last executing test programs:

27m26.654749888s ago: executing program 32 (id=131):
gettid()
socketpair$unix(0x1, 0x5, 0x0, 0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x12)
poll(&(0x7f0000b2c000), 0x0, 0xffffffffffbffff8)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x100000004}, 0x18)
sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, 0x0, 0x20000000)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x8021}, 0x4008000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='mm_page_free\x00', r0, 0x0, 0xfffffffff7fffffc}, 0xc)
prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00')
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800)

23m37.23624297s ago: executing program 33 (id=1246):
socket$inet6(0xa, 0x802, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372000000001400010076657468315f766c616e"], 0xfc}}, 0x20000004)

23m35.257702582s ago: executing program 34 (id=1257):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10)
getrlimit(0x1, &(0x7f0000000000))
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r2, &(0x7f0000000000)={0xa, {"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", 0x1000}}, 0x1006)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000000), &(0x7f00000005c0)=r5}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000, @void, @value, @void, @value}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r3}, 0x10)
setregid(0xffffffffffffffff, 0x0)

21m3.015303044s ago: executing program 35 (id=1902):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040800}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0)
sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4)
sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5)

19m53.246445079s ago: executing program 36 (id=2057):
unshare(0x66000080)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0x503, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
unshare(0x20000600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
openat(r5, 0x0, 0x40000, 0x0)
pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="1f", 0x1, 0xfecc)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00'}, 0x18)
syz_clone3(&(0x7f0000000600)={0x4040680, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0x0], 0x1}, 0x58)

16m51.475301558s ago: executing program 37 (id=2638):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
ioprio_set$pid(0x3, 0x0, 0x8000)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000740)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f0000000280))

15m45.401563041s ago: executing program 38 (id=2857):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10)
syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x3810744, &(0x7f0000000340)={[{@noauto_da_alloc}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {}, {@nouid32}, {@sysvgroups}, {@nojournal_checksum}, {@noauto_da_alloc}, {@test_dummy_encryption}, {@jqfmt_vfsv1}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@acl}]}, 0x1, 0x47f, &(0x7f0000002080)="$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")
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00')
preadv(r4, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0)

14m35.68405763s ago: executing program 39 (id=3034):
socket$inet6(0xa, 0x3, 0x1)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r4, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d4240000000000000029000000020000", 0x2f)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000002c0000000000000006000000181100", @ANYRES32=r0, @ANYBLOB="00000000005f4f3727d227e157000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001d950c0010000000bf91000000000000b70200000200"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x784, &(0x7f0000001900)="$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")
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f0000000240), 0x208e24b)

12m19.237013289s ago: executing program 9 (id=3331):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10)
syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x3810744, &(0x7f0000000340)={[{@noauto_da_alloc}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {}, {@nouid32}, {@sysvgroups}, {@nojournal_checksum}, {@noauto_da_alloc}, {@test_dummy_encryption}, {@jqfmt_vfsv1}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@acl}]}, 0x1, 0x47f, &(0x7f0000002080)="$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")

12m15.596323292s ago: executing program 9 (id=3334):
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}}, 0x5, 0x12}, 0x9c)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$caif_stream(0x25, 0x1, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0)
capset(&(0x7f00000004c0)={0x20080522}, 0x0)
sendmmsg$inet(r1, 0x0, 0x0, 0x0)
r2 = syz_io_uring_setup(0x466c, &(0x7f0000000280)={0x0, 0x3, 0x10100}, &(0x7f0000001340)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, 0x1, 0x7}, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0)
ioprio_set$pid(0x2, 0x0, 0x0)
pipe(0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RENAMEAT={0x23, 0x30, 0x0, r5, 0x0, 0x0, r5})
io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

12m13.953302924s ago: executing program 9 (id=3337):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff09"], 0x15)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000d00008500000083000000bf090000000000005509010000000000950020d000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18)
r4 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}})

12m12.7391018s ago: executing program 9 (id=3339):
r0 = socket$nl_route(0x10, 0x3, 0x0)
clock_adjtime(0x0, &(0x7f0000000000)={0x7fff, 0x0, 0x0, 0x0, 0x0, 0x1869e, 0x0, 0x7fffffffffffffff, 0x10000000, 0x0, 0x0, 0x29e9})
sendmsg$nl_route_sched(r0, 0x0, 0x4000814)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10)
socket$tipc(0x1e, 0x2, 0x0)
r6 = socket$inet6(0xa, 0x1, 0x0)
sendto$inet6(r6, 0x0, 0x0, 0xfffffefffbfbb7fe, 0x0, 0x0)
getsockopt$inet6_buf(r6, 0x29, 0x6, 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x1, 0xf7af, 0x8000, 0x8, 0x0, "4cb8b210acdc716f64cf76062d59a56f2584c4"})

12m10.344255058s ago: executing program 9 (id=3343):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f00000003c0)={[{@inlinecrypt}, {@usrjquota}, {@errors_remount}, {@dioread_lock}, {@norecovery}, {@mblk_io_submit}, {@dax_always}, {@dax_never}, {@nombcache}, {}], [{@audit}]}, 0x43, 0x7bb, &(0x7f0000003000)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
poll(0x0, 0x0, 0x5)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
keyctl$search(0xa, 0x0, 0x0, &(0x7f0000000100)={'syz', 0x0}, 0x0)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
lseek(r4, 0x851, 0x0)
ioctl$USBDEVFS_REAPURBNDELAY(r4, 0x4008550d, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xfffffffffffffe44}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0)

12m8.371020762s ago: executing program 9 (id=3345):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000300)={[{@noauto_da_alloc}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$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")

11m54.079489572s ago: executing program 40 (id=3345):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000300)={[{@noauto_da_alloc}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$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")

10m4.979442823s ago: executing program 8 (id=3088):
r0 = socket$nl_route(0x10, 0x3, 0x0)
clock_adjtime(0x0, &(0x7f0000000000)={0x7fff, 0x0, 0x0, 0x0, 0x0, 0x1869e, 0x0, 0x7fffffffffffffff, 0x10000000, 0x0, 0x0, 0x29e9})
sendmsg$nl_route_sched(r0, 0x0, 0x4000814)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10)
r5 = socket$inet6(0xa, 0x1, 0x0)
sendto$inet6(r5, 0x0, 0x0, 0xfffffefffbfbb7fe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x6}, 0x1c)
getsockopt$inet6_buf(r5, 0x29, 0x6, 0x0, 0x0)
r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$RTC_UIE_ON(r6, 0x7003)

7m11.33567792s ago: executing program 5 (id=3905):
socket$packet(0x11, 0x2, 0x300)
r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x8000000000000001, 0x0)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000340)={0x40, 0xf, 0x3, 0x6, 0xec, 0x9, &(0x7f00000001c0)="38df2fe6a549ad79853044961e86f24cd78a2ea2321b764752e790645cfc01a0fd8de2e97f3a0a955dbfd501a60822415254ca12a7cdd85f3904120bcbb6a262624269ec8b8a2eb7c29dd52c77c63cf9af236f3e7b7de485770e0acb4d7f45dbc68be43d2acc2449f13ab7f4c618b5a8d013676f91dd245846f90f39095a7033ba3c7d20319c533b4b158b7ee42cc5b8f2c6f508be215a9d8de81e39c9566142dc8ae2fde5f77cadd7f62cdbca90962907100b4cd0a247f370f9724dbffd86e8cb0c720aeb90224d709b7adde576924b15c044e4d331706ef2e38ef3cd45e6070af22bdc9de1855dc2c0e0e9"})
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x24)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_type(r4, &(0x7f0000000080), 0x2, 0x0)
rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00')
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

7m6.727008561s ago: executing program 6 (id=3909):
socket$nl_generic(0x10, 0x3, 0x10)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
r0 = socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3)
connect$rxrpc(r0, &(0x7f00000002c0)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000300)='rxrpc_client\x00', r1}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000140)='rxrpc_client\x00', r1, 0x0, 0x5}, 0x18)
socket$kcm(0x21, 0x2, 0x2)
connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x24)
sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00')
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

7m3.854779836s ago: executing program 6 (id=3916):
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x400600, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00')
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@fallback=r1, 0x24, 0x0, 0x0, &(0x7f0000000440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000c, 0x30, r0, 0x4ee7000)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000400)={'veth1_to_hsr\x00', {0x2, 0x4e00, @broadcast}})
r3 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0)
fcntl$setsig(r3, 0xa, 0x21)
fcntl$setlease(r3, 0x400, 0x1)
open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
timer_create(0x5, 0x0, 0x0)

7m2.868702927s ago: executing program 6 (id=3917):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x2c)
prctl$PR_SET_KEEPCAPS(0x8, 0x1)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={<r3=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f00000001c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000480), r3, 0x2}}, 0x18)

7m2.610854278s ago: executing program 5 (id=3918):
socket$inet_tcp(0x2, 0x1, 0x0)
ioprio_set$pid(0x0, 0xffffffffffffffff, 0x8008)
r0 = socket(0x1e, 0x80000, 0xa)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket(0x10, 0x2, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10002, 0x0)
ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x1f0, 0x0)
fcntl$setownex(r0, 0xf, 0x0)
mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0)
mq_unlink(&(0x7f0000000000)='eth0\x00')
r3 = semget$private(0x0, 0x6, 0x0)
semop(r3, 0x0, 0x0)
semctl$GETZCNT(r3, 0x4, 0xf, 0x0)
semctl$GETZCNT(r3, 0x3, 0xf, &(0x7f00000002c0)=""/209)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, 0x0, &(0x7f0000000080))
r5 = socket$kcm(0x2, 0x3, 0x2)
recvmsg$kcm(r5, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x18000)
r6 = socket$kcm(0x10, 0x2, 0x4)
close(r5)
sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0)

6m59.521165725s ago: executing program 5 (id=3922):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0)
ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, 0x0)
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000000))
add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
add_key$user(0x0, 0x0, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b95", 0x6d, 0xffffffffffffffff)
ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)
syz_usb_connect(0x2, 0x24, 0x0, 0x0)
bind$can_j1939(0xffffffffffffffff, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r2 = io_uring_setup(0x3458, &(0x7f0000000080)={0x0, 0xffffeffa, 0x18, 0x2, 0x1})
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil)

6m58.084342894s ago: executing program 6 (id=3923):
memfd_create(0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0xb)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
write$sndseq(r0, 0x0, 0x0)

6m54.288997848s ago: executing program 5 (id=3926):
r0 = syz_open_dev$sg(0x0, 0x0, 0x8002)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000400)={0x53, 0xffffffffffffffff, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000200)="672d6a44b036", 0x0, 0x0, 0x0, 0x0, 0x0})
write$tun(r1, &(0x7f0000000400)=ANY=[], 0xa2)

6m54.277952427s ago: executing program 6 (id=3927):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_setup(0x10d, 0x0, &(0x7f0000000240)=<r3=>0x0, &(0x7f0000000280))
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
read$msr(0xffffffffffffffff, &(0x7f0000000040)=""/59, 0xffb5)
r4 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r4, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000380)={'wlan0\x00'})

6m54.063968893s ago: executing program 5 (id=3929):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r7 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
fsmount(r7, 0x0, 0x88)
connect$packet(r6, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x8, 0x6, @random="4d74e99b4b5f"}, 0xd)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x43}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)

6m50.793987832s ago: executing program 5 (id=3933):
r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x400600, 0x0)
ioctl$TIOCSETD(r0, 0x5423, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000)
openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000c, 0x30, r2, 0x4ee7000)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000400)={'veth1_to_hsr\x00', {0x2, 0x4e00, @broadcast}})
ioctl$sock_inet_SIOCSIFADDR(r3, 0x891c, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
timer_create(0x5, 0x0, 0x0)
getitimer(0x0, 0x0)
r4 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000240)={{0xa, 0x0, 0x0, @private1, 0xff}, {0xa, 0x4e20, 0x24a0, @mcast1, 0x1}, 0x1, {[0x1000007, 0x3ffffc, 0x1003, 0x40000003, 0x7, 0xfffffff2, 0x3, 0x8]}}, 0x5c)

6m50.523942598s ago: executing program 6 (id=3934):
r0 = syz_open_dev$radio(&(0x7f0000000040), 0x3, 0x2)
ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000300)={0x8001, "05461ce4e62103b22e9ceb6eb4ef684d64697d80f872559d4965e365ce0b576e", 0x100, 0x1, 0x3, 0x4, 0x4})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000001fc0)={0x1, @raw_data="eca3e1d5dd0d7afbb716c71f2f1ef5356b5194b6cad4e27eecdd6da3f1a6815fde31d960b01214982b3d59d7a587c909940cf838d2712daca49d13f4ee7f41e6ef4d89bc9d9da3e94287e23a096627287f097f3491717b93979fb996acaf493f12d6f3a4e79d2500208250d65baf01699efdca77ef072335ac584f6182c318981901cc4945405069805d6c31008a18e5e113d4e44fb7f14efa57ad13ff4ba80fa427b4e75735fe667ba61bb24c887fbaf3ae48703f4e4389cfe71fe9750d3bdbcca9ac203d275a58"})
r3 = socket(0x10, 0x803, 0x0)
sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000", 0x11, 0x0, 0x0, 0x0)
recvmmsg(r3, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x0, 0x989680})
ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000480)={r1, r3, 0x8, 0xea, &(0x7f0000000380)="ac92f9fb2f306c6decdc855ce44f2e174db088abbd94187d7d183e34c8ffdbe6cb01d41adb8d0d1e8c48d46871d2a279a9dfcf782fc4cb74e7712eefe4f28f0781a2e626187194392b09345a8dc131426f51a6e3118fc1b2401cacea0a294f16176d82dd06c2f5d7503959008e31ccf30f79cac55d5ec45cbdeb3dfe812ec67f8df5d33c1fddd79577b29238df233505f21a4c53a3c3219de6efc3fa0b8982a1596347ccbab12c58ed6a7d84bebcde1a5e1fa28857551963ca49870a3a77ab1d5637e2d2bdc0b68cae1382ed69cb4ba4a2423bc0259c9fa6d26ecf9e52727c61444f91eedfc70d77bb1a", 0x5, 0x6, 0x1ff, 0x5, 0x9, 0x5, 0x2, 'syz0\x00'})
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a})
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'geneve0\x00'})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000780)=r5, 0x4)
sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000200)="fa82", 0x3802}], 0x1}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0x4a011, 0x2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}]}}}]}, 0x48}}, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0)

6m33.696703331s ago: executing program 41 (id=3934):
r0 = syz_open_dev$radio(&(0x7f0000000040), 0x3, 0x2)
ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000300)={0x8001, "05461ce4e62103b22e9ceb6eb4ef684d64697d80f872559d4965e365ce0b576e", 0x100, 0x1, 0x3, 0x4, 0x4})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000001fc0)={0x1, @raw_data="eca3e1d5dd0d7afbb716c71f2f1ef5356b5194b6cad4e27eecdd6da3f1a6815fde31d960b01214982b3d59d7a587c909940cf838d2712daca49d13f4ee7f41e6ef4d89bc9d9da3e94287e23a096627287f097f3491717b93979fb996acaf493f12d6f3a4e79d2500208250d65baf01699efdca77ef072335ac584f6182c318981901cc4945405069805d6c31008a18e5e113d4e44fb7f14efa57ad13ff4ba80fa427b4e75735fe667ba61bb24c887fbaf3ae48703f4e4389cfe71fe9750d3bdbcca9ac203d275a58"})
r3 = socket(0x10, 0x803, 0x0)
sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000", 0x11, 0x0, 0x0, 0x0)
recvmmsg(r3, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x0, 0x989680})
ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000480)={r1, r3, 0x8, 0xea, &(0x7f0000000380)="ac92f9fb2f306c6decdc855ce44f2e174db088abbd94187d7d183e34c8ffdbe6cb01d41adb8d0d1e8c48d46871d2a279a9dfcf782fc4cb74e7712eefe4f28f0781a2e626187194392b09345a8dc131426f51a6e3118fc1b2401cacea0a294f16176d82dd06c2f5d7503959008e31ccf30f79cac55d5ec45cbdeb3dfe812ec67f8df5d33c1fddd79577b29238df233505f21a4c53a3c3219de6efc3fa0b8982a1596347ccbab12c58ed6a7d84bebcde1a5e1fa28857551963ca49870a3a77ab1d5637e2d2bdc0b68cae1382ed69cb4ba4a2423bc0259c9fa6d26ecf9e52727c61444f91eedfc70d77bb1a", 0x5, 0x6, 0x1ff, 0x5, 0x9, 0x5, 0x2, 'syz0\x00'})
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a})
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'geneve0\x00'})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000780)=r5, 0x4)
sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000200)="fa82", 0x3802}], 0x1}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0x4a011, 0x2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}]}}}]}, 0x48}}, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0)

