB="2c6d6f64653d3078303030303030303038303030303030310086cb4be138f89f69aed82c696f636861727365743d6d6163696e7569742c66756e633d4250524d5f434845434b2c0020e70c853946a2904771793dc06c06611e03f5e2c7602f64a957c88cc3d8ee83589beff40c21fbbb1601b5869235b81f95cf0a39f6c3195e5125f94f2f8c75c38fc0c09c03ea3fbd2e56cce2a69c86db67514e59f271f5f87b7b075aabe717344a6eaeb832436386d4424b4a3d25832eb577d44c6accfaa75c7ae620d71699794e59af4cb377883fc3e4c9dfdb6340cb6395e3776c2b7e56043e63b8dd704ed4ede91e42537942c5e62bf46bf7b8542c03f6240d54f161466db4e9134915ca2839bbf4d798c1de7af1366d9b142b4e603178a6862a8b03340d309cab1a0cd33fb757910ccc8420000000934038e92ed734e0eb7d200c8283ff14dcc7b61114a4fef9561fa91274ac0114c707f4e3bf295693ab"], 0x1, 0x5ae, &(0x7f00000004c0)="$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")
syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4e22, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x7}}}}}}}, 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(0x0, &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020)

3m47.268779325s ago: executing program 4 (id=151):
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x9, 0x3, 0x10004, 0x5}, 0x50)
syz_clone(0xc510c080, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0)
socketpair(0xa, 0x3, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9)
r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000c40), 0x12)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_subtree(r2, &(0x7f0000000140), 0x2, 0x0)
r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000001c0), 0x12)
write$cgroup_subtree(r3, &(0x7f0000000100)={[{0x2b, 'pids'}]}, 0x6)

3m45.712454481s ago: executing program 4 (id=155):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000340)={@hci={0x1f, 0x1, 0x3}, {&(0x7f00000000c0)=""/3, 0x3}, &(0x7f00000001c0), 0x8}, 0xa0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='sched_switch\x00'}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x301c40a, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x6, 0x2d5, &(0x7f0000000680)="$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")
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a80)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r4)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r5, &(0x7f0000000200)=""/85, 0xaa)
keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0xb, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0xa}, 0x94)

3m44.247369668s ago: executing program 33 (id=155):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000340)={@hci={0x1f, 0x1, 0x3}, {&(0x7f00000000c0)=""/3, 0x3}, &(0x7f00000001c0), 0x8}, 0xa0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='sched_switch\x00'}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x301c40a, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x6, 0x2d5, &(0x7f0000000680)="$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")
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a80)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r4)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r5, &(0x7f0000000200)=""/85, 0xaa)
keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0xb, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0xa}, 0x94)

3m39.109697292s ago: executing program 1 (id=169):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
r2 = accept4(r0, 0x0, 0x0, 0x800)
sendmsg$nl_route_sched_retired(r2, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r4, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4000000}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
recvmmsg(r2, &(0x7f0000001200), 0x0, 0x2023, 0x0)
socket$unix(0x1, 0x1, 0x0)
listen(r1, 0x2)
socket$packet(0x11, 0x3, 0x300)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r8=>0xffffffffffffffff})
getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)

3m37.162821776s ago: executing program 1 (id=172):
r0 = socket$inet6(0xa, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
ptrace$getenv(0x4201, 0x0, 0x7f, &(0x7f0000000040))
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = shmget$private(0x0, 0x2000, 0x100, &(0x7f0000ff9000/0x2000)=nil)
r6 = syz_open_pts(0xffffffffffffffff, 0x83)
ioctl$TIOCGWINSZ(r6, 0x5413, &(0x7f00000000c0))
shmctl$SHM_LOCK(r5, 0xb)
shmctl$SHM_UNLOCK(r5, 0xc)
shmctl$SHM_STAT_ANY(r5, 0xf, &(0x7f0000000580)=""/160)
openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101042, 0xb0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x938b962ab0b0156c)
io_setup(0x6, &(0x7f00000003c0))
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, 0x0, 0x0)
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x1, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'})

3m35.845952178s ago: executing program 1 (id=175):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0x4, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0xa}, 0x94)

3m34.555074567s ago: executing program 1 (id=177):
syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000000)='.\x02\x00', 0x8c48, &(0x7f0000000240)=ANY=[@ANYBLOB='nojoliet,mode=0x00000000000000e4,dmode=0x0000000000000005,check=relaxed,overriderockperm,utf8,mode=0x0000000000000000,nojoliet,cruft,mode=0xfffffffffffffffb,utf8,session=0x0000000000000043,hide,dmode=0x000000000000001f,uid=', @ANYRESDEC, @ANYBLOB="2c6d6f64653d3078303030303030303038303030303030310086cb4be138f89f69aed82c696f636861727365743d6d6163696e7569742c66756e633d4250524d5f434845434b2c0020e70c853946a2904771793dc06c06611e03f5e2c7602f64a957c88cc3d8ee83589beff40c21fbbb1601b5869235b81f95cf0a39f6c3195e5125f94f2f8c75c38fc0c09c03ea3fbd2e56cce2a69c86db67514e59f271f5f87b7b075aabe717344a6eaeb832436386d4424b4a3d25832eb577d44c6accfaa75c7ae620d71699794e59af4cb377883fc3e4c9dfdb6340cb6395e3776c2b7e56043e63b8dd704ed4ede91e42537942c5e62bf46bf7b8542c03f6240d54f161466db4e9134915ca2839bbf4d798c1de7af1366d9b142b4e603178a6862a8b03340d309cab1a0cd33fb757910ccc8420000000934038e92ed734e0eb7d200c8283ff14dcc7b61114a4fef9561fa91274ac0114c707f4e3bf295693ab"], 0x1, 0x5ae, &(0x7f00000004c0)="$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")
syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4e22, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x7}}}}}}}, 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, 0x0, 0x0)

3m33.175642365s ago: executing program 1 (id=180):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000140))
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x40, 0x40, 0x41}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)="7a47aa3dcdb26a85f3a4dcf01fe80d2c1a7b3759158601", &(0x7f0000002500), 0xc, r4}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r4, &(0x7f00000014c0), &(0x7f0000000100)=""/31}, 0x20)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x5000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102})
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000180)=0x80)
io_setup(0x6, &(0x7f00000000c0)=<r5=>0x0)
io_submit(r5, 0x0, 0x0)
io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})

3m30.687352814s ago: executing program 1 (id=185):
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
r0 = socket$inet(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x14a, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000df500b818000000000000000000000000e4de", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20)
r5 = accept4(r2, 0x0, 0x0, 0x0)
connect$can_bcm(r5, 0x0, 0x0)
fstatfs(0xffffffffffffffff, &(0x7f00000005c0)=""/188)
fsetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)=':\x00', 0xffdf, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, &(0x7f00000000c0))
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4003, 0x1}, 0x48)
r6 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r6, &(0x7f0000000a40)={0xa, 0x4e24, 0xf4, @remote, 0x1}, 0x1c)
sendmsg(r6, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x2a0, 0x208, 0x8, 0xfa04, 0x0, 0x6c02, 0x208, 0x194, 0x194, 0x208, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x7a}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'batadv_slave_0\x00', 'pimreg\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300)

3m29.658242997s ago: executing program 34 (id=185):
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
r0 = socket$inet(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x14a, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000df500b818000000000000000000000000e4de", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20)
r5 = accept4(r2, 0x0, 0x0, 0x0)
connect$can_bcm(r5, 0x0, 0x0)
fstatfs(0xffffffffffffffff, &(0x7f00000005c0)=""/188)
fsetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)=':\x00', 0xffdf, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, &(0x7f00000000c0))
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4003, 0x1}, 0x48)
r6 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r6, &(0x7f0000000a40)={0xa, 0x4e24, 0xf4, @remote, 0x1}, 0x1c)
sendmsg(r6, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x2a0, 0x208, 0x8, 0xfa04, 0x0, 0x6c02, 0x208, 0x194, 0x194, 0x208, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x7a}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'batadv_slave_0\x00', 'pimreg\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300)

3m3.266040707s ago: executing program 5 (id=156):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
r2 = accept4(r0, 0x0, 0x0, 0x800)
sendmsg$nl_route_sched_retired(r2, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r4, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4000000}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
recvmmsg(r2, &(0x7f0000001200), 0x0, 0x2023, 0x0)
socket$unix(0x1, 0x1, 0x0)
listen(r1, 0x2)
accept4(r0, 0x0, 0x0, 0x0)
r8 = socket$packet(0x11, 0x3, 0x300)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r8, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x20000084)
bind$alg(r0, 0x0, 0x0)

3m2.000816744s ago: executing program 5 (id=219):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x1c3641)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000300)={{0x0, 0xff}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0xba21})
r1 = socket(0x10, 0x803, 0x0)
r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000013c0), 0x140, 0x0)
ioctl$TIOCSLCKTRMIOS(r2, 0x5457, 0x0)
sendto(r1, &(0x7f0000000000)="120000001200e7ef18c7d39ffbafcef200a1238220e39635f3bf55", 0x1b, 0x800, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000002280)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000003240)=""/4087, 0xff7}, {&(0x7f0000000840)=""/177, 0xb1}, {&(0x7f00000001c0)=""/254, 0xfe}, {&(0x7f0000000300)=""/241, 0xf1}, {&(0x7f0000000b80)=""/232, 0xe8}, {&(0x7f0000000680)=""/148, 0x6d}, {&(0x7f00000005c0)=""/136, 0x88}, {&(0x7f0000000040)=""/27, 0x1b}], 0x8}, 0x81}], 0x1, 0x2100, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000776c616e310000000000000000000000080009000300"/41], 0x34}}, 0x48080)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000540)={'batadv_slave_0\x00'})
getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000780), &(0x7f00000007c0)=0x4)
r4 = socket$netlink(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000240)={'team0\x00', <r6=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="010900000000000000250100000008000100", @ANYRES32=r6], 0x208}, 0x1, 0x0, 0x0, 0x24004000}, 0x24044880)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(0x0, r7)
r8 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time\x00')
ioctl$NS_GET_USERNS(r8, 0xb701, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000400))
sendmsg$BATADV_CMD_SET_HARDIF(r7, 0x0, 0x0)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000900)={0x0, @multicast1, @multicast2}, &(0x7f0000000940)=0xc)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r10=>0x0})
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621f"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001580)={r11, r10, 0x25, 0x2, @val=@netkit}, 0x1c)

3m0.988180375s ago: executing program 5 (id=222):
syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000000)='.\x02\x00', 0x8c48, &(0x7f0000000240)=ANY=[@ANYBLOB='nojoliet,mode=0x00000000000000e4,dmode=0x0000000000000005,check=relaxed,overriderockperm,utf8,mode=0x0000000000000000,nojoliet,cruft,mode=0xfffffffffffffffb,utf8,session=0x0000000000000043,hide,dmode=0x000000000000001f,uid=', @ANYRESDEC, @ANYBLOB="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"], 0x1, 0x5ae, &(0x7f00000004c0)="$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")
syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4e22, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x7}}}}}}}, 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)

2m59.959858538s ago: executing program 5 (id=225):
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000200)='./bus\x00', 0x1000000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x1, 0x126f, &(0x7f0000001600)="$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")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'sit0\x00', 0x0})
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r3, 0x0, 0x0)
sendto$inet6(r3, &(0x7f0000000080)="800037bbfa9ba1", 0x7, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)

2m57.676524207s ago: executing program 5 (id=227):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
r2 = accept4(r0, 0x0, 0x0, 0x800)
sendmsg$nl_route_sched_retired(r2, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r4, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4000000}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
recvmmsg(r2, &(0x7f0000001200), 0x0, 0x2023, 0x0)
socket$unix(0x1, 0x1, 0x0)
listen(r1, 0x2)
accept4(r0, 0x0, 0x0, 0x0)
r8 = socket$packet(0x11, 0x3, 0x300)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r8, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x20000084)
bind$alg(r0, 0x0, 0x0)

2m57.189709456s ago: executing program 35 (id=227):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
r2 = accept4(r0, 0x0, 0x0, 0x800)
sendmsg$nl_route_sched_retired(r2, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r4, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4000000}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
recvmmsg(r2, &(0x7f0000001200), 0x0, 0x2023, 0x0)
socket$unix(0x1, 0x1, 0x0)
listen(r1, 0x2)
accept4(r0, 0x0, 0x0, 0x0)
r8 = socket$packet(0x11, 0x3, 0x300)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r8, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x20000084)
bind$alg(r0, 0x0, 0x0)

2m22.140228352s ago: executing program 0 (id=279):
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="c481abccf61b80bc8ffa10a4a800"/32], 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, 0x94)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000))
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_RATE64={0xc, 0x8, 0x4526dd370cbcddac}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r5, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c)
connect$rose(r5, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f91324", 0x12}], 0x1}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0xfffffffe}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
sendmmsg(r6, &(0x7f0000000740)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @multicast1, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000007c0)="a960e57530b65741465247b839c49f83cc481ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999eab05883ce32fa9b99187b196d53939db62b2b37c0cd0dea2a1be6f97dbcd0937bb416c3fb74a9d08d9afa4c86a507485b0e681734eccbc5659567aa08b5b93be09bc2a6d6319acbd1aeb751f8e9b7ce9e2f", 0xad}, {&(0x7f0000001400)="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", 0x864}], 0x2}}], 0x1, 0x11)
accept4(r6, 0x0, 0x0, 0x800)

2m21.138974892s ago: executing program 0 (id=282):
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000200)='./bus\x00', 0x1000000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x1, 0x126f, &(0x7f0000001600)="$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")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'sit0\x00', 0x0})
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r3, 0x0, 0x0)
sendto$inet6(r3, &(0x7f0000000080)="800037bbfa9ba1", 0x7, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b)
unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0)

2m17.293641227s ago: executing program 0 (id=286):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x1c3641)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000300)={{0x0, 0xff}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0xba21})
r1 = socket(0x10, 0x803, 0x0)
r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000013c0), 0x140, 0x0)
ioctl$TIOCSLCKTRMIOS(r2, 0x5457, 0x0)
sendto(r1, &(0x7f0000000000)="120000001200e7ef18c7d39ffbafcef200a1238220e39635f3bf55", 0x1b, 0x800, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000002280)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000003240)=""/4087, 0xff7}, {&(0x7f0000000840)=""/177, 0xb1}, {&(0x7f00000001c0)=""/254, 0xfe}, {&(0x7f0000000300)=""/241, 0xf1}, {&(0x7f0000000b80)=""/232, 0xe8}, {&(0x7f0000000680)=""/148, 0x6d}, {&(0x7f00000005c0)=""/136, 0x88}, {&(0x7f0000000040)=""/27, 0x1b}], 0x8}, 0x81}], 0x1, 0x2100, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000776c616e310000000000000000000000080009000300"/41], 0x34}}, 0x48080)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000540)={'batadv_slave_0\x00'})
getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000780), &(0x7f00000007c0)=0x4)
r4 = socket$netlink(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000240)={'team0\x00', <r6=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="010900000000000000250100000008000100", @ANYRES32=r6], 0x208}, 0x1, 0x0, 0x0, 0x24004000}, 0x24044880)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(0x0, r7)
r8 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time\x00')
ioctl$NS_GET_USERNS(r8, 0xb701, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000400))
sendmsg$BATADV_CMD_SET_HARDIF(r7, 0x0, 0x0)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000900)={0x0, @multicast1, @multicast2}, &(0x7f0000000940)=0xc)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r10=>0x0})
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001580)={r11, r10, 0x25, 0x2, @val=@netkit}, 0x1c)

2m16.735771172s ago: executing program 0 (id=289):
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400080000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = getpgid(0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0)
mount$bind(0x0, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x6ad81619ecb25a57, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
r4 = syz_pidfd_open(r3, 0x0)
r5 = pidfd_getfd(r4, r4, 0x0)
setns(r5, 0x66020000)
mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0)

