last executing test programs:

21.312244028s ago: executing program 4 (id=1600):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=")
lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000100000000000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file1'}, 0xb)
fdatasync(r0)

19.554536716s ago: executing program 2 (id=1601):
io_uring_setup(0xb3e, &(0x7f00000002c0))
socket(0x2b, 0x1, 0x1)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000180), 0x12)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r2)
r3 = socket(0x40000000015, 0x5, 0x0)
setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4)
bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000000)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r4 = inotify_init1(0x0)
fcntl$setown(r4, 0x8, 0xffffffffffffffff)
fcntl$getownex(r4, 0x10, &(0x7f0000000140)={0x0, <r5=>0x0})
r6 = syz_open_procfs(r5, &(0x7f0000000600)='fd/4\x00')
ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x4004662b, &(0x7f0000000240))

19.278078409s ago: executing program 4 (id=1604):
r0 = memfd_create(&(0x7f0000000200)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<qK\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D4E^7%8\x94y\x90\xf0l\xa0\'Q%\xd4\xda\xee\x81\x98\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca', 0x0)
ftruncate(r0, 0x80079a0)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f000050f000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x2000})

18.042940303s ago: executing program 4 (id=1607):
socket$can_raw(0x1d, 0x3, 0x1)
socket(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0)
recvfrom$phonet(0xffffffffffffffff, 0x0, 0x0, 0x40002000, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='sched_switch\x00', r3}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001340)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xf802, 0xdf, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9f1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x254b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x10001, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x88c}}, 0x0)

14.302670307s ago: executing program 2 (id=1614):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x68}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f8c0000000c0a01010000000000000000010000000900020073797a3200000000600003805c000080080003400000000250000b802c0001800a0001006c696d69740000001c0002800c00014000100000000000050c0002400000000000000000200001800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30"], 0x110}}, 0x0)

14.03348753s ago: executing program 4 (id=1618):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002ac0)=@newtaction={0x88c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0xacd1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xcfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x8, 0x10000, 0x0, 0x0, 0x0, 0x6, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x20000000, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xe53c0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4, 0x2, 0x0, 0x0, 0x0, 0xff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0)

13.832387297s ago: executing program 4 (id=1620):
syz_mount_image$ext4(&(0x7f0000001800)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8c11, &(0x7f0000000400), 0x20, 0x491, &(0x7f0000000480)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r0 = socket$inet6(0xa, 0x3, 0xbe)
getsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, &(0x7f0000000480))
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x8011a3, 0x6)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000002c0))
syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000900)={[{@dioread_lock}, {@noblock_validity}, {@data_err_abort}, {@init_itable}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4be, &(0x7f0000000980)="$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")

13.590864018s ago: executing program 1 (id=1622):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15)
r2 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="b001000000000000", @ANYRES64=0x0, @ANYBLOB='\x00'/108, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/301], 0x1b0)
write$FUSE_BMAP(r2, &(0x7f00000000c0)={0x18}, 0x18)
write$FUSE_INIT(r2, &(0x7f0000000440)={0x50}, 0x50)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000001c0)={0x30}, 0x30)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="17000000610000008d"], 0x10)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0xc5, &(0x7f00000002c0)=ANY=[])
r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
getdents64(r3, 0x0, 0x0)
getdents64(r3, 0x0, 0x0)

12.922119254s ago: executing program 1 (id=1624):
io_uring_setup(0xb3e, &(0x7f00000002c0))
socket(0x2b, 0x1, 0x1)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000180), 0x12)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r2)
r3 = socket(0x40000000015, 0x5, 0x0)
setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4)
bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000000)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r4 = inotify_init1(0x0)
fcntl$setown(r4, 0x8, 0xffffffffffffffff)
fcntl$getownex(r4, 0x10, &(0x7f0000000140)={0x0, <r5=>0x0})
r6 = syz_open_procfs(r5, &(0x7f0000000600)='fd/4\x00')
ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x4004662b, &(0x7f0000000240))

11.516167682s ago: executing program 1 (id=1627):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f8c0000000c0a01010000000000000000010000000900020073797a3200000000600003805c000080080003400000000250000b802c0001800a0001006c696d69740000001c0002800c00014000100000000000050c0002400000000000000000200001800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30"], 0x110}}, 0x0)

11.413125811s ago: executing program 4 (id=1628):
socket$can_raw(0x1d, 0x3, 0x1)
socket(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0)
recvfrom$phonet(0xffffffffffffffff, 0x0, 0x0, 0x40002000, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='sched_switch\x00', r3}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001340)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xf802, 0xdf, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9f1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x254b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x10001, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x88c}}, 0x0)

8.896255352s ago: executing program 3 (id=1637):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00p\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
symlinkat(&(0x7f0000002140)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
execve(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)

6.418422231s ago: executing program 3 (id=1639):
syz_mount_image$ext4(&(0x7f0000001800)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8c11, &(0x7f0000000400), 0x20, 0x491, &(0x7f0000000480)="$eJzs3MtvG8UfAPDvbh5t+vglv1IeLQUMBRHxSNqURw9cQCBxQUKCQ5G4hCStSt0WNUGiVSUKQu0RVeLGAXEDib+AE1wQcEKCI9xRJYR6oXAyWu9u4rp26rhOXOLPR3I8Y4898/XsbGZnnAQwsCrZjyRiR0T8GhHjefb6ApX87trV83N/Xz0/l0St9tqfSb3cX1fPz5VFy9dtLzKTaUT6UdL0hrnFs+dOzFarC2eK/PTSyXemF8+ee/L4ydljC8cWTs0cPvzUoYPPPjPzdE/iHC/u9+15+Y3Lr8wdufzWD19d2pnHHU1xdC+9LleJSqvQ6x659cpuKzsb0slwHxvCmgxFRNZdI/XxPx5DsdJ54/HSh6u+eOsGNBBYN7Varbal/dMXarnYWgM2nyT63QKgP8pf9Nn1b3nboKnHbeGP5/MLoCzua8Utf2Z4+Wp+pOn6tpcqEXHkwj+fZbdoXocYXadKAYCB9k02/3mi1fwvjbsayv2v2EOZiIj/R8SuiLgjInZHxJ1jUS97d0Tcs8b6K035oWief6ZXugqsQ9n877lib+v6+V8x+xuNiaEitzNfKk+OHq8uHCg+k8kYqWT5g3nppu2e+k5YfPvizx+3q79x/pfdsvrrc8GxskR6ZbhpgW5+dmm2Z/F/ELF3uFX8yfJOQBbUnojY2+oNOpijHn/sy33tnmsbfyd6sM9U+zzi0bz/L0QRfx7SSlcmq+9PTm+N6sKB6fKouNGPP118tV39txR/D2T9v63l8b8c/0TSuF+7mD84toY6Lv52qe015c3jb338jyav19OjDT+ztpbtKh95b3Zp6czMymvLfP3+YB7/5P7W439XrHwS90ZEdhDfFxH3R8QDRdsfjIiHImL/KvF//8LDbzdkb9he73f/z+f9v6Wz/l97YujEd1+3q7+D/v/lzSI1Wdx3cv6rLpwpzw6rNrC7Tw0AAAD+W9KI2BFJOrWcTtOpqXzlcndsS6unF5ceP3r63VPz+XflJ2IkLVe68vXgkaRc/5xoyM805Q8V68afDI3V81Nzp6vz/Q4eBtz2NuM/8/tQv1sHrDt/rwWDy/iHwWX8w+Aajk9X+/4SsEm9f/MiIxvRDqAv0lYPdnBeADYB1/8wuIx/GFzGPwyu1ce/bwHCJrVY6/7v+qvlwmGbp9q+vPwnDV1V2lGiPGf1/p1vnvii+F+BG1ppB4lab98w0s4LJ/2OvatEuq6HaNeJ8thepypqRWKjz0QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADr498AAAD//49uycI=")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r0 = socket$inet6(0xa, 0x3, 0xbe)
getsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, &(0x7f0000000480))
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x8011a3, 0x6)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000002c0))
syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000900)={[{@dioread_lock}, {@noblock_validity}, {@data_err_abort}, {@init_itable}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4be, &(0x7f0000000980)="$eJzs3MtvG0UYAPBvN4++m7SURx9Q8xIRhaRJC/TAARBIvSAhwaEcQxqq0rRFTZBoVdEUoXJE8A8ARyQkTlw4gYQQcAJxhTtCqlAvLRyQ0dq7jV0/4jgvqH8/yc7M7oxnv90de7yTdQA9q5Q9JRFbI+LXiBiqZusLlKp/bly7OPXXtYtTSZTLL/+ZVMpdv3Zxqiha1NuSZ0bSiPS9JPY2aXf2/IVTkzMz0+fy/Njc6TfHZs9fePzk6ckT0yemz0wcOXL40PhTT0480VEclxZZn8V1fc87Z/ftPvrqhy9OleO1Hz7Ptndrvr42jqrhjtptpxSlKOcWlg5Wnh9e9qv/t2yrSSf967ghLElfRGSHa6DS/4eiLxYO3lC88O7NzLeNdT9aq40EVkX22bSjYWlf9U9/XgC4TSW6OPSo4hM/+/5bPNZ0ALLOrj6bPU9X4r+RP6pr+iPNvssOV7+x97Wof1f7ly8PLdL+1og4Nv/3x9kjml6HAABYWV9n45/Hmo3/0rqxzfZ8DmU4Ig5ExM6IuCMidkXEnfk46O6IuGeJ7ZduyTeOf37e1FVgHdocEU/nc1v14780L5HczG2rxD+QvH5yZvpgvk9GYmBDlh9v08Y3z//yQat1pZrxX/bI2i/Ggvl2/NG/ob7O8cm5yWWEXOfq5Yg9/c3iT27OBGR7YHdE7Oni9bN9dvLRz/Zl6e1bGtcvHn8bKzDPVP404pHq8Z+PW+IvJNWWWs1Pjm2MmemDY8VZ0ejHn668VJsfqEnXxb+xs5g2dhtsE9nx39z0/M/jL7pBMV87u/Q2rvz2fsvvNI3HP4lj87Ul8vO/5l0gO/8Hk1cq6cF82duTc3PnxiMG8wV1yycW6hb5onwW/8iDzfv/zoh/Psnr7Y2I7CS+NyLui4j9+bbfHxEPLHJEvn/uoTfa76Euz/+43FmxNrL4j7c7/hHDSe18fReJvlPffdWq/c7e/w5XUiP5kk7e/zrdwOXsOwAAAPi/SCtz0Ek6WqRrLk7tis3pzNnZuQOleOvM8epc9XAMpMWVrqGa66Hj+bXhIj9xS/5QROyo/KfRpkp+dOrszLb1DByo3KtT1/8jTUdHq+t+b/VPL8DtY0nzaLV3B37x5cpvDLCm3K8JvUv/h96l/0Pv0v+hdzXr/5cibqzDpgBrzOc/9C79H3qX/g+9S/+HntR4S3zxQwvd3Om/kNh5dFnVVz1RHlqVV55feq2+VYo0an+0o2UiiYjumoi0fZnBDlpft0S6aJlnFtstA8v6TYwssT9PbIiITmtdWrO9WrxDJMm6vTkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACsgH8DAAD//0qp3GU=")

6.197221989s ago: executing program 2 (id=1641):
r0 = memfd_create(&(0x7f0000000200)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<qK\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D4E^7%8\x94y\x90\xf0l\xa0\'Q%\xd4\xda\xee\x81\x98\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca', 0x0)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x0, 0x2012, r0, 0xfffff000)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f000050f000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x2000})

6.121211006s ago: executing program 2 (id=1642):
r0 = syz_mount_image$msdos(&(0x7f0000002280), &(0x7f0000000200)='./file0\x00', 0x8, &(0x7f00000022c0)=ANY=[], 0x1, 0x206, &(0x7f0000002040)="$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")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000003b00090000000000cd00000001000000180003"], 0x2c}}, 0x0)
syz_mount_image$vfat(&(0x7f0000000a40), &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYRES8, @ANYRES16, @ANYRESHEX=r0, @ANYRESOCT=0x0, @ANYRES16, @ANYRES64], 0x5, 0x35a, &(0x7f0000000b00)="$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")
r2 = socket(0x2b, 0x1, 0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r4}, 0x10)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000021000000000000000000001085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='virtio_transport_alloc_pkt\x00', r5}, 0x10)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r6, &(0x7f0000000500)={0x28, 0x0, 0x0, @local}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES64=r3, @ANYRES32, @ANYBLOB], 0x48)
syz_emit_ethernet(0xfffffffffffffd01, &(0x7f0000000000)={@local, @empty, @val={@val={0x88a8, 0x1, 0x1, 0x3}, {0x8100, 0x3}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x0, @val=0x80}}}}}}}, 0x0)
getpeername$packet(r2, 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002300)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r7, &(0x7f0000000b80), 0xfecc)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x20000, 0x0)

