last executing test programs:

3m46.019892231s ago: executing program 32 (id=60):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000063e000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x24, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3m29.847954236s ago: executing program 33 (id=108):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x8, 0x4)

3m18.963848688s ago: executing program 2 (id=159):
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)

3m18.783788176s ago: executing program 2 (id=160):
openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200})
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, 0x0})
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x10, 0x0, 0x800087}]})
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xe45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x1, 0x0, 0x400, 0x80, 0x88, 0x0, 0x8, 0x8d], 0xeeee8000, 0x240046})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3m18.398508804s ago: executing program 2 (id=163):
syz_emit_ethernet(0x56, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa348100000086dd60910100001c11fffe8000000000000000000000000000bbfe8000000000000000000000000000aa00000e22001c90780203000000000000000071cd0c3c92"], 0x0)

3m18.25592098s ago: executing program 2 (id=165):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000000), 0x1, 0x4fb, &(0x7f0000000540)="$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")
syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_GETFSUUID(0xffffffffffffffff, 0x8008662c, &(0x7f0000000040))

3m18.226936782s ago: executing program 1 (id=166):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000180)={[{@user_xattr}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@sysvgroups}, {@nodelalloc}, {@block_validity}, {@noauto_da_alloc}, {@barrier}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x153042, 0x80)
pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2000, 0x1e1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x6, 0x12, r1, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000280), 0x7f, r2}, 0x38)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
sendfile(r0, r0, 0x0, 0x7a680000)

3m17.892782148s ago: executing program 2 (id=167):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='3', 0x4e)
r1 = socket(0xa, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, 0x0, &(0x7f0000000000))
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)

3m17.728942785s ago: executing program 1 (id=169):
r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, 0x0)

3m17.480210237s ago: executing program 1 (id=170):
openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200})
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, 0x0})
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x10, 0x0, 0x800087}]})
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xe45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x1, 0x0, 0x400, 0x80, 0x88, 0x0, 0x8, 0x8d], 0xeeee8000, 0x240046})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3m16.98488367s ago: executing program 1 (id=174):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000000), 0x1, 0x4fb, &(0x7f0000000540)="$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")
syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_GETFSUUID(0xffffffffffffffff, 0x8008662c, &(0x7f0000000040))

3m16.624796217s ago: executing program 2 (id=176):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x7, 0x4}]})
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$mtd(&(0x7f00000000c0), 0x51e, 0x141002)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
socket$nl_generic(0x10, 0x3, 0x10)
socket$igmp6(0xa, 0x3, 0x2)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0xfe12)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000840}, 0x8000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2}, 0x94)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

3m16.544846071s ago: executing program 1 (id=177):
socket$nl_xfrm(0x10, 0x3, 0x6)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet(0x2, 0x2, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket(0x10, 0x3, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x80843, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x1, @remote}, {0x2, 0x4e20, @multicast1}, 0x26e647b9a7ad1610, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x5})
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)

3m16.043370834s ago: executing program 34 (id=176):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x7, 0x4}]})
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$mtd(&(0x7f00000000c0), 0x51e, 0x141002)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
socket$nl_generic(0x10, 0x3, 0x10)
socket$igmp6(0xa, 0x3, 0x2)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0xfe12)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000840}, 0x8000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2}, 0x94)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

3m14.65903446s ago: executing program 1 (id=183):
syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0, &(0x7f0000000400)={[{@shortname_mixed}, {@shortname_win95}, {@uni_xlate}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@shortname_win95}, {@uni_xlateno}, {@fat=@errors_continue}, {@uni_xlateno}, {@utf8}, {@fat=@codepage={'codepage', 0x3d, '864'}}, {@utf8}, {@utf8no}, {@shortname_win95}, {@shortname_win95}, {@utf8no}, {@numtail}]}, 0xfd, 0x2a9, &(0x7f0000000500)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000700)='./file1\x00', 0x143841, 0x115)