2m14.337774282s ago: executing program 0 (id=291):
r0 = fsopen(&(0x7f0000000140)='rpc_pipefs\x00', 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r0, 0x1, 0x5)
r6 = openat(r5, &(0x7f0000000040)='.\x00', 0x0, 0x1)
getdents64(r6, 0x0, 0x22)

2m5.524606424s ago: executing program 0 (id=300):
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x2204806, &(0x7f0000000300)={[{@map_off}, {@overriderock, 0x0}, {@mode={'mode', 0x3d, 0xfffffffffffffffc}}, {@sbsector={'sbsector', 0x3d, 0x5}}, {@session={'session', 0x3d, 0x62}}, {@iocharset={'iocharset', 0x3d, 'macgreek'}, 0x41}, {@map_acorn}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@session={'session', 0x3d, 0x40000000058}}, {@block}, {@mode={'mode', 0x3d, 0xfffffffffffffffe}}, {@nocompress}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@permit_directio}]}, 0xfa, 0x69f, &(0x7f0000000f00)="$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")
r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f00000000c0)={0x8, &(0x7f0000000040)="ac2767545bc5e5ad9bcb27a48592c280e7095cc5a4ccbaa086e4a943f6d511d44efb0c3eea8fb7028f6f1eddc27c19233ad1d61e12b2fae48c0371c3b3f44fa0caed1ba2bfb99beb9cc9b54dcbb4ba4e096f3b6062f78a71d3ada8c72540d1db3601ce50032e628556d0717e31f1f2e6e3bc1ab3525bf54f8a2e5a"})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet6(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0)
sendto$inet6(r4, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)

2m4.813564995s ago: executing program 36 (id=300):
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x2204806, &(0x7f0000000300)={[{@map_off}, {@overriderock, 0x0}, {@mode={'mode', 0x3d, 0xfffffffffffffffc}}, {@sbsector={'sbsector', 0x3d, 0x5}}, {@session={'session', 0x3d, 0x62}}, {@iocharset={'iocharset', 0x3d, 'macgreek'}, 0x41}, {@map_acorn}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@session={'session', 0x3d, 0x40000000058}}, {@block}, {@mode={'mode', 0x3d, 0xfffffffffffffffe}}, {@nocompress}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@permit_directio}]}, 0xfa, 0x69f, &(0x7f0000000f00)="$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")
r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f00000000c0)={0x8, &(0x7f0000000040)="ac2767545bc5e5ad9bcb27a48592c280e7095cc5a4ccbaa086e4a943f6d511d44efb0c3eea8fb7028f6f1eddc27c19233ad1d61e12b2fae48c0371c3b3f44fa0caed1ba2bfb99beb9cc9b54dcbb4ba4e096f3b6062f78a71d3ada8c72540d1db3601ce50032e628556d0717e31f1f2e6e3bc1ab3525bf54f8a2e5a"})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet6(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0)
sendto$inet6(r4, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)

1m58.511732545s ago: executing program 7 (id=312):
syz_usb_connect$hid(0x4, 0x3f, 0x0, 0x0)
r0 = creat(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x8031, 0xffffffffffffffff, 0xf6bf000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1269, 0x604000000000000)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c)
sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)

1m55.514365225s ago: executing program 7 (id=315):
r0 = fsopen(&(0x7f0000000140)='rpc_pipefs\x00', 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r0, 0x1, 0x5)
r6 = openat(r5, &(0x7f0000000040)='.\x00', 0x0, 0x1)
getdents64(r6, 0x0, 0x22)

1m48.380359789s ago: executing program 7 (id=326):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d2, 0x0)
r5 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff)
writev(0xffffffffffffffff, &(0x7f0000000440)=[{0x0}, {&(0x7f0000000380)}], 0x2)
r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
r7 = add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_MOVE(0x1e, r5, r6, r7, 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

1m47.181429969s ago: executing program 7 (id=328):
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400080000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = getpgid(0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0)
mount$bind(0x0, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x6ad81619ecb25a57, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
r4 = syz_pidfd_open(r3, 0x0)
pidfd_getfd(r4, r4, 0x0)
mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0)
umount2(&(0x7f0000000040)='.\x00', 0x2)

1m44.690265398s ago: executing program 7 (id=331):
r0 = fsopen(&(0x7f0000000140)='rpc_pipefs\x00', 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r0, 0x1, 0x5)
r6 = openat(r5, &(0x7f0000000040)='.\x00', 0x0, 0x1)
getdents64(r6, 0x0, 0x22)

1m32.023785435s ago: executing program 7 (id=343):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x15b1, 0xd081, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = dup(r2)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x42, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

1m31.452913052s ago: executing program 37 (id=343):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x15b1, 0xd081, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = dup(r2)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x42, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

1m0.897588378s ago: executing program 3 (id=380):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019340)=""/102400, 0x19000)
fanotify_init(0x200, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000040)=0x4)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xfff}, 0x1c)
sendmmsg$inet6(r4, 0x0, 0x0, 0x404c851)

57.28276439s ago: executing program 3 (id=383):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0)
ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000))
epoll_create(0x1)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
iopl(0x8b)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x48100, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0xfb)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4c40, &(0x7f0000000000), 0xfe, 0x27a, &(0x7f0000000980)="$eJzs3TtoJHUcB/Df7CMPEyRqI4gPEBENhFgIgo02CoEQgoigQkTEShIhJthlrWwstFZJZRPEztyVxzXhmoNrc3cpcs0VF664cMVdscfs7OY2yYbsZV8h8/nAZua/+38t7Pc/m5CZCSC3JiLio4goRsRkRJQjImmu8Eb2mKgX10e3FiKq1c/uJ7V6WTnTaDcWEZWI+CCi1HhtdfOr3Yfbn77920r5rX82vxzt1/trtre7M7v/99yv/8+8t1qoPzde3za/j25KWjxXSiJe7MVg50RSGvQMaMf8z//dTHP/UkS8Wct/OQr1yP6+PHS1HO/+dVLbP+7deKWfcwW6r1otp8fAShXInULtO3BSmIqIbL9QmJrKvsPfKibxw9LyT5PfL60sfjfolQroSNNv3eMRO59cHr40diT/d4tZ/tvyfq8mCpzJcHvV0vx/Pr9xO93fL/Z4TsD58Gq2SfM/+c3aOyH/kDvyD/l1kP9Z+Ye8cfyHC+CM2ZV/uKhO//da+Yf8kn+4wMqNnUrLl+Uf8kv+Ib+e5n8kzX/jDwZDA54W0AfNx38AIF+qw4M+AxkYlEGvPwAAAAAAAAAAAAAAAAAAwHHro1sLjUe/xrz2Z8TexxFROjx+dgvTYu1+xBEjtZ/PPUjSageSrFlHvn69ww469G+Xz76ea/Perw3P3+nu+M/q+mu96feXw8UTL4a/thhRSStPl0rHP/9J/fN3qhP7f+GUhuVv2xugW5Ij5Q+/6O/4Rz3eGOz4M9sRV9L1Z7rV+leIl2vb1uvPePMlls/ox0cddgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDfPAkAAP//Z9RrGg==")

53.017809867s ago: executing program 3 (id=387):
r0 = fsopen(&(0x7f0000000140)='rpc_pipefs\x00', 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r0, 0x1, 0x5)
r6 = openat(r5, &(0x7f0000000040)='.\x00', 0x0, 0x1)
getdents64(r6, 0x0, 0x22)

51.827408256s ago: executing program 3 (id=389):
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400080000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = getpgid(0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0)
mount$bind(0x0, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x6ad81619ecb25a57, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
syz_pidfd_open(r3, 0x0)
setns(0xffffffffffffffff, 0x66020000)
mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0)
umount2(&(0x7f0000000040)='.\x00', 0x2)

49.178858701s ago: executing program 3 (id=390):
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000200)='./bus\x00', 0x1000000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x1, 0x126f, &(0x7f0000001600)="$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")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'sit0\x00', 0x0})
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r3, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)

46.504671958s ago: executing program 3 (id=394):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$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")
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r5)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
request_key(&(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='\xf3yz', 0x0)

45.326635136s ago: executing program 38 (id=394):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$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")
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r5)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
request_key(&(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='\xf3yz', 0x0)

17.111989838s ago: executing program 8 (id=301):
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000200)='./bus\x00', 0x1000000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x1, 0x126f, &(0x7f0000001600)="$eJzs3U1rY1UcB+B/2vQtY5uq4+gMiAfdKEKcduHKTZEZEAtKtQMqCHdsqqFpU5pQiIhTV64EP4aoS3eC+AW6ceNaEES6cTkL8UqbjDNp0o522lSG59ncwznnd8+5veXCDedw9175cn1ttVlZzVoxUihEcXMsirdTpBiJ0ejYiRdu/PzL02+98+7rC4uL15ZSur7w9tzLKaWZZ35475Nvn/2xdeHGdzPfT8Tu7Pt7f8z/untp9/LeX99ErZlqzbTRaKUs3Ww0WtnNejWt1JprlZTerFezZjVNdse4275ab2xutlO2sTJd2tyqNpsp22intWo7tQqptdVO2YdZbSNVKpU0XQoexPLXt/M8j8jzsRiPPM/zqSjFhXgkpmMmyjEbj8Zj8XhcjCfiUjwZT8Xlg17nPW8AAAAAAAAAAAAAAAAAAAB4uNxn/3+hf///xHlPGQAAAAAAAAAAAAAAAAAAAB46h/f/FyN8/x8AAAAAAAAAAAAAAAAAAACG7D7f/z+0//9F+/8BAAAAAAAAAAAAAAAAAADgLEx2DkspTUasf769vL3cOXbqF1ajFvWoxtUox59xsPu/o1O+/tritavpwGy8tH6rm7+1vTzam58bK8dsYWB+rpNPvfmJKN2bn49yXBw8/vzA/GQ8/9x+/rNOvhLl+OmDaEQ9ViIK3as/yH86l9KrbyxO9eav7Pc70ugZ3xYAAAA4TZX0j/73951up4Htnabu+3nq9iwc8/vAoffzYlwpntdVc0ez/fFaVq9Xt05YGD/6POO9NVPdniceqxARWU98pvTb0v4pTzr5UyuMDnXQseP7PMA9jeL/4I95CoXfv7qnZjKGO/pI9x89q+8/P/9dKnby/EwnNj6oaeK41NHPjMIZP5MYnrs3/bxnAgAAAAAAAAAAwH8xcPXfVET0rQf8qK/mzvLw3nj/mY8e/YshXCEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA3O3AsAAAAACDM3zqNjg0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4KgAA//+E38bU")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'sit0\x00', 0x0})
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r3, 0x0, 0x0)
sendto$inet6(r3, &(0x7f0000000080)="800037bbfa9ba1", 0x7, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b)
unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0)

14.680903661s ago: executing program 6 (id=421):
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400080000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = getpgid(0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0)
mount$bind(0x0, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x6ad81619ecb25a57, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
r4 = syz_pidfd_open(r3, 0x0)
r5 = pidfd_getfd(r4, r4, 0x0)
setns(r5, 0x66020000)
mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0)
umount2(&(0x7f0000000040)='.\x00', 0x2)

14.634366786s ago: executing program 8 (id=422):
syz_usb_connect$hid(0x4, 0x3f, 0x0, 0x0)
r0 = creat(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x8031, 0xffffffffffffffff, 0xf6bf000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1269, 0x604000000000000)
r4 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c)
sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)

13.318799258s ago: executing program 6 (id=423):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$eJzs3U1rG0cfAPD/ylbenycOhNCWUgw9NCWNHNt9SaGH9NyGBtp7KuyNCZajYMkhdgNNDs25hF5KA6X30nOPoV+gh36GQBsIJZj20IvLyivFL5ItJ7KtVL8frJnZXWl2NPsfz2gkFMDAGs3+FCJejoivk4jjEZHkx4YjPzi6et7yk1tT2ZbEysqnfyaN87J887majzuaZ16KiF++ijhT2FxubXFptlyppPN5fqw+d32strh09upceSadSa9NTE6ef2dy4v333u1ZXd+89Pe3nzwYynMn7iVxIY7lubX1eA6312ZGYzR/TYpxYcOJ4z0orJ8kbff+tOfXwc4M5XFejKwPOB5DedQD/31fRsQKMKCSHcf/b8XduRJgbzXHAc25fY/mwS+Mxx+uToA213949b2RONSYGx1ZTtbNjLL57kgPys/K+PmP+/eyLXr3PgTAtm7fiYhzw8Ob+78k7/+e3bkuztlYhv4P9s6DbPzzVrvxT6E1/ok245+jbWL3WWwf/4VHPSimo2z890Hb8W9r0WpkKM/9rzHmKyZXrlbSrG/7f0ScjuLBLL/Ves755YcrnY6tHf9lW1Z+cyyYX8ej4YPrHzNdrpefp85rPb4T8Urb8W/Sav+kTftnr8elLss4ld5/rdOx7eu/u1Z+iHijbfs/XdFKtl6fHGvcD2PNu2Kzv+6e+rVT+ftd/6z9j2xd/5Fk7XptbedlfH/onzRa68nrrat/dH//H0g+a6QP5Ptuluv1+fGIA8nHrf2F5v6Jp49t5pvnZ/U//frW/V+7+/9wRHzeZf3vnvzx1U7H+qH9p9u2f2t2u6H9d554+NEX33Uqv7v+7+1G6nS+p5v+r9sLfJ7XDgAAAAAAAPpNISKORVIotdKFQqm0+vmOk3GkUKnW6meuVBeuTUfju7IjUSw0V7qPr/k8xHi+YtjMT2zIT0bEiYj4ZuhwI1+aqlam97vyAAAAAAAAAAAAAAAAAAAA0CeOdvj+f+b3of2+OmDX+clvGFzbxn8vfukJ6Ev+/8PgEv8wuMQ/DC7xD4NL/MPgEv8wuMQ/DC7xDwAAAAAAAAAAAAAAAAAAAAAAAAAAAD116eLFbFtZfnJrKstP31hcmK3eODud1mZLcwtTpanq/PXSTLU6U0lLU9W57Z6vUq1eH5+IhZtj9bRWH6stLl2eqy5cq1++OleeSS+nxT2pFQAAAAAAAAAAAAAAAAAAALxYaotLs+VKJZ2XkHimxHB/XIZEjxP73TMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFP/BgAA//9q6zMB")
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r5)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
request_key(&(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='\xf3yz', 0x0)
keyctl$setperm(0x5, 0x0, 0x1)

10.189115191s ago: executing program 9 (id=425):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0)
syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x2200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}})
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000003c0)={0x2, 0x3, 0x0, 'queue1\x00'})
ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1e}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
io_setup(0x7, &(0x7f00000004c0))
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0xf0, 0x2b8, 0xb0000010, 0xf0, 0x5c8f0200, 0x1e0, 0x3a8, 0x3a8, 0x1e0, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [0x0, 0xffffffff], [0x0, 0x0, 0xff0000ff], 'vlan1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0xa8, 0xf0, 0x700}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @local, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffff00, 0xff, 0xffffffff, 0xff], 'netdevsim0\x00', 'dvmrp1\x00', {0xff}, {0xff}, 0x0, 0x79, 0x7, 0x2}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x4695, 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x60840, 0x8)
io_submit(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xa, r7, 0x0, 0x0, 0x100, 0x0, 0x3, r7}])

10.184154171s ago: executing program 8 (id=426):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0)
ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000))
epoll_create(0x1)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
iopl(0x8b)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000004ec0)={0x1, &(0x7f0000000000)=[{0x22}]})
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x48100, 0x0)