5.512281627s ago: executing program 0 (id=1644):
r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000240), 0x0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000580)="21ac2d15c078ace9e7fdbde93cb30798f7f0908051a28e6b682170f0f2cc203c78177710db9d200e2587d5799483b5a2b5736c80418ddc07f6f47ba67ae4dd6da5c64def2b1c5a9bcb7037ef3fbc9f34bd4a7f16766d06cdcd5c01d514190eb7ed7f3de04ecfa32cc19ddaf311c5482c1bee22bf03bb305d95d708a9232943961c34028bf748729435c3313f8502acdfccb1e3e384bc59d4ec38e59243965dd94c55c14ac28301345559b20fc62c23817d7995b500e5c5ce601eb56b8a83d1ab", 0xc0, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r1}, &(0x7f00000001c0)=""/51, 0x33, &(0x7f0000000340)={&(0x7f0000000280)={'crc32\x00'}, &(0x7f0000000040)="6b10b7", 0x3})

5.292314336s ago: executing program 2 (id=1645):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001340)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xf802, 0xdf, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9f1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x254b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x10001, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x88c}}, 0x0)

5.291992895s ago: executing program 3 (id=1646):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
symlinkat(&(0x7f0000002140)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)

5.290716716s ago: executing program 0 (id=1655):
r0 = syz_mount_image$msdos(&(0x7f0000002280), &(0x7f0000000200)='./file0\x00', 0x8, &(0x7f00000022c0)=ANY=[], 0x1, 0x206, &(0x7f0000002040)="$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")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000003b00090000000000cd00000001000000180003"], 0x2c}}, 0x0)
syz_mount_image$vfat(&(0x7f0000000a40), &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYRES8, @ANYRES16, @ANYRESHEX=r0, @ANYRESOCT=0x0, @ANYRES16, @ANYRES64], 0x5, 0x35a, &(0x7f0000000b00)="$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")
r2 = socket(0x2b, 0x1, 0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r4}, 0x10)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000021000000000000000000001085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='virtio_transport_alloc_pkt\x00', r5}, 0x10)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r6, &(0x7f0000000500)={0x28, 0x0, 0x0, @local}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES64=r3, @ANYRES32, @ANYBLOB], 0x48)
syz_emit_ethernet(0xfffffffffffffd01, &(0x7f0000000000)={@local, @empty, @val={@val={0x88a8, 0x1, 0x1, 0x3}, {0x8100, 0x3}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x0, @val=0x80}}}}}}}, 0x0)
getpeername$packet(r2, 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002300)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x20000, 0x0)

5.199995893s ago: executing program 2 (id=1647):
socket$can_raw(0x1d, 0x3, 0x1)
socket(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f00000008c0)="$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")
recvfrom$phonet(0xffffffffffffffff, 0x0, 0x0, 0x40002000, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='sched_switch\x00'}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001340)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xf802, 0xdf, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9f1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x254b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x10001, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x88c}}, 0x0)

4.260843632s ago: executing program 0 (id=1648):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15)
r2 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="b001000000000000", @ANYRES64=0x0, @ANYBLOB='\x00'/108, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/301], 0x1b0)
write$FUSE_BMAP(r2, &(0x7f00000000c0)={0x18}, 0x18)
write$FUSE_INIT(r2, &(0x7f0000000440)={0x50}, 0x50)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000001c0)={0x30}, 0x30)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="17000000610000008d"], 0x10)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0xc5, &(0x7f00000002c0)=ANY=[])
r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
getdents64(r3, 0x0, 0x0)
getdents64(r3, 0x0, 0x0)

4.17651993s ago: executing program 3 (id=1649):
socket$can_raw(0x1d, 0x3, 0x1)
socket(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f00000008c0)="$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")
recvfrom$phonet(0xffffffffffffffff, 0x0, 0x0, 0x40002000, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='sched_switch\x00', r3}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001340)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xf802, 0xdf, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9f1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x254b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x10001, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x88c}}, 0x0)

2.809545015s ago: executing program 3 (id=1650):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00p\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
symlinkat(&(0x7f0000002140)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)

2.802023015s ago: executing program 0 (id=1661):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15)
r2 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="b001000000000000", @ANYRES64=0x0, @ANYBLOB='\x00'/108, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/301], 0x1b0)
write$FUSE_BMAP(r2, &(0x7f00000000c0)={0x18}, 0x18)
write$FUSE_INIT(r2, &(0x7f0000000440)={0x50}, 0x50)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000001c0)={0x30}, 0x30)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="17000000610000008d"], 0x10)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0xc5, &(0x7f00000002c0)=ANY=[])
r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
getdents64(r3, 0x0, 0x0)
getdents64(r3, 0x0, 0x0)

2.702388734s ago: executing program 0 (id=1651):
socket$can_raw(0x1d, 0x3, 0x1)
socket(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0)
recvfrom$phonet(0xffffffffffffffff, 0x0, 0x0, 0x40002000, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='sched_switch\x00', r3}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001340)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xf802, 0xdf, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9f1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x254b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x10001, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x88c}}, 0x0)

2.481807002s ago: executing program 1 (id=1652):
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x0, 0x2012, 0xffffffffffffffff, 0xfffff000)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f000050f000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x2000})

285.497007ms ago: executing program 3 (id=1653):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x68}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f8c0000000c0a01010000000000000000010000000900020073797a3200000000600003805c000080080003400000000250000b802c0001800a0001006c696d69740000001c0002800c00014000100000000000050c0002400000000000000000200001800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30"], 0x110}}, 0x0)

81.546954ms ago: executing program 0 (id=1656):
syz_mount_image$ext4(&(0x7f0000001800)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8c11, &(0x7f0000000400), 0x20, 0x491, &(0x7f0000000480)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r0 = socket$inet6(0xa, 0x3, 0xbe)
getsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, &(0x7f0000000480))
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x8011a3, 0x6)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000002c0))
syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000900)={[{@dioread_lock}, {@noblock_validity}, {@data_err_abort}, {@init_itable}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4be, &(0x7f0000000980)="$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")

78.441324ms ago: executing program 1 (id=1657):
r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000240), 0x0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000580)="21ac2d15c078ace9e7fdbde93cb30798f7f0908051a28e6b682170f0f2cc203c78177710db9d200e2587d5799483b5a2b5736c80418ddc07f6f47ba67ae4dd6da5c64def2b1c5a9bcb7037ef3fbc9f34bd4a7f16766d06cdcd5c01d514190eb7ed7f3de04ecfa32cc19ddaf311c5482c1bee22bf03bb305d95d708a9232943961c34028bf748729435c3313f8502acdfccb1e3e384bc59d4ec38e59243965dd94c55c14ac28301345559b20fc62c23817d7995b500e5c5ce601eb56b8a83d1ab", 0xc0, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r1}, &(0x7f00000001c0)=""/51, 0x33, &(0x7f0000000340)={&(0x7f0000000280)={'crc32\x00'}, &(0x7f0000000040)="6b10b7", 0x3})

0s ago: executing program 1 (id=1658):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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")
lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000001000000000000000200", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file1'}, 0xb)
fdatasync(r0)

kernel console output (not intermixed with test programs):