3m14.249982758s ago: executing program 35 (id=183):
syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0, &(0x7f0000000400)={[{@shortname_mixed}, {@shortname_win95}, {@uni_xlate}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@shortname_win95}, {@uni_xlateno}, {@fat=@errors_continue}, {@uni_xlateno}, {@utf8}, {@fat=@codepage={'codepage', 0x3d, '864'}}, {@utf8}, {@utf8no}, {@shortname_win95}, {@shortname_win95}, {@utf8no}, {@numtail}]}, 0xfd, 0x2a9, &(0x7f0000000500)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000700)='./file1\x00', 0x143841, 0x115)

2m48.326865905s ago: executing program 7 (id=250):
socket$inet6_udp(0xa, 0x2, 0x0)
syz_emit_ethernet(0x1e, &(0x7f0000000000)={@empty, @multicast, @void, {@can={0xc, {{0x4, 0x0, 0x1}, 0x5, 0x2, 0x0, 0x0, "fbd4e54ac3821fd5"}}}}, &(0x7f0000000040)={0x800001, 0x4, [0x8f1, 0xe0f, 0xd9f, 0xaba]})
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000300)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b8000000000f23c00f21f835010003000f23f8ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0xfffffffffffffdf4}], 0x1, 0x3b, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x36, 0x4, 0x80000000002, 0x183, 0x400000004, 0x0, 0x8, 0x80000001, 0x3, 0x1000045, 0xfffc, 0x9, 0xf, 0x6, 0x0, 0x1], 0x8000000, 0x3c4210})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8)
setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0xc369d000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)={0x84, @rand_addr=0x64010100, 0x4e25, 0x3, 'wrr\x00', 0x1, 0xa8a, 0x30}, 0x2c)

2m44.442462047s ago: executing program 7 (id=263):
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0)
syz_emit_ethernet(0x76, &(0x7f0000000640)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x15, 0x10, 0x0, 0x0, 0x0, {[@mptcp=@capable={0x1e, 0xc}, @mptcp=@syn={0x1e, 0xc}, @sack={0x5, 0x16, [0x0, 0x0, 0x0, 0x0, 0x0]}, @md5sig={0x13, 0x12, "a4bcbcee95c6179191d2675112a6689b"}]}}}}}}}, 0x0)

2m43.09401609s ago: executing program 7 (id=266):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, &(0x7f0000000080)='size=4K%')
statfs(&(0x7f0000000040)='./mnt\x00', 0x0)

2m42.148377304s ago: executing program 7 (id=269):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000000), 0x1, 0x4fb, &(0x7f0000000540)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0)
syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000040))

2m41.634417838s ago: executing program 7 (id=271):
socket$inet6_udp(0xa, 0x2, 0x0)
syz_emit_ethernet(0x1e, &(0x7f0000000000)={@empty, @multicast, @void, {@can={0xc, {{0x4, 0x0, 0x1}, 0x5, 0x2, 0x0, 0x0, "fbd4e54ac3821fd5"}}}}, &(0x7f0000000040)={0x800001, 0x4, [0x8f1, 0xe0f, 0xd9f, 0xaba]})
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000300)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b8000000000f23c00f21f835010003000f23f8ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0xfffffffffffffdf4}], 0x1, 0x3b, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x36, 0x4, 0x80000000002, 0x183, 0x400000004, 0x0, 0x8, 0x80000001, 0x3, 0x1000045, 0xfffc, 0x9, 0xf, 0x6, 0x0, 0x1], 0x8000000, 0x3c4210})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8)
setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0xc369d000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)={0x84, @rand_addr=0x64010100, 0x4e25, 0x3, 'wrr\x00', 0x1, 0xa8a, 0x30}, 0x2c)