9.09025314s ago: executing program 9 (id=427):
r0 = fsopen(&(0x7f0000000140)='rpc_pipefs\x00', 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r0, 0x1, 0x5)
r6 = openat(r5, &(0x7f0000000040)='.\x00', 0x0, 0x1)
getdents64(r6, 0x0, 0x22)

7.930163347s ago: executing program 9 (id=428):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmsg$nl_route_sched_retired(r1, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4000000}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff})
getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0)

7.815152278s ago: executing program 2 (id=395):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
pipe(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x40, 0x40, 0x41}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, 0x0, &(0x7f0000002500), 0xc, r4}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r4, &(0x7f00000014c0), &(0x7f0000000100)=""/31}, 0x20)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x5000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102})
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000180)=0x80)
io_setup(0x6, &(0x7f00000000c0)=<r6=>0x0)
io_submit(r6, 0x0, &(0x7f0000001680))
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7})
io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})

6.959972404s ago: executing program 9 (id=429):
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000200)='./bus\x00', 0x1000000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x1, 0x126f, &(0x7f0000001600)="$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")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'sit0\x00', 0x0})
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="800037bbfa9ba1", 0x7, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)

6.884994701s ago: executing program 6 (id=430):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0)
syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x2200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}})
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000003c0)={0x2, 0x3, 0x0, 'queue1\x00'})
ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1e}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
io_setup(0x7, &(0x7f00000004c0))
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0xf0, 0x2b8, 0xb0000010, 0xf0, 0x5c8f0200, 0x1e0, 0x3a8, 0x3a8, 0x1e0, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [0x0, 0xffffffff], [0x0, 0x0, 0xff0000ff], 'vlan1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0xa8, 0xf0, 0x700}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @local, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffff00, 0xff, 0xffffffff, 0xff], 'netdevsim0\x00', 'dvmrp1\x00', {0xff}, {0xff}, 0x0, 0x79, 0x7, 0x2}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x4695, 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x60840, 0x8)
io_setup(0x2e, &(0x7f0000000200)=<r8=>0x0)
io_submit(r8, 0x1, &(0x7f00000001c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xa, r7, 0x0, 0x0, 0x100, 0x0, 0x3, r7}])

5.113358949s ago: executing program 2 (id=431):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0)
ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000))
epoll_create(0x1)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
iopl(0x8b)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000004ec0)={0x1, &(0x7f0000000000)=[{0x22}]})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x48100, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0xfb)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4c40, &(0x7f0000000000), 0xfe, 0x27a, &(0x7f0000000980)="$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")

3.982934541s ago: executing program 8 (id=432):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0)
syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x2200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}})
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000003c0)={0x2, 0x3, 0x0, 'queue1\x00'})
ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1e}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
io_setup(0x7, &(0x7f00000004c0))
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0xf0, 0x2b8, 0xb0000010, 0xf0, 0x5c8f0200, 0x1e0, 0x3a8, 0x3a8, 0x1e0, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [0x0, 0xffffffff], [0x0, 0x0, 0xff0000ff], 'vlan1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0xa8, 0xf0, 0x700}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @local, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffff00, 0xff, 0xffffffff, 0xff], 'netdevsim0\x00', 'dvmrp1\x00', {0xff}, {0xff}, 0x0, 0x79, 0x7, 0x2}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x4695, 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x60840, 0x8)
io_setup(0x2e, &(0x7f0000000200)=<r8=>0x0)
io_submit(r8, 0x1, &(0x7f00000001c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xa, r7, 0x0, 0x0, 0x100, 0x0, 0x3, r7}])

3.747428125s ago: executing program 6 (id=433):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x20000045, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c)
listen(r3, 0x10000)

3.276788592s ago: executing program 9 (id=434):
r0 = fsopen(&(0x7f0000000140)='rpc_pipefs\x00', 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r0, 0x1, 0x5)
r5 = openat(r4, &(0x7f0000000040)='.\x00', 0x0, 0x1)
getdents64(r5, 0x0, 0x22)

2.501651579s ago: executing program 6 (id=435):
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"})
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000))
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
connect$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c)
socket$alg(0x26, 0x5, 0x0)

2.077824092s ago: executing program 8 (id=436):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000480)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
gettid()
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x2000)
read(r1, &(0x7f0000000200)=""/209, 0x128)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x2bd, @tick=0x5})

1.89902635s ago: executing program 9 (id=437):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmsg$nl_route_sched_retired(r1, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4000000}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff})
getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0)

1.220630148s ago: executing program 6 (id=438):
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x9, 0x3, 0x10004, 0x5}, 0x50)
syz_clone(0xc510c080, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0)
socketpair(0xa, 0x3, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9)
r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000c40), 0x12)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_subtree(r2, &(0x7f0000000140), 0x2, 0x0)
syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0)

0s ago: executing program 2 (id=439):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
pipe(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x40, 0x40, 0x41}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, 0x0, &(0x7f0000002500), 0xc, r4}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r4, &(0x7f00000014c0), &(0x7f0000000100)=""/31}, 0x20)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x5000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102})
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000180)=0x80)
io_setup(0x6, &(0x7f00000000c0)=<r6=>0x0)
io_submit(r6, 0x0, &(0x7f0000001680))
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7})
io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})

kernel console output (not intermixed with test programs):