6m33.600193242s ago: executing program 42 (id=3933):
r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x400600, 0x0)
ioctl$TIOCSETD(r0, 0x5423, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000)
openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000c, 0x30, r2, 0x4ee7000)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000400)={'veth1_to_hsr\x00', {0x2, 0x4e00, @broadcast}})
ioctl$sock_inet_SIOCSIFADDR(r3, 0x891c, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
timer_create(0x5, 0x0, 0x0)
getitimer(0x0, 0x0)
r4 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000240)={{0xa, 0x0, 0x0, @private1, 0xff}, {0xa, 0x4e20, 0x24a0, @mcast1, 0x1}, 0x1, {[0x1000007, 0x3ffffc, 0x1003, 0x40000003, 0x7, 0xfffffff2, 0x3, 0x8]}}, 0x5c)

4m29.718063647s ago: executing program 8 (id=3088):
r0 = socket$nl_route(0x10, 0x3, 0x0)
clock_adjtime(0x0, &(0x7f0000000000)={0x7fff, 0x0, 0x0, 0x0, 0x0, 0x1869e, 0x0, 0x7fffffffffffffff, 0x10000000, 0x0, 0x0, 0x29e9})
sendmsg$nl_route_sched(r0, 0x0, 0x4000814)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10)
r5 = socket$inet6(0xa, 0x1, 0x0)
sendto$inet6(r5, 0x0, 0x0, 0xfffffefffbfbb7fe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x6}, 0x1c)
getsockopt$inet6_buf(r5, 0x29, 0x6, 0x0, 0x0)
r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$RTC_UIE_ON(r6, 0x7003)

3m56.736332388s ago: executing program 4 (id=4241):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mkdir(&(0x7f0000000400)='./file0\x00', 0x101)
pipe2$9p(&(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDDELIO(r3, 0x4b34, 0x3bf)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00'}, 0x10)
timerfd_create(0x6, 0x1000)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r8, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c000000100001040700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e00010069703665727370616e0000001800028006000200090000000400120008000400"], 0x4c}}, 0x4000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, [@call={0x85, 0x0, 0x0, 0x16}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])

3m49.495110914s ago: executing program 4 (id=4257):
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x400600, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00')
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@fallback=r1, 0x24, 0x0, 0x0, &(0x7f0000000440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000c, 0x30, r0, 0x4ee7000)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000400)={'veth1_to_hsr\x00', {0x2, 0x4e00, @broadcast}})
r3 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0)
fcntl$setsig(r3, 0xa, 0x21)
fcntl$setlease(r3, 0x400, 0x1)
open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)

3m47.979120441s ago: executing program 4 (id=4261):
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8000)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r1 = fanotify_init(0x8, 0x80000)
fanotify_mark(r1, 0x105, 0x4800003a, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000100)='./file1\x00', 0x13b)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r2 = open(&(0x7f0000000580)='./file1\x00', 0x80342, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x8, 0x3, 0x5, 0x8, 0x3, 0x1, {0x1, 0x17f, 0x20ff, 0x5, 0x89, 0xd615, 0xb, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0)
sendfile(r2, r2, &(0x7f0000000080), 0x7f03)

3m46.869479209s ago: executing program 4 (id=4262):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@host})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x4, 0x6, 0x83, 0x1})
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@host})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @my=0x1, 0x0, 0x0, 0x9})

3m44.765934642s ago: executing program 4 (id=4269):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
open$dir(0x0, 0x10001, 0x8)
ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$nl_route_sched(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x18)
r5 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab491221fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff)
r6 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f00000002c0)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd780bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138", 0x18}, 0x48, 0xfffffffffffffffe)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000000)={0x2, 0x9024, 0x5, 0x9}, 0x10)
keyctl$KEYCTL_MOVE(0x4, r6, r5, r5, 0x0)

3m43.216183694s ago: executing program 8 (id=3088):
r0 = socket$nl_route(0x10, 0x3, 0x0)
clock_adjtime(0x0, &(0x7f0000000000)={0x7fff, 0x0, 0x0, 0x0, 0x0, 0x1869e, 0x0, 0x7fffffffffffffff, 0x10000000, 0x0, 0x0, 0x29e9})
sendmsg$nl_route_sched(r0, 0x0, 0x4000814)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10)
r5 = socket$inet6(0xa, 0x1, 0x0)
sendto$inet6(r5, 0x0, 0x0, 0xfffffefffbfbb7fe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x6}, 0x1c)
getsockopt$inet6_buf(r5, 0x29, 0x6, 0x0, 0x0)
r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$RTC_UIE_ON(r6, 0x7003)

3m40.623509882s ago: executing program 4 (id=4275):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc})
socket$tipc(0x1e, 0x2, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x267a4e37}, 0xc)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @loopback}, 0x4}}, 0x2e)
syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @empty, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "30b00afe4e70"}}}}}}}, 0x0)

3m25.83240727s ago: executing program 43 (id=4275):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc})
socket$tipc(0x1e, 0x2, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x267a4e37}, 0xc)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @loopback}, 0x4}}, 0x2e)
syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @empty, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "30b00afe4e70"}}}}}}}, 0x0)

1m57.065965094s ago: executing program 8 (id=3088):
r0 = socket$nl_route(0x10, 0x3, 0x0)
clock_adjtime(0x0, &(0x7f0000000000)={0x7fff, 0x0, 0x0, 0x0, 0x0, 0x1869e, 0x0, 0x7fffffffffffffff, 0x10000000, 0x0, 0x0, 0x29e9})
sendmsg$nl_route_sched(r0, 0x0, 0x4000814)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10)
r5 = socket$inet6(0xa, 0x1, 0x0)
sendto$inet6(r5, 0x0, 0x0, 0xfffffefffbfbb7fe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x6}, 0x1c)
getsockopt$inet6_buf(r5, 0x29, 0x6, 0x0, 0x0)
r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$RTC_UIE_ON(r6, 0x7003)

1m25.330416403s ago: executing program 8 (id=3088):
r0 = socket$nl_route(0x10, 0x3, 0x0)
clock_adjtime(0x0, &(0x7f0000000000)={0x7fff, 0x0, 0x0, 0x0, 0x0, 0x1869e, 0x0, 0x7fffffffffffffff, 0x10000000, 0x0, 0x0, 0x29e9})
sendmsg$nl_route_sched(r0, 0x0, 0x4000814)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10)
r5 = socket$inet6(0xa, 0x1, 0x0)
sendto$inet6(r5, 0x0, 0x0, 0xfffffefffbfbb7fe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x6}, 0x1c)
getsockopt$inet6_buf(r5, 0x29, 0x6, 0x0, 0x0)
r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$RTC_UIE_ON(r6, 0x7003)

36.852435741s ago: executing program 8 (id=3088):
r0 = socket$nl_route(0x10, 0x3, 0x0)
clock_adjtime(0x0, &(0x7f0000000000)={0x7fff, 0x0, 0x0, 0x0, 0x0, 0x1869e, 0x0, 0x7fffffffffffffff, 0x10000000, 0x0, 0x0, 0x29e9})
sendmsg$nl_route_sched(r0, 0x0, 0x4000814)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10)
r5 = socket$inet6(0xa, 0x1, 0x0)
sendto$inet6(r5, 0x0, 0x0, 0xfffffefffbfbb7fe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x6}, 0x1c)
getsockopt$inet6_buf(r5, 0x29, 0x6, 0x0, 0x0)
r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$RTC_UIE_ON(r6, 0x7003)

18.106928696s ago: executing program 1 (id=4773):
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2)
r4 = epoll_create(0x6)
r5 = dup3(r3, r4, 0x0)
read$FUSE(r5, &(0x7f0000000040)={0x2020}, 0x2020)

13.14834735s ago: executing program 0 (id=4782):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_setup(0x10d, 0x0, &(0x7f0000000240)=<r3=>0x0, &(0x7f0000000280))
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ptype\x00')
read$msr(r4, &(0x7f0000000040)=""/59, 0xffb5)
r5 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r5, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000380)={'wlan0\x00'})

9.758632764s ago: executing program 7 (id=4788):
unshare(0x2a020400)
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
fstat(r0, &(0x7f0000003200))

9.645818162s ago: executing program 1 (id=4789):
ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x24)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_type(r3, &(0x7f0000000080), 0x2, 0x0)
rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00')
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

9.552777309s ago: executing program 3 (id=4790):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r6 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
fsmount(r6, 0x0, 0x88)
connect$packet(r5, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x8, 0x6, @random="4d74e99b4b5f"}, 0xd)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x43}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)

9.31572161s ago: executing program 7 (id=4791):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0xf7, 0x7fff0000}]})
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4)
r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"})
ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f00000001c0)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x3, 0x1, &(0x7f0000002900)="9e", 0x1, 0x205a, 0x1ff, 0x0, 0x96c, 0x6, 0x0})
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet(0x2, 0x2, 0x0)
close(0x3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = gettid()
sendmsg$unix(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='Q', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r7, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r6, @ANYRES32=r5, @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="1c00000000000000010000040200", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r5, @ANYBLOB="0000000018"], 0xa0}, 0x4004881)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a11800150006001400000000120800030043000040a8002b000a00014006046109d67f6f94007134cf6ee0a000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88a2ddddbbb219c6c09136dd481c4a918d1bcf0f938baa5d060a517898516277ce06bbace80177ccbec4c2ee5a7cef4260027836b0d17a58af5d6d93424841f468430dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f785025ccc89e00360db70100000040fad95667e006dcabced7ad654fac9609f4fb", 0xd8}], 0x1}, 0x4004)

7.8973179s ago: executing program 3 (id=4792):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

7.813049812s ago: executing program 7 (id=4793):
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x11, 0x17e, &(0x7f0000000200)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x20)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
sendto$inet_nvme_pdu(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000080), 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH")
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000001400)=ANY=[], 0x835, 0x0)
close(0xffffffffffffffff)
syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f00000002c0)='./file0\x00', 0x2000090, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1, 0x1cd, &(0x7f0000000000)="$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")

7.603405123s ago: executing program 3 (id=4794):
syz_mount_image$hfsplus(&(0x7f0000007340), &(0x7f0000000000)='./file2\x00', 0x1600008, &(0x7f0000000340)={[{@umask={'umask', 0x3d, 0x3}}, {@nodecompose}, {@part={'part', 0x3d, 0x7}}, {@nodecompose}, {@nobarrier}, {@nls={'nls', 0x3d, 'iso8859-1'}}, {@type={'type', 0x3d, "25f205c1"}}, {@session={'session', 0x3d, 0x3}}, {@barrier}]}, 0x3, 0x643, &(0x7f0000000c00)="$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")

7.493034008s ago: executing program 1 (id=4795):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48)
open(&(0x7f0000000100)='./file0\x00', 0x1612c2, 0x109)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/timer_list\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmmsg(r6, &(0x7f0000000180), 0x400008a, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES64=r0, @ANYBLOB="0000000000000000b70400eb3236f6dfe5eb78b3370300ad86e26300080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)

7.451806458s ago: executing program 2 (id=4796):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000180)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x74, r1, 0x5, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x41, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @val={0x3, 0x1, 0xb3}, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0xd, 0x38, 0x7}}, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x0, 0x9, 0x16, 0xa046}}}}, @NL80211_ATTR_BEACON_TAIL={0x4}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x74}}, 0x0)

7.409262997s ago: executing program 7 (id=4797):
socket$inet_tcp(0x2, 0x1, 0x0)
ioprio_set$pid(0x0, 0xffffffffffffffff, 0x8008)
r0 = socket(0x1e, 0x80000, 0xa)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket(0x10, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10002, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x1f0, 0x0)
fcntl$setownex(r0, 0xf, 0x0)
mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0)
r3 = semget$private(0x0, 0x6, 0x0)
semctl$GETZCNT(r3, 0x4, 0xf, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, 0x0, &(0x7f0000000080))
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x18000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0)

7.240068588s ago: executing program 3 (id=4798):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r2 = getpid()
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000440)={0x10901, 0x0, 0x3d}, 0x18)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
umount2(&(0x7f0000000040)='.\x00', 0x2)
close_range(r1, 0xffffffffffffffff, 0x0)

6.636249896s ago: executing program 2 (id=4799):
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"})

6.530902593s ago: executing program 3 (id=4800):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x4003)
r3 = getpgrp(0xffffffffffffffff)
prctl$PR_SET_PTRACER(0x59616d61, r3)
mq_open(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x80000040001, 0x5})
keyctl$dh_compute(0x17, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000001c0)={0x0})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18)

6.494648752s ago: executing program 7 (id=4801):
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2)
r4 = epoll_create(0x6)
r5 = dup3(r3, r4, 0x0)
read$FUSE(r5, &(0x7f0000000040)={0x2020}, 0x2020)

5.327996448s ago: executing program 2 (id=4802):
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x400600, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0)
fcntl$setsig(r1, 0xa, 0x21)
fcntl$setlease(r1, 0x400, 0x1)
open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

5.265454652s ago: executing program 0 (id=4803):
socket$nl_route(0x10, 0x3, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{0x0}], 0x1})
io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0)

4.409103415s ago: executing program 0 (id=4804):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0x0, 0x3, 0x20}, 0x20)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000580)={'syz1\x00', {0x6fc9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x3, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0xbeb, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x4, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x8, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0xf, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x4], [0x2, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0xc32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x4000000, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x2, 0x1, 0x0, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x7, 0xfffffffc, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x5, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x8, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x0, 0x0, 0x3ff, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x10, 0x2, 0x763, 0xb, 0x402, 0x800, 0x4, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0xffe, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x3d, 0x7, 0x2, 0x4, 0x4, 0x10, 0x9, 0x0, 0x7fff, 0xffffffff, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200100, 0x0)
close(r5)
socket(0x400000000010, 0x3, 0x0)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x18, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000800074000000000180006801400040020010000000000000000000000000001"], 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000000180006801400040020010000000000000000000000000001"], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000894)
ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="440000004ec6"})
ioctl$UI_DEV_CREATE(r1, 0x5501)

3.866622789s ago: executing program 0 (id=4805):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0xf7, 0x7fff0000}]})
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4)
r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"})
ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f00000001c0)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x3, 0x1, &(0x7f0000002900)="9e", 0x1, 0x205a, 0x1ff, 0x0, 0x96c, 0x6, 0x0})
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet(0x2, 0x2, 0x0)
close(0x3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = gettid()
sendmsg$unix(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='Q', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r7, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r6, @ANYRES32=r5, @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="1c00000000000000010000040200", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r5, @ANYBLOB="0000000018"], 0xa0}, 0x4004881)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a11800150006001400000000120800030043000040a8002b000a00014006046109d67f6f94007134cf6ee0a000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88a2ddddbbb219c6c09136dd481c4a918d1bcf0f938baa5d060a517898516277ce06bbace80177ccbec4c2ee5a7cef4260027836b0d17a58af5d6d93424841f468430dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f785025ccc89e00360db70100000040fad95667e006dcabced7ad654fac9609f4fb", 0xd8}], 0x1}, 0x4004)

3.110078989s ago: executing program 0 (id=4806):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB="400180"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

2.872375127s ago: executing program 2 (id=4807):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x2710})
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
close(0xffffffffffffffff)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x33, 0x0, 0x0)
bind$inet6(r2, 0x0, 0x0)
bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0)
r3 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$binfmt_register(r3, &(0x7f0000000080)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x1ff, 0x3a, 'M', 0x3a, '@', 0x3a, './file0', 0x3a, [0x43, 0x46]}, 0x2b)