2m41.460308047s ago: executing program 6 (id=272):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x815, &(0x7f0000000180)={[{@data_err_ignore}, {@resgid}, {@abort}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@nobarrier}]}, 0x9, 0x624, &(0x7f0000001340)="$eJzs3ctvVNUfAPDvvZ0+aH8/W4hB2UgTYyBRWlrAEGMixC0h+Ni5qrQQpFBCa7RIQklwozFuXJi4ciH+F0ri1oVbF25cGEPSGMNCDMqYO71TZjqddvqYmT4+n+S299G553vbfHvOnDnn3gB2rcHsSxpxICKuJRH9FccKkR8cXPi5B3/ePJ8tSRSLb/2RxM1byVzluZL8e1/+4n/7I/kpjdjXUVvu9OyNy2OTkxPX8+3hmSvXhqdnbxy5dGXs4sTFiaujL4+ePHH8xMmRoxu6vkLF+pk7733Q/8nZd7756lEy8u0vZ5M4FY/z2LLrWvra7g2VnP3OBqO44OGTvWnp68kNnnur+Ku/+necSZbuYMu6EBH7I6IzIp6J/uio+Gv2x8dvtDU4oKmKSZTrKGDXSVbP/87aXT3NCQZooXI7oPzefrn3wbXSJrdKgFaYP73QSbaQ+50RUc7/wkLfYPSU+gZ6HyRV/TxJRGysZ25BVsaPP5y9ky1Rpx8OaI652+Ve7qX1f1LKzYHoKW31Pkir8j+tWLL9b66z/MEl2/IfWmfudkQ8m9f/XbHu/H93neXLfwAAAAAAANg8905HxEvLjf9LF8f/dC0z/qcvIk5tQvmrf/6X3s9Xkk0oDqgwfzri1Zrxv/9Ujg4e6Mg/5/9/aTxAZ3rh0uTE0Yh4KiIOR2d3tj1SfdqqAcJHPtv3Zb3yK8f/ZUtWfnksYH6q+4UlE3HHx2bGNufqYXebvx3xsDT+92C+p3r8T1b/JzX1/6evZwl+rcEy9r1w91zVjt+e/HtYPf+BZil+HXFo2fk/T5rbycr35xgutQeGy62CWs999Pl39cqX/9A+Wf3fu3L+dyeV9+uZXtv5uyLi2GyhWO/4etv/XcnbHeXzZz4cm5m5PhLRlZyp3T+6tphhpyrnQzlfsvw//PzK/X+L7f+KPNwTEXMNlrn/cd+v9Y6p/6F9svwfX7n+H6iu/9e60hOjdwe+z28xVuNcQ/X/8VKdfjjfo/8PKtXej6PRBG1LuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwzaUR8b9I0qHF9TQdGoroi4inozednJqeefHC1PtXx7Nj1c//71/YTsrP/x+o2B5dsn0sIvZGxBcde0rbQ+enJsfbffEAAAAAAAAAAAAAAAAAAACwRfSV5vwXu5fO/8/83tHu6ICmK+Tf5TvsPoV1v7LYvamBAC23/vwHtrvG87+zqXEArVc//x8+Kpa0NByghbT/YfdaZ/77uAB2APU/7FYN9un1NDsOoB0arv/nmxsHAAAAAACwKfYevPdzEhFzr+wpLZmu/JjB/rCzpe0OAGgbY3hh9ypMtTsCoF28xweSxbW/l53sX3/0f9KcgAAAAAAAAAAAAACAGocOrH3+/5xJg7AjpBErPMLb2H7YyVaoypdLfjU/7CD1H/3RSN2faCHANmb+P7BaPb7x+f/FW2sKCAAAAAAAAAAAAACo1XPj8tjk5MT16dntt/La1ghjbStzY1sijE1debzaz5QfM7+2M3dGxNa4wFavlG/B0cYw2vg/CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqPJfAAAA//8MwS/R")
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10)
sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0)
recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)

2m40.042893313s ago: executing program 6 (id=276):
r0 = io_uring_setup(0x62d2, &(0x7f00000004c0)={0x0, 0x108b896, 0x10, 0x0, 0x237})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="8af68b83ee1418ee"], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0)
io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r0, 0x19, &(0x7f0000000000)={0x80, 0xfffffffb, 0x5}, 0x0)