_slave_1 added
[   88.538948][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.546167][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.573455][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.585897][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.593056][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.600542][ T5795] bridge_slave_1: entered allmulticast mode
[   88.608067][ T5795] bridge_slave_1: entered promiscuous mode
[   88.651426][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.658533][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.685035][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.748484][ T5794] hsr_slave_0: entered promiscuous mode
[   88.755334][ T5794] hsr_slave_1: entered promiscuous mode
[   88.764995][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.776048][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.783022][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.809434][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.822688][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.829730][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.855792][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.895986][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.954250][ T5797] hsr_slave_0: entered promiscuous mode
[   88.961794][ T5797] hsr_slave_1: entered promiscuous mode
[   88.969798][ T5797] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   88.977987][ T5797] Cannot create hsr debugfs directory
[   89.002818][ T5795] team0: Port device team_slave_0 added
[   89.009150][ T5798] Bluetooth: hci2: command tx timeout
[   89.009507][ T5806] Bluetooth: hci0: command tx timeout
[   89.015395][ T5798] Bluetooth: hci3: command tx timeout
[   89.024879][ T5796] Bluetooth: hci1: command tx timeout
[   89.031083][ T5795] team0: Port device team_slave_1 added
[   89.130860][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.138237][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.164499][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.199408][ T5793] hsr_slave_0: entered promiscuous mode
[   89.206034][ T5793] hsr_slave_1: entered promiscuous mode
[   89.212187][ T5793] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   89.220603][ T5793] Cannot create hsr debugfs directory
[   89.232229][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.239383][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.265383][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.447357][ T5795] hsr_slave_0: entered promiscuous mode
[   89.453908][ T5795] hsr_slave_1: entered promiscuous mode
[   89.460729][ T5795] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   89.468526][ T5795] Cannot create hsr debugfs directory
[   89.642142][ T5794] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   89.658297][ T5794] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   89.671394][ T5794] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   89.699510][ T5794] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   89.818409][ T5797] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   89.842991][ T5797] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   89.858733][ T5797] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   89.871445][ T5797] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   89.993821][ T5793] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   90.003869][ T5793] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   90.016087][ T5793] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   90.035774][ T5793] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   90.147399][ T5795] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   90.176657][ T5795] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   90.190226][ T5795] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   90.202271][ T5795] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   90.226606][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.246607][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.275914][ T5794] 8021q: adding VLAN 0 to HW filter on device team0
[   90.325153][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.332534][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.343942][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.351147][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.376105][ T5797] 8021q: adding VLAN 0 to HW filter on device team0
[   90.397984][ T2111] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.405193][ T2111] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.461107][ T2883] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.468343][ T2883] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.497711][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.546743][ T5793] 8021q: adding VLAN 0 to HW filter on device team0
[   90.587565][ T2111] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.594811][ T2111] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.644134][ T2111] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.651401][ T2111] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.783329][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.889872][ T5795] 8021q: adding VLAN 0 to HW filter on device team0
[   90.941325][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.948716][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.987627][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.994924][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.086952][ T5796] Bluetooth: hci3: command tx timeout
[   91.086989][   T51] Bluetooth: hci0: command tx timeout
[   91.092409][ T5796] Bluetooth: hci2: command tx timeout
[   91.102223][ T5798] Bluetooth: hci1: command tx timeout
[   91.114063][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.241417][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.303955][ T5794] veth0_vlan: entered promiscuous mode
[   91.322658][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.362605][ T5794] veth1_vlan: entered promiscuous mode
[   91.424096][ T5797] veth0_vlan: entered promiscuous mode
[   91.447054][ T5797] veth1_vlan: entered promiscuous mode
[   91.516161][ T5793] veth0_vlan: entered promiscuous mode
[   91.543643][ T5794] veth0_macvtap: entered promiscuous mode
[   91.592685][ T5794] veth1_macvtap: entered promiscuous mode
[   91.624698][ T5797] veth0_macvtap: entered promiscuous mode
[   91.638079][ T5797] veth1_macvtap: entered promiscuous mode
[   91.658863][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.668528][ T5793] veth1_vlan: entered promiscuous mode
[   91.693898][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.710550][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.720862][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.735784][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.748698][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.760344][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.771375][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.782748][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.810781][ T5797] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.820675][ T5797] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.830025][ T5797] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.838902][ T5797] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.861309][ T5794] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.870204][ T5794] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.879797][ T5794] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.889570][ T5794] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.954130][ T5793] veth0_macvtap: entered promiscuous mode
[   92.000282][ T5793] veth1_macvtap: entered promiscuous mode
[   92.035465][ T5795] veth0_vlan: entered promiscuous mode
[   92.065899][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.077513][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.087907][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.098698][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.110247][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.118803][ T5795] veth1_vlan: entered promiscuous mode
[   92.156791][  T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.157954][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.175900][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.182942][  T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.188151][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.204247][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.218527][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.224823][  T788] cfg80211: failed to load regulatory.db
[   92.267294][ T5793] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.281547][ T5793] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.291175][ T5793] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.300655][ T5793] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.319016][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.326974][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.380875][  T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.393028][  T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.431947][ T5795] veth0_macvtap: entered promiscuous mode
[   92.447252][ T5795] veth1_macvtap: entered promiscuous mode
[   92.466776][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.486926][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.556632][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.572715][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.583694][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.594973][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.605473][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.616047][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.632490][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.662539][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.673595][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.685991][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.697381][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.707394][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.717896][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.729679][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.759235][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.763640][ T5795] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.781076][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.787814][ T5795] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.798821][ T5795] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.807682][ T5795] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.980332][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.008478][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.168427][ T5798] Bluetooth: hci2: command tx timeout
[   93.174035][   T51] Bluetooth: hci3: command tx timeout
[   93.180740][   T51] Bluetooth: hci1: command tx timeout
[   93.186531][ T5798] Bluetooth: hci0: command tx timeout
[   93.214167][ T2111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.243405][ T2111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.432086][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.518217][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.589803][ T5901] syz.3.4[5901]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   94.644644][ T5905] loop0: detected capacity change from 0 to 512
[   94.660055][ T5901] loop3: detected capacity change from 0 to 512
[   94.676926][ T5905] =======================================================
[   94.676926][ T5905] WARNING: The mand mount option has been deprecated and
[   94.676926][ T5905]          and is ignored by this kernel. Remove the mand
[   94.676926][ T5905]          option from the mount to silence this warning.
[   94.676926][ T5905] =======================================================
[   94.779441][ T5901] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities
[   94.879905][ T5905] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities
[   95.248492][ T5796] Bluetooth: hci1: command tx timeout
[   95.254124][   T51] Bluetooth: hci0: command tx timeout
[   95.259835][ T5796] Bluetooth: hci2: command tx timeout
[   96.569286][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   97.165540][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   97.183935][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   97.193039][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   97.845796][ T5929] loop2: detected capacity change from 0 to 2048
[   97.868584][ T5933] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   98.471564][ T5929] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   98.590966][ T5929] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   98.825841][ T5929] fs-verity: sha512 using implementation "sha512-avx2"
[   98.862965][ T5929] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 5 vs 4156096517 free clusters
[   98.948627][ T5947] loop0: detected capacity change from 0 to 2048
[   99.045636][ T5929] fs-verity (loop2, inode 13): ext4_end_enable_verity() failed with err -28
[   99.086676][ T5796] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[   99.095942][ T5796] Bluetooth: hci3: Injecting HCI hardware error event
[   99.103944][ T5796] Bluetooth: hci3: hardware error 0x00
[   99.139186][ T5947] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   99.151613][ T5947] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   99.187714][ T5947] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 5 vs 4156096517 free clusters
[   99.203322][ T5947] fs-verity (loop0, inode 13): ext4_end_enable_verity() failed with err -28
[   99.994318][    C0] sched: RT throttling activated
[  101.324736][ T5796] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  101.355966][ T5957] loop1: detected capacity change from 0 to 256
[  101.399425][ T5957] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  102.438004][ T5963] loop3: detected capacity change from 0 to 2048
[  102.577204][ T5963] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  102.589882][ T5963] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  102.755378][ T5929] syz.2.10 (5929) used greatest stack depth: 20656 bytes left
[  102.898170][ T5794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.805012][   T28] audit: type=1326 audit(1763011046.873:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5967 comm="syz.1.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f354898f6c9 code=0x7ffc0000
[  104.983270][   T28] audit: type=1326 audit(1763011046.873:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5967 comm="syz.1.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f354898f6c9 code=0x7ffc0000
[  105.619878][ T5975] loop1: detected capacity change from 0 to 2048
[  105.738116][   T28] audit: type=1326 audit(1763011046.883:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5967 comm="syz.1.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f354898f6c9 code=0x7ffc0000
[  105.900784][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.996026][   T28] audit: type=1326 audit(1763011046.883:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5967 comm="syz.1.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f354898f6c9 code=0x7ffc0000
[  106.019519][   T28] audit: type=1326 audit(1763011046.883:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5967 comm="syz.1.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f354898f6c9 code=0x7ffc0000
[  106.021481][ T5975] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  106.056159][ T5975] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  106.214012][   T28] audit: type=1326 audit(1763011046.893:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5967 comm="syz.1.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f354898df10 code=0x7ffc0000
[  107.228899][ T5982] loop0: detected capacity change from 0 to 2048
[  107.992623][   T28] audit: type=1326 audit(1763011046.893:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5967 comm="syz.1.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f3548990ef7 code=0x7ffc0000
[  108.205315][ T5982] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  108.218188][ T5982] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  108.337953][   T28] audit: type=1326 audit(1763011046.893:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5967 comm="syz.1.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f354898f6c9 code=0x7ffc0000
[  108.820800][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.840147][   T28] audit: type=1326 audit(1763011046.893:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5967 comm="syz.1.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f3548990ef7 code=0x7ffc0000
[  108.988084][   T28] audit: type=1326 audit(1763011046.903:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5967 comm="syz.1.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f354898e32a code=0x7ffc0000
[  110.150106][ T5794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.167693][ T5991] loop1: detected capacity change from 0 to 256
[  110.196165][ T5991] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  111.024448][ T6000] Zero length message leads to an empty skb
[  111.208765][ T6000] netlink: 12 bytes leftover after parsing attributes in process `syz.0.22'.
[  111.515573][ T6000] loop0: detected capacity change from 0 to 128
[  112.298289][ T6004] loop1: detected capacity change from 0 to 256
[  112.328127][ T6004] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  113.404674][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  113.413076][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  113.421678][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  113.430339][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  114.494602][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  114.505650][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  115.034053][ T6022] netlink: 12 bytes leftover after parsing attributes in process `syz.1.28'.
[  115.839561][ T6025] loop0: detected capacity change from 0 to 256
[  115.923185][ T6025] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  115.938963][ T6025] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  116.304497][ T6029] netlink: 12 bytes leftover after parsing attributes in process `syz.3.29'.
[  116.594499][ T6029] loop3: detected capacity change from 0 to 128
[  118.510752][ T5796] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  118.520573][ T5796] Bluetooth: hci0: Injecting HCI hardware error event
[  118.528919][ T5796] Bluetooth: hci0: hardware error 0x00
[  118.622993][ T6025] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d)
[  119.473796][ T6042] netlink: 12 bytes leftover after parsing attributes in process `syz.3.33'.
[  119.502424][ T6042] loop3: detected capacity change from 0 to 128
[  120.312087][ T6041] netlink: 12 bytes leftover after parsing attributes in process `syz.0.34'.
[  120.611646][ T5798] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  120.630734][ T5798] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  120.640415][ T5798] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  120.660470][ T5798] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  120.668473][ T5798] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  120.676298][ T5798] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  120.904494][ T5796] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  121.669573][ T6059] loop3: detected capacity change from 0 to 128
[  121.697095][ T6056] netlink: 12 bytes leftover after parsing attributes in process `syz.3.35'.
[  121.706203][ T6058] netlink: 12 bytes leftover after parsing attributes in process `syz.0.36'.
[  122.818182][ T5796] Bluetooth: hci4: command tx timeout
[  125.348628][ T5798] Bluetooth: hci4: command tx timeout
[  125.396214][ T6078] netlink: 12 bytes leftover after parsing attributes in process `syz.0.39'.
[  125.809793][ T6087] loop3: detected capacity change from 0 to 256
[  125.968558][ T6087] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  125.983514][ T6087] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  126.438940][ T5796] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  126.447924][ T5796] Bluetooth: hci1: Injecting HCI hardware error event
[  126.457450][ T5796] Bluetooth: hci1: hardware error 0x00
[  126.612234][ T6089] netlink: 12 bytes leftover after parsing attributes in process `syz.0.40'.
[  126.656298][ T6087] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d)
[  126.719853][ T5928] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.633235][   T28] kauditd_printk_skb: 18 callbacks suppressed
[  127.633254][   T28] audit: type=1800 audit(1763011070.133:30): pid=6099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.42" name="file1" dev="loop3" ino=1048596 res=0 errno=0
[  127.668691][ T5798] Bluetooth: hci4: command tx timeout
[  127.678113][   T51] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  127.687751][   T51] Bluetooth: hci2: Injecting HCI hardware error event
[  127.696120][   T51] Bluetooth: hci2: hardware error 0x00
[  127.991620][   T48] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.028514][ T6109] loop0: detected capacity change from 0 to 256
[  128.064944][ T6109] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  128.122347][ T6109] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  128.153730][   T48] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.173566][ T6109] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d)
[  128.316215][ T6046] chnl_net:caif_netlink_parms(): no params data found
[  128.686030][ T5796] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  128.899806][   T48] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.082110][   T48] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.338252][   T28] audit: type=1800 audit(1763011072.293:31): pid=6118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.46" name="file1" dev="loop0" ino=1048597 res=0 errno=0
[  129.965587][ T5796] Bluetooth: hci4: command tx timeout
[  130.058304][   T51] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  130.297525][ T6046] bridge0: port 1(bridge_slave_0) entered blocking state
[  130.313666][ T6046] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.329327][ T6046] bridge_slave_0: entered allmulticast mode
[  130.338930][ T6046] bridge_slave_0: entered promiscuous mode