1.831814596s ago: executing program 1 (id=4808):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
open$dir(0x0, 0x10001, 0x8)
ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$nl_route_sched(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x18)
r5 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab491221fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff)
r6 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f00000002c0)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd780bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138", 0x18}, 0x48, 0xfffffffffffffffe)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000000)={0x2, 0x9024, 0x5, 0x9}, 0x10)
keyctl$KEYCTL_MOVE(0x4, r6, r5, r5, 0x0)

801.484335ms ago: executing program 7 (id=4809):
ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(0x0, 0x24)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_type(r3, &(0x7f0000000080), 0x2, 0x0)
rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00')
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

800.525082ms ago: executing program 2 (id=4810):
r0 = io_uring_setup(0x4166, &(0x7f0000000140)={0x0, 0x73c7, 0x40, 0x3, 0x4000000})
io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0x14, 0x0, 0x0)

736.021516ms ago: executing program 3 (id=4811):
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time_for_children\x00')
r0 = syz_open_dev$vcsu(0x0, 0x4, 0x80000)
syz_usb_connect$uac1(0x2, 0x0, 0x0, 0x0)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001280)='ns/time\x00')
syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, 0x0)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f00000049c0)='./file0\x00', &(0x7f0000004a00), 0x1000)
sendmmsg$unix(r0, &(0x7f000000aa00), 0x0, 0x20000001)

725.837708ms ago: executing program 1 (id=4812):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x0, 0x7}, 0x8)

125.315293ms ago: executing program 2 (id=4813):
socket$inet_tcp(0x2, 0x1, 0x0)
ioprio_set$pid(0x0, 0xffffffffffffffff, 0x8008)
r0 = socket(0x1e, 0x80000, 0xa)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10002, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x1f0, 0x0)
fcntl$setownex(r0, 0xf, 0x0)
mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0)
r3 = semget$private(0x0, 0x6, 0x0)
semctl$GETZCNT(r3, 0x4, 0xf, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, 0x0, &(0x7f0000000080))
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x18000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0)

7.825427ms ago: executing program 1 (id=4814):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f00000003c0)={[{@inlinecrypt}, {@usrjquota}, {@errors_remount}, {@dioread_lock}, {@norecovery}, {@mblk_io_submit}, {@dax_always}, {@dax_never}, {@nombcache}, {}], [{@audit}]}, 0x43, 0x7bb, &(0x7f0000003000)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r3, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
poll(0x0, 0x0, 0x5)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
keyctl$search(0xa, 0x0, 0x0, &(0x7f0000000100)={'syz', 0x0}, 0x0)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
lseek(r5, 0x851, 0x0)
ioctl$USBDEVFS_REAPURBNDELAY(r5, 0x4008550d, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', <r6=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xfffffffffffffe44}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0)

0s ago: executing program 0 (id=4815):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_setup(0x10d, 0x0, &(0x7f0000000240)=<r3=>0x0, &(0x7f0000000280))
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ptype\x00')
read$msr(r4, &(0x7f0000000040)=""/59, 0xffb5)
r5 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r5, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000380)={'wlan0\x00'})

kernel console output (not intermixed with test programs):