x7ffc0000
[  133.316059][ T5750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  133.320352][ T5750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  133.324214][   T26] audit: type=1326 audit(133.130:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6370 comm="syz.1.853" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7c5d9a8 code=0x7ffc0000
[  133.332796][   T26] audit: type=1326 audit(133.130:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6370 comm="syz.1.853" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=200 compat=0 ip=0xffffb7c5d9a8 code=0x7ffc0000
[  133.378540][ T5750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  133.380875][ T5750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  133.403378][ T5750] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  133.405554][ T5750] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  133.452539][ T6305] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.466753][ T6233] device veth0_vlan entered promiscuous mode
[  133.496192][ T6382] loop2: detected capacity change from 0 to 1024
[  133.542340][ T6305] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.575980][ T6233] device veth1_vlan entered promiscuous mode
[  133.581622][ T6388] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.860'.
[  133.600043][ T6386] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.860'.
[  133.609443][ T6382] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  133.688113][ T6233] device veth0_macvtap entered promiscuous mode
[  133.692685][ T6233] device veth1_macvtap entered promiscuous mode
[  133.703094][ T6233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  133.705233][ T6233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  133.735827][ T6233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  133.770628][ T6233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  133.772758][ T6233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  133.787541][ T4068] Bluetooth: hci7: command 0x040f tx timeout
[  133.795966][ T6233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  133.798214][ T6233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  133.800342][ T6233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  133.802361][ T6233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  133.804577][ T6233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  133.806448][ T6233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  133.808618][ T6233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  133.813943][ T6233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  133.815982][ T6233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  133.823076][ T6233] batman_adv: batadv0: Interface activated: batadv_slave_0
[  133.826557][ T4831] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  133.848474][ T4831] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  133.856703][ T4831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  133.863362][ T4831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  133.873867][ T4831] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  133.881326][ T4831] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  133.898183][ T4831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  133.902880][ T6233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  133.904935][ T6233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  133.906892][ T6233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  133.916149][ T6233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  133.929376][ T6233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  133.931484][ T6233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  133.933526][ T6233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  133.935535][ T6233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  133.942571][ T6401] loop4: detected capacity change from 0 to 512
[  133.947662][ T6233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  133.949885][ T6233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  133.951922][ T6233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  133.954182][ T6233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  133.956087][ T6233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  133.973837][ T6233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  133.985344][ T6233] batman_adv: batadv0: Interface activated: batadv_slave_1
[  133.989245][ T4831] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  133.991510][ T4831] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  133.993703][ T4831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  134.020072][ T6305] bond0: (slave netdevsim0): Releasing backup interface
[  134.061846][ T6305] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.077810][ T6401] EXT4-fs error (device loop4): ext4_acquire_dquot:6197: comm syz.4.865: Failed to acquire dquot type 1
[  134.081624][ T6401] EXT4-fs (loop4): 1 truncate cleaned up
[  134.082880][ T6401] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  134.126465][ T6233] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  134.128817][ T6233] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  134.134837][ T6233] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  134.151230][ T6233] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  134.403596][ T4637] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  134.405351][ T4637] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  134.418878][ T5750] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  134.481246][ T1810] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  134.483227][ T1810] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  134.487136][ T4637] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  134.679155][ T6305] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  134.715901][ T6430] netlink: 12 bytes leftover after parsing attributes in process `syz.0.876'.
[  134.734311][ T6305] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  134.759390][ T6305] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  134.798265][ T6432] loop1: detected capacity change from 0 to 2048
[  134.844526][ T6305] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  134.946919][ T6432] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  134.969284][ T6432] EXT4-fs (loop1): shut down requested (0)
[  134.977821][ T4068] Bluetooth: hci5: command 0x041b tx timeout
[  135.172980][ T6450] 9pnet: Insufficient options for proto=fd
[  135.215441][ T6452] loop0: detected capacity change from 0 to 512
[  135.222068][ T6305] 8021q: adding VLAN 0 to HW filter on device bond0
[  135.250214][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  135.250758][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  135.256359][ T6305] 8021q: adding VLAN 0 to HW filter on device team0
[  135.276063][ T4637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  135.278193][ T6452] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  135.281234][ T4637] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  135.283079][ T4637] bridge0: port 1(bridge_slave_0) entered blocking state
[  135.284460][ T4637] bridge0: port 1(bridge_slave_0) entered forwarding state
[  135.346565][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  135.393861][ T6452] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  135.417689][ T6452] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  135.452695][ T6452] EXT4-fs (loop0): 1 truncate cleaned up
[  135.453828][ T6452] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,resuid=0x000000000000ee01,debug_want_extra_isize=0x000000000000002e,lazytime,quota,quota,,errors=continue. Quota mode: writeback.
[  135.480725][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  135.483854][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  135.485919][ T1600] bridge0: port 2(bridge_slave_1) entered blocking state
[  135.487317][ T1600] bridge0: port 2(bridge_slave_1) entered forwarding state
[  135.491801][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  135.505640][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  135.521408][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  135.535799][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  135.548831][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  135.626867][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  135.629419][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  135.640906][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  135.648054][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  135.656513][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  135.668704][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  135.689315][ T4348] device hsr_slave_0 left promiscuous mode
[  135.728153][ T4348] device hsr_slave_1 left promiscuous mode
[  135.785454][ T6485] loop2: detected capacity change from 0 to 1024
[  135.792017][ T6484] loop1: detected capacity change from 0 to 1024
[  135.807792][ T4348] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  135.809436][ T4348] batman_adv: batadv0: Removing interface: batadv_slave_0
[  135.824348][ T4348] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  135.825943][ T4348] batman_adv: batadv0: Removing interface: batadv_slave_1
[  135.829660][ T4348] device bridge_slave_1 left promiscuous mode
[  135.831032][ T4348] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.857498][ T6324] Bluetooth: hci7: command 0x0419 tx timeout
[  135.870064][ T4348] device bridge_slave_0 left promiscuous mode
[  135.871448][ T4348] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.891550][ T6484] EXT4-fs (loop1): Ignoring removed mblk_io_submit option
[  135.936048][ T6485] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  136.094290][ T6484] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,barrier,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,noquota,nogrpid,noauto_da_alloc,mblk_io_submit,,errors=continue. Quota mode: none.
[  136.147881][ T4348] device veth1_macvtap left promiscuous mode
[  136.149116][ T4348] device veth0_macvtap left promiscuous mode
[  136.150446][ T4348] device veth1_vlan left promiscuous mode
[  136.152581][ T4348] device veth0_vlan left promiscuous mode
[  136.276173][ T6487] vhci_hcd: default hub control req: 4008 v0007 i0000 l0
[  136.507092][ T6507] xt_connbytes: Forcing CT accounting to be enabled
[  136.508861][ T6507] Cannot find add_set index 0 as target
[  136.997587][ T6323] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  137.057579][ T6322] Bluetooth: hci5: command 0x040f tx timeout
[  137.174801][ T4348] team0 (unregistering): Port device team_slave_1 removed
[  137.206524][ T4348] team0 (unregistering): Port device team_slave_0 removed
[  137.208318][ T6323] usb 1-1: device descriptor read/64, error -71
[  137.247661][ T4348] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  137.310269][ T4348] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  137.487506][ T6323] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  137.595579][ T4348] bond0 (unregistering): Released all slaves
[  137.677648][ T6323] usb 1-1: device descriptor read/64, error -71
[  137.739447][ T6305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  137.797666][ T6323] usb usb1-port1: attempt power cycle
[  138.089259][ T4637] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  138.091021][ T4637] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  138.129371][ T6305] 8021q: adding VLAN 0 to HW filter on device batadv0
[  138.186198][  T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  138.188873][  T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  138.228284][ T6323] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  138.239718][ T1810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  138.241923][ T1810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  138.244280][ T1810] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  138.246823][ T1810] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  138.265521][ T6305] device veth0_vlan entered promiscuous mode
[  138.289255][ T6305] device veth1_vlan entered promiscuous mode
[  138.337856][ T6323] usb 1-1: device descriptor read/8, error -71
[  138.364185][  T378] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  138.366536][  T378] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  138.369164][  T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  138.383151][  T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  138.400847][ T6305] device veth0_macvtap entered promiscuous mode
[  138.428856][ T6305] device veth1_macvtap entered promiscuous mode
[  138.458892][ T6305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  138.467420][ T6305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  138.471252][ T6305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  138.481377][ T6305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  138.483423][ T6305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  138.485412][ T6305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  138.501662][ T6305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  138.503759][ T6305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  138.505593][ T6305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  138.521900][ T6305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  138.523917][ T6305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  138.525831][ T6305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  138.542185][ T6305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  138.544231][ T6305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  138.563750][ T6305] batman_adv: batadv0: Interface activated: batadv_slave_0
[  138.580718][ T5750] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  138.583948][ T5750] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  138.586123][ T5750] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  138.594024][ T6539] loop2: detected capacity change from 0 to 1024
[  138.603991][ T5750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  138.607647][ T6323] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  138.608262][ T6305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  138.611111][ T6305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  138.612931][ T6305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  138.614953][ T6305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  138.616809][ T6305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  138.637336][ T6305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  138.639291][ T6305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  138.647606][ T6305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  138.649726][ T6305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  138.651992][ T6305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  138.654019][ T6305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  138.656007][ T6305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  138.667753][ T6305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  138.669808][ T6305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  138.674586][ T6539] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  138.680261][ T6305] batman_adv: batadv0: Interface activated: batadv_slave_1
[  138.707574][ T6323] usb 1-1: device descriptor read/8, error -71
[  138.798413][ T6305] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  138.800225][ T6305] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  138.801945][ T6305] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  138.814022][ T6305] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  138.828450][ T6323] usb usb1-port1: unable to enumerate USB device
[  138.865661][ T5750] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  138.867933][ T5750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  138.940819][ T6552] xt_connbytes: Forcing CT accounting to be enabled
[  138.942425][ T6552] Cannot find add_set index 0 as target
[  138.956115][ T6549] netlink: 12 bytes leftover after parsing attributes in process `syz.4.922'.
[  139.138828][    T7] Bluetooth: hci5: command 0x0419 tx timeout
[  139.226588][ T1600] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  139.229606][ T1600] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  139.232819][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  139.310781][  T378] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  139.312554][  T378] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  139.316229][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  139.472264][   T26] kauditd_printk_skb: 72 callbacks suppressed
[  139.472279][   T26] audit: type=1326 audit(139.430:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6564 comm="syz.1.925" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7c5d9a8 code=0x7ffc0000
[  139.477912][   T26] audit: type=1326 audit(139.430:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6564 comm="syz.1.925" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffffb7c5d9a8 code=0x7ffc0000
[  139.502626][   T26] audit: type=1326 audit(139.430:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6564 comm="syz.1.925" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7c5d9a8 code=0x7ffc0000
[  139.506932][   T26] audit: type=1326 audit(139.440:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6564 comm="syz.1.925" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb7c5d9a8 code=0x7ffc0000
[  139.550461][   T26] audit: type=1326 audit(139.440:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6564 comm="syz.1.925" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7c5d9a8 code=0x7ffc0000
[  139.554567][   T26] audit: type=1326 audit(139.450:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6564 comm="syz.1.925" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb7c5d9a8 code=0x7ffc0000
[  139.578866][   T26] audit: type=1326 audit(139.450:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6564 comm="syz.1.925" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7c5d9a8 code=0x7ffc0000
[  139.593488][   T26] audit: type=1326 audit(139.450:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6564 comm="syz.1.925" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=235 compat=0 ip=0xffffb7c5d9a8 code=0x7ffc0000
[  139.618729][   T26] audit: type=1326 audit(139.450:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6564 comm="syz.1.925" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7c5d9a8 code=0x7ffc0000
[  139.855492][ T6577] loop1: detected capacity change from 0 to 512
[  139.923317][   T26] audit: type=1326 audit(139.880:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6579 comm="syz.0.932" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf7cf9a8 code=0x7ffc0000