2m39.845705982s ago: executing program 6 (id=278):
syz_open_dev$evdev(&(0x7f0000000180), 0x800000000000070, 0x1e1082)
add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000480)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d040302303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793020170d3234303431333232313632365a180f32313234303332303232313632365a303a3138303606035504030c2f43657274696669636174652076657269666963617428a2e0861e1ae90d412073656c662d74657374696e67206b65793059301306072a8648ce3d020106082a8648ce3d0301070342000407e56b51affc19", 0xeb, 0xfffffffffffffffd)
syz_pidfd_open(0x0, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000480)={[{@grpquota}, {@bsdgroups}, {@quota}]}, 0x1, 0x506, &(0x7f0000001d00)="$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")
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000c80)="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", 0x13f}], 0x1}}], 0x1, 0x20040084)
write$tun(r0, &(0x7f0000000500)=ANY=[], 0x9b)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc)
sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x2000c050}, 0x4000010)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24000000)
sendmsg$inet(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003400)=[{&(0x7f00000002c0)="dbb502092fd8cc09bd46253fef7bc034b658325191ba7a8361b4ba4c0e9d9402cca15efc2f6e8ec1588a56d5fd3000c11b9f0ac1ca5d6862b3ecab4478253e288442b16cf9b7c147062585c6855bd3d9ee0e4acd69cd10783fe06943a2238ccb14b817d842f66fa2c0d3cb10eacc6f50cd3a7437ca1c4a04cca7329658d9fa71bca061637fbc01a4d829238e47ae4527e20d1bf6ff460803e9f600d5f86fdefb24af395117bc6b2ca15c33c109a00cd7ccccdd2210b979d75ed44e52ada871ad8299c0f56bbcfe9a47470b300a255bb17404ff34b9", 0xd5}, {&(0x7f00000003c0)="5c2cab68a50846e0089414ebec9b850895b5c90dd6", 0x15}, {&(0x7f00000022c0)="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", 0x195}], 0x3}, 0x4090)

2m39.47670728s ago: executing program 6 (id=279):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000000), 0x1, 0x4fb, &(0x7f0000000540)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0)
syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000040))

2m38.580579622s ago: executing program 7 (id=282):
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setns(0xc9, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000001280)={0x2020}, 0x2020)

2m37.955611111s ago: executing program 36 (id=282):
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setns(0xc9, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000001280)={0x2020}, 0x2020)

2m37.926095582s ago: executing program 6 (id=284):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x40000, 0x1c6)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=r0, 0x35, 0x1, 0x6, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0}, 0x40)

2m36.323299968s ago: executing program 6 (id=288):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x1, 0x2}, 0x48)

2m36.006876932s ago: executing program 37 (id=288):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x1, 0x2}, 0x48)

2m10.571474996s ago: executing program 4 (id=358):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x790, &(0x7f0000006a80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80342, 0x168)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
write$P9_RREAD(0xffffffffffffffff, 0x0, 0x9000)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x58342, 0x0)

2m10.48076563s ago: executing program 9 (id=359):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
pwritev2(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}], 0x1, 0xa00, 0x0, 0x22)

2m9.989974503s ago: executing program 9 (id=361):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94)
sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x6)
syz_emit_ethernet(0x56, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa348100000086dd60910100001c11fffe8000000000000000000000000000bbfe8000000000000000000000000000aa00000e22001c90780203000000000000000071cd0c3c92"], 0x0)
r3 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0xffff, 0xe9, @dev={0xfe, 0x80, '\x00', 0xa}, 0x5}, 0x1c)
sendmsg(r3, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@remote, 0x7fffffff, 0x1, 0x3, 0x0, 0x8, 0x8}, 0x20)

2m9.82975693s ago: executing program 4 (id=364):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c0000003e000701fdbfffff05000000017c00000400fc800c000180060006003b0000000800028004"], 0x2c}, 0x1, 0x0, 0x0, 0x8044}, 0x4010)

2m8.868908145s ago: executing program 9 (id=365):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vxcan0\x00', <r4=>0x0})
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}}, 0x18)
connect$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0xf0}, 0x1}, 0x18)
sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0)

2m8.300694592s ago: executing program 4 (id=366):
socket$nl_xfrm(0x10, 0x3, 0x6)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet(0x2, 0x2, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x1, @remote}, {0x2, 0x4e20, @multicast1}, 0x26e647b9a7ad1610, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x5})
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r2, &(0x7f0000000000), 0xd)

2m7.71222601s ago: executing program 9 (id=367):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300))
syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xd40c, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140))
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, <r1=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xffffffde, 0x2040d00c, 0x0, 0xfffe, 0x2, 0x1, 0x0, 0x0, 0x100, 0x100}}, 0x50)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40242, 0x1)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r2, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x42, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
syz_ublk_setup_queues(r4, 0x0, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x2, 0x33d, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7396, 0x20, 0x0, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x727b, 0x80, 0xffffffff, 0x135}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x1, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0)
syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0)