[  130.403112][ T6046] bridge0: port 2(bridge_slave_1) entered blocking state
[  130.422078][ T6046] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.433784][ T6046] bridge_slave_1: entered allmulticast mode
[  130.441286][ T6046] bridge_slave_1: entered promiscuous mode
[  130.450425][ T6125] syzkaller0: entered promiscuous mode
[  130.456353][ T6125] syzkaller0: entered allmulticast mode
[  131.142746][ T6046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  131.162344][ T6046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  131.278144][ T6131] loop3: detected capacity change from 0 to 256
[  131.294153][ T6131] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  131.307199][ T6131] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  131.322291][ T6131] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d)
[  131.577052][ T6046] team0: Port device team_slave_0 added
[  131.788193][   T28] audit: type=1800 audit(1763011074.733:32): pid=6136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.50" name="file1" dev="loop3" ino=1048598 res=0 errno=0
[  132.256442][ T6046] team0: Port device team_slave_1 added
[  132.824248][ T6046] batman_adv: batadv0: Adding interface: batadv_slave_0
[  132.897131][ T6046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  133.170453][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  133.197123][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  133.252596][ T6046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  133.405112][ T6046] batman_adv: batadv0: Adding interface: batadv_slave_1
[  133.446817][ T6046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  133.485900][ T6046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  134.639868][ T6046] hsr_slave_0: entered promiscuous mode
[  134.658662][ T6046] hsr_slave_1: entered promiscuous mode
[  134.679658][ T6046] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  134.708755][ T6046] Cannot create hsr debugfs directory
[  135.664621][ T6174] netlink: 12 bytes leftover after parsing attributes in process `syz.3.55'.
[  136.582536][ T6185] netlink: 12 bytes leftover after parsing attributes in process `syz.3.57'.
[  136.968721][ T6186] netlink: 12 bytes leftover after parsing attributes in process `syz.1.56'.
[  137.322131][ T6046] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  137.460370][ T6046] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  137.471781][ T6046] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  137.483233][ T6046] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  138.073602][ T6201] loop0: detected capacity change from 0 to 128
[  138.150094][ T6196] loop3: detected capacity change from 0 to 128
[  138.178213][ T6197] netlink: 12 bytes leftover after parsing attributes in process `syz.0.58'.
[  138.188077][ T6194] netlink: 12 bytes leftover after parsing attributes in process `syz.3.59'.
[  138.439029][   T48] hsr_slave_0: left promiscuous mode
[  138.477897][   T48] hsr_slave_1: left promiscuous mode
[  138.511225][   T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  138.553519][   T48] batman_adv: batadv0: Removing interface: batadv_slave_0
[  138.564164][   T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  138.595194][   T48] batman_adv: batadv0: Removing interface: batadv_slave_1
[  138.602917][ T6208] loop0: detected capacity change from 0 to 256
[  138.627125][   T48] bridge_slave_1: left allmulticast mode
[  138.643856][   T48] bridge_slave_1: left promiscuous mode
[  138.662054][   T48] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.689551][ T6208] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  138.713322][   T48] bridge_slave_0: left allmulticast mode
[  138.729643][   T48] bridge_slave_0: left promiscuous mode
[  138.750108][   T48] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.784455][ T6208] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  138.877619][ T6208] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d)
[  139.010113][   T48] veth1_macvtap: left promiscuous mode
[  139.451733][ T6220] loop3: detected capacity change from 0 to 128
[  139.535858][   T28] audit: type=1800 audit(1763011082.433:33): pid=6221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.60" name="file1" dev="loop0" ino=1048601 res=0 errno=0
[  139.718774][   T48] veth0_macvtap: left promiscuous mode
[  139.774555][   T48] veth1_vlan: left promiscuous mode
[  139.835363][   T48] veth0_vlan: left promiscuous mode
[  141.198863][ T6230] loop1: detected capacity change from 0 to 256
[  141.208519][ T6230] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  141.221077][ T6230] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  141.270271][ T6230] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d)
[  142.516201][   T48] team0 (unregistering): Port device team_slave_1 removed
[  142.586833][   T48] team0 (unregistering): Port device team_slave_0 removed
[  142.636895][   T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  142.680923][   T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  143.743246][   T48] bond0 (unregistering): Released all slaves
[  143.883118][ T6218] netlink: 12 bytes leftover after parsing attributes in process `syz.3.61'.
[  143.916382][ T6242] netlink: 28 bytes leftover after parsing attributes in process `syz.1.66'.
[  143.934877][ T6242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.66'.
[  143.956601][ T6246] netlink: 12 bytes leftover after parsing attributes in process `syz.0.65'.
[  144.278369][ T6046] 8021q: adding VLAN 0 to HW filter on device bond0
[  144.397630][ T6258] loop0: detected capacity change from 0 to 2048
[  145.538437][ T6258] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  145.550689][ T6258] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  145.577755][ T6258] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 5 vs 4156096517 free clusters
[  145.593285][ T6258] fs-verity (loop0, inode 13): ext4_end_enable_verity() failed with err -28
[  145.635043][ T6046] 8021q: adding VLAN 0 to HW filter on device team0
[  145.764791][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.772034][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  146.650367][ T6277] loop3: detected capacity change from 0 to 128
[  147.178230][ T6276] netlink: 12 bytes leftover after parsing attributes in process `syz.3.69'.
[  147.193607][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[  147.200875][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[  148.270157][ T5794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.056753][ T6286] netlink: 12 bytes leftover after parsing attributes in process `syz.3.71'.
[  149.566866][ T6299] netlink: 12 bytes leftover after parsing attributes in process `syz.0.72'.
[  152.717233][ T6046] 8021q: adding VLAN 0 to HW filter on device batadv0
[  156.938232][ T6046] veth0_vlan: entered promiscuous mode
[  157.103058][ T6046] veth1_vlan: entered promiscuous mode
[  157.208339][ T6371] loop0: detected capacity change from 0 to 256
[  157.251167][ T6371] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  157.325103][ T6371] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  157.383123][ T6046] veth0_macvtap: entered promiscuous mode
[  157.451024][ T6371] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d)
[  157.529059][ T6046] veth1_macvtap: entered promiscuous mode
[  158.070058][   T28] audit: type=1800 audit(1763011100.973:34): pid=6383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.86" name="file1" dev="loop0" ino=1048617 res=0 errno=0
[  158.287328][ T6382] netlink: 12 bytes leftover after parsing attributes in process `syz.1.87'.
[  158.493544][ T6046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  158.574209][ T6046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.614353][ T6046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  158.754412][ T6046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.799009][ T6046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  158.902508][ T6046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.915429][ T6046] batman_adv: batadv0: Interface activated: batadv_slave_0
[  159.914817][ T6392] netlink: 12 bytes leftover after parsing attributes in process `syz.0.88'.
[  159.929858][ T6401] netlink: 12 bytes leftover after parsing attributes in process `syz.3.90'.
[  160.069012][ T6046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  160.234177][ T6046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  160.461509][ T6046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  160.766211][ T6046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  160.777001][ T6046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  160.787738][ T6046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  160.799472][ T6046] batman_adv: batadv0: Interface activated: batadv_slave_1
[  161.167373][ T6046] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  161.189450][ T6046] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  161.455683][ T6046] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  161.718014][ T6046] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  161.739186][ T6415] loop0: detected capacity change from 0 to 128
[  162.117458][ T6414] netlink: 12 bytes leftover after parsing attributes in process `syz.0.92'.
[  162.359206][ T6418] loop1: detected capacity change from 0 to 256
[  162.408677][ T6418] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  162.432197][ T6418] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  162.552763][ T6418] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d)
[  163.292078][   T28] audit: type=1800 audit(1763011106.143:35): pid=6424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.94" name="file1" dev="loop1" ino=1048619 res=0 errno=0
[  163.567824][   T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  163.621816][   T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  163.853740][ T6264] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  163.984350][ T6264] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  164.011532][ T6434] loop1: detected capacity change from 0 to 512
[  164.134631][ T6435] netlink: 12 bytes leftover after parsing attributes in process `syz.3.96'.
[  164.148144][ T6435] loop3: detected capacity change from 0 to 128
[  164.400371][ T6434] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities
[  165.559131][ T6438] process 'syz.1.98' launched './file1' with NULL argv: empty string added
[  165.923391][ T6445] loop4: detected capacity change from 0 to 128
[  166.586489][ T6444] netlink: 12 bytes leftover after parsing attributes in process `syz.4.26'.
[  168.092741][ T6465] loop0: detected capacity change from 0 to 512
[  168.103627][ T6461] loop3: detected capacity change from 0 to 512
[  168.128176][ T6465] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities
[  168.139524][ T6461] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities
[  168.158659][ T6464] loop4: detected capacity change from 0 to 512
[  168.209419][ T6464] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  169.025557][ T6464] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  169.193851][ T6464] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  169.313250][ T6479] loop0: detected capacity change from 0 to 512
[  169.483567][ T6479] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities
[  169.639879][ T5799] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  170.491138][ T6046] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.882481][ T6496] loop3: detected capacity change from 0 to 256
[  171.194797][ T6496] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  171.206588][ T6496] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  171.991923][ T6505] loop4: detected capacity change from 0 to 128
[  172.013073][ T6506] netlink: 12 bytes leftover after parsing attributes in process `syz.1.109'.
[  172.026744][ T6506] loop1: detected capacity change from 0 to 128
[  172.052322][ T6504] netlink: 12 bytes leftover after parsing attributes in process `syz.0.108'.
[  172.066120][ T6504] loop0: detected capacity change from 0 to 128
[  172.132697][ T6496] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d)
[  173.037506][   T28] audit: type=1800 audit(1763011115.763:36): pid=6512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.107" name="file1" dev="loop3" ino=1048628 res=0 errno=0
[  174.170322][ T6517] loop0: detected capacity change from 0 to 256
[  174.224857][ T6517] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  174.242959][ T6519] loop1: detected capacity change from 0 to 512
[  174.264381][ T6517] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  174.284391][   T28] audit: type=1326 audit(1763011116.373:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6508 comm="syz.4.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63c098f6c9 code=0x7ffc0000
[  174.346776][ T6517] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d)
[  174.381980][ T6519] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  174.417098][   T28] audit: type=1326 audit(1763011116.373:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6508 comm="syz.4.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63c098f6c9 code=0x7ffc0000
[  174.508550][ T6521] loop3: detected capacity change from 0 to 512
[  174.552366][   T28] audit: type=1326 audit(1763011116.383:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6508 comm="syz.4.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f63c098f6c9 code=0x7ffc0000
[  174.590459][ T6523] loop4: detected capacity change from 0 to 512
[  174.597009][   T28] audit: type=1326 audit(1763011116.383:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6508 comm="syz.4.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63c098f6c9 code=0x7ffc0000
[  174.650728][   T28] audit: type=1326 audit(1763011116.383:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6508 comm="syz.4.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63c098f6c9 code=0x7ffc0000
[  174.727611][ T6523] EXT4-fs (loop4): external journal device major/minor numbers have changed
[  174.757099][ T6519] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  174.768535][   T28] audit: type=1326 audit(1763011116.383:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6508 comm="syz.4.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f63c098df10 code=0x7ffc0000
[  174.775951][ T6521] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities
[  174.793299][   T28] audit: type=1326 audit(1763011116.393:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6508 comm="syz.4.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f63c0990ef7 code=0x7ffc0000
[  174.823611][   T28] audit: type=1326 audit(1763011116.393:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6508 comm="syz.4.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f63c098f6c9 code=0x7ffc0000
[  174.845954][   T28] audit: type=1326 audit(1763011116.393:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6508 comm="syz.4.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f63c0990ef7 code=0x7ffc0000
[  174.874894][ T6519] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  176.671892][ T6541] loop0: detected capacity change from 0 to 512
[  176.704134][ T6523] EXT4-fs (loop4): failed to open journal device unknown-block(0,8) -6
[  176.712315][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.742663][ T6541] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  176.751971][ T6543] loop3: detected capacity change from 0 to 512
[  176.778478][ T6543] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  176.821489][ T6541] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  176.856581][ T6543] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  176.905452][ T6541] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  176.978461][ T6543] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  178.316232][ T5794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  178.349724][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  178.883094][ T6575] netlink: 12 bytes leftover after parsing attributes in process `syz.1.121'.
[  179.269705][ T6573] loop1: detected capacity change from 0 to 128
[  179.330556][ T6574] netlink: 12 bytes leftover after parsing attributes in process `syz.0.118'.
[  179.344025][ T6574] loop0: detected capacity change from 0 to 128
[  180.681726][ T6591] loop0: detected capacity change from 0 to 512
[  180.727088][ T6590] loop1: detected capacity change from 0 to 512
[  180.773031][ T6590] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities
[  180.783201][ T6591] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities
[  182.743656][ T6608] loop4: detected capacity change from 0 to 256
[  182.822607][ T6611] loop3: detected capacity change from 0 to 512
[  182.844442][ T6608] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  182.870127][ T6611] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  184.473972][ T6608] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  184.574838][ T6608] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d)
[  184.806341][ T6611] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  184.873810][ T6611] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  185.537218][   T28] kauditd_printk_skb: 20 callbacks suppressed
[  185.610553][   T28] audit: type=1800 audit(1763011128.483:66): pid=6631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.126" name="file1" dev="loop4" ino=1048632 res=0 errno=0
[  185.906647][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  185.937709][ T6633] loop0: detected capacity change from 0 to 512
[  185.957855][ T6633] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities
[  186.162938][ T6636] loop4: detected capacity change from 0 to 512
[  186.222074][ T6636] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  186.798612][ T6636] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  187.001963][ T6636] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  187.268600][ T6647] loop3: detected capacity change from 0 to 8
[  187.731726][ T6647] SQUASHFS error: Failed to read block 0x8f: -5
[  188.032638][ T6046] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.516260][ T6671] loop1: detected capacity change from 0 to 512
[  189.558896][ T6678] loop4: detected capacity change from 0 to 512
[  189.559727][ T6675] loop3: detected capacity change from 0 to 512
[  189.595750][ T6671] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  189.610621][ T6675] EXT4-fs (loop3): external journal device major/minor numbers have changed
[  189.619632][ T6678] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities
[  189.990241][ T6671] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  190.019840][ T6671] ext4 filesystem being mounted at /37/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  190.862251][ T6675] EXT4-fs (loop3): failed to open journal device unknown-block(0,8) -6
[  191.052365][ T6696] netlink: 28 bytes leftover after parsing attributes in process `syz.4.139'.
[  191.061493][ T6696] netlink: 24 bytes leftover after parsing attributes in process `syz.4.139'.
[  191.740448][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.101078][ T6727] loop4: detected capacity change from 0 to 128
[  194.118054][ T6727] EXT4-fs: inline encryption not supported
[  194.144482][ T6727] EXT4-fs (loop4): DAX unsupported by block device.
[  194.852119][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  194.868857][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  195.270217][ T6734] loop1: detected capacity change from 0 to 512
[  195.576245][ T6734] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities
[  196.266623][ T6741] loop4: detected capacity change from 0 to 736
[  196.428773][ T6748] loop0: detected capacity change from 0 to 512
[  196.445608][ T6748] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  196.680040][ T6748] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  196.705611][ T6748] ext4 filesystem being mounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  197.470371][ T6763] loop1: detected capacity change from 0 to 512
[  197.496222][ T6763] EXT4-fs (loop1): external journal device major/minor numbers have changed
[  197.760887][ T6763] EXT4-fs (loop1): failed to open journal device unknown-block(0,8) -6
[  198.093751][ T6746] xt_CT: You must specify a L4 protocol and not use inversions on it
[  198.926186][ T5794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.221901][ T6782] loop0: detected capacity change from 0 to 128
[  199.256506][ T6782] EXT4-fs: inline encryption not supported
[  199.298634][   T34] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.310083][ T6782] EXT4-fs (loop0): DAX unsupported by block device.
[  199.766088][   T34] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.322984][   T34] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.496368][   T34] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.824979][ T5796] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  202.834194][ T5796] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  202.842935][ T5796] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  202.851352][ T5796] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  202.859241][ T5796] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  202.867721][ T5796] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  203.117373][ T6830] xt_CT: You must specify a L4 protocol and not use inversions on it
[  205.046475][   T51] Bluetooth: hci3: command tx timeout
[  205.683479][   T28] audit: type=1326 audit(1763011148.643:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6845 comm="syz.0.166" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f56cab8f6c9 code=0x0
[  206.856301][ T6861] bpq0: entered promiscuous mode
[  207.094684][   T51] Bluetooth: hci3: command tx timeout
[  207.819828][ T6868] bpq0: left promiscuous mode
[  208.979377][ T6886] loop0: detected capacity change from 0 to 256
[  209.024775][ T6886] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  209.038516][ T6886] xt_hashlimit: max too large, truncated to 1048576
[  209.288949][   T51] Bluetooth: hci3: command tx timeout
[  209.693009][ T6891] xt_CT: You must specify a L4 protocol and not use inversions on it
[  210.178196][ T6825] chnl_net:caif_netlink_parms(): no params data found
[  210.601438][   T34] hsr_slave_0: left promiscuous mode
[  210.641218][ T6899] loop1: detected capacity change from 0 to 736