[  139.961590][ T6577] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000004735,inode_readahead_blks=0x0000000000000800,norecovery,user_xattr,,errors=continue. Quota mode: writeback.
[  140.247133][ T6598] loop0: detected capacity change from 0 to 512
[  140.302760][ T6602] loop1: detected capacity change from 0 to 764
[  140.309087][ T6598] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c018, mo2=0002]
[  140.310776][ T6598] System zones: 1-12
[  140.313796][ T6598] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.939: bg 0: block 131: padding at end of block bitmap is not set
[  140.349226][ T6598] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6183: Corrupt filesystem
[  140.360755][ T6598] EXT4-fs (loop0): 1 truncate cleaned up
[  140.365445][ T6598] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,grpquota,i_version,data_err=ignore,,errors=continue. Quota mode: writeback.
[  140.378267][ T6602] rock: directory entry would overflow storage
[  140.379676][ T6602] rock: sig=0x4f50, size=4, remaining=3
[  140.380699][ T6602] iso9660: Corrupted directory entry in block 6 of inode 1792
[  140.572742][ T6613] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow
[  140.810057][ T6622] IPv6: NLM_F_REPLACE set, but no existing node found!
[  140.974793][ T6634] netlink: 24 bytes leftover after parsing attributes in process `syz.2.956'.
[  141.154829][ T6645] loop1: detected capacity change from 0 to 1024
[  141.219816][ T6645] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  141.249017][ T6650] device wireguard0 entered promiscuous mode
[  141.711153][ T6662] loop0: detected capacity change from 0 to 256
[  141.845046][ T6666] atomic_op 00000000c831ecf9 conn xmit_atomic 0000000000000000
[  143.500600][ T6705] loop2: detected capacity change from 0 to 2048
[  143.523819][ T6710] loop3: detected capacity change from 0 to 512
[  143.529814][ T6705]  loop2: p1 < > p4
[  143.532376][ T6705] loop2: p4 size 8388608 extends beyond EOD, truncated
[  143.596730][ T6707] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.670382][ T6710] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  143.693134][ T5942] udevd[5942]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  143.704619][ T4726] udevd[4726]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  143.756635][ T6707] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.061187][ T6707] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.077554][ T6719] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.089800][ T6721] bridge0: port 1(bridge_slave_0) entered blocking state
[  144.091461][ T6721] bridge0: port 1(bridge_slave_0) entered forwarding state
[  144.103032][ T6721] device bridge0 entered promiscuous mode
[  144.164503][ T6707] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.226309][ T6724] loop2: detected capacity change from 0 to 2048
[  144.270144][ T6724] Alternate GPT is invalid, using primary GPT.
[  144.271608][ T6724]  loop2: p1 p2 p3
[  144.328864][ T6707] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  144.343312][ T6707] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  144.353308][ T6707] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  144.359803][ T6707] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  144.361729][ T3643] Alternate GPT is invalid, using primary GPT.
[  144.363089][ T3643]  loop2: p1 p2 p3
[  144.712229][ T4726] udevd[4726]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  144.788276][ T4160] udevd[4160]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  144.810992][ T6756] loop4: detected capacity change from 0 to 1024
[  144.845499][ T4726] udevd[4726]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[  144.910388][   T26] kauditd_printk_skb: 40 callbacks suppressed
[  144.910411][   T26] audit: type=1326 audit(144.870:1696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6760 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf7cf9a8 code=0x7ffc0000
[  144.915779][   T26] audit: type=1326 audit(144.870:1697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6760 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=178 compat=0 ip=0xffffaf7cf9a8 code=0x7ffc0000
[  144.949229][   T26] audit: type=1326 audit(144.870:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6760 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf7cf9a8 code=0x7ffc0000
[  144.953468][   T26] audit: type=1326 audit(144.870:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6760 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=107 compat=0 ip=0xffffaf7cf9a8 code=0x7ffc0000
[  144.963644][ T6767] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1001'.
[  144.967925][ T6756] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  145.013688][   T26] audit: type=1326 audit(144.870:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6760 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf7cf9a8 code=0x7ffc0000
[  145.018478][   T26] audit: type=1326 audit(144.870:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6760 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=109 compat=0 ip=0xffffaf7cf9a8 code=0x7ffc0000
[  145.022863][   T26] audit: type=1326 audit(144.870:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6760 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf7cf9a8 code=0x7ffc0000
[  145.463819][ T6786] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.717699][ T6839] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1007'.
[  145.725042][ T6839] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1007'.
[  145.781010][ T6786] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.858762][ T6786] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.179035][ T6786] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.499657][ T6786] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  146.512295][ T6786] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  146.526459][ T6786] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  146.545591][ T6786] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  147.622748][ T6869] netlink: 'syz.0.1017': attribute type 10 has an invalid length.
[  147.948875][   T26] audit: type=1326 audit(147.910:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6879 comm="syz.0.1021" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf7cf9a8 code=0x7ffc0000
[  147.958368][   T26] audit: type=1326 audit(147.920:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6879 comm="syz.0.1021" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf7cf9a8 code=0x7ffc0000
[  148.129259][ T6887] loop0: detected capacity change from 0 to 1024
[  148.168761][ T6894] loop1: detected capacity change from 0 to 128
[  148.443276][ T6887] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  148.875575][ T6905] binfmt_misc: register: failed to install interpreter file ./file0
[  148.882628][ T6905] loop3: detected capacity change from 0 to 512
[  148.983167][   T26] audit: type=1326 audit(148.940:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6908 comm="syz.2.1032" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff807099a8 code=0x7ffc0000
[  148.988734][ T6905] EXT2-fs (loop3): error: couldn't mount because of unsupported optional features (4740)
[  149.084633][ T6911] loop1: detected capacity change from 0 to 2048
[  149.092229][ T6915] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0000 with DS=0x2
[  149.109979][ T6911]  loop1: p1 < > p2 p3 < p5 > p4
[  149.110977][ T6911] loop1: partition table partially beyond EOD, truncated
[  149.112558][ T6911] loop1: p1 start 4278190080 is beyond EOD, truncated
[  149.113932][ T6911] loop1: p2 start 16908800 is beyond EOD, truncated
[  149.137887][ T6911] loop1: p4 start 11326 is beyond EOD, truncated
[  149.139207][ T6911] loop1: p5 start 16908800 is beyond EOD, truncated
[  149.194640][ T3643]  loop1: p1 < > p2 p3 < p5 > p4
[  149.195832][ T3643] loop1: partition table partially beyond EOD, truncated
[  149.198072][ T3643] loop1: p1 start 4278190080 is beyond EOD, truncated
[  149.199411][ T3643] loop1: p2 start 16908800 is beyond EOD, truncated
[  149.202440][ T3643] loop1: p4 start 11326 is beyond EOD, truncated
[  149.203739][ T3643] loop1: p5 start 16908800 is beyond EOD, truncated
[  149.218384][ T6911] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  149.220223][ T6911] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  149.842919][ T4348] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  149.844686][ T4348] batman_adv: batadv0: Removing interface: batadv_slave_0
[  149.846924][ T4348] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  149.863011][ T4348] batman_adv: batadv0: Removing interface: batadv_slave_1
[  149.877809][ T4348] device bridge_slave_1 left promiscuous mode
[  149.879182][ T4348] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.905512][ T4726] udevd[4726]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  149.939220][ T4348] device bridge_slave_0 left promiscuous mode
[  149.940662][ T4348] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.058157][ T4348] device veth1_macvtap left promiscuous mode
[  150.059560][ T4348] device veth0_macvtap left promiscuous mode
[  150.060783][ T4348] device veth1_vlan left promiscuous mode
[  150.062033][ T4348] device veth0_vlan left promiscuous mode
[  150.078758][ T4726] udevd[4726]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  150.433409][ T6957] loop1: detected capacity change from 0 to 1024
[  150.532624][ T6957] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  150.779650][   T26] kauditd_printk_skb: 4 callbacks suppressed
[  150.779662][   T26] audit: type=1326 audit(150.740:1710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6972 comm="syz.4.1056" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8edeb9a8 code=0x7ffc0000
[  150.785577][   T26] audit: type=1326 audit(150.740:1711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6972 comm="syz.4.1056" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8edeb9a8 code=0x7ffc0000
[  150.802014][   T26] audit: type=1326 audit(150.760:1712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6972 comm="syz.4.1056" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=135 compat=0 ip=0xffff8edeb9a8 code=0x7ffc0000
[  150.815869][   T26] audit: type=1326 audit(150.760:1713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6972 comm="syz.4.1056" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8edeb9a8 code=0x7ffc0000
[  150.851647][   T26] audit: type=1326 audit(150.760:1714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6972 comm="syz.4.1056" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8edeb9a8 code=0x7ffc0000
[  150.860676][ T4348] team0 (unregistering): Port device team_slave_1 removed
[  150.891989][ T4348] team0 (unregistering): Port device team_slave_0 removed
[  150.934998][ T4348] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  150.989003][ T4348] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  151.244160][ T4348] bond0 (unregistering): Released all slaves
[  151.629922][ T6948] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1046'.
[  151.631755][ T6948] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1046'.
[  151.923083][ T7000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1067'.
[  152.125762][ T7009] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1070'.
[  152.528907][ T7024] loop2: detected capacity change from 0 to 1024
[  152.531530][   T26] audit: type=1326 audit(152.490:1715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7025 comm="syz.0.1080" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf7cf9a8 code=0x7ffc0000
[  152.535870][   T26] audit: type=1326 audit(152.490:1716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7025 comm="syz.0.1080" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf7cf9a8 code=0x7ffc0000
[  152.577037][   T26] audit: type=1326 audit(152.490:1717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7027 comm="syz.1.1079" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7c5d9a8 code=0x7ffc0000
[  152.590313][   T26] audit: type=1326 audit(152.500:1718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7025 comm="syz.0.1080" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffaf7cf9a8 code=0x7ffc0000
[  152.594647][   T26] audit: type=1326 audit(152.500:1719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7025 comm="syz.0.1080" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf7cf9a8 code=0x7ffc0000
[  152.632019][ T7031] loop0: detected capacity change from 0 to 512
[  152.646422][ T7032] ALSA: seq fatal error: cannot create timer (-22)
[  152.676769][ T7031] EXT4-fs (loop0): Ignoring removed nobh option
[  152.678296][ T7031] EXT4-fs (loop0): Ignoring removed nobh option
[  152.688967][ T7031] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  152.716856][ T7031] EXT4-fs (loop0): failed to initialize system zone (-117)
[  152.718667][ T7031] EXT4-fs (loop0): mount failed
[  152.719792][ T7024] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  153.037528][ T7041] netlink: 'syz.3.1083': attribute type 12 has an invalid length.
[  153.039175][ T7041] netlink: 14585 bytes leftover after parsing attributes in process `syz.3.1083'.
[  153.200528][ T7048] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1087'.
[  153.214903][ T7048] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  153.216570][ T7048] batman_adv: batadv0: Removing interface: batadv_slave_0
[  153.244938][ T7048] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  153.246477][ T7048] batman_adv: batadv0: Removing interface: batadv_slave_1
[  153.591335][ T7059] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.696945][ T7059] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.791111][ T7069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1094'.
[  153.819998][ T7059] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.897455][ T7059] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.931549][ T7069] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.933281][ T7069] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.979668][ T7069] device bridge_slave_1 left promiscuous mode
[  153.981042][ T7069] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.044936][ T7069] device bridge_slave_0 left promiscuous mode
[  154.046336][ T7069] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.158709][ T7072] loop4: detected capacity change from 0 to 512
[  154.252481][ T7072] EXT4-fs (loop4): failed to initialize system zone (-117)
[  154.254130][ T7072] EXT4-fs (loop4): mount failed
[  154.278676][ T7059] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  154.306162][ T7059] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  154.332079][ T7059] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  154.358022][ T7059] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  155.991368][ T7111] loop2: detected capacity change from 0 to 512
[  156.121085][ T7111] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  156.464219][ T7133] loop2: detected capacity change from 0 to 128
[  156.549112][ T7133] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  156.568711][ T7137] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1120'.
[  156.718166][ T7141] loop2: detected capacity change from 0 to 512
[  156.831900][ T7141] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  157.223624][ T7162] loop1: detected capacity change from 0 to 512
[  157.262751][ T7168] futex_wake_op: syz.0.1133 tries to shift op by 144; fix this program
[  157.286391][ T7162] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,auto_da_alloc,minixdf,,errors=continue. Quota mode: writeback.
[  157.972441][ T7195] loop0: detected capacity change from 0 to 512
[  158.218996][ T7195] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1143: bg 0: block 393: padding at end of block bitmap is not set
[  158.267612][ T7195] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6183: Corrupt filesystem
[  158.275719][ T7195] EXT4-fs (loop0): 2 truncates cleaned up
[  158.276872][ T7195] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  158.857576][ T7228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1156'.
[  158.957074][   T26] kauditd_printk_skb: 72 callbacks suppressed
[  158.957088][   T26] audit: type=1326 audit(158.910:1792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7235 comm="syz.0.1160" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf7cf9a8 code=0x7ffc0000
[  158.980392][ T7232] loop4: detected capacity change from 0 to 1024
[  158.983425][   T26] audit: type=1326 audit(158.940:1793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7235 comm="syz.0.1160" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf7cf9a8 code=0x7ffc0000
[  158.992317][   T26] audit: type=1326 audit(158.960:1794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7235 comm="syz.0.1160" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffaf7cf9a8 code=0x7ffc0000
[  159.005706][   T26] audit: type=1326 audit(158.960:1795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7235 comm="syz.0.1160" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf7cf9a8 code=0x7ffc0000
[  159.020185][   T26] audit: type=1326 audit(158.960:1796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7235 comm="syz.0.1160" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf7cf9a8 code=0x7ffc0000
[  159.024307][   T26] audit: type=1326 audit(158.980:1797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7235 comm="syz.0.1160" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffaf7cf9a8 code=0x7ffc0000
[  159.065245][   T26] audit: type=1326 audit(158.980:1798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7235 comm="syz.0.1160" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf7cf9a8 code=0x7ffc0000
[  159.073339][   T26] audit: type=1326 audit(158.980:1799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7235 comm="syz.0.1160" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf7cf9a8 code=0x7ffc0000
[  159.086035][   T26] audit: type=1326 audit(158.980:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7235 comm="syz.0.1160" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffaf7cf9a8 code=0x7ffc0000
[  159.091244][ T7232] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,abort,dioread_lock,norecovery,resgid=0x0000000000000000,lazytime,noload,usrquota,noload,,errors=continue. Quota mode: writeback.
[  159.105704][ T7232] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  159.111042][ T7232] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98
[  159.112785][   T26] audit: type=1326 audit(158.980:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7235 comm="syz.0.1160" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf7cf9a8 code=0x7ffc0000
[  159.436895][ T7253] netlink: 'syz.4.1167': attribute type 10 has an invalid length.