2m7.689202291s ago: executing program 4 (id=368):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000000), 0x1, 0x4fb, &(0x7f0000000540)="$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")
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000040))

2m7.100655908s ago: executing program 9 (id=369):
syz_open_dev$evdev(&(0x7f0000000180), 0x800000000000070, 0x1e1082)
add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000480)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d040302303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793020170d3234303431333232313632365a180f32313234303332303232313632365a303a3138303606035504030c2f43657274696669636174652076657269666963617428a2e0861e1ae90d412073656c662d74657374696e67206b65793059301306072a8648ce3d020106082a8648ce3d0301070342000407e56b51affc19", 0xeb, 0xfffffffffffffffd)
syz_pidfd_open(0x0, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000480)={[{@grpquota}, {@bsdgroups}, {@quota}]}, 0x1, 0x506, &(0x7f0000001d00)="$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")
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000c80)="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", 0x13f}], 0x1}}], 0x1, 0x20040084)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x2000c050}, 0x4000010)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24000000)
sendmsg$inet(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003400)=[{&(0x7f00000002c0)="dbb502092fd8cc09bd46253fef7bc034b658325191ba7a8361b4ba4c0e9d9402cca15efc2f6e8ec1588a56d5fd3000c11b9f0ac1ca5d6862b3ecab4478253e288442b16cf9b7c147062585c6855bd3d9ee0e4acd69cd10783fe06943a2238ccb14b817d842f66fa2c0d3cb10eacc6f50cd3a7437ca1c4a04cca7329658d9fa71bca061637fbc01a4d829238e47ae4527e20d1bf6ff460803e9f600d5f86fdefb24af395117bc6b2ca15c33c109a00cd7ccccdd2210b979d75ed44e52ada871ad8299c0f56bbcfe9a47470b300a255bb17404ff34b9", 0xd5}, {&(0x7f00000003c0)="5c2cab68a50846e0089414ebec9b850895b5c90dd6", 0x15}, {&(0x7f00000022c0)="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", 0x195}], 0x3}, 0x4090)

2m7.100319308s ago: executing program 4 (id=370):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5005})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x9, {"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", 0x1000}}, 0x1006)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x6}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r5, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)="da", 0x14}], 0x1}, 0x20000885)

2m6.580661713s ago: executing program 9 (id=374):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c0000003e000701fdbfffff05000000017c00000400fc800c000180060006003b0000000800028004"], 0x2c}, 0x1, 0x0, 0x0, 0x8044}, 0x4010)

2m6.059461078s ago: executing program 38 (id=374):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c0000003e000701fdbfffff05000000017c00000400fc800c000180060006003b0000000800028004"], 0x2c}, 0x1, 0x0, 0x0, 0x8044}, 0x4010)

2m5.620200048s ago: executing program 4 (id=379):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000000), 0x1, 0x4fb, &(0x7f0000000540)="$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")
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000040))

2m4.002632804s ago: executing program 39 (id=379):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000000), 0x1, 0x4fb, &(0x7f0000000540)="$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")
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000040))