[  210.648643][ T6900] loop3: detected capacity change from 0 to 512
[  210.655599][   T34] hsr_slave_1: left promiscuous mode
[  210.684483][   T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  210.692283][   T34] batman_adv: batadv0: Removing interface: batadv_slave_0
[  210.963045][ T6900] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  211.093862][   T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  211.290480][   T34] batman_adv: batadv0: Removing interface: batadv_slave_1
[  211.324529][   T51] Bluetooth: hci3: command tx timeout
[  211.342393][ T6900] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  211.400131][   T34] bridge_slave_1: left allmulticast mode
[  211.428754][   T34] bridge_slave_1: left promiscuous mode
[  211.439487][ T6900] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  211.504990][   T34] bridge0: port 2(bridge_slave_1) entered disabled state
[  211.549115][   T34] bridge_slave_0: left allmulticast mode
[  211.557634][   T34] bridge_slave_0: left promiscuous mode
[  211.563467][   T34] bridge0: port 1(bridge_slave_0) entered disabled state
[  211.772533][ T6911] loop0: detected capacity change from 0 to 512
[  211.825018][   T34] veth1_macvtap: left promiscuous mode
[  211.859185][   T34] veth0_macvtap: left promiscuous mode
[  211.870872][   T34] veth1_vlan: left promiscuous mode
[  211.900496][ T6911] EXT4-fs (loop0): external journal device major/minor numbers have changed
[  211.915337][   T34] veth0_vlan: left promiscuous mode
[  212.161173][ T6911] EXT4-fs (loop0): failed to open journal device unknown-block(0,8) -6
[  212.933400][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.102039][   T34] team0 (unregistering): Port device team_slave_1 removed
[  213.191200][   T34] team0 (unregistering): Port device team_slave_0 removed
[  213.237532][   T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  213.282395][   T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  213.738905][   T34] bond0 (unregistering): Released all slaves
[  213.914959][ T6927] bpq0: entered promiscuous mode
[  213.977115][ T6825] bridge0: port 1(bridge_slave_0) entered blocking state
[  214.022203][ T6825] bridge0: port 1(bridge_slave_0) entered disabled state
[  214.040032][ T6825] bridge_slave_0: entered allmulticast mode
[  214.060351][ T6825] bridge_slave_0: entered promiscuous mode
[  214.089144][ T6825] bridge0: port 2(bridge_slave_1) entered blocking state
[  214.112525][ T6825] bridge0: port 2(bridge_slave_1) entered disabled state
[  214.134476][ T6825] bridge_slave_1: entered allmulticast mode
[  214.142114][ T6825] bridge_slave_1: entered promiscuous mode
[  214.222115][ T6940] loop3: detected capacity change from 0 to 256
[  214.233502][ T6940] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  214.252780][ T6940] xt_hashlimit: max too large, truncated to 1048576
[  214.400582][ T6825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  214.499469][ T6825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  214.843939][ T6825] team0: Port device team_slave_0 added
[  214.925569][ T6825] team0: Port device team_slave_1 added
[  215.184059][ T6825] batman_adv: batadv0: Adding interface: batadv_slave_0
[  215.224395][ T6825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  215.291120][ T6825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  215.326102][ T6954] loop3: detected capacity change from 0 to 1024
[  215.333264][ T6954] ext4: Unknown parameter 'euid<00000000000000000000'
[  215.368277][ T6825] batman_adv: batadv0: Adding interface: batadv_slave_1
[  215.379996][ T6825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  215.392409][ T6956] loop0: detected capacity change from 0 to 512
[  215.599239][ T6825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  215.613297][ T5799] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  216.354393][ T6956] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities
[  216.379523][ T6960] loop3: detected capacity change from 0 to 512
[  216.411025][ T6960] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities
[  216.760711][ T6825] hsr_slave_0: entered promiscuous mode
[  217.090568][ T6825] hsr_slave_1: entered promiscuous mode
[  217.289281][ T6825] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  217.454010][ T6825] Cannot create hsr debugfs directory
[  217.928048][ T5796] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  217.937711][ T5796] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  217.946495][ T5796] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  217.955283][ T5796] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  217.963284][ T5796] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  218.005054][ T5796] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  218.160380][ T2883] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.658079][ T2883] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.881330][ T2883] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.891490][ T6981] loop0: detected capacity change from 0 to 512
[  218.951391][ T6981] EXT4-fs (loop0): external journal device major/minor numbers have changed
[  219.026260][ T2883] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.183627][ T6981] EXT4-fs (loop0): failed to open journal device unknown-block(0,8) -6
[  220.517173][ T5796] Bluetooth: hci1: command tx timeout
[  220.808984][ T6998] loop0: detected capacity change from 0 to 256
[  220.832382][ T6998] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  220.856862][ T6998] xt_hashlimit: max too large, truncated to 1048576
[  221.871457][   T28] audit: type=1326 audit(1763011164.833:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7010 comm="syz.0.195" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f56cab8f6c9 code=0x0
[  222.064595][ T6825] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  222.109509][ T6825] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  222.209902][ T6975] chnl_net:caif_netlink_parms(): no params data found
[  222.605144][ T5796] Bluetooth: hci1: command tx timeout
[  222.768946][ T6825] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  222.806362][ T6825] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  222.835167][ T7019] netlink: 28 bytes leftover after parsing attributes in process `syz.3.193'.
[  222.854577][ T7019] netlink: 24 bytes leftover after parsing attributes in process `syz.3.193'.
[  223.310999][ T7039] loop3: detected capacity change from 0 to 1024
[  223.669670][ T6975] bridge0: port 1(bridge_slave_0) entered blocking state
[  223.687565][ T7039] hfsplus: b-tree write err: -5, ino 3
[  223.690037][ T6975] bridge0: port 1(bridge_slave_0) entered disabled state
[  223.700985][ T6975] bridge_slave_0: entered allmulticast mode
[  223.709657][ T6975] bridge_slave_0: entered promiscuous mode
[  223.722875][ T6975] bridge0: port 2(bridge_slave_1) entered blocking state
[  223.748178][ T6975] bridge0: port 2(bridge_slave_1) entered disabled state
[  223.771674][ T6975] bridge_slave_1: entered allmulticast mode
[  223.807387][ T6975] bridge_slave_1: entered promiscuous mode
[  225.903185][ T5796] Bluetooth: hci1: command tx timeout
[  226.027409][ T6975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  226.162762][ T6975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  227.183288][ T2883] hsr_slave_0: left promiscuous mode
[  227.278187][ T2883] hsr_slave_1: left promiscuous mode
[  227.314554][ T2883] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  227.322039][ T2883] batman_adv: batadv0: Removing interface: batadv_slave_0
[  227.349669][ T2883] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  227.364324][ T2883] batman_adv: batadv0: Removing interface: batadv_slave_1
[  227.385337][ T2883] bridge_slave_1: left allmulticast mode
[  227.391056][ T2883] bridge_slave_1: left promiscuous mode
[  227.415801][ T2883] bridge0: port 2(bridge_slave_1) entered disabled state
[  227.445306][ T2883] bridge_slave_0: left allmulticast mode
[  227.451032][ T2883] bridge_slave_0: left promiscuous mode
[  227.475541][ T2883] bridge0: port 1(bridge_slave_0) entered disabled state
[  227.532924][ T2883] veth1_macvtap: left promiscuous mode
[  227.554642][ T2883] veth0_macvtap: left promiscuous mode
[  227.560384][ T2883] veth1_vlan: left promiscuous mode
[  227.580075][ T2883] veth0_vlan: left promiscuous mode
[  227.964443][ T5796] Bluetooth: hci1: command tx timeout
[  228.515529][ T7075] loop0: detected capacity change from 0 to 256
[  228.542441][ T7075] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  228.567349][ T7075] xt_hashlimit: max too large, truncated to 1048576
[  228.968705][ T2883] team0 (unregistering): Port device team_slave_1 removed
[  229.042324][ T2883] team0 (unregistering): Port device team_slave_0 removed
[  229.127083][ T2883] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  229.217236][ T2883] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  229.512597][ T7084] loop0: detected capacity change from 0 to 128
[  229.520352][ T7084] EXT4-fs: inline encryption not supported
[  229.542975][ T7084] EXT4-fs (loop0): DAX unsupported by block device.
[  230.669266][ T2883] bond0 (unregistering): Released all slaves
[  230.879649][ T7073] bpq0: left promiscuous mode
[  230.893179][ T6975] team0: Port device team_slave_0 added
[  230.902441][ T7088] netlink: 28 bytes leftover after parsing attributes in process `syz.0.203'.
[  230.922875][ T7088] netlink: 24 bytes leftover after parsing attributes in process `syz.0.203'.
[  230.965083][ T6975] team0: Port device team_slave_1 added
[  231.084841][ T6975] batman_adv: batadv0: Adding interface: batadv_slave_0
[  231.100801][ T7091] loop3: detected capacity change from 0 to 512
[  231.102914][ T6975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  231.144068][ T7091] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities
[  231.157657][ T6975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  231.209761][ T6975] batman_adv: batadv0: Adding interface: batadv_slave_1
[  231.222253][ T6975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  231.252490][ T6975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  231.363743][ T6825] 8021q: adding VLAN 0 to HW filter on device bond0
[  231.449486][ T6825] 8021q: adding VLAN 0 to HW filter on device team0
[  231.528390][ T5799] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  232.989493][ T6975] hsr_slave_0: entered promiscuous mode
[  233.054892][ T6975] hsr_slave_1: entered promiscuous mode
[  233.065981][ T6975] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  233.073908][ T6975] Cannot create hsr debugfs directory
[  233.109496][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[  233.116866][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[  233.188169][ T7107] loop3: detected capacity change from 0 to 512
[  233.205861][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[  233.213102][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[  233.262313][ T7107] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities
[  233.372315][ T5799] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  234.561495][ T6975] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  234.581663][ T7120] loop3: detected capacity change from 0 to 512
[  234.594082][ T6975] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  234.635877][ T6975] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  234.655295][ T7120] EXT4-fs (loop3): external journal device major/minor numbers have changed
[  234.667672][ T6975] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  234.863699][ T6825] 8021q: adding VLAN 0 to HW filter on device batadv0
[  234.980171][ T6975] 8021q: adding VLAN 0 to HW filter on device bond0
[  235.018397][ T7120] EXT4-fs (loop3): failed to open journal device unknown-block(0,8) -6
[  235.045709][ T6975] 8021q: adding VLAN 0 to HW filter on device team0
[  235.121407][ T2883] bridge0: port 1(bridge_slave_0) entered blocking state
[  235.128668][ T2883] bridge0: port 1(bridge_slave_0) entered forwarding state
[  235.157074][ T2883] bridge0: port 2(bridge_slave_1) entered blocking state
[  235.164384][ T2883] bridge0: port 2(bridge_slave_1) entered forwarding state
[  236.617732][ T7161] netlink: 56 bytes leftover after parsing attributes in process `syz.0.211'.
[  236.839919][ T6825] veth0_vlan: entered promiscuous mode
[  236.868464][ T6975] 8021q: adding VLAN 0 to HW filter on device batadv0
[  237.158198][ T6825] veth1_vlan: entered promiscuous mode
[  237.611030][ T7171] binder: 7165:7171 ioctl c0306201 0 returned -14
[  237.619521][ T7172] binder: 7167:7172 ioctl c0306201 0 returned -14
[  237.697702][ T6825] veth0_macvtap: entered promiscuous mode
[  237.730042][ T6825] veth1_macvtap: entered promiscuous mode
[  237.964082][ T6825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  238.005463][ T6825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  238.020961][ T6825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  238.031546][ T6825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  238.048472][ T6825] batman_adv: batadv0: Interface activated: batadv_slave_0
[  239.866094][ T7178] bpq0: entered promiscuous mode
[  239.910013][ T6825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  239.937119][ T6825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.964567][ T6825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  239.994580][ T6825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.020232][ T6825] batman_adv: batadv0: Interface activated: batadv_slave_1
[  240.049424][ T6825] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  240.069906][ T6825] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  240.090952][ T6825] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  240.114485][ T6825] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  240.292496][ T6975] veth0_vlan: entered promiscuous mode
[  240.351038][ T6975] veth1_vlan: entered promiscuous mode
[  240.450157][ T2111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  240.496672][ T2111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  240.536660][ T6975] veth0_macvtap: entered promiscuous mode
[  240.568256][ T6975] veth1_macvtap: entered promiscuous mode
[  240.581303][ T7198] loop3: detected capacity change from 0 to 8192
[  240.593406][ T2111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  240.624382][ T2111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  240.660331][ T6975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  240.704365][ T6975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.722277][ T6975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  240.733881][ T6975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.750152][ T6975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  240.770527][ T6975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.876470][ T6975] batman_adv: batadv0: Interface activated: batadv_slave_0
[  240.924095][ T6975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  241.003459][ T6975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  241.013595][ T6975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  241.024108][ T6975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  241.034190][ T6975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  241.044894][ T6975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  241.057671][ T6975] batman_adv: batadv0: Interface activated: batadv_slave_1
[  241.507455][ T6975] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  241.575009][ T6975] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  241.635574][ T6975] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  241.685406][ T6975] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  242.973853][ T2111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  242.992287][ T2111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  243.750975][ T5921] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  243.805342][ T5921] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  243.894115][ T7230] loop5: detected capacity change from 0 to 736
[  246.843988][ T7249] binder: 7247:7249 ioctl c0306201 0 returned -14
[  247.362523][ T6692] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.557039][ T6692] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.793452][ T6692] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  249.616988][ T6692] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.353646][   T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  250.388977][   T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  250.398608][   T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  250.410457][   T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  250.427839][   T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  250.440236][   T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  251.034012][ T7290] loop0: detected capacity change from 0 to 512
[  251.052259][ T7288] loop6: detected capacity change from 0 to 8192
[  251.067475][ T7290] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities
[  252.547083][   T51] Bluetooth: hci3: command tx timeout
[  252.571479][ T7279] chnl_net:caif_netlink_parms(): no params data found
[  252.651370][ T7315] loop3: detected capacity change from 0 to 512
[  252.754659][ T7315] EXT4-fs (loop3): external journal device major/minor numbers have changed
[  253.447469][ T7326] loop0: detected capacity change from 0 to 164
[  253.654536][ T7315] EXT4-fs (loop3): failed to open journal device unknown-block(0,8) -6
[  253.717023][ T7279] bridge0: port 1(bridge_slave_0) entered blocking state
[  253.793424][ T7279] bridge0: port 1(bridge_slave_0) entered disabled state
[  253.886386][ T7279] bridge_slave_0: entered allmulticast mode
[  254.241009][ T7279] bridge_slave_0: entered promiscuous mode
[  254.409452][ T7329] bpq0: left promiscuous mode
[  254.492329][ T7335] netlink: 27 bytes leftover after parsing attributes in process `syz.0.238'.
[  254.614548][   T51] Bluetooth: hci3: command tx timeout
[  254.621542][ T7279] bridge0: port 2(bridge_slave_1) entered blocking state
[  254.684547][ T7279] bridge0: port 2(bridge_slave_1) entered disabled state
[  254.691852][ T7279] bridge_slave_1: entered allmulticast mode
[  254.731812][ T7279] bridge_slave_1: entered promiscuous mode
[  254.979958][ T7279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  255.025768][ T7279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  255.201217][ T7279] team0: Port device team_slave_0 added
[  256.940219][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  256.947400][ T5796] Bluetooth: hci3: command tx timeout
[  256.947424][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  257.037284][ T7279] team0: Port device team_slave_1 added
[  257.070311][ T7355] loop0: detected capacity change from 0 to 1024
[  257.168413][ T7279] batman_adv: batadv0: Adding interface: batadv_slave_0
[  257.185996][ T7279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  257.249985][ T7355] hfsplus: b-tree write err: -5, ino 3
[  257.263065][ T7279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  257.341342][ T6692] hsr_slave_0: left promiscuous mode
[  257.385032][ T6692] hsr_slave_1: left promiscuous mode
[  257.398119][ T6692] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  257.409477][ T6692] batman_adv: batadv0: Removing interface: batadv_slave_0
[  257.458423][ T6692] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  257.471796][ T6692] batman_adv: batadv0: Removing interface: batadv_slave_1
[  257.520186][ T6692] bridge_slave_1: left allmulticast mode
[  257.544751][ T6692] bridge_slave_1: left promiscuous mode
[  257.563286][ T6692] bridge0: port 2(bridge_slave_1) entered disabled state
[  257.619678][ T6692] bridge_slave_0: left allmulticast mode
[  257.632136][ T6692] bridge_slave_0: left promiscuous mode
[  257.639972][ T6692] bridge0: port 1(bridge_slave_0) entered disabled state
[  257.729438][ T6692] veth1_macvtap: left promiscuous mode
[  257.735971][ T6692] veth0_macvtap: left promiscuous mode
[  257.741687][ T6692] veth1_vlan: left promiscuous mode
[  257.764885][ T6692] veth0_vlan: left promiscuous mode
[  258.450175][ T7384] loop6: detected capacity change from 0 to 164
[  258.883488][ T6692] team0 (unregistering): Port device team_slave_1 removed
[  259.004680][ T5796] Bluetooth: hci3: command tx timeout
[  259.274171][ T6692] team0 (unregistering): Port device team_slave_0 removed
[  259.421405][ T6692] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  259.499716][ T6692] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  260.046855][ T7392] binder: 7389:7392 ioctl c0306201 0 returned -14
[  260.773312][ T7394] loop6: detected capacity change from 0 to 1024
[  260.780712][ T7394] ext4: Unknown parameter 'euid<00000000000000000000'
[  260.995078][ T5799] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  261.021279][ T6692] bond0 (unregistering): Released all slaves
[  261.938594][ T7358] bpq0: entered promiscuous mode
[  261.962402][ T7279] batman_adv: batadv0: Adding interface: batadv_slave_1
[  261.971059][ T7279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  262.024621][ T7279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  262.043082][ T7369] bpq0: left promiscuous mode
[  262.088499][ T7279] hsr_slave_0: entered promiscuous mode
[  262.096487][ T7279] hsr_slave_1: entered promiscuous mode
[  262.105835][ T7279] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  262.113524][ T7279] Cannot create hsr debugfs directory
[  262.933234][ T7403] loop0: detected capacity change from 0 to 164
[  263.720696][ T7412] binder: 7407:7412 ioctl c0306201 0 returned -14
[  266.169638][ T7425] ptm ptm2: ldisc open failed (-12), clearing slot 2
[  266.269951][ T7428] binder: 7417:7428 ioctl c0306201 0 returned -14
[  266.589163][ T7279] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  266.667999][ T7279] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  266.725269][ T7279] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  266.895823][ T7437] bpq0: entered promiscuous mode
[  266.902832][ T7279] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  268.100471][ T7457] bpq0: left promiscuous mode
[  268.117146][ T7459] loop6: detected capacity change from 0 to 1024
[  268.124503][ T7459] ext4: Unknown parameter 'euid<00000000000000000000'
[  269.102416][ T7279] 8021q: adding VLAN 0 to HW filter on device bond0
[  269.210380][ T7279] 8021q: adding VLAN 0 to HW filter on device team0