[  159.462250][ T7253] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.464092][ T7253] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.486149][ T7253] bridge0: port 2(bridge_slave_1) entered blocking state
[  159.487709][ T7253] bridge0: port 2(bridge_slave_1) entered forwarding state
[  159.489229][ T7253] bridge0: port 1(bridge_slave_0) entered blocking state
[  159.490637][ T7253] bridge0: port 1(bridge_slave_0) entered forwarding state
[  159.535808][ T7253] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  159.963285][ T7276] loop4: detected capacity change from 0 to 512
[  160.024171][ T7279] atomic_op 000000009d508863 conn xmit_atomic 0000000000000000
[  160.028021][ T7276] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  160.308272][ T7291] loop3: detected capacity change from 0 to 512
[  160.349821][ T7291] EXT4-fs (loop3): Ignoring removed oldalloc option
[  160.351395][ T7291] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  160.362268][ T7295] loop4: detected capacity change from 0 to 512
[  160.391704][ T7291] EXT4-fs (loop3): 1 truncate cleaned up
[  160.392852][ T7291] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback.
[  160.518953][ T7295] EXT4-fs (loop4): orphan cleanup on readonly fs
[  160.521503][ T7295] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1185: bg 0: block 248: padding at end of block bitmap is not set
[  160.525948][ T7295] EXT4-fs error (device loop4): ext4_acquire_dquot:6197: comm syz.4.1185: Failed to acquire dquot type 1
[  160.603728][ T7295] EXT4-fs (loop4): 1 truncate cleaned up
[  160.609693][ T7295] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  160.738841][ T7308] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1191'.
[  160.740732][ T7308] device bridge_slave_1 left promiscuous mode
[  160.742010][ T7308] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.814813][ T7308] device bridge_slave_0 left promiscuous mode
[  160.816311][ T7308] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.838678][ T7314] loop0: detected capacity change from 0 to 512
[  160.921930][ T7314] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  160.969883][ T7310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1193'.
[  161.100538][ T7310] device hsr_slave_1 left promiscuous mode
[  161.227082][ T7326] loop0: detected capacity change from 0 to 1024
[  161.330713][ T7326] EXT4-fs (loop0): Ignoring removed orlov option
[  161.332104][ T7326] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[  161.363897][ T7326] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none.
[  162.522246][ T7339] xt_CT: No such helper "pptp"
[  162.579303][ T7351] loop3: detected capacity change from 0 to 256
[  162.635436][ T7353] netlink: 'syz.1.1208': attribute type 10 has an invalid length.
[  162.697952][ T7353] device geneve0 entered promiscuous mode
[  162.704770][ T7353] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  162.923299][ T6322] hid-generic 0000:0000:0000.0002: unknown main item tag 0x1
[  162.924857][ T6322] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  162.926347][ T6322] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  162.934085][ T7365] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  162.936962][ T7365] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  162.954453][ T6322] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  162.956000][ T6322] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  162.957901][ T7365] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  162.962548][ T6322] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  162.964158][ T6322] hid-generic 0000:0000:0000.0002: unknown main item tag 0x4
[  162.965591][ T6322] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  162.967017][ T6322] hid-generic 0000:0000:0000.0002: unknown main item tag 0x2
[  162.972125][ T6322] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  162.976063][ T6322] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  162.979937][ T6322] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  162.982748][ T6322] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  162.986620][ T6322] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  162.989666][ T6322] hid-generic 0000:0000:0000.0002: unknown main item tag 0x2
[  162.993558][ T6322] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  162.996389][ T6322] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  163.000541][ T6322] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  163.004489][ T6322] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  163.008829][ T6322] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  163.012874][ T6322] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  163.015800][ T6322] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  163.028257][ T6322] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  163.043706][ T7365] bond0: (slave bond_slave_0): Releasing backup interface
[  163.108865][ T7365] bond0: (slave bond_slave_1): Releasing backup interface
[  163.233892][ T7365] team0: Port device team_slave_0 removed
[  163.268848][ T7365] team0: Port device team_slave_1 removed
[  163.493108][ T7384] netlink: 'syz.1.1221': attribute type 4 has an invalid length.
[  163.721924][ T7394] vhci_hcd: default hub control req: 0200 v0000 i0000 l0
[  164.010423][ T7411] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  164.026586][ T7416] loop4: detected capacity change from 0 to 164
[  164.061701][ T7416] Unable to read rock-ridge attributes
[  164.071783][ T7416] Unable to read rock-ridge attributes
[  164.120508][   T26] kauditd_printk_skb: 289 callbacks suppressed
[  164.120520][   T26] audit: type=1326 audit(164.080:2089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7419 comm="syz.3.1235" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99cb39a8 code=0x7ffc0000
[  164.128835][   T26] audit: type=1326 audit(164.090:2090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7419 comm="syz.3.1235" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99cb39a8 code=0x7ffc0000
[  164.135677][   T26] audit: type=1326 audit(164.090:2091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7419 comm="syz.3.1235" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=196 compat=0 ip=0xffff99cb39a8 code=0x7ffc0000
[  164.156027][   T26] audit: type=1326 audit(164.090:2092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7419 comm="syz.3.1235" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99cb39a8 code=0x7ffc0000
[  164.193388][   T26] audit: type=1326 audit(164.090:2093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7419 comm="syz.3.1235" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99cb39a8 code=0x7ffc0000
[  164.208553][   T26] audit: type=1326 audit(164.090:2094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7419 comm="syz.3.1235" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=127 compat=0 ip=0xffff99cb39a8 code=0x7ffc0000
[  164.217624][   T26] audit: type=1326 audit(164.090:2095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7419 comm="syz.3.1235" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99cb39a8 code=0x7ffc0000
[  164.231448][   T26] audit: type=1326 audit(164.090:2096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7419 comm="syz.3.1235" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99cb39a8 code=0x7ffc0000
[  164.365997][ T7434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1243'.
[  164.891292][   T26] audit: type=1326 audit(164.850:2097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7458 comm="syz.3.1254" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99cb39a8 code=0x7ffc0000
[  164.927923][   T26] audit: type=1326 audit(164.880:2098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7458 comm="syz.3.1254" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=137 compat=0 ip=0xffff99cb39a8 code=0x7ffc0000
[  164.992072][ T6321] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x4
[  164.993709][ T6321] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x2
[  165.001063][ T6321] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x3
[  165.013901][ T6321] hid-generic 0000:3000000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  165.440858][ T7480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1263'.
[  165.965448][ T7491] loop0: detected capacity change from 0 to 1024
[  166.206612][ T7491] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  166.297206][ T7501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1271'.
[  166.718774][ T7523] tipc: Started in network mode
[  166.719891][ T7523] tipc: Node identity 72490afa6e26, cluster identity 4711
[  166.747692][ T7523] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  166.870786][ T7531] device batadv0 entered promiscuous mode
[  166.903519][ T7531] device batadv_slave_0 entered promiscuous mode
[  166.905058][ T7531] device batadv_slave_0 left promiscuous mode
[  166.981348][ T7531] device batadv0 left promiscuous mode
[  167.072625][ T7520] tipc: Resetting bearer <eth:syzkaller0>
[  167.140423][ T7520] tipc: Disabling bearer <eth:syzkaller0>
[  167.406484][ T7564] loop1: detected capacity change from 0 to 164
[  167.482097][ T7564] rock: corrupted directory entry. extent=28, offset=0, size=16777216
[  167.535999][ T7573] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1296'.
[  168.142355][ T7602] loop4: detected capacity change from 0 to 512
[  168.213969][ T7606] loop0: detected capacity change from 0 to 1024
[  168.235536][ T7602] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  168.351596][ T7606] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,nombcache,dioread_lock,inode_readahead_blks=0x0000000000000001,debug_want_extra_isize=0x000000000000007e,lazytime,init_itable=0x0000000000000005,usrquota,nojournal_checksum,,errors=continue. Quota mode: writeback.
[  168.988428][ T6321] Bluetooth: hci1: command 0x0406 tx timeout
[  168.990926][ T6321] Bluetooth: hci3: command 0x0406 tx timeout
[  168.994413][ T6321] Bluetooth: hci2: command 0x0406 tx timeout
[  169.123554][ T7632] loop4: detected capacity change from 0 to 2048
[  169.185581][ T7632] Alternate GPT is invalid, using primary GPT.
[  169.187009][ T7632]  loop4: p2 p3 p7
[  169.246479][ T7639] loop0: detected capacity change from 0 to 512
[  169.371274][ T4160] udevd[4160]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  169.381117][ T7639] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  169.421225][ T4726] udevd[4726]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  169.427605][ T5942] udevd[5942]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory
[  169.800700][ T7656] loop1: detected capacity change from 0 to 512
[  170.446965][ T5941] udevd[5941]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory
[  170.454341][ T4726] udevd[4726]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  170.465146][ T5942] udevd[5942]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  170.472267][ T7661] 9pnet: p9_fd_create_tcp (7661): problem connecting socket to 127.0.0.1
[  170.575354][ T7656] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  170.610530][   T26] kauditd_printk_skb: 49 callbacks suppressed
[  170.610544][   T26] audit: type=1326 audit(170.570:2148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7673 comm="syz.3.1332" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99cb39a8 code=0x7ffc0000
[  170.616256][   T26] audit: type=1326 audit(170.570:2149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7673 comm="syz.3.1332" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff99cb39a8 code=0x7ffc0000
[  170.659479][   T26] audit: type=1326 audit(170.570:2150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7673 comm="syz.3.1332" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99cb39a8 code=0x7ffc0000
[  170.664141][   T26] audit: type=1326 audit(170.570:2151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7673 comm="syz.3.1332" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff99cb39a8 code=0x7ffc0000
[  170.668801][   T26] audit: type=1326 audit(170.570:2152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7673 comm="syz.3.1332" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99cb39a8 code=0x7ffc0000
[  170.673454][   T26] audit: type=1326 audit(170.570:2153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7673 comm="syz.3.1332" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff99cb39a8 code=0x7ffc0000
[  170.689343][   T26] audit: type=1326 audit(170.570:2154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7673 comm="syz.3.1332" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99cb39a8 code=0x7ffc0000
[  170.693830][   T26] audit: type=1326 audit(170.570:2155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7673 comm="syz.3.1332" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff99cb39a8 code=0x7ffc0000
[  170.707311][   T26] audit: type=1326 audit(170.570:2156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7673 comm="syz.3.1332" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99cb39a8 code=0x7ffc0000
[  170.711793][   T26] audit: type=1326 audit(170.570:2157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7673 comm="syz.3.1332" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=134 compat=0 ip=0xffff99cb39a8 code=0x7ffc0000
[  170.763100][ T7681] loop2: detected capacity change from 0 to 512
[  170.884936][ T7681] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  170.902946][ T7692] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1337'.
[  171.958637][ T7698] loop1: detected capacity change from 0 to 512
[  172.052637][ T7698] EXT4-fs (loop1): orphan cleanup on readonly fs
[  172.054437][ T7698] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  172.063347][ T7698] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1340: invalid indirect mapped block 2683928664 (level 1)
[  172.073810][ T7698] EXT4-fs (loop1): Remounting filesystem read-only
[  172.075259][ T7698] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  172.132162][ T7698] EXT4-fs (loop1): Remounting filesystem read-only
[  172.134013][ T7698] EXT4-fs (loop1): 1 truncate cleaned up
[  172.146759][ T7698] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,errors=continue,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=.smackfsfloor=ext4. Quota mode: writeback.
[  172.288181][ T7721] loop0: detected capacity change from 0 to 512
[  172.315643][ T7723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1350'.
[  172.398179][ T7721] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  172.618509][ T7735] sch_tbf: burst 0 is lower than device lo mtu (18) !
[  172.764877][ T7745] loop3: detected capacity change from 0 to 512
[  172.831155][ T7745] EXT4-fs (loop3): orphan cleanup on readonly fs
[  172.838356][ T7753] netlink: 268 bytes leftover after parsing attributes in process `syz.1.1361'.
[  172.853432][ T7745] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  172.856475][ T7745] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1358: invalid indirect mapped block 2683928664 (level 1)
[  172.873770][ T7745] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  172.929263][ T7745] EXT4-fs (loop3): 1 truncate cleaned up
[  172.948068][ T7745] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,errors=continue,acl,minixdf,jqfmt=vfsv0,usrjquota=.smackfsfloor=ext4,errors=continue. Quota mode: writeback.
[  173.062599][ T7760] loop0: detected capacity change from 0 to 512
[  173.645190][ T7760] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  173.669637][ T7762] team0 (unregistering): Port device team_slave_0 removed
[  173.726235][ T7772] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1367'.
[  173.734989][ T7762] team0 (unregistering): Port device team_slave_1 removed
[  173.737507][ T7772] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1367'.
[  173.745659][ T7772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1367'.
[  173.748671][ T7772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1367'.
[  173.781560][ T7775] loop2: detected capacity change from 0 to 1024
[  173.831851][ T7775] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[  173.873288][ T7775] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,data_err=abort,resuid=0x0000000000000000,errors=remount-ro,norecovery,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000005,noinit_itable,nomblk_io_submit,grpquota,nogrpid,. Quota mode: writeback.
[  173.914140][ T7782] loop3: detected capacity change from 0 to 1024
[  173.947670][ T7782] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[  173.951949][ T7775] EXT4-fs (loop2): re-mounted. Opts: . Quota mode: writeback.
[  174.012800][ T7782] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,minixdf,nodiscard,errors=remount-ro,norecovery,bsdgroups,stripe=0x0000000000000005,noinit_itable,nomblk_io_submit,auto_da_alloc=0x0000000000000080,nogrpid,. Quota mode: none.
[  174.079551][ T7790] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1375'.
[  174.319100][ T7800] loop1: detected capacity change from 0 to 512
[  174.396476][ T7800] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  175.464593][ T7814] chnl_net:caif_netlink_parms(): no params data found
[  175.559838][ T7814] bridge0: port 1(bridge_slave_0) entered blocking state
[  175.561312][ T7814] bridge0: port 1(bridge_slave_0) entered disabled state
[  175.563464][ T7814] device bridge_slave_0 entered promiscuous mode
[  175.575638][ T7814] bridge0: port 2(bridge_slave_1) entered blocking state
[  175.577008][ T7814] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.590492][ T7814] device bridge_slave_1 entered promiscuous mode
[  175.635959][ T7814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  175.643080][ T7814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  175.983636][ T6830] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.046861][ T7814] team0: Port device team_slave_0 added
[  176.078817][ T7814] team0: Port device team_slave_1 added
[  176.100433][ T6830] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.126265][ T7814] batman_adv: batadv0: Adding interface: batadv_slave_0
[  176.135133][ T7814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  176.147286][ T7814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  176.186330][ T7814] batman_adv: batadv0: Adding interface: batadv_slave_1
[  176.191482][ T7814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  176.194697][ T7831] loop0: detected capacity change from 0 to 512
[  176.196770][ T7814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  176.236283][ T6830] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.314688][ T6830] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.337726][ T7831] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  176.439332][ T7814] device hsr_slave_0 entered promiscuous mode
[  176.477001][ T7814] device hsr_slave_1 entered promiscuous mode
[  176.500263][ T7836] netlink: 'syz.0.1391': attribute type 1 has an invalid length.