50df8e969 code=0x0
[ 1345.354145][T18568] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3858'.
[ 1345.594718][T18572] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0
[ 1345.709912][T18424] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1345.989322][T18566] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1346.153063][T18424] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1346.160363][T18424] bridge_slave_0: entered allmulticast mode
[ 1346.168481][T18424] bridge_slave_0: entered promiscuous mode
[ 1346.177650][T18424] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1346.184918][T18424] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1346.194086][T18424] bridge_slave_1: entered allmulticast mode
[ 1346.824756][T18579] random: crng reseeded on system resumption
[ 1347.159871][T18424] bridge_slave_1: entered promiscuous mode
[ 1348.371671][T18424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1348.683498][T18424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1352.674173][T18424] team0: Port device team_slave_0 added
[ 1352.695758][T18604] loop7: detected capacity change from 0 to 512
[ 1352.702824][T18424] team0: Port device team_slave_1 added
[ 1353.055006][T18604] EXT4-fs (loop7): 1 orphan inode deleted
[ 1353.069713][T17742] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14
[ 1353.814997][T17742] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 1
[ 1353.828841][T18604] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1353.842315][T18604] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1353.885382][T18424] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1353.910783][T18424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1354.173258][T18424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1354.490634][T18424] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1355.195018][T18424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1355.421641][T16702] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1355.508398][T18424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1356.141150][T18635] overlayfs: unescaped trailing colons in lowerdir mount option.
[ 1356.224239][T18424] hsr_slave_0: entered promiscuous mode
[ 1356.266269][T18424] hsr_slave_1: entered promiscuous mode
[ 1356.283820][T18424] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1356.299701][T18424] Cannot create hsr debugfs directory
[ 1356.441358][ T1203] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[ 1356.456823][   T30] audit: type=1326 audit(2000040385.315:1665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18637 comm="syz.6.3879" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe20638e969 code=0x0
[ 1356.620823][ T1203] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1356.645640][ T1203] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1356.677935][ T1203] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1356.694367][ T1203] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1356.744661][T18635] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1356.771164][ T1203] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[ 1357.032002][T18635] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(11)
[ 1357.038653][T18635] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1357.096773][T18635] vhci_hcd vhci_hcd.0: Device attached
[ 1357.120930][T18645] vhci_hcd: connection closed
[ 1357.177707][T17742] vhci_hcd: stop threads
[ 1357.186891][T17742] vhci_hcd: release socket
[ 1357.191335][T17742] vhci_hcd: disconnect device
[ 1357.291670][T18649] loop7: detected capacity change from 0 to 512
[ 1357.301471][T18649] EXT4-fs (loop7): Test dummy encryption mode enabled
[ 1357.316197][ T5888] usb 6-1: USB disconnect, device number 7
[ 1357.322433][T18649] EXT4-fs error (device loop7): __ext4_iget:5025: inode #11: block 1: comm syz.7.3882: invalid block
[ 1357.342798][T18649] EXT4-fs error (device loop7): ext4_orphan_get:1394: comm syz.7.3882: couldn't read orphan inode 11 (err -117)
[ 1357.360051][T18649] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1357.567917][T18424] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1357.595767][T18424] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1359.273416][T18651] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters
[ 1360.859136][T18424] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1361.229906][T18424] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1361.266170][T16702] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1364.399438][T18424] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1364.465572][T18680] loop6: detected capacity change from 0 to 512
[ 1364.518825][T18424] 8021q: adding VLAN 0 to HW filter on device team0
[ 1365.637453][T14792] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1365.644652][T14792] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1365.766485][T12345] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1365.773677][T12345] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1365.823217][T18684] QAT: Invalid ioctl 1073935638
[ 1369.825816][ T5888] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[ 1369.998439][T18424] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1370.001834][ T5888] usb 5-1: config 0 has an invalid interface number: 175 but max is 0
[ 1370.117790][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[ 1370.263688][ T5888] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1370.291433][ T5888] usb 5-1: config 0 has no interface number 0
[ 1370.297972][ T5888] usb 5-1: config 0 interface 175 altsetting 0 has an endpoint descriptor with address 0xBC, changing to 0x8C
[ 1370.657497][   T51] Bluetooth: hci0: command 0x0405 tx timeout
[ 1371.116283][ T5888] usb 5-1: config 0 interface 175 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7
[ 1371.190221][ T5888] usb 5-1: config 0 interface 175 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0
[ 1371.217538][ T5888] usb 5-1: config 0 interface 175 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16
[ 1371.252925][ T5888] usb 5-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b
[ 1371.264727][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1371.277708][ T5888] usb 5-1: Product: syz
[ 1371.286567][ T5888] usb 5-1: Manufacturer: syz
[ 1371.297593][ T5888] usb 5-1: SerialNumber: syz
[ 1371.307770][ T5888] usb 5-1: config 0 descriptor??
[ 1371.319199][ T5888] symbolserial 5-1:0.175: symbol converter detected
[ 1371.544642][ T5888] usb 5-1: symbol converter now attached to ttyUSB0
[ 1377.387123][T17108] usb 5-1: USB disconnect, device number 9
[ 1377.685648][T17108] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0
[ 1378.059935][T17108] symbolserial 5-1:0.175: device disconnected
[ 1383.231513][   T30] audit: type=1326 audit(2000040414.047:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18774 comm="syz.6.3909" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe20638e969 code=0x0
[ 1383.889449][ T1203] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[ 1384.674138][T17593] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1384.685278][T17593] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1384.693336][T17593] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1384.708143][T17593] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1384.716606][T17593] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1384.806001][ T1203] usb 5-1: Using ep0 maxpacket: 32
[ 1384.845210][ T1203] usb 5-1: config 0 has an invalid interface number: 250 but max is 1
[ 1384.888107][ T1203] usb 5-1: config 0 has no interface number 1
[ 1384.894264][ T1203] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1385.006111][ T1203] usb 5-1: New USB device found, idVendor=0408, idProduct=3090, bcdDevice=a6.3f
[ 1385.076767][ T1203] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1385.317839][ T1203] usb 5-1: Product: syz
[ 1385.322064][ T1203] usb 5-1: Manufacturer: syz
[ 1385.356813][ T1203] usb 5-1: SerialNumber: syz
[ 1385.378648][ T1203] usb 5-1: config 0 descriptor??
[ 1385.834295][ T1203] usb 5-1: Found UVC 0.00 device syz (0408:3090)
[ 1385.866171][ T1203] usb 5-1: No valid video chain found.
[ 1385.949570][ T1203] usb 5-1: USB disconnect, device number 10
[ 1386.678092][T17593] Bluetooth: hci0: command tx timeout
[ 1388.409869][T11813] bridge_slave_1: left allmulticast mode
[ 1388.479536][T11813] bridge_slave_1: left promiscuous mode
[ 1388.546069][T11813] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1389.209615][T17593] Bluetooth: hci0: command tx timeout
[ 1389.709772][T11813] bridge_slave_0: left allmulticast mode
[ 1389.787667][T11813] bridge_slave_0: left promiscuous mode
[ 1389.892587][T11813] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1391.378559][   T51] Bluetooth: hci0: command tx timeout
[ 1393.313035][   T51] Bluetooth: hci0: command tx timeout
[ 1394.728791][   T30] audit: type=1326 audit(2000040426.375:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18839 comm="syz.4.3928" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f08fa78e969 code=0x0
[ 1395.099189][T11813] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1396.081727][T11813] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1396.113116][T11813] bond0 (unregistering): Released all slaves
[ 1397.019511][T18787] chnl_net:caif_netlink_parms(): no params data found
[ 1397.954696][T17593] Bluetooth: hci0: command 0x0405 tx timeout
[ 1398.456492][T11813] hsr_slave_0: left promiscuous mode
[ 1398.506180][T11813] hsr_slave_1: left promiscuous mode
[ 1398.597443][T11813] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1398.666348][T18863] overlayfs: unescaped trailing colons in lowerdir mount option.
[ 1398.866452][T11813] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1406.397305][   T30] audit: type=1326 audit(2000040438.896:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18891 comm="syz.2.3943" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f43cc98e969 code=0x0
[ 1406.557956][T11813] team0 (unregistering): Port device team_slave_1 removed
[ 1406.635158][T11813] team0 (unregistering): Port device team_slave_0 removed
[ 1408.057499][T18908] random: crng reseeded on system resumption
[ 1416.827319][   T30] audit: type=1326 audit(2000040450.086:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18937 comm="syz.4.3959" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f08fa78e969 code=0x0
[ 1417.998659][ T5844] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 1418.008183][T13761] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1418.017971][T13761] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 1418.028185][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1418.036039][T13761] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 1418.044856][T13761] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 1418.052596][T18947] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[ 1418.057733][T13761] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 1418.166329][T13761] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1418.177907][T13761] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1418.186878][T13761] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1418.518128][T18962] random: crng reseeded on system resumption
[ 1419.724887][T18969] usb usb8: usbfs: process 18969 (syz.2.3964) did not claim interface 0 before use
[ 1420.025844][T13761] Bluetooth: hci7: command tx timeout
[ 1420.091290][T13761] Bluetooth: hci3: command tx timeout
[ 1420.646832][T18787] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1420.673902][T18787] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1420.729668][T18787] bridge_slave_0: entered allmulticast mode
[ 1420.782612][T18787] bridge_slave_0: entered promiscuous mode
[ 1420.819680][T18787] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1420.826872][T18787] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1420.879790][T18787] bridge_slave_1: entered allmulticast mode
[ 1420.941140][T18787] bridge_slave_1: entered promiscuous mode
[ 1421.480310][T18787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1421.543931][T18787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1421.988281][T13761] Bluetooth: hci7: command tx timeout
[ 1422.422617][T13761] Bluetooth: hci3: command tx timeout
[ 1422.763438][T18787] team0: Port device team_slave_0 added
[ 1422.889864][T18787] team0: Port device team_slave_1 added
[ 1423.893893][T13761] Bluetooth: hci7: command tx timeout
[ 1424.338601][T13761] Bluetooth: hci3: command tx timeout
[ 1425.374370][T19020] usb usb8: usbfs: process 19020 (syz.4.3977) did not claim interface 0 before use
[ 1425.908136][T17593] Bluetooth: hci7: command tx timeout
[ 1426.274383][T17593] Bluetooth: hci3: command tx timeout
[ 1426.606336][T18787] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1426.613324][T18787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1426.639938][T18787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1426.838372][T18787] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1426.865502][T18787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1426.941626][T18787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1427.321520][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[ 1428.041193][T18787] hsr_slave_0: entered promiscuous mode
[ 1428.051396][T18787] hsr_slave_1: entered promiscuous mode
[ 1428.104422][T18787] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1428.128603][T18787] Cannot create hsr debugfs directory
[ 1428.190748][T18945] chnl_net:caif_netlink_parms(): no params data found
[ 1428.306162][T14792] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1428.350838][T19049] loop4: detected capacity change from 0 to 512
[ 1428.423457][T19049] EXT4-fs (loop4): Test dummy encryption mode enabled
[ 1428.547278][T19049] EXT4-fs error (device loop4): __ext4_iget:5025: inode #11: block 1: comm syz.4.3986: invalid block
[ 1428.642867][T14792] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1428.671362][T19049] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.3986: couldn't read orphan inode 11 (err -117)
[ 1428.687724][T19049] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1428.923928][T14792] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1429.358610][T14792] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1429.843399][T18945] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1429.877095][T18945] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1429.884391][T18945] bridge_slave_0: entered allmulticast mode
[ 1429.926219][T18945] bridge_slave_0: entered promiscuous mode
[ 1429.972609][T19067] wg2: entered promiscuous mode
[ 1429.980455][T19067] wg2: entered allmulticast mode
[ 1430.005764][T18945] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1430.032991][T18945] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1430.052487][T18945] bridge_slave_1: entered allmulticast mode
[ 1430.075130][T18945] bridge_slave_1: entered promiscuous mode
[ 1430.236047][T18945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1430.326666][T18944] chnl_net:caif_netlink_parms(): no params data found
[ 1430.393518][T18945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1430.743253][T18945] team0: Port device team_slave_0 added
[ 1430.754550][T19052] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters
[ 1430.951171][T18945] team0: Port device team_slave_1 added
[ 1431.143087][T14792] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1431.229732][T18945] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1431.251354][T18945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1431.317059][T18945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1431.369739][T18945] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1431.376760][T18945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1431.472818][T18945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1431.495556][T14792] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1431.548667][T18944] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1431.566822][T18944] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1431.579696][T18944] bridge_slave_0: entered allmulticast mode
[ 1431.591285][T18944] bridge_slave_0: entered promiscuous mode
[ 1431.627108][T14792] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1431.655599][T18944] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1431.672318][T18944] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1431.682426][T18944] bridge_slave_1: entered allmulticast mode
[ 1431.702462][T18944] bridge_slave_1: entered promiscuous mode
[ 1431.859443][T14792] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1432.142484][T18945] hsr_slave_0: entered promiscuous mode
[ 1432.149409][T18945] hsr_slave_1: entered promiscuous mode
[ 1432.181686][T18945] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1432.199310][T18945] Cannot create hsr debugfs directory
[ 1432.219320][T18944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1432.250687][T18944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1432.483013][T18944] team0: Port device team_slave_0 added
[ 1432.520646][T18944] team0: Port device team_slave_1 added
[ 1432.549948][T18787] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1433.011667][T18787] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1433.046707][T18787] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1433.744352][T14901] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1433.972945][T18944] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1434.002132][T18944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1434.031935][T18944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1434.043854][T18787] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1434.140197][T18944] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1434.157272][T18944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1434.256622][T18944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1434.445853][T14792] bridge_slave_1: left allmulticast mode
[ 1434.451982][T14792] bridge_slave_1: left promiscuous mode
[ 1434.458268][T14792] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1434.471702][T14792] bridge_slave_0: left allmulticast mode
[ 1434.478877][T14792] bridge_slave_0: left promiscuous mode
[ 1434.484900][T14792] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1434.516567][T14792] bridge_slave_1: left allmulticast mode
[ 1434.532032][T14792] bridge_slave_1: left promiscuous mode
[ 1434.544979][T14792] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1434.568289][T14792] bridge_slave_0: left promiscuous mode
[ 1434.580876][T14792] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1436.303672][T14792] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1436.315464][T14792] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1436.326143][T14792] bond0 (unregistering): Released all slaves
[ 1436.449957][T14792] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1436.472564][T14792] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1436.496961][T14792] bond0 (unregistering): Released all slaves
[ 1436.660116][T14792] bond1 (unregistering): Released all slaves
[ 1436.805698][T14792] bond2 (unregistering): Released all slaves
[ 1436.970245][T14792] bond3 (unregistering): Released all slaves
[ 1437.459390][T14792] bond4 (unregistering): Released all slaves
[ 1437.591131][T14792] bond5 (unregistering): Released all slaves
[ 1439.848238][T18944] hsr_slave_0: entered promiscuous mode
[ 1439.872723][T18944] hsr_slave_1: entered promiscuous mode
[ 1439.879341][T18944] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1439.887349][T18944] Cannot create hsr debugfs directory
[ 1440.076613][T14792] tipc: Disabling bearer <udp:syz1>
[ 1440.082071][T14792] tipc: Left network mode
[ 1440.698233][T19138] netlink: 'syz.7.4014': attribute type 1 has an invalid length.
[ 1440.706014][T19138] netlink: 152 bytes leftover after parsing attributes in process `syz.7.4014'.
[ 1440.735357][T19138] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[ 1441.579304][T19144] loop2: detected capacity change from 0 to 1024
[ 1441.595266][T19144] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[ 1441.653054][T19144] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[ 1442.129292][T19144] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1443.290256][T16649] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1443.339704][   T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1443.349656][   T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1443.357979][   T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1443.371408][   T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1443.382921][   T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1443.879887][   T51] Bluetooth: hci3: command 0x0405 tx timeout
[ 1444.818317][T14792] hsr_slave_0: left promiscuous mode
[ 1444.855817][T14792] hsr_slave_1: left promiscuous mode
[ 1444.875145][T14792] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1444.882579][T14792] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1444.929040][T14792] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1444.945107][T14792] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1444.988455][T14792] hsr_slave_0: left promiscuous mode
[ 1445.000454][T14792] hsr_slave_1: left promiscuous mode
[ 1445.100169][T14792] veth1_macvtap: left promiscuous mode
[ 1445.105755][T14792] veth0_macvtap: left promiscuous mode
[ 1445.126074][T14792] veth1_vlan: left promiscuous mode
[ 1445.131460][T14792] veth0_vlan: left promiscuous mode
[ 1445.161685][T14792] veth0_macvtap: left promiscuous mode
[ 1445.187544][T14792] veth1_vlan: left promiscuous mode
[ 1445.201930][T14792] veth0_vlan: left promiscuous mode
[ 1445.367822][   T51] Bluetooth: hci0: command tx timeout
[ 1447.306324][   T51] Bluetooth: hci0: command tx timeout
[ 1449.236736][   T51] Bluetooth: hci0: command tx timeout
[ 1450.482969][T19188] loop7: detected capacity change from 0 to 1024
[ 1450.523037][T19188] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[ 1450.541362][T19188] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[ 1450.560593][T19188] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1451.333137][   T51] Bluetooth: hci0: command tx timeout
[ 1452.006623][T16702] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1452.405195][T14792] team0 (unregistering): Port device team_slave_1 removed
[ 1452.485825][T14792] team0 (unregistering): Port device team_slave_0 removed
[ 1453.806893][T19220] loop7: detected capacity change from 0 to 512
[ 1453.819534][T19220] EXT4-fs (loop7): Test dummy encryption mode enabled
[ 1453.862435][T19220] EXT4-fs error (device loop7): __ext4_iget:5025: inode #11: block 1: comm syz.7.4037: invalid block
[ 1453.917380][T19220] EXT4-fs error (device loop7): ext4_orphan_get:1394: comm syz.7.4037: couldn't read orphan inode 11 (err -117)
[ 1453.932057][T19220] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1454.019061][T19222] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters
[ 1454.929627][T14792] team0 (unregistering): Port device team_slave_1 removed
[ 1454.994485][T14792] team0 (unregistering): Port device C removed
[ 1455.940390][T18945] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1456.058013][T18945] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1457.412927][T18945] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1457.549612][T18945] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1461.063720][T19152] chnl_net:caif_netlink_parms(): no params data found
[ 1461.713013][T19152] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1461.736449][T19152] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1461.743679][T19152] bridge_slave_0: entered allmulticast mode
[ 1461.768620][T19152] bridge_slave_0: entered promiscuous mode