15.319238692s ago: executing program 8 (id=678):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x40}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0xffffffffffffffff, 0x38)
io_uring_setup(0xc5e, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x2)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000005c0)='./bus\x00', 0x8205, &(0x7f00000027c0), 0x81, 0x63e, &(0x7f0000000c40)="$eJzs3c9rHNcdAPDvzGr1w1YruxRTm5YKerChWD9cU7c92b7UB0MN9aGUHiwsyRVe2cKSoXYNlqGHFloopdcQfMk/EMgxmFxzC4Ekt5wDTggOOSTBG2Z2Rl5Wu/Za1u5K3s8HdvXmzcy+992nt/NmZmcngKE1nT2lEUcj4koSMdU0bzIaM6eL5Z58ee9q9kiiXv/jF0kkRV65/NPi78HsKYkYj4gPzkf8qLK93PU7d68v1OoN9yNmN1bXZtfv3D25srpwbena0o35U785fWbut/On53clzjKuCxf/8NP//OOvv17+sHYyibNxufr3xdY4dst0TMfTIsTm/JGIOJMl2rwv+00ZQlI0O/tLpfh/rEbEkZiKSoxtzZuKlX8PtHJAT9UrEXVgSCVb/b862IoAfVaOA8p9+17sB+9lj881doC2xz/SODYS4/m+0YEnSb6fVEoi4tAulJ+V8d29Y29kj+hwHGJkF8rpZPNBRPykXfxJXrdD+VGcLP400qb1svRcRIwW70W6w/KzMt5pmu73/9/LxN/cDlm8Z4u/Wf75HZY/3TI9bP0PgMF4dK7YkG9mU8+2f9nIsBz/RMv4JynODbVuu3Zi0Nu/zuO/cns/nh8jT1vGYdl7cKn9S1ZbMz7914X/dSq/efyXPbLyy7FgPzx+EHGsJf5/5oO5ZKv9kzbj32yRK12W8fuPPr/Qad6g468/jDjedv8n2VomS81urK6VeS3nJ2eXV2pLc43ntmW8+/5f3upU/qDjz9o/OsT/vPbP8ta6LOPtSw9XO82bfGH86WejyeU8NVrk/G1hY+PWfMRocrFYpCn/1NaKbT+eymXK18jiP/GL9v3/OfHnDb3ZZfxrf7r+pJFKts3ruv23farknta7rEMnWfyLO2z//3ZZxtd/vv2zlqyJMvG8+Ce2v1TS7XsOAAAAAAAAwyjNz8Em6cxWOk1nZhoXc/44DqS1m+sbv1y+efvGYsSJ/PuQ1bQ80z3VmE6y6fni+7Dl9KmW6V9FxOGI+H9lIp+euXqztjjo4AEAAAAAAAAAAAAAAAAAAGCPOFhc/1/ep/qrSuP6/65sHOlx7YCe6+UN5oC9Tf+H4ZX3/y7u4DrWh7oA/WX7D8NL/4fhpf/D8NL/YXg1+n8XBwCB147tPwwv/R+Gl/4PAAAAAK+lwz9/9EkSEZu/m8gfmdFiXnWgNQN6rbmPj3e1xnTP6gL0V6WvqwF7ydapf9/+haHT1T7+N/WxqNfr9d5XBxiApF1mPjgofhi0U+d/1HZNAAAAAAAAAAAAAKAHjh91/T8MqzTee5nF6/X6/d5VBuirV7iQ328AwD7np/9heNnHB150FX/H3wZ0/T8AAAAAAAAAAAAA9M1k/kjSmeIWoJORpjMzET+IiENRTZZXaktzEfHDiPi4Uh3LpucHXWkAAAAAAAAAAAAAAAAAAAB4zazfuXt9oVZbutWc+HZbTo8T5d3Fulm4Q51fJVHeBbWfIXebiKT/hU5ExF6IvTeJkaacJGIza/k9UbFb67EnqpHm1RjghxIAAAAAAAAAAAAAAAAAAAyppmuP2zv2Zp9rBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD99+z+/ztPJC94nUHHCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADsT98HAAD//45ONl8=")
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000000240)=[{0x0}], 0x1, &(0x7f0000000280)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x28}, 0x10200)
sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="020300090a00000000000000000000000300060000000e0002000000e00000090000000000000000020001000012486147000002000000000300050000200000020000"], 0x50}}, 0x0)

10.781296785s ago: executing program 5 (id=681):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x20000810)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@private=0xa010101, 0x0, 0x3, 0xffff, 0x0, 0x2}, {0x0, 0x3, 0x6, 0x8, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x1}, 0x2, 0x0, 0x1, 0x0, 0x6, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d2, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0xffffffff}}, 0xe8)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)