[  176.502310][ T7836] netlink: 'syz.0.1391': attribute type 2 has an invalid length.
[  176.517985][ T7814] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  176.519621][ T7814] Cannot create hsr debugfs directory
[  176.601416][ T7828] chnl_net:caif_netlink_parms(): no params data found
[  176.733125][ T7828] bridge0: port 1(bridge_slave_0) entered blocking state
[  176.738048][ T7828] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.740451][ T7828] device bridge_slave_0 entered promiscuous mode
[  176.756794][ T7828] bridge0: port 2(bridge_slave_1) entered blocking state
[  176.767427][ T7828] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.772425][ T7828] device bridge_slave_1 entered promiscuous mode
[  176.809772][ T7814] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.846283][ T6830] tipc: Left network mode
[  176.887210][ T7814] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.923925][ T7828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  176.930579][ T7828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  177.119374][ T7828] team0: Port device team_slave_0 added
[  177.122818][ T7828] team0: Port device team_slave_1 added
[  177.193757][ T7814] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.217653][ T4129] Bluetooth: hci5: command 0x0409 tx timeout
[  177.401438][ T7814] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.422725][ T7828] batman_adv: batadv0: Adding interface: batadv_slave_0
[  177.424077][ T7828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  177.439478][ T7828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  177.445364][ T7828] batman_adv: batadv0: Adding interface: batadv_slave_1
[  177.447014][ T7828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  177.496228][ T7828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  177.597664][ T7866] loop2: detected capacity change from 0 to 512
[  177.655112][ T7866] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  177.677897][ T7828] device hsr_slave_0 entered promiscuous mode
[  177.729678][ T7828] device hsr_slave_1 entered promiscuous mode
[  177.733391][ T7866] EXT4-fs (loop2): 1 truncate cleaned up
[  177.734620][ T7866] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv0,,errors=continue. Quota mode: none.
[  177.778188][ T7828] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  177.779796][ T7828] Cannot create hsr debugfs directory
[  177.857331][   T25] Bluetooth: hci0: command 0x0409 tx timeout
[  177.993009][ T7814] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  178.004285][ T7874] loop2: detected capacity change from 0 to 512
[  178.048708][ T7814] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  178.099785][ T7814] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  178.141325][ T7814] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  178.176824][ T7874] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  178.489199][ T7814] 8021q: adding VLAN 0 to HW filter on device bond0
[  178.528616][ T6823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  178.530738][ T6823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  178.549757][ T7814] 8021q: adding VLAN 0 to HW filter on device team0
[  178.561721][ T6823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  178.563869][ T6823] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  178.565925][ T6823] bridge0: port 1(bridge_slave_0) entered blocking state
[  178.567645][ T6823] bridge0: port 1(bridge_slave_0) entered forwarding state
[  178.637620][ T6823] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  178.639643][ T6823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  178.641844][ T6823] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  178.643982][ T6823] bridge0: port 2(bridge_slave_1) entered blocking state
[  178.645534][ T6823] bridge0: port 2(bridge_slave_1) entered forwarding state
[  178.648913][ T6823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  178.651387][ T6823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  178.663810][ T6823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  178.684603][ T6823] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  178.687055][ T6823] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  178.783916][ T6825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  178.786383][ T6825] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  178.789217][ T6825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  178.798172][ T6825] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  178.880002][ T7814] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  178.882760][ T7814] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  178.897644][ T6825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  178.899956][ T6825] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  179.119166][ T7901] loop0: detected capacity change from 0 to 512
[  179.207132][ T7828] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  179.240636][ T7828] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  179.249029][ T7901] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nouid32,minixdf,,errors=continue. Quota mode: writeback.
[  179.262975][ T7901] vhci_hcd: default hub control req: 0200 v0000 i0000 l0
[  179.304005][ T6830] device hsr_slave_0 left promiscuous mode
[  179.307514][   T13] Bluetooth: hci5: command 0x041b tx timeout
[  179.358628][ T6830] device hsr_slave_1 left promiscuous mode
[  179.402521][ T7892] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -512 0
[  179.443104][ T7915] Process accounting resumed
[  179.457635][ T6830] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  179.459154][ T6830] batman_adv: batadv0: Removing interface: batadv_slave_0
[  179.508339][ T6830] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  179.510024][ T6830] batman_adv: batadv0: Removing interface: batadv_slave_1
[  179.512902][ T6830] device bridge_slave_0 left promiscuous mode
[  179.514367][ T6830] bridge0: port 1(bridge_slave_0) entered disabled state
[  179.758467][ T6830] device veth1_macvtap left promiscuous mode
[  179.871411][ T7930] loop2: detected capacity change from 0 to 512
[  179.947382][   T13] Bluetooth: hci0: command 0x041b tx timeout
[  179.963069][ T7930] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  180.170134][   T26] kauditd_printk_skb: 60 callbacks suppressed
[  180.170145][   T26] audit: type=1326 audit(180.130:2218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7934 comm="syz.2.1410" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff807099a8 code=0x7ffc0000
[  180.176133][   T26] audit: type=1326 audit(180.130:2219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7934 comm="syz.2.1410" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff807099a8 code=0x7ffc0000
[  180.206896][   T26] audit: type=1326 audit(180.150:2220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7934 comm="syz.2.1410" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff807099a8 code=0x7ffc0000
[  180.221350][   T26] audit: type=1326 audit(180.150:2221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7934 comm="syz.2.1410" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff807099a8 code=0x7ffc0000
[  180.225679][   T26] audit: type=1326 audit(180.150:2222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7934 comm="syz.2.1410" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff807099a8 code=0x7ffc0000
[  180.242527][   T26] audit: type=1326 audit(180.150:2223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7934 comm="syz.2.1410" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff807099a8 code=0x7ffc0000
[  180.253079][   T26] audit: type=1326 audit(180.150:2224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7934 comm="syz.2.1410" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff807099a8 code=0x7ffc0000
[  180.264090][   T26] audit: type=1326 audit(180.150:2225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7934 comm="syz.2.1410" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff807099a8 code=0x7ffc0000
[  180.273281][ T6830] bond0 (unregistering): (slave geneve0): Releasing backup interface
[  180.287381][   T26] audit: type=1326 audit(180.150:2226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7934 comm="syz.2.1410" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff807099a8 code=0x7ffc0000
[  180.291562][   T26] audit: type=1326 audit(180.150:2227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7934 comm="syz.2.1410" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff807099a8 code=0x7ffc0000
[  180.645163][ T6830] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  180.724857][ T6830] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  180.954172][ T6830] bond0 (unregistering): Released all slaves
[  181.095996][ T6821] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  181.097958][ T6821] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  181.099816][ T7828] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  181.149493][ T7828] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  181.204519][ T7814] 8021q: adding VLAN 0 to HW filter on device batadv0
[  181.279663][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  181.281700][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  181.342225][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  181.344437][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  181.346632][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  181.352690][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  181.369033][ T7814] device veth0_vlan entered promiscuous mode
[  181.377548][ T6321] Bluetooth: hci5: command 0x040f tx timeout
[  181.395950][ T7814] device veth1_vlan entered promiscuous mode
[  181.495509][ T7828] 8021q: adding VLAN 0 to HW filter on device bond0
[  181.515800][ T6832] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  181.518081][ T6832] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  181.520442][ T6832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  181.538355][ T6832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  181.550971][ T7814] device veth0_macvtap entered promiscuous mode
[  181.558382][ T7828] 8021q: adding VLAN 0 to HW filter on device team0
[  181.568496][ T6832] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  181.570720][ T6832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  181.576999][ T6832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  181.588971][ T7814] device veth1_macvtap entered promiscuous mode
[  181.594452][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  181.596532][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  181.599231][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  181.601207][ T4814] bridge0: port 1(bridge_slave_0) entered blocking state
[  181.602634][ T4814] bridge0: port 1(bridge_slave_0) entered forwarding state
[  181.604613][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  181.610976][ T6821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  181.613336][ T6821] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  181.615353][ T6821] bridge0: port 2(bridge_slave_1) entered blocking state
[  181.616863][ T6821] bridge0: port 2(bridge_slave_1) entered forwarding state
[  181.658490][ T7814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.660580][ T7814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.662548][ T7814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.664616][ T7814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.666520][ T7814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.687503][ T7814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.689415][ T7814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.691484][ T7814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.693393][ T7814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.695504][ T7814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.724449][ T7814] batman_adv: batadv0: Interface activated: batadv_slave_0
[  181.748229][ T7814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  181.750147][ T7814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.752771][ T7814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  181.761040][ T7814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.763155][ T7814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  181.765047][ T7814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.766905][ T7814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  181.822062][ T7814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.824098][ T7814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  181.826120][ T7814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.862228][ T7814] batman_adv: batadv0: Interface activated: batadv_slave_1
[  181.863895][ T6823] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  181.866380][ T6823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  181.869915][ T6823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  181.878137][ T6823] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  181.886850][ T6823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  181.900025][ T6821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  181.921056][ T7814] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  181.922878][ T7814] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  181.924657][ T7814] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  181.926333][ T7814] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  181.947490][ T6821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  181.950152][ T6821] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  181.952208][ T6821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  181.954598][ T6821] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  181.995206][ T6821] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  182.010055][ T6821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  182.017906][ T6321] Bluetooth: hci0: command 0x040f tx timeout
[  182.018943][ T6821] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  182.075013][ T7828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  182.082269][ T7828] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  182.119605][ T6832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  182.121857][ T6832] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  182.250175][ T6823] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  182.251992][ T6823] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  182.294526][ T6823] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  182.340908][ T6823] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  182.342698][ T6823] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  182.346441][ T6821] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  182.487480][ T6821] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  182.489020][ T6821] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  182.620616][ T7828] 8021q: adding VLAN 0 to HW filter on device batadv0
[  182.680056][ T7952] chnl_net:caif_netlink_parms(): no params data found
[  182.758104][ T6825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  182.764826][ T6825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  183.206829][ T6825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  183.209661][ T6825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  183.213716][ T6825] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  183.226897][ T6825] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  183.241319][ T7828] device veth0_vlan entered promiscuous mode
[  183.263721][ T7952] bridge0: port 1(bridge_slave_0) entered blocking state
[  183.272945][ T7952] bridge0: port 1(bridge_slave_0) entered disabled state
[  183.285185][ T7952] device bridge_slave_0 entered promiscuous mode
[  183.303789][ T7828] device veth1_vlan entered promiscuous mode
[  183.320868][ T7952] bridge0: port 2(bridge_slave_1) entered blocking state
[  183.322294][ T7952] bridge0: port 2(bridge_slave_1) entered disabled state
[  183.349737][ T7952] device bridge_slave_1 entered promiscuous mode
[  183.452137][ T7984] loop0: detected capacity change from 0 to 512
[  183.457680][ T6324] Bluetooth: hci5: command 0x0419 tx timeout
[  183.460940][ T6823] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  183.463145][ T6823] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  183.466349][ T6823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  183.471376][ T6823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  183.478923][ T7952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  183.485263][ T7828] device veth0_macvtap entered promiscuous mode
[  183.493355][ T7828] device veth1_macvtap entered promiscuous mode
[  183.499493][ T7952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  183.575827][ T7984] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  183.602581][ T7952] team0: Port device team_slave_0 added
[  183.635110][ T7952] team0: Port device team_slave_1 added
[  183.636967][ T7828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  183.641246][ T7828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.643348][ T7828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  183.645351][ T7828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.673014][ T7991] loop0: detected capacity change from 0 to 128
[  183.677262][ T7828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  183.679677][ T7828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.681602][ T7828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  183.697279][ T7828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.699200][ T7828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  183.701227][ T7828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.703120][ T7828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  183.730938][ T7828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.735295][ T7828] batman_adv: batadv0: Interface activated: batadv_slave_0
[  183.777708][ T4129] Bluetooth: hci6: command 0x0409 tx timeout
[  183.818525][ T6832] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  183.820761][ T6832] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  183.834230][ T6832] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  183.845889][ T6832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  183.856604][ T7828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  183.859426][ T7828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.861411][ T7828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  183.863338][ T7828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.865158][ T7828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  183.874177][ T7828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.876380][ T7828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  183.878960][ T7828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.887127][ T7828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  183.889985][ T7828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.892058][ T7828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  183.894185][ T7828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.906127][ T7828] batman_adv: batadv0: Interface activated: batadv_slave_1