[ 1461.832637][T19152] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1461.847987][T19152] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1461.857939][T19152] bridge_slave_1: entered allmulticast mode
[ 1461.870946][T19152] bridge_slave_1: entered promiscuous mode
[ 1461.893099][T19251] loop4: detected capacity change from 0 to 1024
[ 1461.913684][T19251] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[ 1461.927531][T19251] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[ 1461.945321][T18945] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1461.963515][T19251] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1462.128122][T16702] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1462.149548][T19152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1462.282762][T19152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1463.042151][T14901] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1463.100413][T18944] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1463.204192][T19152] team0: Port device team_slave_0 added
[ 1463.229384][T18944] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1463.396794][T19152] team0: Port device team_slave_1 added
[ 1463.406740][T18945] 8021q: adding VLAN 0 to HW filter on device team0
[ 1463.429723][T18944] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1463.771772][T19152] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1463.808562][T19152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1464.253483][T19152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1464.435600][T18944] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1464.683715][T19152] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1464.765623][T19152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1465.004296][T19152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1465.619959][T11813] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1465.627142][T11813] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1468.289297][T11813] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1468.296499][T11813] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1468.401723][T19152] hsr_slave_0: entered promiscuous mode
[ 1468.418670][T19152] hsr_slave_1: entered promiscuous mode
[ 1468.425249][T19152] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1468.455243][T19152] Cannot create hsr debugfs directory
[ 1468.877024][T19292] random: crng reseeded on system resumption
[ 1470.385424][T14792] bridge_slave_1: left allmulticast mode
[ 1470.391339][T14792] bridge_slave_1: left promiscuous mode
[ 1470.399823][T14792] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1470.420998][T14792] bridge_slave_0: left allmulticast mode
[ 1470.429477][T14792] bridge_slave_0: left promiscuous mode
[ 1470.446369][T14792] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1470.483854][T19300] loop2: detected capacity change from 0 to 1024
[ 1470.522228][T19300] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[ 1470.558680][T19300] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[ 1470.634301][T19300] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1470.985870][T14792] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1471.684324][T16649] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1471.768072][T14792] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1471.849038][T14792] bond0 (unregistering): Released all slaves
[ 1473.543548][T19322] overlayfs: failed to resolve './file1': -2
[ 1473.786548][T14792] hsr_slave_0: left promiscuous mode
[ 1473.909167][T17593] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1473.947972][T17593] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1473.961330][T17593] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1473.969669][T17593] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1473.978565][T17593] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1474.010088][T14792] hsr_slave_1: left promiscuous mode
[ 1474.057608][T14792] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1474.169416][T14792] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1474.387919][T17593] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1474.415040][T17593] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1474.423551][T17593] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1474.432740][T17593] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1474.444036][T17593] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1475.080737][T14792] team0 (unregistering): Port device team_slave_1 removed
[ 1475.124677][T14792] team0 (unregistering): Port device team_slave_0 removed
[ 1475.930082][   T51] Bluetooth: hci5: command tx timeout
[ 1476.377121][   T51] Bluetooth: hci6: command tx timeout
[ 1477.868468][   T51] Bluetooth: hci5: command tx timeout
[ 1478.315687][   T51] Bluetooth: hci6: command tx timeout
[ 1479.807317][   T51] Bluetooth: hci5: command tx timeout
[ 1480.270423][   T51] Bluetooth: hci6: command tx timeout
[ 1480.610659][T19152] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1480.640910][T19327] chnl_net:caif_netlink_parms(): no params data found
[ 1480.674352][T19371] pim6reg1: entered promiscuous mode
[ 1480.680103][T19371] pim6reg1: entered allmulticast mode
[ 1480.693020][T19332] chnl_net:caif_netlink_parms(): no params data found
[ 1480.709867][T19152] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1480.866917][T19152] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1481.070912][T19378] overlayfs: failed to resolve './file1': -2
[ 1481.575358][T19152] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1481.750637][   T51] Bluetooth: hci5: command tx timeout
[ 1482.210461][   T51] Bluetooth: hci6: command tx timeout
[ 1483.012517][T19327] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1483.027698][T19327] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1483.044852][T19327] bridge_slave_0: entered allmulticast mode
[ 1483.062618][T19327] bridge_slave_0: entered promiscuous mode
[ 1483.073282][T19327] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1483.096694][T19327] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1483.114599][T19327] bridge_slave_1: entered allmulticast mode
[ 1483.128149][T19327] bridge_slave_1: entered promiscuous mode
[ 1483.310564][T19400] loop2: detected capacity change from 0 to 512
[ 1483.652193][T19332] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1483.672207][T19332] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1483.723676][T19332] bridge_slave_0: entered allmulticast mode
[ 1483.747821][T19332] bridge_slave_0: entered promiscuous mode
[ 1483.792964][T19327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1483.839908][T19332] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1483.864356][T19332] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1483.890450][T19332] bridge_slave_1: entered allmulticast mode
[ 1483.915766][T19332] bridge_slave_1: entered promiscuous mode
[ 1483.965283][T19327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1484.219882][T19332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1484.326122][T19327] team0: Port device team_slave_0 added
[ 1484.522866][T19332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1484.585478][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[ 1484.602940][T19327] team0: Port device team_slave_1 added
[ 1484.937011][T19332] team0: Port device team_slave_0 added
[ 1485.126110][T19332] team0: Port device team_slave_1 added
[ 1485.400226][T19327] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1485.410391][T19327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1485.467318][T19327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1485.594067][T19332] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1485.616421][T19332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1485.681166][T19332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1485.715088][T19327] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1485.739374][T19327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1485.796392][T19327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1485.846674][T19332] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1485.864000][T19332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1485.921868][T19332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1486.048859][T19152] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1486.123640][T19332] hsr_slave_0: entered promiscuous mode
[ 1486.160188][T19332] hsr_slave_1: entered promiscuous mode
[ 1486.179833][T19332] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1486.203049][T19332] Cannot create hsr debugfs directory
[ 1486.371838][T19327] hsr_slave_0: entered promiscuous mode
[ 1486.381145][T19327] hsr_slave_1: entered promiscuous mode
[ 1486.394103][T19327] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1486.411867][T19327] Cannot create hsr debugfs directory
[ 1486.829679][T19152] 8021q: adding VLAN 0 to HW filter on device team0
[ 1486.993163][T17593] Bluetooth: hci6: command 0x0405 tx timeout
[ 1487.362764][T14792] bridge_slave_1: left allmulticast mode
[ 1487.377583][T14792] bridge_slave_1: left promiscuous mode
[ 1487.385359][T14792] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1487.401887][T14792] bridge_slave_0: left allmulticast mode
[ 1487.418018][T14792] bridge_slave_0: left promiscuous mode
[ 1487.430075][T14792] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1487.447474][T14792] bridge_slave_1: left allmulticast mode
[ 1487.463422][T14792] bridge_slave_1: left promiscuous mode
[ 1487.473615][T14792] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1487.779034][T14792] bridge_slave_0: left allmulticast mode
[ 1487.880473][T14792] bridge_slave_0: left promiscuous mode
[ 1488.010287][T14792] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1489.174143][ T1203] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[ 1489.342664][ T1203] usb 3-1: Using ep0 maxpacket: 8
[ 1489.351376][ T1203] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[ 1489.368322][ T1203] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1489.392235][ T1203] usb 3-1: config 0 descriptor??
[ 1489.560787][T19444] loop4: detected capacity change from 0 to 1024
[ 1489.585254][T19444] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[ 1489.595246][T19444] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[ 1489.602075][ T1203] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[ 1489.627459][T19444] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1489.698078][T14792] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1489.711281][T14792] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1489.722986][T14792] bond0 (unregistering): Released all slaves
[ 1489.747726][T14792] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1489.760955][T14792] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1489.814507][T14792] bond0 (unregistering): Released all slaves
[ 1489.926248][T11813] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1489.933438][T11813] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1490.780313][T14901] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1490.885518][T12345] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1490.892734][T12345] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1490.982679][ T1203] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[ 1490.999145][ T1203] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[ 1491.019428][T14792] hsr_slave_0: left promiscuous mode
[ 1491.029237][ T1203] asix 3-1:0.0: probe with driver asix failed with error -71
[ 1491.045056][T14792] hsr_slave_1: left promiscuous mode
[ 1491.057855][T14792] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1491.080140][ T1203] usb 3-1: USB disconnect, device number 6
[ 1491.098233][T14792] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1491.138502][T14792] hsr_slave_0: left promiscuous mode
[ 1491.149052][T14792] hsr_slave_1: left promiscuous mode
[ 1491.162402][T14792] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1491.184199][T14792] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1491.858801][T19464] loop2: detected capacity change from 0 to 1024
[ 1491.940576][T14792] team0 (unregistering): Port device team_slave_1 removed
[ 1492.054172][T14792] team0 (unregistering): Port device team_slave_0 removed
[ 1492.746282][T14792] team0 (unregistering): Port device team_slave_1 removed
[ 1492.779934][T14792] team0 (unregistering): Port device team_slave_0 removed
[ 1493.274316][T19152] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1493.761771][T19327] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1493.783302][T19327] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1493.902367][T19327] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1494.377679][T19327] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1495.309486][T19152] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1495.788145][T19327] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1495.823083][T19497] loop2: detected capacity change from 0 to 1024
[ 1495.888008][T19497] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[ 1495.916132][T19327] 8021q: adding VLAN 0 to HW filter on device team0
[ 1495.920204][T19497] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[ 1495.965554][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1495.972796][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1496.013851][T19497] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1496.028510][T19332] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1496.373543][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1496.380782][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1497.011964][T16649] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1497.026313][T19332] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1497.119117][T19332] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1497.197790][T19332] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1497.506979][T19332] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1497.533623][T19332] 8021q: adding VLAN 0 to HW filter on device team0
[ 1497.558194][T11813] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1497.565402][T11813] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1497.609666][T11813] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1497.616854][T11813] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1497.904304][T19327] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1499.111419][T19531] pim6reg0: tun_chr_ioctl cmd 1074025677
[ 1499.135822][T19531] pim6reg0: linktype set to 773
[ 1500.403398][T19327] veth0_vlan: entered promiscuous mode
[ 1500.450699][T19327] veth1_vlan: entered promiscuous mode
[ 1500.496868][T19332] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1501.276768][   T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1501.296101][   T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1501.305463][   T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1501.313613][   T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1501.322215][   T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1501.408438][T19546] loop4: detected capacity change from 0 to 512
[ 1501.482992][T19327] veth0_macvtap: entered promiscuous mode
[ 1501.527940][T19327] veth1_macvtap: entered promiscuous mode
[ 1501.899094][T19546] EXT4-fs (loop4): 1 orphan inode deleted
[ 1501.914767][T19546] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1501.934818][T19546] ext4 filesystem being mounted at /244/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1501.946115][T14792] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14
[ 1502.018049][T14792] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:19: Failed to release dquot type 1
[ 1502.339301][T19562] loop7: detected capacity change from 0 to 512
[ 1502.473095][T19562] EXT4-fs (loop7): Test dummy encryption mode enabled
[ 1503.550319][T17593] Bluetooth: hci0: command tx timeout
[ 1503.826507][T19562] EXT4-fs error (device loop7): __ext4_iget:5025: inode #11: block 1: comm syz.7.4115: invalid block
[ 1503.846006][T19562] EXT4-fs error (device loop7): ext4_orphan_get:1394: comm syz.7.4115: couldn't read orphan inode 11 (err -117)
[ 1503.873853][T19562] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1504.475296][T14901] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1504.538325][T19332] veth0_vlan: entered promiscuous mode
[ 1504.644788][T19327] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1504.731600][T11813] bridge_slave_1: left allmulticast mode
[ 1504.754120][T11813] bridge_slave_1: left promiscuous mode
[ 1504.787006][T11813] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1504.811688][T11813] bridge_slave_0: left allmulticast mode
[ 1504.899281][T19569] siw: device registration error -23
[ 1505.320653][T11813] bridge_slave_0: left promiscuous mode
[ 1505.328671][T11813] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1505.459231][T17593] Bluetooth: hci0: command tx timeout
[ 1505.757383][T19573] loop2: detected capacity change from 0 to 1024
[ 1505.777849][T19554] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters
[ 1505.806963][T19573] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[ 1505.819073][T16702] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1505.839790][T19573] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[ 1505.897238][T19573] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1506.853348][T11813] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1506.894731][T11813] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1506.937597][T11813] bond0 (unregistering): Released all slaves
[ 1506.992323][T16649] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1507.033359][T19332] veth1_vlan: entered promiscuous mode
[ 1507.094215][T19575] netlink: 'syz.4.4120': attribute type 1 has an invalid length.
[ 1507.136755][T19575] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4120'.
[ 1507.162964][T19575] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[ 1507.193316][T19327] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1507.236671][T11813] hsr_slave_0: left promiscuous mode
[ 1507.320704][T11813] hsr_slave_1: left promiscuous mode
[ 1507.327596][T11813] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1507.336127][T11813] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1507.396638][T17593] Bluetooth: hci0: command tx timeout
[ 1507.790502][T11813] team0 (unregistering): Port device team_slave_1 removed
[ 1507.890257][T11813] team0 (unregistering): Port device team_slave_0 removed
[ 1508.418377][T19596] loop4: detected capacity change from 0 to 512
[ 1508.557883][T19596] EXT4-fs (loop4): 1 orphan inode deleted
[ 1508.576895][   T37] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14
[ 1508.621254][T19596] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1508.646729][T19596] ext4 filesystem being mounted at /249/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1508.691779][   T37] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 1
[ 1509.724789][T17593] Bluetooth: hci0: command tx timeout
[ 1510.105038][T14901] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1510.541746][T19617] loop4: detected capacity change from 0 to 512
[ 1510.637892][T19617] EXT4-fs (loop4): Test dummy encryption mode enabled
[ 1510.692686][T19327] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1510.759985][T19617] EXT4-fs error (device loop4): __ext4_iget:5025: inode #11: block 1: comm syz.4.4130: invalid block
[ 1510.773006][T19617] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.4130: couldn't read orphan inode 11 (err -117)
[ 1510.800612][T19617] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1510.903417][T19327] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1511.017692][T19327] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1511.143450][T19619] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters
[ 1511.189633][T19327] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1511.666371][T19332] veth0_macvtap: entered promiscuous mode
[ 1511.811866][T19332] veth1_macvtap: entered promiscuous mode
[ 1512.016132][T19543] chnl_net:caif_netlink_parms(): no params data found
[ 1512.086930][T19332] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1512.251669][T19332] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1512.302048][T14792] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1512.321134][T14792] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1512.453033][T19332] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1512.494132][T19332] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1512.531368][T19332] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1512.571077][T19332] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1512.751621][T14901] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1512.764613][   T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1512.797151][   T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1512.949945][T19628] loop2: detected capacity change from 0 to 1024
[ 1513.044820][T19543] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1513.052060][T19543] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1513.060128][T19628] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[ 1513.069636][T19543] bridge_slave_0: entered allmulticast mode
[ 1513.072664][T19628] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[ 1513.107127][T19543] bridge_slave_0: entered promiscuous mode
[ 1513.132865][T19628] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1513.156507][T19633] netlink: 'syz.4.4133': attribute type 1 has an invalid length.
[ 1513.164396][T19633] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4133'.
[ 1513.211870][T19633] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[ 1513.241479][T19543] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1513.265494][T19543] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1513.284854][T19543] bridge_slave_1: entered allmulticast mode
[ 1513.318979][T19543] bridge_slave_1: entered promiscuous mode
[ 1514.508165][T19644] random: crng reseeded on system resumption
[ 1515.317086][T19543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1515.412293][T19543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1515.431718][T16649] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1515.806397][ T6406] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1516.793079][ T6406] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1518.395373][T19543] team0: Port device team_slave_0 added
[ 1518.462965][T19543] team0: Port device team_slave_1 added
[ 1518.572206][   T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1518.598467][   T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1518.610950][T19666] siw: device registration error -23
[ 1518.632823][T19662] loop7: detected capacity change from 0 to 512
[ 1519.068400][T19668] loop4: detected capacity change from 0 to 512
[ 1519.090954][T19668] EXT4-fs (loop4): Test dummy encryption mode enabled
[ 1519.116746][T19668] EXT4-fs error (device loop4): __ext4_iget:5025: inode #11: block 1: comm syz.4.4142: invalid block
[ 1519.129089][T19668] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.4142: couldn't read orphan inode 11 (err -117)
[ 1519.144072][T19668] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1519.238650][T19662] EXT4-fs (loop7): 1 orphan inode deleted
[ 1519.261139][T17742] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14
[ 1519.384514][T19662] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1519.439208][T17742] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 1