10.04242384s ago: executing program 5 (id=684):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x488c9)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r5 = memfd_create(&(0x7f0000000380)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x00\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\xf3\xff\x00\x00\x00\x00\xdf8\x9c\xc0T\xd2\xa7\v\x9a\xd2b\x8aL\xdd\x9e\x9d0\xb9\xd8K\x7f\x02\xf0\x19?j\x88l)l\xdbO\x88\r\x9c\xc2\x97m\xe0\xd8\xe4\xaaM4\x92\xca\xd7\x03\x11{\x98-\xb3D\xb8L\a\xdc3\xc8\x19\x9dg\x90\xb5?J\xc8\b=\xc5\b\xd9\x9eG[\xa9\xff]\xdaH\xc1Q\x95T\xfe\x9eRq\xdd[\x90MVb\x122m\xef\xeded#\xaf\xb5\xe3 \x8a\xfa\xf6\xdf\n]KbE\xb7\x9cLL\x93\xe7^\xc7\xde\xd0\xc2\xb5\xfe\v\xc3\xe1\x92[\xdbIq\x81\x00\x9b]\xee\xcbk\"\xdc\x89\x1c\xc3\xa1\x04\xa8\x8fF\xe9y\x0f<\xc0\xac\x06/\x8c\xfcP/\x83\x1f\v\xb8\xf1\xb1T\xdf_\xa1}\xf0)\xb3/_X\x9f\xee\tq\xec\xddG\x82\x95\xfe\x00\x94\xcf\xe1\xbd\x95+\xa4\x95\xf3!\xabu\xe1i', 0x2)
fcntl$addseals(r5, 0x409, 0x7)
r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x8000})
setresuid(0xee00, 0x0, 0x0)
prlimit64(0x0, 0x5, &(0x7f0000000680)={0x200000000005, 0x7}, 0x0)
setpriority(0x2, 0x0, 0xffffffffffffffcd)
ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000080)=0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]})

9.640652868s ago: executing program 8 (id=685):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb305e06daab4c263}, 0x48884)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$can_raw(0x1d, 0x3, 0x1)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
pivot_root(0x0, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x33}})
pwritev(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x1, 0xfff)
socketpair$unix(0x1, 0x0, 0x0, 0x0)

8.53906006s ago: executing program 5 (id=687):
setns(0xc9, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0xfdef)

7.89129493s ago: executing program 3 (id=689):
openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$key(0xf, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r3, &(0x7f0000000400)='\n', 0x1)

6.806288381s ago: executing program 3 (id=691):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0))
socket(0x400000000010, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$igmp(0x2, 0x3, 0x2)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000100), 0x4)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x2e, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@end]}}, @echo_reply={0x0, 0x0, 0x0, 0x65, 0x8}}}}}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c)

6.631326439s ago: executing program 0 (id=692):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42797000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
r0 = syz_io_uring_setup(0x2170, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4004}, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f00000003c0))
io_uring_enter(r0, 0x66a8, 0x4000, 0xf, 0x0, 0x18)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)

5.110762051s ago: executing program 0 (id=693):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x40}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, 0xffffffffffffffff, 0x38)
io_uring_setup(0xc5e, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x2)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000005c0)='./bus\x00', 0x8205, &(0x7f00000027c0), 0x81, 0x63e, &(0x7f0000000c40)="$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")
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000000240)=[{0x0}], 0x1, &(0x7f0000000280)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x28}, 0x10200)
sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="020300090a00000000000000000000000300060000000e0002000000e00000090000000000000000020001000012486147000002000000000300050000200000020000"], 0x50}}, 0x0)

4.744554938s ago: executing program 8 (id=694):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', <r2=>0x0})
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
sendmsg$nl_route_sched(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x7c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4c, 0x2, [@TCA_BASIC_ACT={0x48, 0x3, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x7c}}, 0x0)
write$tun(r0, &(0x7f0000001240)={@void, @val={0x3, 0x3, 0x8, 0x3, 0x16, 0xc}, @ipv4=@dccp={{0x5, 0x4, 0x1, 0x0, 0x24, 0x64, 0x0, 0xf, 0x21, 0x0, @broadcast, @broadcast}, {{0x4e21, 0x4e20, 0x4, 0x1, 0x2, 0x0, 0x0, 0xa, 0x6, "53857f", 0x9, "4a9fd5"}}}}, 0x2e)

4.545449708s ago: executing program 3 (id=695):
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x931766f6319eed40)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000010000006d050000020000"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000000380), 0xfffffffb, r0}, 0x38)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r0}, 0x38)