[  269.276065][   T34] bridge0: port 1(bridge_slave_0) entered blocking state
[  269.283360][   T34] bridge0: port 1(bridge_slave_0) entered forwarding state
[  269.356158][  T142] bridge0: port 2(bridge_slave_1) entered blocking state
[  269.363389][  T142] bridge0: port 2(bridge_slave_1) entered forwarding state
[  271.243971][ T7279] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  271.687783][ T7478] binder: 7473:7478 ioctl c0306201 0 returned -14
[  272.413140][ T7481] loop3: detected capacity change from 0 to 1024
[  272.420353][ T7481] ext4: Unknown parameter 'euid<00000000000000000000'
[  273.951303][ T7497] binder: 7486:7497 ioctl c0306201 0 returned -14
[  273.995713][ T7497] loop0: detected capacity change from 0 to 128
[  274.191357][ T7497] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  274.209638][ T7497] ext4 filesystem being mounted at /90/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  274.464215][ T7279] 8021q: adding VLAN 0 to HW filter on device batadv0
[  274.574688][ T7500] bpq0: entered promiscuous mode
[  274.655745][ T5794] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  276.650281][ T7516] bpq0: left promiscuous mode
[  279.042657][ T7279] veth0_vlan: entered promiscuous mode
[  279.166351][ T7279] veth1_vlan: entered promiscuous mode
[  279.242379][ T7540] binder: 7533:7540 ioctl c0306201 0 returned -14
[  279.548979][ T7279] veth0_macvtap: entered promiscuous mode
[  279.612358][ T7279] veth1_macvtap: entered promiscuous mode
[  279.812864][ T7279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  279.869726][ T7279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  279.883578][ T7279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  279.903778][ T7279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  279.928570][ T7279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  279.943281][ T7279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  279.958076][ T7279] batman_adv: batadv0: Interface activated: batadv_slave_0
[  280.386529][ T7279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  280.438103][ T7279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  280.525795][ T7279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  280.645054][ T7279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  280.944440][ T7279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  280.984349][ T7279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  281.046937][ T7279] batman_adv: batadv0: Interface activated: batadv_slave_1
[  281.121848][ T7279] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  281.178768][ T7279] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  281.218437][ T7279] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  281.227359][ T7279] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  281.728552][ T7555] binder: 7548:7555 ioctl c0306201 0 returned -14
[  282.417859][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  282.487996][ T7562] loop6: detected capacity change from 0 to 736
[  282.488726][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  282.671962][ T6264] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  282.766183][ T6264] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  282.844438][ T7570] bpq0: entered promiscuous mode
[  285.697149][ T7583] loop0: detected capacity change from 0 to 8192
[  285.852185][ T7595] binder: 7587:7595 ioctl c0306201 0 returned -14
[  286.851778][ T7601] binder: 7596:7601 ioctl c0306201 0 returned -14
[  286.884319][ T7601] loop3: detected capacity change from 0 to 128
[  287.336820][ T7601] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  287.357983][ T7601] ext4 filesystem being mounted at /87/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  287.720887][ T7607] loop7: detected capacity change from 0 to 8192
[  287.736518][ T5795] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  288.793470][ T7620] FAT-fs (loop7): error, fat_free_clusters: deleting FAT entry beyond EOF
[  288.802463][ T7620] FAT-fs (loop7): Filesystem has been set read-only
[  290.562583][ T7618] loop3: detected capacity change from 0 to 512
[  290.688547][ T7618] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities
[  291.304785][ T7632] binder: 7625:7632 ioctl c0306201 0 returned -14
[  291.746392][ T7632] loop7: detected capacity change from 0 to 128
[  291.982960][ T7632] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  291.996159][ T7632] ext4 filesystem being mounted at /2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  292.337497][ T7279] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  292.359665][   T34] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  293.828696][   T34] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  294.132303][ T7652] binder: 7645:7652 ioctl c0306201 0 returned -14
[  294.176108][ T7652] loop3: detected capacity change from 0 to 128
[  294.855249][   T34] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  294.855853][ T7652] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  294.878341][ T7652] ext4 filesystem being mounted at /90/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  294.953093][ T7646] loop7: detected capacity change from 0 to 8192
[  295.245546][ T5795] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  295.427404][   T34] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  295.711353][ T7660] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 2076)
[  295.720777][ T7660] FAT-fs (loop7): Filesystem has been set read-only
[  295.731071][ T7660] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 2076)
[  298.438841][ T7677] binder: 7670:7677 ioctl c0306201 0 returned -14
[  298.482019][ T7677] loop7: detected capacity change from 0 to 128
[  299.184001][ T7677] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  299.204422][ T7677] ext4 filesystem being mounted at /4/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  299.620746][ T7279] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  300.972822][ T7700] binder: 7695:7700 ioctl c0306201 0 returned -14
[  300.988094][ T7700] loop7: detected capacity change from 0 to 128
[  301.026411][ T7700] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  301.041557][ T7700] ext4 filesystem being mounted at /5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  301.395440][ T7279] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  301.748701][   T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  301.757878][   T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  301.768700][   T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  301.777656][   T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  301.877946][   T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  301.888667][   T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  302.721489][ T7717] binder: 7711:7717 ioctl c0306201 0 returned -14
[  302.747061][ T7717] loop7: detected capacity change from 0 to 128
[  303.149762][ T7717] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  303.196214][ T7717] ext4 filesystem being mounted at /6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  304.479432][   T51] Bluetooth: hci0: command tx timeout
[  304.573228][ T7279] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  305.029524][ T7735] loop3: detected capacity change from 0 to 256
[  305.073497][ T7735] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  305.135081][ T7735] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  305.156382][ T7729] loop7: detected capacity change from 0 to 8192
[  305.173110][ T7735] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d)
[  305.698188][   T28] audit: type=1800 audit(1763011248.653:69): pid=7744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.311" name="file1" dev="loop3" ino=1048796 res=0 errno=0
[  306.524333][   T51] Bluetooth: hci0: command tx timeout
[  307.441505][ T7710] chnl_net:caif_netlink_parms(): no params data found
[  309.308712][   T51] Bluetooth: hci0: command tx timeout
[  309.394396][   T34] hsr_slave_0: left promiscuous mode
[  309.537543][   T34] hsr_slave_1: left promiscuous mode
[  309.569596][   T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  309.579336][   T34] batman_adv: batadv0: Removing interface: batadv_slave_0
[  309.601654][   T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  310.324903][   T34] batman_adv: batadv0: Removing interface: batadv_slave_1
[  310.356446][   T34] bridge_slave_1: left allmulticast mode
[  310.362182][   T34] bridge_slave_1: left promiscuous mode
[  310.399073][   T34] bridge0: port 2(bridge_slave_1) entered disabled state
[  310.437405][   T34] bridge_slave_0: left allmulticast mode
[  310.443312][   T34] bridge_slave_0: left promiscuous mode
[  310.606656][   T34] bridge0: port 1(bridge_slave_0) entered disabled state
[  310.656765][   T34] veth1_macvtap: left promiscuous mode
[  310.662501][   T34] veth0_macvtap: left promiscuous mode
[  310.672233][   T34] veth1_vlan: left promiscuous mode
[  311.096116][   T34] veth0_vlan: left promiscuous mode
[  311.374351][   T51] Bluetooth: hci0: command tx timeout
[  311.722080][ T7778] loop3: detected capacity change from 0 to 1024
[  312.220999][ T7781] loop3: detected capacity change from 0 to 8192
[  313.575266][ T7790] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF
[  313.583867][ T7790] FAT-fs (loop3): Filesystem has been set read-only
[  317.505046][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  317.511426][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  321.702036][   T34] team0 (unregistering): Port device team_slave_1 removed
[  321.801736][ T7826] binder: 7823:7826 ioctl c0306201 0 returned -14
[  321.843321][ T7826] loop3: detected capacity change from 0 to 128
[  322.472401][ T7826] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  322.487207][ T7826] ext4 filesystem being mounted at /102/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  322.607289][   T34] team0 (unregistering): Port device team_slave_0 removed
[  322.684855][   T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  322.842900][ T5795] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  322.953636][   T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  323.006445][ T7830] loop3: detected capacity change from 0 to 164
[  327.030385][ T7850] loop3: detected capacity change from 0 to 512
[  327.073875][ T7850] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  327.161947][ T7850] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  327.181060][ T7850] ext4 filesystem being mounted at /105/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  327.623595][   T34] bond0 (unregistering): Released all slaves
[  328.135918][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  328.641894][ T7710] bridge0: port 1(bridge_slave_0) entered blocking state
[  328.675431][ T7710] bridge0: port 1(bridge_slave_0) entered disabled state
[  328.682372][ T7865] loop3: detected capacity change from 0 to 8192
[  328.682732][ T7710] bridge_slave_0: entered allmulticast mode
[  328.748303][ T7710] bridge_slave_0: entered promiscuous mode
[  328.775584][ T7710] bridge0: port 2(bridge_slave_1) entered blocking state
[  328.793046][ T7710] bridge0: port 2(bridge_slave_1) entered disabled state
[  328.831196][ T7710] bridge_slave_1: entered allmulticast mode
[  328.869247][ T7710] bridge_slave_1: entered promiscuous mode
[  329.455793][ T7873] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF
[  329.464429][ T7873] FAT-fs (loop3): Filesystem has been set read-only
[  330.254006][ T7710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  331.416409][ T7710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  331.642187][ T7710] team0: Port device team_slave_0 added
[  331.665878][ T7710] team0: Port device team_slave_1 added
[  331.725584][ T7881] loop3: detected capacity change from 0 to 8192
[  331.817094][ T7710] batman_adv: batadv0: Adding interface: batadv_slave_0
[  331.824103][ T7710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  331.905156][ T7710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  332.199935][ T7710] batman_adv: batadv0: Adding interface: batadv_slave_1
[  332.223217][ T7710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  332.654601][ T7710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  332.957998][   T34] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  333.284502][ T7710] hsr_slave_0: entered promiscuous mode
[  333.307794][ T7710] hsr_slave_1: entered promiscuous mode
[  334.779114][   T34] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  334.896912][ T7897] loop3: detected capacity change from 0 to 128
[  335.021960][ T7897] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  335.044897][ T7897] ext4 filesystem being mounted at /109/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  335.434174][ T5795] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  335.473114][   T34] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  335.951643][   T34] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  336.769707][   T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  336.779554][   T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  336.793156][   T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  336.807994][   T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  336.816132][   T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  336.824058][   T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  337.771609][ T7914] loop3: detected capacity change from 0 to 8192
[  337.910616][ T7710] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  337.940568][ T7710] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  337.993971][ T7710] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  338.610034][ T7923] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF
[  338.618727][ T7923] FAT-fs (loop3): Filesystem has been set read-only
[  338.926515][ T5796] Bluetooth: hci3: command tx timeout
[  339.027570][ T7710] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  341.072965][ T5796] Bluetooth: hci3: command tx timeout
[  341.491783][ T7942] loop3: detected capacity change from 0 to 1024
[  341.766982][ T7909] chnl_net:caif_netlink_parms(): no params data found
[  342.361953][ T7909] bridge0: port 1(bridge_slave_0) entered blocking state
[  342.394459][ T7909] bridge0: port 1(bridge_slave_0) entered disabled state
[  342.404902][ T7909] bridge_slave_0: entered allmulticast mode
[  342.415527][ T7909] bridge_slave_0: entered promiscuous mode
[  342.621434][ T7909] bridge0: port 2(bridge_slave_1) entered blocking state
[  342.644350][ T7909] bridge0: port 2(bridge_slave_1) entered disabled state
[  342.667506][ T7909] bridge_slave_1: entered allmulticast mode
[  342.713438][ T7909] bridge_slave_1: entered promiscuous mode
[  342.753493][ T7909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  342.766302][ T7909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  342.800668][ T7710] 8021q: adding VLAN 0 to HW filter on device bond0
[  342.881588][ T7710] 8021q: adding VLAN 0 to HW filter on device team0
[  343.105042][ T5798] Bluetooth: hci3: command tx timeout
[  343.612816][ T7909] team0: Port device team_slave_0 added
[  343.652963][ T7909] team0: Port device team_slave_1 added
[  344.018378][   T48] bridge0: port 1(bridge_slave_0) entered blocking state
[  344.025628][   T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[  344.493865][ T7963] loop3: detected capacity change from 0 to 128
[  344.509054][ T7963] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  344.521791][ T7963] ext4 filesystem being mounted at /116/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  344.606890][ T7909] batman_adv: batadv0: Adding interface: batadv_slave_0
[  344.616167][ T7909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  344.646863][ T7909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  344.711679][ T7909] batman_adv: batadv0: Adding interface: batadv_slave_1
[  344.721684][ T7909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  344.765822][ T7909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  344.800950][   T48] bridge0: port 2(bridge_slave_1) entered blocking state
[  344.808197][   T48] bridge0: port 2(bridge_slave_1) entered forwarding state
[  344.841217][ T5795] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  345.051917][ T7710] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  345.062608][ T7710] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  345.206864][   T51] Bluetooth: hci3: command tx timeout
[  345.212457][ T5796] Bluetooth: hci1: command 0x0406 tx timeout
[  346.075207][ T7909] hsr_slave_0: entered promiscuous mode
[  346.082921][ T7909] hsr_slave_1: entered promiscuous mode
[  346.095762][ T7909] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  346.110866][ T7909] Cannot create hsr debugfs directory
[  346.521312][   T34] hsr_slave_0: left promiscuous mode
[  346.627606][   T34] hsr_slave_1: left promiscuous mode
[  346.741490][   T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  346.930172][   T34] batman_adv: batadv0: Removing interface: batadv_slave_0
[  346.967266][   T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  347.005436][   T34] batman_adv: batadv0: Removing interface: batadv_slave_1
[  347.034574][   T34] bridge_slave_1: left allmulticast mode
[  347.061249][   T34] bridge_slave_1: left promiscuous mode
[  347.084808][   T34] bridge0: port 2(bridge_slave_1) entered disabled state
[  347.153747][   T34] bridge_slave_0: left allmulticast mode
[  347.173124][   T34] bridge_slave_0: left promiscuous mode
[  347.183457][   T34] bridge0: port 1(bridge_slave_0) entered disabled state
[  347.284600][   T34] veth1_macvtap: left promiscuous mode
[  347.290233][   T34] veth0_macvtap: left promiscuous mode
[  347.320747][   T34] veth1_vlan: left promiscuous mode
[  347.330822][   T34] veth0_vlan: left promiscuous mode
[  349.356558][ T7990] loop3: detected capacity change from 0 to 8192
[  349.852048][ T7996] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF
[  349.860808][ T7996] FAT-fs (loop3): Filesystem has been set read-only
[  350.687553][   T34] team0 (unregistering): Port device team_slave_1 removed
[  351.948950][ T7999] loop3: detected capacity change from 0 to 8192
[  351.971885][   T34] team0 (unregistering): Port device team_slave_0 removed
[  352.115910][   T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  352.338503][   T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  352.571123][ T8005] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 2076)
[  352.580188][ T8005] FAT-fs (loop3): Filesystem has been set read-only
[  352.589197][ T8005] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 2076)
[  355.652206][   T34] bond0 (unregistering): Released all slaves
[  356.970645][ T7710] 8021q: adding VLAN 0 to HW filter on device batadv0
[  357.245311][ T8029] binder: 8023:8029 ioctl c0306201 0 returned -14
[  357.270243][ T8029] loop3: detected capacity change from 0 to 128
[  357.775669][ T8029] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  357.824703][ T8029] ext4 filesystem being mounted at /122/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  358.161488][ T5795] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  359.689874][ T7909] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  359.730182][ T7909] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  359.768926][ T7909] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  359.856625][ T7909] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  360.041874][ T8050] loop3: detected capacity change from 0 to 128
[  360.448950][ T8050] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  360.467889][ T8050] ext4 filesystem being mounted at /123/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  360.839749][ T5795] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  361.122001][ T7909] 8021q: adding VLAN 0 to HW filter on device bond0
[  361.209917][ T7909] 8021q: adding VLAN 0 to HW filter on device team0
[  361.308580][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  361.315851][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  361.340878][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  361.348256][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  362.157463][ T7909] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  362.196602][ T7909] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  364.125246][ T5796] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  364.136085][ T5796] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  364.145227][ T5796] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  364.186036][ T5796] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  364.196861][ T5796] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  364.205187][ T5796] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  364.520478][ T7909] 8021q: adding VLAN 0 to HW filter on device batadv0
[  367.531179][ T5796] Bluetooth: hci4: command tx timeout
[  367.646104][ T8065] chnl_net:caif_netlink_parms(): no params data found
[  368.732670][ T7909] veth0_vlan: entered promiscuous mode
[  369.005907][ T8065] bridge0: port 1(bridge_slave_0) entered blocking state
[  369.013154][ T8065] bridge0: port 1(bridge_slave_0) entered disabled state
[  369.031058][ T8065] bridge_slave_0: entered allmulticast mode
[  369.046863][ T8065] bridge_slave_0: entered promiscuous mode
[  369.072067][ T8065] bridge0: port 2(bridge_slave_1) entered blocking state
[  369.089868][ T8065] bridge0: port 2(bridge_slave_1) entered disabled state
[  369.120804][ T8065] bridge_slave_1: entered allmulticast mode
[  369.140754][ T8065] bridge_slave_1: entered promiscuous mode
[  369.285299][ T8065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  369.298134][ T8065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  369.338843][ T7909] veth1_vlan: entered promiscuous mode
[  369.530140][ T8065] team0: Port device team_slave_0 added
[  369.552574][ T8065] team0: Port device team_slave_1 added
[  369.874476][ T5796] Bluetooth: hci4: command tx timeout
[  370.211235][ T8065] batman_adv: batadv0: Adding interface: batadv_slave_0
[  370.234600][ T8065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  370.294270][ T8065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  370.309306][ T8065] batman_adv: batadv0: Adding interface: batadv_slave_1