[ 1519.492659][T19662] ext4 filesystem being mounted at /178/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1519.603040][T19543] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1520.938578][T19543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1520.976583][T19543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1520.996258][T16702] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1521.232435][T19543] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1521.239556][T19543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1521.265610][T19543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1521.310046][T14901] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1522.267200][T19543] hsr_slave_0: entered promiscuous mode
[ 1522.290506][T19543] hsr_slave_1: entered promiscuous mode
[ 1522.316223][T19543] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1522.334590][T19543] Cannot create hsr debugfs directory
[ 1522.707823][T19700] random: crng reseeded on system resumption
[ 1526.061240][T19719] siw: device registration error -23
[ 1526.100325][T19720] loop2: detected capacity change from 0 to 512
[ 1529.540945][T19543] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1529.608342][T19543] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1529.640542][T19543] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1529.665522][T19543] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1531.039771][T19543] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1531.071600][T19543] 8021q: adding VLAN 0 to HW filter on device team0
[ 1531.085393][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1531.092609][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1531.160544][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1531.167757][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1532.737203][T19543] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1533.480931][T19780] siw: device registration error -23
[ 1533.493975][T17593] Bluetooth: hci0: command 0x0405 tx timeout
[ 1534.049116][T19789] loop0: detected capacity change from 0 to 512
[ 1535.368706][T19543] veth0_vlan: entered promiscuous mode
[ 1535.473176][T19543] veth1_vlan: entered promiscuous mode
[ 1535.653136][T19543] veth0_macvtap: entered promiscuous mode
[ 1536.457966][T19543] veth1_macvtap: entered promiscuous mode
[ 1536.589342][T19543] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1536.652002][T19543] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1536.729448][T19543] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1536.753482][T19543] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1536.796411][T19543] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1536.815265][T19543] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1537.800005][T11814] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1537.839969][T11814] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1537.870743][T19828] siw: device registration error -23
[ 1537.987432][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1538.028052][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1538.223095][T19835] loop0: detected capacity change from 0 to 512
[ 1538.879542][T19839] loop7: detected capacity change from 0 to 512
[ 1539.012535][T19839] EXT4-fs (loop7): 1 orphan inode deleted
[ 1539.020361][T19839] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1539.045968][T15454] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14
[ 1539.082205][T15454] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:20: Failed to release dquot type 1
[ 1539.172161][T19839] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1540.013628][T11814] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1540.425445][T16702] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1540.546761][T11814] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1540.657377][T11814] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1540.758553][T11814] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1540.972712][T11814] bridge_slave_1: left allmulticast mode
[ 1540.987373][T11814] bridge_slave_1: left promiscuous mode
[ 1540.993246][T11814] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1541.006985][T11814] bridge_slave_0: left allmulticast mode
[ 1541.012658][T11814] bridge_slave_0: left promiscuous mode
[ 1541.034639][T11814] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1541.872889][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[ 1542.173938][T19864] random: crng reseeded on system resumption
[ 1545.135012][T11814] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1545.166649][T11814] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1545.181996][   T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1545.200945][   T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1545.208511][T11814] bond0 (unregistering): Released all slaves
[ 1545.215604][   T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1545.234596][   T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1545.244875][   T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1547.138928][T17593] Bluetooth: hci0: command tx timeout
[ 1547.850181][T11814] hsr_slave_0: left promiscuous mode
[ 1547.903768][T11814] hsr_slave_1: left promiscuous mode
[ 1547.914711][T11814] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1547.934260][T11814] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1547.943131][T19915] loop7: detected capacity change from 0 to 512
[ 1548.001727][T11814] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1548.015685][T19915] EXT4-fs (loop7): 1 orphan inode deleted
[ 1548.066421][ T6137] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14
[ 1548.077474][T11814] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1548.094277][T19915] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1548.182926][ T6137] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:11: Failed to release dquot type 1
[ 1548.186186][T19915] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1548.338895][T11814] veth1_macvtap: left promiscuous mode
[ 1548.381856][T11814] veth0_macvtap: left promiscuous mode
[ 1548.414245][T11814] veth1_vlan: left promiscuous mode
[ 1548.450775][T11814] veth0_vlan: left promiscuous mode
[ 1549.149298][T17593] Bluetooth: hci0: command tx timeout
[ 1549.550390][T16702] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1550.422840][T19935] random: crng reseeded on system resumption
[ 1551.099922][T17593] Bluetooth: hci0: command tx timeout
[ 1553.038363][T17593] Bluetooth: hci0: command tx timeout
[ 1557.269059][T19969] loop4: detected capacity change from 0 to 512
[ 1557.339300][T19970] loop0: detected capacity change from 0 to 512
[ 1557.489186][T11814] team0 (unregistering): Port device team_slave_1 removed
[ 1557.493031][T19969] EXT4-fs (loop4): 1 orphan inode deleted
[ 1557.507387][T19969] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1557.540918][T11813] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14
[ 1557.558901][T11813] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:9: Failed to release dquot type 1
[ 1557.571508][T19969] ext4 filesystem being mounted at /273/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1557.933213][T11814] team0 (unregistering): Port device team_slave_0 removed
[ 1558.647323][T14901] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1560.628116][T19892] chnl_net:caif_netlink_parms(): no params data found
[ 1562.155597][T19998] random: crng reseeded on system resumption
[ 1562.944243][T20004] loop2: detected capacity change from 0 to 2048
[ 1562.966006][T20004] EXT4-fs: inline encryption not supported
[ 1562.971958][T20004] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1562.985809][T19892] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1563.007892][T19892] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1563.011950][T20004] ext4: Unknown parameter 'audit'
[ 1563.035017][T19892] bridge_slave_0: entered allmulticast mode
[ 1563.055480][T19892] bridge_slave_0: entered promiscuous mode
[ 1563.133314][T19892] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1563.140525][T19892] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1563.189518][T19892] bridge_slave_1: entered allmulticast mode
[ 1563.218584][T19892] bridge_slave_1: entered promiscuous mode
[ 1563.707194][T19892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1563.730190][T19892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1563.956283][T19892] team0: Port device team_slave_0 added
[ 1563.987570][T19892] team0: Port device team_slave_1 added
[ 1564.131369][T19892] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1564.158182][T19892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1564.285464][T19892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1564.303509][T19892] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1564.310526][T19892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1564.337613][T19892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1565.630434][   T51] Bluetooth: hci0: command 0x0405 tx timeout
[ 1565.907513][T20016] netlink: 'syz.7.4230': attribute type 1 has an invalid length.
[ 1565.986019][T20016] netlink: 152 bytes leftover after parsing attributes in process `syz.7.4230'.
[ 1566.092036][T20016] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[ 1566.684083][T19892] hsr_slave_0: entered promiscuous mode
[ 1566.863479][T19892] hsr_slave_1: entered promiscuous mode
[ 1567.013514][T19892] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1567.131826][T19892] Cannot create hsr debugfs directory
[ 1572.923842][T20064] loop2: detected capacity change from 0 to 2048
[ 1572.958079][T20064] EXT4-fs: inline encryption not supported
[ 1572.964009][T20064] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1573.003605][T20064] ext4: Unknown parameter 'audit'
[ 1573.380570][T19892] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1573.505335][T19892] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1573.576869][T19892] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1573.603608][T19892] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1574.851574][T19892] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1574.937643][T19892] 8021q: adding VLAN 0 to HW filter on device team0
[ 1574.982371][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1574.989592][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1575.031506][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1575.038819][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1575.138201][T20081] loop1: detected capacity change from 0 to 1024
[ 1575.183933][T20081] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[ 1575.193661][T20081] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[ 1575.283649][T20081] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1575.378364][T20089] loop0: detected capacity change from 0 to 512
[ 1576.455202][T19327] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1577.311488][T19892] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1582.040374][T19892] veth0_vlan: entered promiscuous mode
[ 1582.087887][T19892] veth1_vlan: entered promiscuous mode
[ 1582.190017][T20141] loop2: detected capacity change from 0 to 1024
[ 1582.192874][T19892] veth0_macvtap: entered promiscuous mode
[ 1582.230186][T19892] veth1_macvtap: entered promiscuous mode
[ 1582.261037][T20141] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[ 1582.299674][T19892] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1582.309126][T20141] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[ 1582.341137][T19892] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1582.371498][T20141] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1582.377940][T19892] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1582.711719][T19892] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1582.729144][T19892] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1582.740708][T19892] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1583.464088][T16649] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1583.477510][T14792] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1583.479784][ T6137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1583.495578][T14792] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1583.517026][ T6137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1584.258398][T20154] loop2: detected capacity change from 0 to 1024
[ 1586.345257][T15454] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1586.671662][T15454] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1587.012043][T15454] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1587.108531][T15454] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1587.329622][T15454] bridge_slave_1: left allmulticast mode
[ 1587.336763][T15454] bridge_slave_1: left promiscuous mode
[ 1587.357348][T15454] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1587.392301][T15454] bridge_slave_0: left allmulticast mode
[ 1587.398286][T15454] bridge_slave_0: left promiscuous mode
[ 1587.420316][T15454] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1587.829048][T15454] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1587.840185][T15454] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1587.852950][T15454] bond0 (unregistering): Released all slaves
[ 1588.654060][T20183] overlayfs: failed to resolve './file0': -2
[ 1589.277214][T15454] hsr_slave_0: left promiscuous mode
[ 1589.407433][T15454] hsr_slave_1: left promiscuous mode
[ 1589.834601][T15454] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1589.953620][T15454] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1590.106395][T15454] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1590.223627][T15454] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1591.630873][T15454] veth1_macvtap: left promiscuous mode
[ 1591.654437][T15454] veth0_macvtap: left promiscuous mode
[ 1591.661925][T15454] veth1_vlan: left promiscuous mode
[ 1591.679275][T15454] veth0_vlan: left promiscuous mode
[ 1591.718754][T20195] random: crng reseeded on system resumption
[ 1592.512761][ T5844] Bluetooth: hci5: command 0x0406 tx timeout
[ 1592.518847][ T5844] Bluetooth: hci6: command 0x0405 tx timeout
[ 1592.705710][T20197] loop1: detected capacity change from 0 to 1024
[ 1592.757124][T20197] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[ 1592.798999][T20197] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[ 1592.899101][T20197] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1592.961791][T20207] loop7: detected capacity change from 0 to 1024
[ 1593.082985][   T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1593.098079][   T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1593.106078][   T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1593.115174][   T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1593.123131][   T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1593.181233][T20207] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1593.233300][   T30] audit: type=1800 audit(2000040639.356:1670): pid=20203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4283" name="bus" dev="loop7" ino=18 res=0 errno=0
[ 1593.260447][T20203] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4112: comm syz.7.4283: Allocating blocks 385-513 which overlap fs metadata
[ 1593.318933][T20202] EXT4-fs (loop7): pa ffff888056733000: logic 16, phys. 129, len 24
[ 1593.327267][T20202] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5363: group 0, free 0, pa_free 8
[ 1594.597368][T16702] Trying to write to read-only block-device loop7
[ 1594.797000][T16702] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1595.020122][T17593] Bluetooth: hci0: command tx timeout
[ 1595.113975][T19327] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1597.470629][T17593] Bluetooth: hci0: command tx timeout
[ 1598.632970][T15454] team0 (unregistering): Port device team_slave_1 removed
[ 1599.124071][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[ 1599.300334][T15454] team0 (unregistering): Port device team_slave_0 removed
[ 1599.408398][T17593] Bluetooth: hci0: command tx timeout
[ 1601.347483][T17593] Bluetooth: hci0: command tx timeout
[ 1601.385624][T20258] overlayfs: failed to resolve './file0': -2
[ 1602.829160][T20201] C: renamed from team_slave_0 (while UP)
[ 1602.861000][T20201] netlink: 'syz.2.4282': attribute type 1 has an invalid length.
[ 1602.893865][T20201] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4282'.
[ 1602.979312][T20201] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[ 1604.046410][T20210] chnl_net:caif_netlink_parms(): no params data found
[ 1604.925267][   T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1604.944740][   T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1604.953810][   T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1604.962673][   T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1604.971869][   T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1606.515341][T20210] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1606.617154][T20210] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1606.721298][T20210] bridge_slave_0: entered allmulticast mode
[ 1606.875514][   T51] Bluetooth: hci2: command tx timeout
[ 1607.009186][T20210] bridge_slave_0: entered promiscuous mode
[ 1607.113786][T20210] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1607.974595][T20210] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1607.981925][T20210] bridge_slave_1: entered allmulticast mode
[ 1607.990171][T20210] bridge_slave_1: entered promiscuous mode
[ 1608.295361][T20319] overlayfs: failed to resolve './file0': -2
[ 1608.803356][   T51] Bluetooth: hci2: command tx timeout
[ 1610.844416][   T51] Bluetooth: hci2: command tx timeout
[ 1611.276590][T15454] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1611.519781][T15454] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1611.626553][T20210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1611.921422][T15454] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1612.215440][T20210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1612.229579][T20326] netlink: 'syz.2.4312': attribute type 1 has an invalid length.
[ 1612.268863][T20326] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4312'.
[ 1612.328557][T20326] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[ 1612.748924][T15454] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1612.760209][   T51] Bluetooth: hci2: command tx timeout
[ 1612.871330][T20210] team0: Port device team_slave_0 added
[ 1612.962002][T20210] team0: Port device team_slave_1 added
[ 1613.165236][T20210] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1613.221432][T20210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1613.308029][T20210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1613.582453][T20210] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1613.592195][T20210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1613.618431][T20210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1614.010224][T20210] hsr_slave_0: entered promiscuous mode
[ 1614.028144][T20210] hsr_slave_1: entered promiscuous mode
[ 1614.055409][T20210] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1614.090697][T20210] Cannot create hsr debugfs directory
[ 1615.201983][T17593] Bluetooth: hci2: command 0x0405 tx timeout
[ 1619.137406][T15454] bridge_slave_1: left allmulticast mode
[ 1619.164092][T15454] bridge_slave_1: left promiscuous mode
[ 1619.838497][T15454] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1619.886801][T15454] bridge_slave_0: left allmulticast mode
[ 1619.892487][T15454] bridge_slave_0: left promiscuous mode
[ 1619.911908][T15454] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1620.878129][T15454] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1620.894810][T15454] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1620.913787][T15454] bond0 (unregistering): Released all slaves
[ 1621.143555][T20385] netlink: 'syz.2.4328': attribute type 1 has an invalid length.
[ 1621.155465][T20385] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4328'.
[ 1621.167304][T20385] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[ 1621.281646][T15454] tipc: Left network mode
[ 1621.393378][T20287] chnl_net:caif_netlink_parms(): no params data found
[ 1621.983476][T20413] loop0: detected capacity change from 0 to 2048
[ 1621.990860][T20413] EXT4-fs: inline encryption not supported
[ 1621.996865][T20413] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1622.016355][T20413] ext4: Unknown parameter 'audit'
[ 1625.713044][T15454] hsr_slave_0: left promiscuous mode
[ 1625.882810][T15454] hsr_slave_1: left promiscuous mode
[ 1625.998085][T15454] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1626.075021][T15454] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1626.434356][T15454] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1626.569716][T15454] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1626.808873][T15454] veth1_macvtap: left promiscuous mode
[ 1626.830827][T15454] veth0_macvtap: left promiscuous mode
[ 1627.061173][T15454] veth1_vlan: left promiscuous mode
[ 1627.078230][T15454] veth0_vlan: left promiscuous mode
[ 1629.649547][T20445] loop0: detected capacity change from 0 to 512
[ 1630.035537][T20450] loop2: detected capacity change from 0 to 1024
[ 1630.042766][T15454] team0 (unregistering): Port device team_slave_1 removed
[ 1630.546549][T15454] team0 (unregistering): Port device C removed
[ 1631.459858][T15454] dummy0 (unregistering): left allmulticast mode
[ 1631.948278][T20287] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1631.955433][T20287] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1632.020271][T20287] bridge_slave_0: entered allmulticast mode
[ 1632.039490][T20287] bridge_slave_0: entered promiscuous mode
[ 1632.210242][T20287] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1632.260191][T20287] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1632.286982][T20287] bridge_slave_1: entered allmulticast mode
[ 1632.311494][T20287] bridge_slave_1: entered promiscuous mode
[ 1632.339518][T20441] C: renamed from team_slave_0 (while UP)
[ 1632.348172][T20441] netlink: 'syz.1.4343': attribute type 1 has an invalid length.
[ 1632.355920][T20441] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4343'.
[ 1632.400223][T20441] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[ 1633.210823][T20287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1633.305077][T20287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1633.571605][T20287] team0: Port device team_slave_0 added
[ 1633.600391][T20287] team0: Port device team_slave_1 added
[ 1633.860567][T20287] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1633.876663][T20287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1633.958301][T20287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1634.013401][T20287] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1635.319323][T20287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1636.854335][T20287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1638.026728][T20210] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1638.194030][T20287] hsr_slave_0: entered promiscuous mode
[ 1638.228932][T20287] hsr_slave_1: entered promiscuous mode
[ 1638.235480][T20287] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1638.265810][T20287] Cannot create hsr debugfs directory
[ 1638.328236][T20486] loop1: detected capacity change from 0 to 2048
[ 1638.355671][T20486] EXT4-fs: inline encryption not supported
[ 1638.364405][T20486] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1638.387798][T20210] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1638.466465][T20486] ext4: Unknown parameter 'audit'
[ 1638.481060][T20210] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1638.652421][T20491] loop2: detected capacity change from 0 to 1024
[ 1638.749321][T20210] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1639.193136][T20496] loop2: detected capacity change from 0 to 512
[ 1640.787800][T20513] C: renamed from team_slave_0 (while UP)