[  183.908786][ T7952] batman_adv: batadv0: Adding interface: batadv_slave_0
[  183.910118][ T7952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  183.915903][ T7952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  183.926165][ T6825] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  183.928566][ T6825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  183.959538][ T7828] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  183.964842][ T7828] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  183.966602][ T7828] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  183.978127][ T7828] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  183.985974][ T7952] batman_adv: batadv0: Adding interface: batadv_slave_1
[  183.988129][ T7952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  184.067364][ T7952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  184.144257][ T4129] Bluetooth: hci0: command 0x0419 tx timeout
[  184.239423][ T7952] device hsr_slave_0 entered promiscuous mode
[  184.277640][ T7952] device hsr_slave_1 entered promiscuous mode
[  184.317349][ T7952] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  184.318917][ T7952] Cannot create hsr debugfs directory
[  184.498386][ T6823] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  184.500288][ T6823] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  184.508307][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  184.584676][ T6823] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  184.587148][ T6823] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  184.605372][ T6825] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  184.661597][ T7952] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.719797][ T8000] loop5: detected capacity change from 0 to 7
[  184.750203][ T8000] Dev loop5: unable to read RDB block 7
[  184.751358][ T8000]  loop5: unable to read partition table
[  184.752521][ T8000] loop5: partition table beyond EOD, truncated
[  184.753798][ T8000] loop_reread_partitions: partition scan of loop5 (�被x������ڬ��dƤ����ݡ�����
[  184.753798][ T8000] 
) failed (rc=-5)
[  184.763071][ T8005] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1424'.
[  184.843421][ T7952] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.940123][ T7952] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.082372][ T8014] loop2: detected capacity change from 0 to 512
[  185.310595][ T7952] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.857514][ T4070] Bluetooth: hci6: command 0x041b tx timeout
[  186.144852][ T8014] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  186.466262][ T7952] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  186.539510][ T7952] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  186.703739][ T7952] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  187.411228][ T7952] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  187.576827][   T26] kauditd_printk_skb: 7 callbacks suppressed
[  187.576841][   T26] audit: type=1326 audit(187.530:2235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8034 comm="syz.1.1435" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5b489a8 code=0x7ffc0000
[  187.582660][   T26] audit: type=1326 audit(187.530:2236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8034 comm="syz.1.1435" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5b489a8 code=0x7ffc0000
[  187.602627][   T26] audit: type=1326 audit(187.550:2237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8034 comm="syz.1.1435" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb5b489a8 code=0x7ffc0000
[  187.617386][   T26] audit: type=1326 audit(187.550:2238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8034 comm="syz.1.1435" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5b489a8 code=0x7ffc0000
[  187.632877][   T26] audit: type=1326 audit(187.550:2239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8034 comm="syz.1.1435" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5b489a8 code=0x7ffc0000
[  187.637071][   T26] audit: type=1326 audit(187.560:2240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8034 comm="syz.1.1435" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb5b489a8 code=0x7ffc0000
[  187.662306][   T26] audit: type=1326 audit(187.560:2241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8034 comm="syz.1.1435" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5b489a8 code=0x7ffc0000
[  187.672417][   T26] audit: type=1326 audit(187.560:2242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8034 comm="syz.1.1435" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5b489a8 code=0x7ffc0000
[  187.676651][   T26] audit: type=1326 audit(187.560:2243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8034 comm="syz.1.1435" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb5b489a8 code=0x7ffc0000
[  187.697514][   T26] audit: type=1326 audit(187.580:2244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8034 comm="syz.1.1435" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5b489a8 code=0x7ffc0000
[  187.767485][ T7952] 8021q: adding VLAN 0 to HW filter on device bond0
[  187.810876][ T6821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  187.812975][ T6821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  187.849517][ T7952] 8021q: adding VLAN 0 to HW filter on device team0
[  187.876240][ T6821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  187.881390][ T6821] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  187.889302][ T6821] bridge0: port 1(bridge_slave_0) entered blocking state
[  187.890734][ T6821] bridge0: port 1(bridge_slave_0) entered forwarding state
[  187.908484][ T6821] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  187.937648][ T4071] Bluetooth: hci6: command 0x040f tx timeout
[  187.989909][ T8044] loop2: detected capacity change from 0 to 1024
[  187.992520][ T6832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  187.994806][ T6832] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  187.996820][ T6832] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.998431][ T6832] bridge0: port 2(bridge_slave_1) entered forwarding state
[  188.017669][ T6832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  188.047824][ T6821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  188.050254][ T6821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  188.052842][ T6821] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  188.057287][ T6832] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  188.066050][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  188.079465][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  188.096231][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  188.103943][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  188.131849][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  188.134195][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  188.150181][ T7952] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  188.155790][ T8044] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  188.322755][ T8049] loop1: detected capacity change from 0 to 512
[  188.460291][ T8049] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  188.727489][ T6832] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  188.729372][ T6832] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  188.786945][ T7952] 8021q: adding VLAN 0 to HW filter on device batadv0
[  189.719540][ T8072] loop1: detected capacity change from 0 to 2048
[  189.760631][ T4726]  loop1: p1 < > p4
[  189.762814][ T4726] loop1: p4 size 8388608 extends beyond EOD, truncated
[  189.790744][ T8072]  loop1: p1 < > p4
[  189.795260][ T8072] loop1: p4 size 8388608 extends beyond EOD, truncated
[  190.020047][ T4129] Bluetooth: hci6: command 0x0419 tx timeout
[  190.165260][ T8093] loop3: detected capacity change from 0 to 512
[  190.211408][ T8093] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  190.242956][ T8088] loop1: detected capacity change from 0 to 512
[  190.248083][ T8093] EXT4-fs (loop3): 1 truncate cleaned up
[  190.249172][ T8093] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none.
[  190.271473][ T6834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  190.273863][ T6834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  190.335725][ T8093] tmpfs: Bad value for 'mpol'
[  190.357569][ T4726] udevd[4726]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  190.358049][ T6834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  190.361884][ T6834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  190.364363][ T6834] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  190.366536][ T6834] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  190.396538][ T7952] device veth0_vlan entered promiscuous mode
[  190.412446][ T4160] udevd[4160]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  190.428046][ T7952] device veth1_vlan entered promiscuous mode
[  190.654226][ T7952] device veth0_macvtap entered promiscuous mode
[  190.679187][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  190.681304][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  190.683485][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  190.685747][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  190.709335][ T7952] device veth1_macvtap entered promiscuous mode
[  190.711792][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  190.825532][ T7952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  190.827820][ T7952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.829786][ T7952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  190.831888][ T7952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.833764][ T7952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  190.835788][ T7952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.848192][ T7952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  190.850246][ T7952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.852237][ T7952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  190.854212][ T7952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.856086][ T7952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  190.937995][ T7952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.939989][ T7952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  190.941981][ T7952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.974947][ T7952] batman_adv: batadv0: Interface activated: batadv_slave_0
[  190.989372][ T7952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  190.991393][ T7952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.993272][ T7952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  190.995318][ T7952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.019543][ T4726] udevd[4726]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  191.041136][ T4160] udevd[4160]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  191.047926][ T7952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  191.218487][ T7952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.263629][ T7952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  191.310334][ T7952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.475148][ T7952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  191.585862][ T7952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.889805][ T7952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  191.891859][ T7952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.893697][ T7952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  191.895779][ T7952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.908386][ T7952] batman_adv: batadv0: Interface activated: batadv_slave_1
[  191.913639][ T6821] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  191.915938][ T6821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  191.928354][ T6821] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  191.934077][ T6821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  191.942842][ T8114] smc: net device bond0 applied user defined pnetid SYZ0
[  191.944974][ T8117] smc: net device bond0 erased user defined pnetid SYZ0
[  192.034055][ T7952] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  192.035923][ T7952] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  192.044532][ T7952] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  192.053064][ T7952] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  193.058564][ T2056] ieee802154 phy1 wpan1: encryption failed: -22
[  193.207045][ T4814] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  193.228530][ T4814] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  193.244360][ T6821] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  193.351348][ T6821] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  193.353167][ T6821] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  193.376374][ T6832] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  193.731113][ T8145] ieee802154 phy1 wpan1: encryption failed: -22
[  194.590250][ T4071] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  194.592022][ T4071] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  194.593624][ T4071] hid-generic 0000:0000:0000.0004: unknown main item tag 0x2
[  194.597218][ T4071] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  194.604455][   T26] kauditd_printk_skb: 51 callbacks suppressed
[  194.604465][   T26] audit: type=1326 audit(194.560:2296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8157 comm="syz.3.1475" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f7ff9a8 code=0x7ffc0000
[  194.606440][ T4071] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  194.621984][   T26] audit: type=1326 audit(194.580:2297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8157 comm="syz.3.1475" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9f7ff9a8 code=0x7ffc0000
[  194.626552][ T4071] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  194.629741][   T26] audit: type=1326 audit(194.600:2298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8157 comm="syz.3.1475" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f7ff9a8 code=0x7ffc0000
[  194.634551][ T4071] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  194.639884][   T26] audit: type=1326 audit(194.600:2299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8157 comm="syz.3.1475" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9f7ff9a8 code=0x7ffc0000
[  194.642342][ T4071] hid-generic 0000:0000:0000.0004: item fetching failed at offset 8/43
[  194.658395][ T4071] hid-generic: probe of 0000:0000:0000.0004 failed with error -22
[  194.727426][   T26] audit: type=1326 audit(194.600:2300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8157 comm="syz.3.1475" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f7ff9a8 code=0x7ffc0000
[  194.731681][   T26] audit: type=1326 audit(194.600:2301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8157 comm="syz.3.1475" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9f7ff9a8 code=0x7ffc0000
[  194.776850][   T26] audit: type=1326 audit(194.600:2302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8157 comm="syz.3.1475" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f7ff9a8 code=0x7ffc0000
[  194.798637][   T26] audit: type=1326 audit(194.600:2303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8157 comm="syz.3.1475" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9f7ff9a8 code=0x7ffc0000
[  194.807875][   T26] audit: type=1326 audit(194.600:2304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8157 comm="syz.3.1475" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f7ff9a8 code=0x7ffc0000
[  194.812316][   T26] audit: type=1326 audit(194.600:2305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8157 comm="syz.3.1475" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=132 compat=0 ip=0xffff9f7ff9a8 code=0x7ffc0000
[  194.840300][ T8166] loop4: detected capacity change from 0 to 512
[  194.858315][ T8167] loop1: detected capacity change from 0 to 512
[  194.869006][ T8166] EXT4-fs (loop4): orphan cleanup on readonly fs
[  194.875717][ T8166] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1479: bg 0: block 248: padding at end of block bitmap is not set
[  194.899285][ T8166] EXT4-fs error (device loop4): ext4_acquire_dquot:6197: comm syz.4.1479: Failed to acquire dquot type 1
[  194.902977][ T8166] EXT4-fs (loop4): 1 truncate cleaned up
[  194.912162][ T8166] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  194.976270][ T8167] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  195.184941][ T8180] loop0: detected capacity change from 0 to 2048
[  195.195724][ T8177] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[  195.197741][ T8177] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[  195.199454][ T8177] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  195.240489][ T8180] Alternate GPT is invalid, using primary GPT.
[  195.242267][ T8180]  loop0: p2 p3 p7
[  195.779053][ T4726] udevd[4726]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[  195.792207][ T4160] udevd[4160]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[  195.802556][ T5942] udevd[5942]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory
[  196.078637][ T8208] ptrace attach of "./syz-executor exec"[8209] was attempted by "./syz-executor exec"[8208]
[  196.278390][ T8212] loop4: detected capacity change from 0 to 512
[  196.369987][ T8212] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  196.647599][ T8227] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22
[  196.649263][ T8227] netdevsim netdevsim4: Direct firmware load for . failed with error -22
[  196.651007][ T8227] netdevsim netdevsim4: Falling back to sysfs fallback for: .
[  198.972706][ T8274] loop1: detected capacity change from 0 to 256
[  198.988199][ T8275] ip6t_srh: unknown srh invflags 7D00
[  199.143646][ T8274] FAT-fs (loop1): Directory bread(block 64) failed
[  199.145025][ T8274] FAT-fs (loop1): Directory bread(block 65) failed
[  199.146645][ T8274] FAT-fs (loop1): Directory bread(block 66) failed
[  199.148977][ T8274] FAT-fs (loop1): Directory bread(block 67) failed
[  199.156808][ T8274] FAT-fs (loop1): Directory bread(block 68) failed
[  199.166922][ T8274] FAT-fs (loop1): Directory bread(block 69) failed
[  199.173514][ T8274] FAT-fs (loop1): Directory bread(block 70) failed
[  199.174957][ T8274] FAT-fs (loop1): Directory bread(block 71) failed
[  199.176360][ T8274] FAT-fs (loop1): Directory bread(block 72) failed