[  370.334573][ T8065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  370.394443][ T8065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  370.497453][ T7909] veth0_macvtap: entered promiscuous mode
[  370.508489][ T7909] veth1_macvtap: entered promiscuous mode
[  370.995578][ T8129] binder: 8123:8129 ioctl c0306201 0 returned -14
[  371.043532][ T8129] loop3: detected capacity change from 0 to 128
[  371.472926][ T8129] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  371.485800][ T8129] ext4 filesystem being mounted at /127/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  371.659666][ T8065] hsr_slave_0: entered promiscuous mode
[  371.686404][ T8065] hsr_slave_1: entered promiscuous mode
[  371.781418][ T8065] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  371.801660][ T8065] Cannot create hsr debugfs directory
[  371.816145][ T5795] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  371.885330][ T5796] Bluetooth: hci4: command tx timeout
[  373.055243][ T7909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  373.114331][ T7909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  373.148833][ T7909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  373.190702][ T7909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  373.262131][ T7909] batman_adv: batadv0: Interface activated: batadv_slave_0
[  373.976018][ T5796] Bluetooth: hci4: command tx timeout
[  375.818930][ T7909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  375.833269][ T7909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  375.849285][ T7909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  375.859951][ T7909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  375.888772][ T7909] batman_adv: batadv0: Interface activated: batadv_slave_1
[  376.094145][ T7909] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  376.148422][ T7909] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  376.198838][ T7909] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  376.247464][ T7909] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  376.848984][  T142] hsr_slave_0: left promiscuous mode
[  376.865390][  T142] hsr_slave_1: left promiscuous mode
[  376.881224][  T142] batman_adv: batadv0: Removing interface: batadv_slave_0
[  376.893656][  T142] batman_adv: batadv0: Removing interface: batadv_slave_1
[  376.905705][  T142] bridge_slave_1: left allmulticast mode
[  376.911409][  T142] bridge_slave_1: left promiscuous mode
[  376.923344][  T142] bridge0: port 2(bridge_slave_1) entered disabled state
[  376.941953][  T142] bridge_slave_0: left allmulticast mode
[  376.948112][  T142] bridge_slave_0: left promiscuous mode
[  376.953922][  T142] bridge0: port 1(bridge_slave_0) entered disabled state
[  379.122618][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  379.134601][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  379.386600][  T142] team0 (unregistering): Port device team_slave_1 removed
[  379.555206][  T142] team0 (unregistering): Port device team_slave_0 removed
[  379.705046][  T142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  380.003366][ T5796] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  380.019375][ T5796] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  380.029993][ T5796] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  380.046545][ T5796] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  380.054664][ T5796] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  380.062109][ T5796] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  380.115106][  T142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  382.204364][ T5796] Bluetooth: hci0: command tx timeout
[  383.876500][  T142] bond0 (unregistering): Released all slaves
[  384.284503][ T5796] Bluetooth: hci0: command tx timeout
[  384.354689][ T2111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  384.362587][ T2111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  384.519436][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  384.539936][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  385.776962][ T8065] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  385.824642][ T8065] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  385.901677][ T8177] chnl_net:caif_netlink_parms(): no params data found
[  385.949677][ T8065] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  386.029519][   T34] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  386.365418][ T5796] Bluetooth: hci0: command tx timeout
[  386.418555][ T8065] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  386.604599][   T34] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  387.020041][   T34] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  387.073645][ T8177] bridge0: port 1(bridge_slave_0) entered blocking state
[  387.171973][ T8177] bridge0: port 1(bridge_slave_0) entered disabled state
[  387.223809][ T8177] bridge_slave_0: entered allmulticast mode
[  387.354515][ T8177] bridge_slave_0: entered promiscuous mode
[  387.802207][ T8065] 8021q: adding VLAN 0 to HW filter on device bond0
[  387.886867][   T34] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  387.920605][ T8177] bridge0: port 2(bridge_slave_1) entered blocking state
[  388.024523][ T8177] bridge0: port 2(bridge_slave_1) entered disabled state
[  388.031864][ T8177] bridge_slave_1: entered allmulticast mode
[  388.059926][ T8177] bridge_slave_1: entered promiscuous mode
[  388.448904][ T5796] Bluetooth: hci0: command tx timeout
[  388.587670][ T8177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  388.846916][ T8177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  389.083734][ T8065] 8021q: adding VLAN 0 to HW filter on device team0
[  390.883551][ T8177] team0: Port device team_slave_0 added
[  390.905921][ T8177] team0: Port device team_slave_1 added
[  391.089056][   T48] bridge0: port 1(bridge_slave_0) entered blocking state
[  391.096328][   T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[  391.122366][ T8177] batman_adv: batadv0: Adding interface: batadv_slave_0
[  391.144967][ T8177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  391.212373][ T8177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  391.236765][ T8177] batman_adv: batadv0: Adding interface: batadv_slave_1
[  391.254647][ T8177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  391.328353][ T8177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  391.363090][   T48] bridge0: port 2(bridge_slave_1) entered blocking state
[  391.370355][   T48] bridge0: port 2(bridge_slave_1) entered forwarding state
[  391.876360][ T8177] hsr_slave_0: entered promiscuous mode
[  391.904563][ T8177] hsr_slave_1: entered promiscuous mode
[  398.539823][   T34] hsr_slave_0: left promiscuous mode
[  398.584576][   T34] hsr_slave_1: left promiscuous mode
[  398.635311][   T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  398.642809][   T34] batman_adv: batadv0: Removing interface: batadv_slave_0
[  398.692280][   T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  398.725609][   T34] batman_adv: batadv0: Removing interface: batadv_slave_1
[  398.734036][   T34] bridge_slave_1: left allmulticast mode
[  398.764304][   T34] bridge_slave_1: left promiscuous mode
[  398.770180][   T34] bridge0: port 2(bridge_slave_1) entered disabled state
[  398.818644][   T34] bridge_slave_0: left allmulticast mode
[  398.824657][   T34] bridge_slave_0: left promiscuous mode
[  398.834451][   T34] bridge0: port 1(bridge_slave_0) entered disabled state
[  398.900953][   T34] veth1_macvtap: left promiscuous mode
[  398.914357][   T34] veth0_macvtap: left promiscuous mode
[  398.920203][   T34] veth1_vlan: left promiscuous mode
[  398.949644][   T34] veth0_vlan: left promiscuous mode
[  401.706458][   T34] team0 (unregistering): Port device team_slave_1 removed
[  401.789727][   T34] team0 (unregistering): Port device team_slave_0 removed
[  401.875759][   T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  401.942226][   T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  403.200352][   T34] bond0 (unregistering): Released all slaves
[  404.320816][ T8065] 8021q: adding VLAN 0 to HW filter on device batadv0
[  404.674456][ T8177] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  404.706528][ T8177] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  404.761539][ T8177] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  404.796517][ T8177] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  405.159437][ T8065] veth0_vlan: entered promiscuous mode
[  405.218476][ T8065] veth1_vlan: entered promiscuous mode
[  405.341344][ T8177] 8021q: adding VLAN 0 to HW filter on device bond0
[  405.406287][ T8065] veth0_macvtap: entered promiscuous mode
[  405.440218][ T8065] veth1_macvtap: entered promiscuous mode
[  405.510454][ T8177] 8021q: adding VLAN 0 to HW filter on device team0
[  405.536233][ T8065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  405.564226][ T8065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  405.584302][ T8065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  405.604266][ T8065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  405.643572][ T8065] batman_adv: batadv0: Interface activated: batadv_slave_0
[  405.720073][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[  405.727377][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[  405.751222][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  405.758535][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  406.268548][ T8065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  406.287876][ T8065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  406.298023][ T8065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  406.308725][ T8065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  406.320858][ T8065] batman_adv: batadv0: Interface activated: batadv_slave_1
[  406.449933][ T8065] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  406.477187][ T8065] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  406.486141][ T8065] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  406.494983][ T8065] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  406.765007][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  406.826031][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  406.914295][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  406.941129][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  408.168773][ T8389] loop8: detected capacity change from 0 to 8192
[  409.200663][ T8177] 8021q: adding VLAN 0 to HW filter on device batadv0
[  409.391687][ T8177] veth0_vlan: entered promiscuous mode
[  409.619138][ T8177] veth1_vlan: entered promiscuous mode
[  409.822052][ T8408] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 2076)
[  409.831375][ T8408] FAT-fs (loop8): Filesystem has been set read-only
[  409.843872][ T8408] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 2076)
[  410.327334][ T8177] veth0_macvtap: entered promiscuous mode
[  411.527325][ T8177] veth1_macvtap: entered promiscuous mode
[  413.315886][ T8177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  413.353850][ T8177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  413.404478][ T8177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  413.441307][ T8177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  413.467147][ T8177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  413.499600][ T8177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  413.512129][ T8177] batman_adv: batadv0: Interface activated: batadv_slave_0
[  413.523907][ T8177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  413.544580][ T8177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  413.566324][ T8177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  413.594498][ T8177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  413.624391][ T8177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  414.674493][ T8177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  414.706383][ T8177] batman_adv: batadv0: Interface activated: batadv_slave_1
[  414.950657][ T8177] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  415.059375][ T8177] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  415.174532][ T8177] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  415.466455][ T8177] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  415.833988][ T2883] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  415.868606][ T2883] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  416.163771][  T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  416.779461][  T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  420.271170][ T8461] binder: 8456:8461 ioctl c0306201 0 returned -14
[  423.723220][ T8512] loop2: detected capacity change from 0 to 128
[  424.498597][ T8512] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  424.513026][ T8512] ext4 filesystem being mounted at /1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  424.842364][ T8177] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  425.004736][    C0] ------------[ cut here ]------------
[  425.010789][    C0] ODEBUG: free active (active state 0) object: ffff88805e116c90 object type: timer_list hint: rose_t0timer_expiry+0x0/0x350
[  425.024230][    C0] WARNING: CPU: 0 PID: 0 at lib/debugobjects.c:518 debug_check_no_obj_freed+0x446/0x540
[  425.034007][    C0] Modules linked in:
[  425.037956][    C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0
[  425.045014][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  425.055113][    C0] RIP: 0010:debug_check_no_obj_freed+0x446/0x540
[  425.061834][    C0] Code: 4c 8b 4d 00 48 c7 c7 c0 74 fc 8a 48 c7 c6 20 71 fc 8a 48 c7 c2 40 76 fc 8a 8b 0c 24 4d 89 f8 41 55 e8 6e dd 29 fd 48 83 c4 08 <0f> 0b 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc ff df ff 05 a3 92 24
[  425.081578][    C0] RSP: 0000:ffffc90000007a50 EFLAGS: 00010296
[  425.087688][    C0] RAX: c16a038a4a0f4400 RBX: ffffffff9716b7a8 RCX: ffffffff8ca93440
[  425.095705][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  425.103684][    C0] RBP: ffffffff8aac9f00 R08: ffffc90000007647 R09: 1ffff92000000ec8
[  425.111693][    C0] R10: dffffc0000000000 R11: fffff52000000ec9 R12: ffff88805e116e00
[  425.119695][    C0] R13: ffffffff89678f70 R14: ffff88805e116000 R15: ffff88805e116c90
[  425.127697][    C0] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  425.136665][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  425.143251][    C0] CR2: 00007fac9d4e4286 CR3: 0000000069080000 CR4: 00000000003506f0
[  425.151249][    C0] Call Trace:
[  425.154624][    C0]  <IRQ>
[  425.157499][    C0]  slab_free_freelist_hook+0xd2/0x1b0
[  425.162904][    C0]  ? rose_timer_expiry+0x4c6/0x5f0
[  425.168053][    C0]  __kmem_cache_free+0xba/0x1f0
[  425.172924][    C0]  rose_timer_expiry+0x4c6/0x5f0
[  425.177905][    C0]  ? call_timer_fn+0x15a/0x530
[  425.182685][    C0]  call_timer_fn+0x16e/0x530
[  425.187307][    C0]  ? rose_start_t1timer+0xd0/0xd0
[  425.192362][    C0]  ? call_timer_fn+0xbf/0x530
[  425.197094][    C0]  ? __run_timers+0x7d0/0x7d0
[  425.201801][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  425.207041][    C0]  ? lockdep_hardirqs_on+0x98/0x150
[  425.212271][    C0]  ? rose_start_t1timer+0xd0/0xd0
[  425.217335][    C0]  __run_timers+0x52d/0x7d0
[  425.221854][    C0]  ? detach_timer+0x2b0/0x2b0
[  425.226563][    C0]  ? lock_chain_count+0x20/0x20
[  425.231429][    C0]  run_timer_softirq+0x67/0xf0
[  425.236252][    C0]  handle_softirqs+0x280/0x820
[  425.241558][    C0]  ? __irq_exit_rcu+0xc7/0x190
[  425.246360][    C0]  ? do_softirq+0x180/0x180
[  425.250884][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  425.256214][    C0]  __irq_exit_rcu+0xc7/0x190
[  425.260813][    C0]  ? irq_exit_rcu+0x20/0x20
[  425.265366][    C0]  irq_exit_rcu+0x9/0x20
[  425.269615][    C0]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  425.275317][    C0]  </IRQ>
[  425.278254][    C0]  <TASK>
[  425.281191][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  425.287208][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  425.292973][    C0] Code: cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d c3 64 39 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 66 0f 1f 00 55 41 57 41 56
[  425.312615][    C0] RSP: 0000:ffffffff8ca07d80 EFLAGS: 000002c2
[  425.318715][    C0] RAX: c16a038a4a0f4400 RBX: ffffffff816187ab RCX: c16a038a4a0f4400
[  425.326714][    C0] RDX: 0000000000000001 RSI: ffffffff8aaabce0 RDI: ffffffff8afc6b00
[  425.334739][    C0] RBP: ffffffff8ca07eb8 R08: ffff8880b8e36b2b R09: 1ffff110171c6d65
[  425.342714][    C0] R10: dffffc0000000000 R11: ffffed10171c6d66 R12: ffffffff8e4a8d68
[  425.350712][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1952688
[  425.358712][    C0]  ? do_idle+0x1eb/0x510
[  425.362976][    C0]  default_idle+0x13/0x20
[  425.367330][    C0]  default_idle_call+0x6c/0xa0
[  425.372135][    C0]  do_idle+0x1eb/0x510
[  425.376256][    C0]  ? idle_inject_timer_fn+0x60/0x60
[  425.381460][    C0]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  425.387140][    C0]  cpu_startup_entry+0x43/0x60
[  425.391912][    C0]  rest_init+0x2e2/0x300
[  425.396185][    C0]  ? time_init+0x40/0x40
[  425.400441][    C0]  arch_call_rest_init+0xe/0x10
[  425.405326][    C0]  start_kernel+0x459/0x4e0
[  425.409839][    C0]  x86_64_start_reservations+0x2a/0x30
[  425.415359][    C0]  x86_64_start_kernel+0x60/0x60
[  425.420322][    C0]  secondary_startup_64_no_verify+0x179/0x17b
[  425.426467][    C0]  </TASK>
[  425.429513][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  425.436800][    C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0
[  425.443825][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  425.453968][    C0] Call Trace:
[  425.457269][    C0]  <IRQ>
[  425.460133][    C0]  dump_stack_lvl+0x16c/0x230
[  425.464823][    C0]  ? show_regs_print_info+0x20/0x20
[  425.470029][    C0]  ? load_image+0x3b0/0x3b0
[  425.474545][    C0]  panic+0x2c0/0x710
[  425.478455][    C0]  ? bpf_jit_dump+0xd0/0xd0
[  425.483000][    C0]  ? secondary_startup_64_no_verify+0x179/0x17b
[  425.489253][    C0]  __warn+0x2e0/0x470
[  425.493236][    C0]  ? debug_check_no_obj_freed+0x446/0x540
[  425.498982][    C0]  ? debug_check_no_obj_freed+0x446/0x540
[  425.504710][    C0]  report_bug+0x2be/0x4f0
[  425.509140][    C0]  ? debug_check_no_obj_freed+0x446/0x540
[  425.514865][    C0]  ? debug_check_no_obj_freed+0x446/0x540
[  425.520592][    C0]  ? debug_check_no_obj_freed+0x448/0x540
[  425.526445][    C0]  handle_bug+0xcf/0x120
[  425.530695][    C0]  exc_invalid_op+0x1a/0x50
[  425.535204][    C0]  asm_exc_invalid_op+0x1a/0x20
[  425.540055][    C0] RIP: 0010:debug_check_no_obj_freed+0x446/0x540
[  425.546392][    C0] Code: 4c 8b 4d 00 48 c7 c7 c0 74 fc 8a 48 c7 c6 20 71 fc 8a 48 c7 c2 40 76 fc 8a 8b 0c 24 4d 89 f8 41 55 e8 6e dd 29 fd 48 83 c4 08 <0f> 0b 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc ff df ff 05 a3 92 24
[  425.566016][    C0] RSP: 0000:ffffc90000007a50 EFLAGS: 00010296
[  425.572091][    C0] RAX: c16a038a4a0f4400 RBX: ffffffff9716b7a8 RCX: ffffffff8ca93440
[  425.580077][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  425.588062][    C0] RBP: ffffffff8aac9f00 R08: ffffc90000007647 R09: 1ffff92000000ec8
[  425.596037][    C0] R10: dffffc0000000000 R11: fffff52000000ec9 R12: ffff88805e116e00
[  425.604011][    C0] R13: ffffffff89678f70 R14: ffff88805e116000 R15: ffff88805e116c90
[  425.611987][    C0]  ? rose_transmit_link+0x740/0x740
[  425.617234][    C0]  slab_free_freelist_hook+0xd2/0x1b0
[  425.622661][    C0]  ? rose_timer_expiry+0x4c6/0x5f0
[  425.627779][    C0]  __kmem_cache_free+0xba/0x1f0
[  425.632647][    C0]  rose_timer_expiry+0x4c6/0x5f0
[  425.637593][    C0]  ? call_timer_fn+0x15a/0x530
[  425.642360][    C0]  call_timer_fn+0x16e/0x530
[  425.646956][    C0]  ? rose_start_t1timer+0xd0/0xd0
[  425.651986][    C0]  ? call_timer_fn+0xbf/0x530
[  425.656670][    C0]  ? __run_timers+0x7d0/0x7d0
[  425.661351][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  425.666551][    C0]  ? lockdep_hardirqs_on+0x98/0x150
[  425.671749][    C0]  ? rose_start_t1timer+0xd0/0xd0
[  425.676901][    C0]  __run_timers+0x52d/0x7d0
[  425.681420][    C0]  ? detach_timer+0x2b0/0x2b0
[  425.686130][    C0]  ? lock_chain_count+0x20/0x20
[  425.690992][    C0]  run_timer_softirq+0x67/0xf0
[  425.695793][    C0]  handle_softirqs+0x280/0x820
[  425.700582][    C0]  ? __irq_exit_rcu+0xc7/0x190
[  425.705348][    C0]  ? do_softirq+0x180/0x180
[  425.709855][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  425.715065][    C0]  __irq_exit_rcu+0xc7/0x190
[  425.719655][    C0]  ? irq_exit_rcu+0x20/0x20
[  425.724174][    C0]  irq_exit_rcu+0x9/0x20
[  425.728428][    C0]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  425.734069][    C0]  </IRQ>
[  425.737086][    C0]  <TASK>
[  425.740020][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  425.746000][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  425.751727][    C0] Code: cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d c3 64 39 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 66 0f 1f 00 55 41 57 41 56
[  425.771334][    C0] RSP: 0000:ffffffff8ca07d80 EFLAGS: 000002c2
[  425.777414][    C0] RAX: c16a038a4a0f4400 RBX: ffffffff816187ab RCX: c16a038a4a0f4400
[  425.785413][    C0] RDX: 0000000000000001 RSI: ffffffff8aaabce0 RDI: ffffffff8afc6b00
[  425.793401][    C0] RBP: ffffffff8ca07eb8 R08: ffff8880b8e36b2b R09: 1ffff110171c6d65
[  425.801445][    C0] R10: dffffc0000000000 R11: ffffed10171c6d66 R12: ffffffff8e4a8d68
[  425.809440][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1952688
[  425.817421][    C0]  ? do_idle+0x1eb/0x510
[  425.821722][    C0]  default_idle+0x13/0x20
[  425.826054][    C0]  default_idle_call+0x6c/0xa0
[  425.830821][    C0]  do_idle+0x1eb/0x510
[  425.834901][    C0]  ? idle_inject_timer_fn+0x60/0x60
[  425.840106][    C0]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  425.845838][    C0]  cpu_startup_entry+0x43/0x60
[  425.850606][    C0]  rest_init+0x2e2/0x300
[  425.854852][    C0]  ? time_init+0x40/0x40
[  425.859107][    C0]  arch_call_rest_init+0xe/0x10
[  425.863967][    C0]  start_kernel+0x459/0x4e0
[  425.868483][    C0]  x86_64_start_reservations+0x2a/0x30
[  425.873944][    C0]  x86_64_start_kernel+0x60/0x60
[  425.878886][    C0]  secondary_startup_64_no_verify+0x179/0x17b
[  425.884974][    C0]  </TASK>
[  425.888379][    C0] Kernel Offset: disabled
[  425.892792][    C0] Rebooting in 86400 seconds..