[ 1640.813858][T20513] netlink: 'syz.0.4364': attribute type 1 has an invalid length.
[ 1640.836170][T20513] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4364'.
[ 1640.852718][T20513] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[ 1641.985957][T20529] loop2: detected capacity change from 0 to 2048
[ 1642.013741][T20529] EXT4-fs: inline encryption not supported
[ 1642.020054][T20529] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1642.201579][T20529] ext4: Unknown parameter 'audit'
[ 1642.371171][T20532] loop0: detected capacity change from 0 to 1024
[ 1642.577510][T20210] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1642.617760][T20210] 8021q: adding VLAN 0 to HW filter on device team0
[ 1642.940108][T14792] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1642.947358][T14792] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1643.034057][T14792] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1643.041292][T14792] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1643.356762][T20210] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1643.734783][T20287] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1643.756604][T20287] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1643.778623][T20287] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1643.803627][T20287] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1644.200351][T20287] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1644.301181][T20287] 8021q: adding VLAN 0 to HW filter on device team0
[ 1644.336795][T15454] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1644.344041][T15454] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1644.409071][T15454] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1644.416262][T15454] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1645.197318][T20287] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1645.297570][T20287] veth0_vlan: entered promiscuous mode
[ 1645.318689][T20287] veth1_vlan: entered promiscuous mode
[ 1645.394425][T20287] veth0_macvtap: entered promiscuous mode
[ 1645.404086][T20287] veth1_macvtap: entered promiscuous mode
[ 1645.429387][T20287] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1645.449819][T20287] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1645.467485][T20287] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1645.476374][T20287] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1645.485770][T20287] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1645.494892][T20287] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1646.845416][ T6136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1646.877936][ T6136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1647.485099][T20593] input: syz1 as /devices/virtual/input/input46
[ 1647.516522][T20585] tipc: Enabling of bearer <eth:syzk> rejected, failed to enable media
[ 1647.782067][T17593] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1647.792647][T17593] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1647.816282][T17593] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1647.849302][T17593] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1647.860352][T17593] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1647.934296][T20600] loop2: detected capacity change from 0 to 2048
[ 1647.957693][T20600] EXT4-fs: inline encryption not supported
[ 1647.993075][T20600] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1648.007239][T20600] ext4: Unknown parameter 'audit'
[ 1648.733493][T12345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1648.788742][T12345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1649.909972][   T51] Bluetooth: hci0: command tx timeout
[ 1651.610064][T17742] bridge_slave_1: left allmulticast mode
[ 1651.617477][T17742] bridge_slave_1: left promiscuous mode
[ 1651.666248][T17742] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1651.837100][   T51] Bluetooth: hci0: command tx timeout
[ 1652.450008][T17742] bridge_slave_0: left allmulticast mode
[ 1652.484555][T17742] bridge_slave_0: left promiscuous mode
[ 1652.501465][T17742] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1652.738045][T20653] input: syz1 as /devices/virtual/input/input47
[ 1653.307946][T17742] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1653.343593][T17742] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1653.362727][T17742] bond0 (unregistering): Released all slaves
[ 1653.766009][   T51] Bluetooth: hci0: command tx timeout
[ 1653.922580][T20670] loop2: detected capacity change from 0 to 1024
[ 1653.931262][T20670] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[ 1653.941168][T20670] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[ 1653.959507][T20670] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1655.067228][T16649] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1655.704501][   T51] Bluetooth: hci0: command tx timeout
[ 1656.038082][T20650] tipc: Enabling of bearer <eth:syzk> rejected, failed to enable media
[ 1656.082526][T20594] chnl_net:caif_netlink_parms(): no params data found
[ 1656.183901][T17742] hsr_slave_0: left promiscuous mode
[ 1656.223124][T17742] hsr_slave_1: left promiscuous mode
[ 1656.232754][T17742] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1656.255428][T17742] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1656.383866][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[ 1657.155089][T17742] team0 (unregistering): Port device team_slave_1 removed
[ 1657.303601][T17742] team0 (unregistering): Port device team_slave_0 removed
[ 1658.703963][T20699] loop1: detected capacity change from 0 to 2048
[ 1658.734654][T20699] EXT4-fs: inline encryption not supported
[ 1658.742633][T20699] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1658.760469][T20699] ext4: Unknown parameter 'audit'
[ 1662.626482][T20676] pim6reg1: entered promiscuous mode
[ 1662.642695][T20676] pim6reg1: entered allmulticast mode
[ 1663.074120][T20723] overlayfs: missing 'workdir'
[ 1664.033923][T20594] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1664.689603][T20594] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1664.732104][T20594] bridge_slave_0: entered allmulticast mode
[ 1664.790733][T20594] bridge_slave_0: entered promiscuous mode
[ 1665.623088][T17593] Bluetooth: hci0: command 0x0405 tx timeout
[ 1671.122998][T20594] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1671.138710][T20594] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1671.146223][T20594] bridge_slave_1: entered allmulticast mode
[ 1671.154859][T20594] bridge_slave_1: entered promiscuous mode
[ 1671.556428][T20792] loop1: detected capacity change from 0 to 1024
[ 1671.582421][T20594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1671.613588][T20792] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[ 1671.642923][T20792] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[ 1671.672475][T20594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1671.767840][T20594] team0: Port device team_slave_0 added
[ 1671.786223][T20594] team0: Port device team_slave_1 added
[ 1671.808177][T20792] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1671.898295][T20594] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1671.927385][T20594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1672.982649][T20594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1673.201975][T20594] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1673.283812][T20594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1673.744950][T20594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1674.705573][T19327] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1675.051043][T20594] hsr_slave_0: entered promiscuous mode
[ 1675.097060][T20594] hsr_slave_1: entered promiscuous mode
[ 1675.157137][T20594] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1675.221263][T20594] Cannot create hsr debugfs directory
[ 1676.289927][T20831] loop1: detected capacity change from 0 to 512
[ 1678.485813][T20594] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1678.523752][T20594] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1678.887884][T20594] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1678.933816][T20594] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1683.869219][T20594] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1683.980497][T20876] wg2: entered promiscuous mode
[ 1684.016527][T20876] wg2: entered allmulticast mode
[ 1684.201693][T20594] 8021q: adding VLAN 0 to HW filter on device team0
[ 1684.725736][ T6137] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1684.732959][ T6137] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1684.819252][ T6137] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1684.826489][ T6137] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1685.730927][T20594] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1687.519622][T20594] veth0_vlan: entered promiscuous mode
[ 1687.561158][T20594] veth1_vlan: entered promiscuous mode
[ 1687.678374][T20594] veth0_macvtap: entered promiscuous mode
[ 1687.710575][T20594] veth1_macvtap: entered promiscuous mode
[ 1687.762199][T20594] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1687.810542][T20594] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1687.845766][T20594] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1687.868466][T20594] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1687.886183][T20594] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1687.897606][T20594] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1687.941409][T20948] netlink: 'syz.1.4487': attribute type 1 has an invalid length.
[ 1687.953584][T20948] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4487'.
[ 1688.009659][T20948] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[ 1689.433845][ T6137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1689.504527][ T6137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1689.681362][T12345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1689.734088][T12345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1692.094487][T14792] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1692.490731][T14792] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1692.619437][T14792] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1692.777184][T14792] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1692.982717][T14792] bridge_slave_1: left allmulticast mode
[ 1692.995783][T14792] bridge_slave_1: left promiscuous mode
[ 1693.001637][T14792] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1693.029091][T14792] bridge_slave_0: left allmulticast mode
[ 1693.042397][T14792] bridge_slave_0: left promiscuous mode
[ 1693.048190][T14792] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1694.360983][T14792] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1694.400591][T14792] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1694.429552][T14792] bond0 (unregistering): Released all slaves
[ 1694.484376][T20986] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1694.492177][T20986] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1694.655761][T20992] bridge_slave_1: left allmulticast mode
[ 1694.690981][T20992] bridge_slave_1: left promiscuous mode
[ 1694.714701][T20992] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1694.860115][T20992] bridge_slave_0: left allmulticast mode
[ 1694.933034][T20992] bridge_slave_0: left promiscuous mode
[ 1694.980386][T20992] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1695.650292][T17593] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1695.667138][T17593] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1695.676558][T17593] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1695.691442][T17593] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1695.700812][T17593] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1697.570727][T14792] hsr_slave_0: left promiscuous mode
[ 1697.598081][T14792] hsr_slave_1: left promiscuous mode
[ 1697.604551][T14792] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1697.612308][T17593] Bluetooth: hci0: command tx timeout
[ 1697.620452][T14792] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1697.631444][T21026] loop2: detected capacity change from 0 to 512
[ 1697.640369][T14792] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1697.656607][T14792] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1697.723062][T14792] veth1_macvtap: left promiscuous mode
[ 1697.728718][T14792] veth0_macvtap: left promiscuous mode
[ 1697.734938][T14792] veth1_vlan: left promiscuous mode
[ 1697.740824][T14792] veth0_vlan: left promiscuous mode
[ 1699.566732][T17593] Bluetooth: hci0: command tx timeout
[ 1701.487281][T17593] Bluetooth: hci0: command tx timeout
[ 1702.795569][T14792] team0 (unregistering): Port device team_slave_1 removed
[ 1702.925612][T14792] team0 (unregistering): Port device team_slave_0 removed
[ 1703.436500][T17593] Bluetooth: hci0: command tx timeout
[ 1704.231769][T21080] pim6reg1: entered promiscuous mode
[ 1704.240481][T21080] pim6reg1: entered allmulticast mode
[ 1705.035344][T21003] chnl_net:caif_netlink_parms(): no params data found
[ 1705.285438][T21101] pim6reg1: entered promiscuous mode
[ 1705.310362][T21101] pim6reg1: entered allmulticast mode
[ 1705.629992][T21003] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1705.659958][T21003] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1705.677415][T21003] bridge_slave_0: entered allmulticast mode
[ 1705.716901][T21003] bridge_slave_0: entered promiscuous mode
[ 1705.749251][T21003] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1705.765026][T21003] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1705.772238][T21003] bridge_slave_1: entered allmulticast mode
[ 1705.818367][T21003] bridge_slave_1: entered promiscuous mode
[ 1706.161300][T21003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1707.038067][T21003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1707.208519][T21003] team0: Port device team_slave_0 added
[ 1707.231604][T21003] team0: Port device team_slave_1 added
[ 1707.747778][T21003] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1707.790297][T21003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1707.936677][T21003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1708.020295][T21003] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1708.057339][T21003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1708.639764][T21003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1709.093443][T21003] hsr_slave_0: entered promiscuous mode
[ 1709.121325][T21003] hsr_slave_1: entered promiscuous mode
[ 1709.136087][T21003] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1709.158349][T21003] Cannot create hsr debugfs directory
[ 1709.188820][T21147] loop7: detected capacity change from 0 to 512
[ 1709.231573][T21139] pim6reg1: entered promiscuous mode
[ 1709.267553][T21139] pim6reg1: entered allmulticast mode
[ 1709.631841][T21148] pim6reg1: entered promiscuous mode
[ 1709.651459][T21148] pim6reg1: entered allmulticast mode
[ 1710.811813][   T51] Bluetooth: hci0: command 0x0405 tx timeout
[ 1711.171047][T21186] loop1: detected capacity change from 0 to 512
[ 1713.659565][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[ 1714.182741][T21003] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1714.265727][T21003] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1714.583304][T21229] loop1: detected capacity change from 0 to 512
[ 1714.621084][T21003] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1714.667430][T21003] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1715.123949][T21003] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1715.203646][T21003] 8021q: adding VLAN 0 to HW filter on device team0
[ 1715.242323][T21244] netlink: 'syz.2.4586': attribute type 1 has an invalid length.
[ 1715.259143][T21244] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4586'.
[ 1715.277196][T21244] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[ 1715.321954][ T6136] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1715.329150][ T6136] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1715.382357][T15454] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1715.389570][T15454] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1717.735255][T21003] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1719.405109][T21003] veth0_vlan: entered promiscuous mode
[ 1719.624290][T21003] veth1_vlan: entered promiscuous mode
[ 1719.855413][T21003] veth0_macvtap: entered promiscuous mode
[ 1720.104093][T21003] veth1_macvtap: entered promiscuous mode
[ 1720.174024][T21003] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1720.272239][T21003] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1720.352390][T17593] Bluetooth: hci2: command 0x0405 tx timeout
[ 1720.446465][T21003] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1720.474290][T21003] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1720.518778][T21003] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1720.547586][T21003] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1721.934238][T17742] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1721.984711][T17742] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1722.086874][T11813] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1722.102225][T11813] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1723.723205][ T6137] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1723.904428][ T6137] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1724.051252][ T6137] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1724.107672][ T6137] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1724.241022][ T6137] bridge_slave_1: left allmulticast mode
[ 1724.246695][ T6137] bridge_slave_1: left promiscuous mode
[ 1724.252650][ T6137] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1724.263369][ T6137] bridge_slave_0: left allmulticast mode
[ 1724.269286][ T6137] bridge_slave_0: left promiscuous mode
[ 1724.275013][ T6137] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1724.613854][ T6137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1724.625482][ T6137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1724.635851][ T6137] bond0 (unregistering): Released all slaves
[ 1724.850974][ T6137] hsr_slave_0: left promiscuous mode
[ 1724.856974][ T6137] hsr_slave_1: left promiscuous mode
[ 1724.866189][ T6137] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1724.873745][ T6137] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1724.882353][ T6137] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1724.889768][ T6137] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1724.913917][ T6137] veth1_macvtap: left promiscuous mode
[ 1724.919567][ T6137] veth0_macvtap: left promiscuous mode
[ 1724.925177][ T6137] veth1_vlan: left promiscuous mode
[ 1724.930653][ T6137] veth0_vlan: left promiscuous mode
[ 1725.366006][ T6137] team0 (unregistering): Port device team_slave_1 removed
[ 1725.402776][ T6137] team0 (unregistering): Port device team_slave_0 removed
[ 1728.041244][T17593] Bluetooth: hci2: command 0x0405 tx timeout
[ 1728.198706][T17593] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1728.210201][T17593] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1728.221551][T17593] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1728.228690][T12520] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[ 1728.238916][T17593] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1728.246704][T17593] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1728.510136][T21417] loop1: detected capacity change from 0 to 512
[ 1728.553242][T12520] usb 3-1: Using ep0 maxpacket: 8
[ 1728.571515][T12520] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1728.614600][T12520] usb 3-1: config 0 has no interfaces?
[ 1728.636209][T12520] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[ 1728.686848][T12520] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1728.797726][T12520] usb 3-1: config 0 descriptor??
[ 1730.316991][T17593] Bluetooth: hci0: command tx timeout
[ 1730.884526][ T1203] usb 3-1: USB disconnect, device number 7
[ 1731.188392][T21437] loop2: detected capacity change from 0 to 1024
[ 1732.265792][T17593] Bluetooth: hci0: command tx timeout
[ 1732.886610][T21458] loop7: detected capacity change from 0 to 1024
[ 1733.048834][T21458] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[ 1733.290853][T21458] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[ 1733.450096][T21458] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1734.612104][T17593] Bluetooth: hci0: command tx timeout
[ 1735.087649][T21483] loop1: detected capacity change from 0 to 512
[ 1736.317852][T17593] Bluetooth: hci2: SCO packet for unknown connection handle 200
[ 1736.870063][T17593] Bluetooth: hci0: command tx timeout
[ 1737.458268][T21495] loop0: detected capacity change from 0 to 512
[ 1737.517351][T21499] loop1: detected capacity change from 0 to 2048
[ 1737.927053][T16702] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1739.127285][T21412] chnl_net:caif_netlink_parms(): no params data found
[ 1739.134514][T21511] loop2: detected capacity change from 0 to 128
[ 1739.278804][T21515] loop7: detected capacity change from 0 to 2048
[ 1739.879834][T21412] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1739.887886][T21412] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1739.901128][T21412] bridge_slave_0: entered allmulticast mode
[ 1739.926368][T21412] bridge_slave_0: entered promiscuous mode
[ 1739.953736][T21412] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1739.979912][T21412] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1740.005690][T21412] bridge_slave_1: entered allmulticast mode
[ 1740.032156][T21412] bridge_slave_1: entered promiscuous mode
[ 1740.339855][T21412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1740.386460][T21412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1740.397920][T21534] loop7: detected capacity change from 0 to 512
[ 1740.472254][T21538] loop1: detected capacity change from 0 to 512
[ 1740.823287][T21412] team0: Port device team_slave_0 added
[ 1740.834341][T21412] team0: Port device team_slave_1 added
[ 1740.875178][T21543] loop0: detected capacity change from 0 to 1024
[ 1740.917769][T21543] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[ 1741.314086][T21543] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[ 1741.381582][T21543] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1742.472471][T21412] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1742.512786][T21412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1742.514435][T19332] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1742.608999][T21412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1742.885196][T21412] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1742.892303][T21412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1742.920973][T21412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1743.278134][T21564] loop0: detected capacity change from 0 to 512
[ 1743.978074][T21568] loop2: detected capacity change from 0 to 1024
[ 1744.244836][T21412] hsr_slave_0: entered promiscuous mode
[ 1744.309815][T21412] hsr_slave_1: entered promiscuous mode
[ 1744.316269][T21412] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1744.323847][T21412] Cannot create hsr debugfs directory
[ 1745.593184][T21580] input: syz1 as /devices/virtual/input/input48
[ 1747.796463][T21602] loop1: detected capacity change from 0 to 1024
[ 1747.855825][T21602] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[ 1747.880664][T21602] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[ 1747.910280][T21602] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1748.011472][T21412] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1748.056366][T21412] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1748.081232][T21412] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1748.155948][T21412] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1749.000478][T21617] loop2: detected capacity change from 0 to 512