[  199.197742][ T8274] FAT-fs (loop1): Directory bread(block 73) failed
[  199.288620][ T8274] attempt to access beyond end of device
[  199.288620][ T8274] loop1: rw=524288, want=1768, limit=256
[  199.291477][ T8274] attempt to access beyond end of device
[  199.291477][ T8274] loop1: rw=0, want=1744, limit=256
[  199.905025][ T8297] loop3: detected capacity change from 0 to 512
[  200.072719][ T8297] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  200.526543][ T8310] loop1: detected capacity change from 0 to 512
[  200.666269][ T8310] EXT4-fs (loop1): Ignoring removed bh option
[  200.710952][ T8310] EXT4-fs (loop1): mounted filesystem without journal. Opts: bh,bsddf,init_itable=0x000000000000000a,init_itable,journal_dev=0x000000000000000d,,errors=continue. Quota mode: writeback.
[  200.949264][   T26] kauditd_printk_skb: 64 callbacks suppressed
[  200.949277][   T26] audit: type=1326 audit(200.910:2368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8322 comm="syz.0.1538" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf7cf9a8 code=0x7ffc0000
[  200.955705][   T26] audit: type=1326 audit(200.910:2369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8322 comm="syz.0.1538" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf7cf9a8 code=0x7ffc0000
[  200.978949][   T26] audit: type=1326 audit(200.930:2370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8322 comm="syz.0.1538" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffaf7cf9a8 code=0x7ffc0000
[  200.983232][   T26] audit: type=1326 audit(200.930:2371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8322 comm="syz.0.1538" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf7cf9a8 code=0x7ffc0000
[  201.051664][   T26] audit: type=1326 audit(200.930:2372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8322 comm="syz.0.1538" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf7cf9a8 code=0x7ffc0000
[  201.056021][   T26] audit: type=1326 audit(200.930:2373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8322 comm="syz.0.1538" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=209 compat=0 ip=0xffffaf7cf9a8 code=0x7ffc0000
[  201.093588][   T26] audit: type=1326 audit(200.930:2374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8322 comm="syz.0.1538" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf7cf9a8 code=0x7ffc0000
[  201.127819][   T26] audit: type=1326 audit(200.930:2375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8322 comm="syz.0.1538" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf7cf9a8 code=0x7ffc0000
[  201.146971][ T8331] loop2: detected capacity change from 0 to 256
[  201.194324][ T8330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1540'.
[  201.196121][ T8330] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1540'.
[  201.283705][   T26] audit: type=1326 audit(200.930:2376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8322 comm="syz.0.1538" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffffaf7cf9a8 code=0x7ffc0000
[  201.288359][   T26] audit: type=1326 audit(200.930:2377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8322 comm="syz.0.1538" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf7cf9a8 code=0x7ffc0000
[  201.300081][ T8331] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  201.360421][ T8331] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1541'.
[  201.745853][    C1] IPv4: Oversized IP packet from 172.20.20.24
[  201.957988][ T8351] capability: warning: `syz.3.1550' uses 32-bit capabilities (legacy support in use)
[  202.178470][ T8367] loop0: detected capacity change from 0 to 256
[  202.218241][ T8367] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  202.276863][ T8367] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1556'.
[  202.306202][ T8371] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1559'.
[  202.308788][ T8371] tipc: Invalid UDP bearer configuration
[  202.308824][ T8371] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  202.587147][ T8385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1564'.
[  202.607962][ T8385] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  202.609969][ T8385] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  202.620821][ T8384] loop4: detected capacity change from 0 to 512
[  203.268918][ T8404] loop3: detected capacity change from 0 to 512
[  203.346781][ T8407] loop0: detected capacity change from 0 to 256
[  203.403147][ T8404] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  203.449674][ T8407] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  203.514994][ T8407] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1574'.
[  204.276095][ T8449] loop2: detected capacity change from 0 to 256
[  204.313648][ T8449] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  204.817413][ T6322] Bluetooth: hci4: command 0x0406 tx timeout
[  205.379220][ T8458] loop2: detected capacity change from 0 to 32768
[  205.408964][ T8466] loop0: detected capacity change from 0 to 512
[  205.434110][ T8468] loop1: detected capacity change from 0 to 512
[  205.455368][ T8458] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 scanned by syz.2.1594 (8458)
[  205.489070][ T8468] EXT4-fs (loop1): orphan cleanup on readonly fs
[  205.490583][ T8468] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2219: inode #15: comm syz.1.1598: corrupted in-inode xattr
[  205.506234][ T8468] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.1598: couldn't read orphan inode 15 (err -117)
[  205.511093][ T8468] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  205.514767][ T8458] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  205.517050][ T8458] BTRFS info (device loop2): using free space tree
[  205.532898][ T8458] BTRFS info (device loop2): has skinny extents
[  205.599260][ T8466] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x0000000000000000,nouid32,noblock_validity,,errors=continue. Quota mode: none.
[  205.724469][ T8478] loop4: detected capacity change from 0 to 512
[  207.098672][ T8482] EXT4-fs warning (device loop0): dx_probe:869: inode #2: comm syz.0.1597: Unimplemented hash flags: 0x0001
[  207.101334][ T8482] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.1597: Corrupt directory, running e2fsck is recommended
[  207.117059][ T8481] EXT4-fs (loop0): Couldn't remount RDWR because of unprocessed orphan inode list.  Please umount/remount instead
[  207.156731][ T8462] loop3: detected capacity change from 0 to 32768
[  207.187922][ T6830] device hsr_slave_0 left promiscuous mode
[  207.246854][ T8458] BTRFS info (device loop2): enabling ssd optimizations
[  207.525716][ T8462] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.1595 (8462)
[  207.534816][ T6830] device hsr_slave_1 left promiscuous mode
[  207.638877][ T6830] device bridge_slave_1 left promiscuous mode
[  207.640232][ T6830] bridge0: port 2(bridge_slave_1) entered disabled state
[  207.660446][ T8504] loop0: detected capacity change from 0 to 256
[  207.676924][ T8478] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.1600: casefold flag without casefold feature
[  207.682918][ T8478] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.1600: couldn't read orphan inode 15 (err -117)
[  207.685572][ T8478] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  207.790320][ T8504] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  207.814784][ T6830] device bridge_slave_0 left promiscuous mode
[  207.816164][ T6830] bridge0: port 1(bridge_slave_0) entered disabled state
[  207.829668][ T8462] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  207.831678][ T8462] BTRFS info (device loop3): turning off barriers
[  207.832958][ T8462] BTRFS info (device loop3): enabling auto defrag
[  207.836105][ T8462] BTRFS info (device loop3): enabling all of the rescue options
[  207.845697][ T8462] BTRFS info (device loop3): ignoring data csums
[  207.850899][ T8462] BTRFS info (device loop3): ignoring bad roots
[  207.855073][ T8462] BTRFS info (device loop3): disabling log replay at mount time
[  207.856778][ T8462] BTRFS info (device loop3): enabling ssd optimizations
[  208.742447][ T8462] BTRFS info (device loop3): using spread ssd allocation scheme
[  208.744121][ T8462] BTRFS info (device loop3): using free space tree
[  208.745443][ T8462] BTRFS info (device loop3): has skinny extents
[  208.767362][ T8462] workqueue: max_active 32767 requested for btrfs-worker is out of range, clamping between 1 and 512
[  208.789384][ T8462] workqueue: max_active 32767 requested for btrfs-delalloc is out of range, clamping between 1 and 512
[  208.838374][ T8462] workqueue: max_active 32767 requested for btrfs-endio is out of range, clamping between 1 and 512
[  208.840994][ T8462] workqueue: max_active 32767 requested for btrfs-endio-meta is out of range, clamping between 1 and 512
[  208.846852][ T8462] workqueue: max_active 32767 requested for btrfs-endio-meta-write is out of range, clamping between 1 and 512
[  208.874724][ T4160] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 10 /dev/loop2 scanned by udevd (4160)
[  208.890922][ T8462] workqueue: max_active 32767 requested for btrfs-endio-raid56 is out of range, clamping between 1 and 512
[  208.926821][ T8462] workqueue: max_active 32767 requested for btrfs-rmw is out of range, clamping between 1 and 512
[  208.937472][ T8462] workqueue: max_active 32767 requested for btrfs-endio-write is out of range, clamping between 1 and 512
[  208.976980][ T8462] workqueue: max_active 32767 requested for btrfs-readahead is out of range, clamping between 1 and 512
[  209.110521][ T8462] BTRFS error (device loop3): open_ctree failed
[  209.716636][ T6830] device veth1_macvtap left promiscuous mode
[  209.720305][ T6830] device veth0_macvtap left promiscuous mode
[  212.157702][ T6830] team0 (unregistering): Port device team_slave_1 removed
[  212.190550][ T6830] team0 (unregistering): Port device team_slave_0 removed
[  212.216916][ T6830] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  212.265372][ T6830] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  212.537649][ T6830] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  212.588623][ T6830] bond0 (unregistering): Released all slaves
[  212.796558][ T8570] loop3: detected capacity change from 0 to 256
[  212.829155][ T8570] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  213.082539][ T8577] loop3: detected capacity change from 0 to 512
[  213.222929][ T8577] EXT4-fs (loop3): orphan cleanup on readonly fs
[  213.228252][ T8577] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2219: inode #15: comm syz.3.1616: corrupted in-inode xattr
[  213.257481][ T8577] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.1616: couldn't read orphan inode 15 (err -117)
[  213.260523][ T8577] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  213.292627][ T8585] loop4: detected capacity change from 0 to 512
[  213.616089][ T8592] mmap: syz.3.1616 (8592): VmData 26013696 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data.
[  214.067896][ T8585] EXT4-fs (loop4): orphan cleanup on readonly fs
[  214.070392][ T8585] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2219: inode #15: comm syz.4.1620: corrupted in-inode xattr
[  214.080437][ T8585] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.1620: couldn't read orphan inode 15 (err -117)
[  214.100571][ T8585] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  215.346741][ T8605] loop0: detected capacity change from 0 to 256
[  215.698302][ T8605] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  215.733662][ T8605] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1626'.
[  215.907059][ T8618] loop3: detected capacity change from 0 to 256
[  215.941987][ T8618] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  215.965052][ T8618] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1640'.
[  216.045520][ T8621] Cannot find del_set index 0 as target
[  218.110610][ T8641] 9pnet: Could not find request transport: fd0x0000000000000003
[  218.124123][ T8641] 9pnet: Could not find request transport: fd0x0000000000000003
[  220.657153][ T8651] loop3: detected capacity change from 0 to 512
[  220.723512][ T8651] EXT4-fs (loop3): orphan cleanup on readonly fs
[  220.726283][ T8651] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2219: inode #15: comm syz.3.1639: corrupted in-inode xattr
[  220.737986][ T8651] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.1639: couldn't read orphan inode 15 (err -117)
[  220.772832][ T8651] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  220.986996][ T8659] loop2: detected capacity change from 0 to 256
[  221.578280][ T8659] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  221.613548][ T8659] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1642'.
[  221.813300][ T8664] loop0: detected capacity change from 0 to 256
[  221.859425][ T8664] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  222.017773][ T8664] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1655'.
[  222.083903][ T8672] loop2: detected capacity change from 0 to 1024
[  222.928059][ T8672] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  223.019987][ T8681] 9pnet: Could not find request transport: fd0x0000000000000003
[  223.044240][ T8681] 9pnet: Could not find request transport: fd0x0000000000000003
[  223.063510][ T8678] loop3: detected capacity change from 0 to 1024
[  223.170626][ T8678] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  224.286768][ T8687] 9pnet: Could not find request transport: fd0x0000000000000003
[  224.290248][ T8687] 9pnet: Could not find request transport: fd0x0000000000000003
[  226.990074][ T8703] loop0: detected capacity change from 0 to 512
[  227.034434][ T8703] EXT4-fs (loop0): orphan cleanup on readonly fs
[  227.035960][ T8703] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2219: inode #15: comm syz.0.1656: corrupted in-inode xattr
[  227.047911][ T8703] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.1656: couldn't read orphan inode 15 (err -117)
[  227.072095][ T8703] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  227.231485][ T8708] loop1: detected capacity change from 0 to 512
[  227.697544][   T27] INFO: task syz.0.141:4483 blocked for more than 144 seconds.
[  227.715002][   T27]       Not tainted 5.15.168-syzkaller #0
[  227.813282][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  227.890812][   T27] task:syz.0.141       state:D stack:    0 pid: 4483 ppid:  4029 flags:0x00000009
[  227.892715][   T27] Call trace:
[  227.934034][   T27]  __switch_to+0x308/0x5e8
[  227.935053][   T27]  __schedule+0xf10/0x1e48
[  227.936078][   T27]  schedule+0x11c/0x1c8
[  227.936946][   T27]  schedule_preempt_disabled+0x18/0x2c
[  227.944973][ T8708] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.1658: casefold flag without casefold feature
[  227.948002][ T8708] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.1658: couldn't read orphan inode 15 (err -117)
[  227.964566][ T8708] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  227.967633][   T27]  rwsem_down_read_slowpath+0x5b0/0x988
[  227.968750][   T27]  down_read+0x10c/0x398
[  227.969635][   T27]  iterate_supers+0xb0/0x1dc
[  228.032670][   T27]  __arm64_sys_quotactl+0x39c/0x7a4
[  228.034083][   T27]  invoke_syscall+0x98/0x2b8
[  228.035252][   T27]  el0_svc_common+0x138/0x258
[  228.036243][   T27]  do_el0_svc+0x58/0x14c
[  228.037118][   T27]  el0_svc+0x7c/0x1f0
[  228.054259][   T27]  el0t_64_sync_handler+0x84/0xe4
[  228.055361][   T27]  el0t_64_sync+0x1a0/0x1a4
[  228.057140][   T27] 
[  228.057140][   T27] Showing all locks held in the system:
[  228.068043][   T27] 1 lock held by khungtaskd/27:
[  228.069178][   T27]  #0: ffff800014c822e0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44
[  228.071086][   T27] 3 locks held by kworker/u4:7/1810:
[  228.100440][   T27] 2 locks held by getty/3793:
[  228.101469][   T27]  #0: ffff0000d37c3098 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x40/0x50
[  228.103393][   T27]  #1: ffff80001d5fe2e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x414/0x1204
[  228.105566][   T27] 3 locks held by kworker/1:5/4069:
[  228.106550][   T27] 1 lock held by syz.2.122/4438:
[  228.110233][   T27]  #0: ffff0000e39a00e0 (&type->s_umount_key#53/1){+.+.}-{3:3}, at: alloc_super+0x1b8/0x844
[  228.122839][   T27] 1 lock held by syz.0.141/4483:
[  228.123846][   T27]  #0: ffff0000e39a00e0 (&type->s_umount_key#72){.+.+}-{3:3}, at: iterate_supers+0xb0/0x1dc
[  228.125875][   T27] 1 lock held by udevd/4726:
[  228.126936][   T27] 4 locks held by kworker/u4:26/6830:
[  228.167389][   T27] 1 lock held by syz-executor/7814:
[  228.168496][   T27] 2 locks held by kworker/1:11/8304:
[  228.169632][   T27]  #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x66c/0x11b8
[  228.171772][   T27]  #1: ffff800021917c00 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x6ac/0x11b8
[  228.173880][   T27] 2 locks held by syz.4.1628/8612:
[  228.176694][   T27]  #0: ffff0000f4854ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x64/0x1060
[  228.187258][   T27]  #1: ffff0000f4854078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_do_close+0x338/0x1060
[  228.189226][   T27] 1 lock held by syz.3.1653/8701:
[  228.190275][   T27] 3 locks held by syz.0.1656/8713:
[  228.191271][   T27]  #0: ffff0000cd930ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x64/0x1060
[  228.193442][   T27]  #1: ffff0000cd930078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_do_close+0x338/0x1060
[  228.195285][   T27]  #2: ffff800016d273e8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xb8/0x220
[  228.207286][   T27] 1 lock held by syz.1.1658/8707:
[  228.208276][   T27]  #0: ffff800014c868e8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2f0/0x660
[  228.210361][   T27] 1 lock held by syz-executor/8709:
[  228.211406][   T27]  #0: ffff800014c868e8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2f0/0x660
[  228.219653][   T27] 
[  228.220244][   T27] =============================================
[  228.220244][   T27] 
[  228.221951][   T27] Kernel panic - not syncing: hung_task: blocked tasks
[  228.223325][   T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.168-syzkaller #0
[  228.224869][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  228.226869][   T27] Call trace:
[  228.227491][   T27]  dump_backtrace+0x0/0x530
[  228.228379][   T27]  show_stack+0x2c/0x3c
[  228.229226][   T27]  dump_stack_lvl+0x108/0x170
[  228.230165][   T27]  dump_stack+0x1c/0x58
[  228.231053][   T27]  panic+0x304/0x8bc
[  228.231877][   T27]  hung_task_panic+0x0/0x2c
[  228.232870][   T27]  kthread+0x37c/0x45c
[  228.233793][   T27]  ret_from_fork+0x10/0x20
[  228.234621][   T27] SMP: stopping secondary CPUs
[  228.235648][   T27] Kernel Offset: disabled
[  228.236642][   T27] CPU features: 0x8,000081c1,21302e40
[  228.237711][   T27] Memory Limit: none
[  228.728941][   T27] Rebooting in 86400 seconds..