[ 1749.212934][T21412] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1749.279896][T21412] 8021q: adding VLAN 0 to HW filter on device team0
[ 1749.332732][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1749.340201][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1749.382949][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1749.390177][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1749.838248][T21623] netlink: 'syz.0.4702': attribute type 1 has an invalid length.
[ 1749.846253][T21623] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4702'.
[ 1749.876963][T21623] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[ 1753.907510][T21412] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1754.984486][T21663] input: syz1 as /devices/virtual/input/input49
[ 1755.281953][T19327] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1755.407905][T21678] loop2: detected capacity change from 0 to 512
[ 1756.468217][T21687] loop2: detected capacity change from 0 to 16
[ 1757.639508][T21412] veth0_vlan: entered promiscuous mode
[ 1757.655257][T21412] veth1_vlan: entered promiscuous mode
[ 1757.691783][T21412] veth0_macvtap: entered promiscuous mode
[ 1757.766484][T21412] veth1_macvtap: entered promiscuous mode
[ 1758.033927][T17593] Bluetooth: hci2: unexpected event for opcode 0x0413
[ 1758.061816][T21412] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1758.828601][T21412] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1759.185535][T21412] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1759.264764][T21412] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1759.296748][T21412] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1759.330973][T21412] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1760.404903][ T6136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1760.424094][ T6136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1760.625902][T21726] loop2: detected capacity change from 0 to 512
[ 1760.659662][T21727] input: syz1 as /devices/virtual/input/input50
[ 1760.759726][ T6136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1760.813338][T21729] loop1: detected capacity change from 0 to 128
[ 1760.825184][ T6136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1767.249773][T21756] loop2: detected capacity change from 0 to 1024
[ 1767.464953][T21756] hfsplus: Unknown parameter '00000000000000000002'
[ 1771.768598][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[ 1773.411916][T21778] loop2: detected capacity change from 0 to 512
[ 1773.464218][   T36] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1773.604885][   T36] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1773.687786][   T36] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1773.741889][   T36] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1773.855023][   T36] bridge_slave_1: left allmulticast mode
[ 1773.860724][   T36] bridge_slave_1: left promiscuous mode
[ 1773.866547][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1773.876440][   T36] bridge_slave_0: left allmulticast mode
[ 1773.882445][   T36] bridge_slave_0: left promiscuous mode
[ 1773.888199][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1774.265031][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1774.276252][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1774.289684][   T36] bond0 (unregistering): Released all slaves
[ 1774.529281][   T36] hsr_slave_0: left promiscuous mode
[ 1774.535585][   T36] hsr_slave_1: left promiscuous mode
[ 1774.541833][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1774.549260][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1774.557625][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1774.572025][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1774.596489][   T36] veth1_macvtap: left promiscuous mode
[ 1774.602266][   T36] veth0_macvtap: left promiscuous mode
[ 1774.608085][   T36] veth1_vlan: left promiscuous mode
[ 1774.613456][   T36] veth0_vlan: left promiscuous mode
[ 1775.079569][   T36] team0 (unregistering): Port device team_slave_1 removed
[ 1775.134330][   T36] team0 (unregistering): Port device team_slave_0 removed
[ 1775.340691][T21782] loop1: detected capacity change from 0 to 1024
[ 1775.502304][T21792] input: syz1 as /devices/virtual/input/input52
[ 1775.569278][T21782] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[ 1775.716070][T21782] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[ 1777.642792][T21782] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1779.694994][T19327] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1780.402335][T21813] cgroup: Unknown subsys name 'cpuset'
[ 1781.084086][   T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1781.116533][   T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1781.125866][   T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1781.134670][   T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1781.143682][   T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1784.067154][T17593] Bluetooth: hci0: command tx timeout
[ 1784.394655][   T30] audit: type=1326 audit(2000040844.463:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21833 comm="syz.3.4758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a6598e969 code=0x7ffc0000
[ 1784.458020][   T30] audit: type=1326 audit(2000040844.463:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21833 comm="syz.3.4758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a6598e969 code=0x7ffc0000
[ 1784.568533][   T30] audit: type=1326 audit(2000040844.463:1673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21833 comm="syz.3.4758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a6598e969 code=0x7ffc0000
[ 1784.691407][   T30] audit: type=1326 audit(2000040844.484:1674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21833 comm="syz.3.4758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a6598e969 code=0x7ffc0000
[ 1784.758588][   T30] audit: type=1326 audit(2000040844.484:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21833 comm="syz.3.4758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a6598e969 code=0x7ffc0000
[ 1784.872653][   T30] audit: type=1326 audit(2000040844.484:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21833 comm="syz.3.4758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a6598e969 code=0x7ffc0000
[ 1785.032990][   T30] audit: type=1326 audit(2000040844.484:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21833 comm="syz.3.4758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a6598e969 code=0x7ffc0000
[ 1785.134910][   T30] audit: type=1326 audit(2000040844.484:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21833 comm="syz.3.4758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a6598e969 code=0x7ffc0000
[ 1785.241241][   T30] audit: type=1326 audit(2000040844.484:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21833 comm="syz.3.4758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f4a6598e969 code=0x7ffc0000
[ 1785.409443][   T30] audit: type=1326 audit(2000040844.484:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21833 comm="syz.3.4758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a6598e969 code=0x7ffc0000
[ 1785.558192][T21820] chnl_net:caif_netlink_parms(): no params data found
[ 1786.023959][T17593] Bluetooth: hci0: command tx timeout
[ 1786.845718][T21820] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1786.925788][T21820] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1786.944149][T21820] bridge_slave_0: entered allmulticast mode
[ 1787.088624][T21820] bridge_slave_0: entered promiscuous mode
[ 1787.250049][T21820] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1787.316955][T21820] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1787.390223][T21820] bridge_slave_1: entered allmulticast mode
[ 1787.568059][T21820] bridge_slave_1: entered promiscuous mode
[ 1788.420023][T17593] Bluetooth: hci0: command tx timeout
[ 1789.777259][T21820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1789.842896][T21820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1790.552489][T17593] Bluetooth: hci0: command tx timeout
[ 1790.670894][T21820] team0: Port device team_slave_0 added
[ 1790.885931][T21820] team0: Port device team_slave_1 added
[ 1791.490534][T21880] input: syz1 as /devices/virtual/input/input53
[ 1791.661098][T21820] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1791.960086][T21820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1791.987534][T21820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1792.938581][T21888] netlink: 'syz.7.4774': attribute type 1 has an invalid length.
[ 1792.954616][T21888] netlink: 152 bytes leftover after parsing attributes in process `syz.7.4774'.
[ 1792.967586][T21888] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[ 1793.006609][T21820] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1793.037248][T21820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1793.089721][T21820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1794.232829][   T51] Bluetooth: hci0: command 0x0405 tx timeout
[ 1795.131892][T21820] hsr_slave_0: entered promiscuous mode
[ 1795.138664][T21820] hsr_slave_1: entered promiscuous mode
[ 1795.146083][T21820] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1795.154484][T21820] Cannot create hsr debugfs directory
[ 1797.502178][T21926] loop2: detected capacity change from 0 to 256
[ 1797.588094][T21926] exfat: Invalid uid '0x00000000ffffffff'
[ 1797.790678][T21820] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1798.059962][T21820] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1799.009258][T21820] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1799.193288][T21820] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1799.759025][T21820] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1800.726365][T21946] netlink: 'syz.7.4791': attribute type 1 has an invalid length.
[ 1800.761900][T21946] netlink: 152 bytes leftover after parsing attributes in process `syz.7.4791'.
[ 1800.814662][T21946] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[ 1800.882847][T21820] 8021q: adding VLAN 0 to HW filter on device team0
[ 1800.969278][T11813] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1800.976590][T11813] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1801.051237][T11813] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1801.058435][T11813] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1801.119179][T21954] loop7: detected capacity change from 0 to 16
[ 1802.673870][T21977] warning: `syz.2.4799' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[ 1803.485955][T21820] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1804.633556][T21996] input: syz1 as /devices/virtual/input/input54
[ 1805.246497][T21999] netlink: 'syz.0.4805': attribute type 1 has an invalid length.
[ 1805.255181][T21999] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4805'.
[ 1805.277762][T21999] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[ 1805.340581][T21820] veth0_vlan: entered promiscuous mode
[ 1805.444279][T21820] veth1_vlan: entered promiscuous mode
[ 1805.569894][T21820] veth0_macvtap: entered promiscuous mode
[ 1805.609524][T21820] veth1_macvtap: entered promiscuous mode
[ 1805.726193][T21820] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1805.789044][T21820] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1805.834606][T21820] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1805.868884][T21820] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1805.905055][T21820] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1805.913800][T21820] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1806.363187][   T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1806.380122][   T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1806.462053][T22004] binfmt_misc: register: failed to install interpreter file ./file0
[ 1808.087443][T17740] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1808.153347][T17740] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1808.792876][T21820] ==================================================================
[ 1808.800993][T21820] BUG: KASAN: slab-use-after-free in binder_add_device+0xa4/0xb0
[ 1808.808752][T21820] Write of size 8 at addr ffff88807a4e3c08 by task syz-executor/21820
[ 1808.816934][T21820] 
[ 1808.819279][T21820] CPU: 1 UID: 0 PID: 21820 Comm: syz-executor Not tainted 6.15.0-syzkaller-03589-gfeacb1774bd5 #0 PREEMPT(full) 
[ 1808.819330][T21820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1808.819355][T21820] Call Trace:
[ 1808.819367][T21820]  <TASK>
[ 1808.819383][T21820]  dump_stack_lvl+0x116/0x1f0
[ 1808.819426][T21820]  print_report+0xcd/0x680
[ 1808.819485][T21820]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1808.819535][T21820]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1808.819583][T21820]  ? __phys_addr+0xe8/0x180
[ 1808.819624][T21820]  ? binder_add_device+0xa4/0xb0
[ 1808.819662][T21820]  kasan_report+0xe0/0x110
[ 1808.819725][T21820]  ? binder_add_device+0xa4/0xb0
[ 1808.819772][T21820]  binder_add_device+0xa4/0xb0
[ 1808.819812][T21820]  binderfs_binder_device_create.isra.0+0xa03/0xc30
[ 1808.819876][T21820]  binderfs_fill_super+0x8d4/0x1360
[ 1808.819941][T21820]  ? __pfx_binderfs_fill_super+0x10/0x10
[ 1808.820015][T21820]  ? shrinker_register+0x1a8/0x260
[ 1808.820079][T21820]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1808.820127][T21820]  ? sget_fc+0x808/0xc20
[ 1808.820178][T21820]  ? apparmor_capable+0x114/0x1d0
[ 1808.820226][T21820]  ? __pfx_set_anon_super_fc+0x10/0x10
[ 1808.820277][T21820]  ? __pfx_binderfs_fill_super+0x10/0x10
[ 1808.820327][T21820]  get_tree_nodev+0xdd/0x190
[ 1808.820382][T21820]  vfs_get_tree+0x8e/0x340
[ 1808.820427][T21820]  path_mount+0x14d4/0x1f70
[ 1808.820465][T21820]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1808.820512][T21820]  ? kmem_cache_free+0x2d1/0x4d0
[ 1808.820567][T21820]  ? __pfx_path_mount+0x10/0x10
[ 1808.820607][T21820]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1808.820656][T21820]  ? putname+0x154/0x1a0
[ 1808.820696][T21820]  __x64_sys_mount+0x28d/0x310
[ 1808.820734][T21820]  ? __pfx___x64_sys_mount+0x10/0x10
[ 1808.820781][T21820]  do_syscall_64+0xcd/0x4c0
[ 1808.820826][T21820]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1808.820867][T21820] RIP: 0033:0x7fd7cdf9010a
[ 1808.820896][T21820] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1808.820943][T21820] RSP: 002b:00007ffd6a772c08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1808.820981][T21820] RAX: ffffffffffffffda RBX: 00007fd7ce010e74 RCX: 00007fd7cdf9010a
[ 1808.821008][T21820] RDX: 00007fd7ce0208cb RSI: 00007fd7ce010e74 RDI: 00007fd7ce0208cb
[ 1808.821036][T21820] RBP: 00007fd7ce0110bd R08: 0000000000000000 R09: 00007fd7ce1b6738
[ 1808.821062][T21820] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd7cdfec1a8
[ 1808.821089][T21820] R13: 00007fd7cdfec180 R14: 0000000000000009 R15: 0000000000000000
[ 1808.821130][T21820]  </TASK>
[ 1808.821144][T21820] 
[ 1809.077848][T21820] Allocated by task 20287:
[ 1809.082271][T21820]  kasan_save_stack+0x33/0x60
[ 1809.087006][T21820]  kasan_save_track+0x14/0x30
[ 1809.091715][T21820]  __kasan_kmalloc+0xaa/0xb0
[ 1809.096338][T21820]  binderfs_binder_device_create.isra.0+0x189/0xc30
[ 1809.102964][T21820]  binderfs_fill_super+0x8d4/0x1360
[ 1809.108191][T21820]  get_tree_nodev+0xdd/0x190
[ 1809.112812][T21820]  vfs_get_tree+0x8e/0x340
[ 1809.117252][T21820]  path_mount+0x14d4/0x1f70
[ 1809.121771][T21820]  __x64_sys_mount+0x28d/0x310
[ 1809.126549][T21820]  do_syscall_64+0xcd/0x4c0
[ 1809.131069][T21820]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1809.136979][T21820] 
[ 1809.139307][T21820] Freed by task 21710:
[ 1809.143374][T21820]  kasan_save_stack+0x33/0x60
[ 1809.148080][T21820]  kasan_save_track+0x14/0x30
[ 1809.152788][T21820]  kasan_save_free_info+0x3b/0x60
[ 1809.157838][T21820]  __kasan_slab_free+0x51/0x70
[ 1809.162638][T21820]  kfree+0x2b4/0x4d0
[ 1809.166552][T21820]  binder_proc_dec_tmpref+0x4c3/0x590
[ 1809.171961][T21820]  binder_deferred_func+0xe87/0x12c0
[ 1809.177263][T21820]  process_one_work+0x9cf/0x1b70
[ 1809.182235][T21820]  worker_thread+0x6c8/0xf10
[ 1809.186857][T21820]  kthread+0x3c5/0x780
[ 1809.190958][T21820]  ret_from_fork+0x5d7/0x6f0
[ 1809.195573][T21820]  ret_from_fork_asm+0x1a/0x30
[ 1809.200354][T21820] 
[ 1809.202678][T21820] The buggy address belongs to the object at ffff88807a4e3c00
[ 1809.202678][T21820]  which belongs to the cache kmalloc-512 of size 512
[ 1809.216749][T21820] The buggy address is located 8 bytes inside of
[ 1809.216749][T21820]  freed 512-byte region [ffff88807a4e3c00, ffff88807a4e3e00)
[ 1809.230385][T21820] 
[ 1809.232710][T21820] The buggy address belongs to the physical page:
[ 1809.239122][T21820] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807a4e2400 pfn:0x7a4e0
[ 1809.249199][T21820] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 1809.257707][T21820] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff)
[ 1809.266217][T21820] page_type: f5(slab)
[ 1809.270239][T21820] raw: 00fff00000000240 ffff88801b441c80 ffffea0000cb7710 ffffea000076e010
[ 1809.278837][T21820] raw: ffff88807a4e2400 000000000010000b 00000000f5000000 0000000000000000
[ 1809.287442][T21820] head: 00fff00000000240 ffff88801b441c80 ffffea0000cb7710 ffffea000076e010
[ 1809.296217][T21820] head: ffff88807a4e2400 000000000010000b 00000000f5000000 0000000000000000
[ 1809.304909][T21820] head: 00fff00000000002 ffffea0001e93801 00000000ffffffff 00000000ffffffff
[ 1809.313602][T21820] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[ 1809.322276][T21820] page dumped because: kasan: bad access detected
[ 1809.328687][T21820] page_owner tracks the page as allocated
[ 1809.334402][T21820] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5847, tgid 5847 (syz-executor), ts 115510655106, free_ts 115425743380
[ 1809.355972][T21820]  post_alloc_hook+0x1c0/0x230
[ 1809.360766][T21820]  get_page_from_freelist+0x135c/0x3950
[ 1809.366343][T21820]  __alloc_frozen_pages_noprof+0x261/0x23f0
[ 1809.372268][T21820]  alloc_pages_mpol+0x1fb/0x550
[ 1809.377162][T21820]  new_slab+0x23b/0x330
[ 1809.381339][T21820]  ___slab_alloc+0xd9c/0x1940
[ 1809.386039][T21820]  __slab_alloc.constprop.0+0x56/0xb0
[ 1809.391435][T21820]  __kmalloc_noprof+0x2f2/0x510
[ 1809.396313][T21820]  fib6_info_alloc+0x40/0x160
[ 1809.401017][T21820]  ip6_route_info_create+0x33f/0x18e0
[ 1809.406406][T21820]  ip6_route_add+0x26/0x1c0
[ 1809.410933][T21820]  addrconf_prefix_route+0x2fd/0x510
[ 1809.416242][T21820]  inet6_addr_add+0x589/0x960
[ 1809.420951][T21820]  inet6_rtm_newaddr+0x1619/0x1c70
[ 1809.426098][T21820]  rtnetlink_rcv_msg+0x95e/0xe90
[ 1809.431070][T21820]  netlink_rcv_skb+0x16d/0x440
[ 1809.435870][T21820] page last free pid 5894 tgid 5894 stack trace:
[ 1809.442207][T21820]  __free_frozen_pages+0x7f8/0x1180
[ 1809.447440][T21820]  __put_partials+0x16d/0x1c0
[ 1809.452138][T21820]  qlist_free_all+0x4d/0x120
[ 1809.456756][T21820]  kasan_quarantine_reduce+0x195/0x1e0
[ 1809.462242][T21820]  __kasan_kmalloc+0x8a/0xb0
[ 1809.466950][T21820]  tomoyo_dump_page+0x4a4/0x720
[ 1809.471824][T21820]  tomoyo_condition+0x736/0x3bd0
[ 1809.476782][T21820]  tomoyo_check_acl+0x1b7/0x410
[ 1809.481657][T21820]  tomoyo_execute_permission+0x176/0x4b0
[ 1809.487323][T21820]  tomoyo_find_next_domain+0x38d/0x20b0
[ 1809.492896][T21820]  tomoyo_bprm_check_security+0x12e/0x1d0
[ 1809.498636][T21820]  security_bprm_check+0x1b9/0x1e0
[ 1809.503772][T21820]  bprm_execve+0x810/0x1650
[ 1809.508301][T21820]  kernel_execve+0x2ef/0x3b0
[ 1809.512919][T21820]  call_usermodehelper_exec_async+0x255/0x4c0
[ 1809.519003][T21820]  ret_from_fork+0x5d7/0x6f0
[ 1809.523620][T21820] 
[ 1809.525946][T21820] Memory state around the buggy address:
[ 1809.531580][T21820]  ffff88807a4e3b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1809.539656][T21820]  ffff88807a4e3b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1809.547735][T21820] >ffff88807a4e3c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1809.555803][T21820]                       ^
[ 1809.560132][T21820]  ffff88807a4e3c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1809.568211][T21820]  ffff88807a4e3d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1809.576278][T21820] ==================================================================
[ 1810.347699][T22025] loop1: detected capacity change from 0 to 2048
[ 1810.349371][T21820] Kernel panic - not syncing: kasan.fault=panic_on_write set ...
[ 1810.349400][T21820] CPU: 0 UID: 0 PID: 21820 Comm: syz-executor Not tainted 6.15.0-syzkaller-03589-gfeacb1774bd5 #0 PREEMPT(full) 
[ 1810.349448][T21820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1810.349472][T21820] Call Trace:
[ 1810.349485][T21820]  <TASK>
[ 1810.349499][T21820]  dump_stack_lvl+0x3d/0x1f0
[ 1810.349543][T21820]  panic+0x71c/0x800
[ 1810.349594][T21820]  ? __pfx_panic+0x10/0x10
[ 1810.349641][T21820]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1810.349678][T21820]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1810.349727][T21820]  ? binder_add_device+0xa4/0xb0
[ 1810.349765][T21820]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1810.349809][T21820]  ? preempt_schedule_common+0x44/0xc0
[ 1810.349872][T21820]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1810.349926][T21820]  ? preempt_schedule_thunk+0x16/0x30
[ 1810.349975][T21820]  ? binder_add_device+0xa4/0xb0
[ 1810.350012][T21820]  end_report+0x159/0x170
[ 1810.350072][T21820]  kasan_report+0xee/0x110
[ 1810.350130][T21820]  ? binder_add_device+0xa4/0xb0
[ 1810.350175][T21820]  binder_add_device+0xa4/0xb0
[ 1810.350212][T21820]  binderfs_binder_device_create.isra.0+0xa03/0xc30
[ 1810.350274][T21820]  binderfs_fill_super+0x8d4/0x1360
[ 1810.350327][T21820]  ? __pfx_binderfs_fill_super+0x10/0x10
[ 1810.350397][T21820]  ? shrinker_register+0x1a8/0x260
[ 1810.350457][T21820]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1810.350502][T21820]  ? sget_fc+0x808/0xc20
[ 1810.350551][T21820]  ? apparmor_capable+0x114/0x1d0
[ 1810.350597][T21820]  ? __pfx_set_anon_super_fc+0x10/0x10
[ 1810.350645][T21820]  ? __pfx_binderfs_fill_super+0x10/0x10
[ 1810.350692][T21820]  get_tree_nodev+0xdd/0x190
[ 1810.350745][T21820]  vfs_get_tree+0x8e/0x340
[ 1810.350787][T21820]  path_mount+0x14d4/0x1f70
[ 1810.350823][T21820]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1810.350867][T21820]  ? kmem_cache_free+0x2d1/0x4d0
[ 1810.350926][T21820]  ? __pfx_path_mount+0x10/0x10
[ 1810.350964][T21820]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1810.351008][T21820]  ? putname+0x154/0x1a0
[ 1810.351047][T21820]  __x64_sys_mount+0x28d/0x310
[ 1810.351083][T21820]  ? __pfx___x64_sys_mount+0x10/0x10
[ 1810.351127][T21820]  do_syscall_64+0xcd/0x4c0
[ 1810.351169][T21820]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1810.351208][T21820] RIP: 0033:0x7fd7cdf9010a
[ 1810.351237][T21820] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1810.351274][T21820] RSP: 002b:00007ffd6a772c08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1810.351310][T21820] RAX: ffffffffffffffda RBX: 00007fd7ce010e74 RCX: 00007fd7cdf9010a
[ 1810.351337][T21820] RDX: 00007fd7ce0208cb RSI: 00007fd7ce010e74 RDI: 00007fd7ce0208cb
[ 1810.351363][T21820] RBP: 00007fd7ce0110bd R08: 0000000000000000 R09: 00007fd7ce1b6738
[ 1810.351388][T21820] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd7cdfec1a8
[ 1810.351413][T21820] R13: 00007fd7cdfec180 R14: 0000000000000009 R15: 0000000000000000
[ 1810.351452][T21820]  </TASK>
[ 1810.354287][T21820] Kernel Offset: disabled