4.400220865s ago: executing program 5 (id=696):
r0 = socket$alg(0x26, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000240)={0x0, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={&(0x7f0000000200), 0x0, r2})
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
r5 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0)

4.140764876s ago: executing program 8 (id=697):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x488c9)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r5 = memfd_create(&(0x7f0000000380)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x00\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\xf3\xff\x00\x00\x00\x00\xdf8\x9c\xc0T\xd2\xa7\v\x9a\xd2b\x8aL\xdd\x9e\x9d0\xb9\xd8K\x7f\x02\xf0\x19?j\x88l)l\xdbO\x88\r\x9c\xc2\x97m\xe0\xd8\xe4\xaaM4\x92\xca\xd7\x03\x11{\x98-\xb3D\xb8L\a\xdc3\xc8\x19\x9dg\x90\xb5?J\xc8\b=\xc5\b\xd9\x9eG[\xa9\xff]\xdaH\xc1Q\x95T\xfe\x9eRq\xdd[\x90MVb\x122m\xef\xeded#\xaf\xb5\xe3 \x8a\xfa\xf6\xdf\n]KbE\xb7\x9cLL\x93\xe7^\xc7\xde\xd0\xc2\xb5\xfe\v\xc3\xe1\x92[\xdbIq\x81\x00\x9b]\xee\xcbk\"\xdc\x89\x1c\xc3\xa1\x04\xa8\x8fF\xe9y\x0f<\xc0\xac\x06/\x8c\xfcP/\x83\x1f\v\xb8\xf1\xb1T\xdf_\xa1}\xf0)\xb3/_X\x9f\xee\tq\xec\xddG\x82\x95\xfe\x00\x94\xcf\xe1\xbd\x95+\xa4\x95\xf3!\xabu\xe1i', 0x2)
fcntl$addseals(r5, 0x409, 0x7)
r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x8000})
setresuid(0xee00, 0x0, 0x0)
prlimit64(0x0, 0x5, &(0x7f0000000680)={0x200000000005, 0x7}, 0x0)
setpriority(0x2, 0x0, 0xffffffffffffffcd)
ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000080)=0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]})

4.113835928s ago: executing program 0 (id=698):
syz_mount_image$squashfs(&(0x7f0000000740), &(0x7f0000000280)='./file1\x00', 0x400, &(0x7f0000000500)=ANY=[], 0x29, 0x20e, &(0x7f0000000780)="$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")
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x40)
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open_by_handle_at(r0, 0x0, 0x454680)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setxattr$system_posix_acl(0x0, &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0)
r4 = syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x3, 0x2, 0x0, 0x177}, &(0x7f0000ffe000), &(0x7f0000ffe000), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x2, &(0x7f0000000180), 0xfe)

3.053937607s ago: executing program 8 (id=699):
openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$key(0xf, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r3, &(0x7f0000000400)='\n', 0x1)

2.720127723s ago: executing program 0 (id=700):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100"})
syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000980)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x1, {0x4644}})
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x100000001, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@any_dev={0x4, 0xfcd, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0x118}}}, 0x0)
ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f00000002c0)=0x3)

2.681011245s ago: executing program 5 (id=701):
socket$nl_xfrm(0x10, 0x3, 0x6)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet(0x2, 0x2, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket(0x10, 0x3, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x80843, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r2, &(0x7f0000000000), 0xd)

981.625754ms ago: executing program 3 (id=702):
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = socket(0x2, 0x2, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000140)=0x2a, 0x4)

920.180637ms ago: executing program 0 (id=703):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000100)="5200000023000101000206fff400"/41, 0x29)

787.182183ms ago: executing program 5 (id=704):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009"], 0x0)
syz_usb_control_io$cdc_ecm(r1, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

516.751527ms ago: executing program 3 (id=705):
r0 = socket(0x11, 0x3, 0x300)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r1, &(0x7f00000002c0), 0x8)
setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, 0x0, 0x0)
accept4(r0, 0x0, &(0x7f0000000000), 0x800)
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000358000/0x1000)=nil, 0x1000, 0xb635773f06ebbeec, 0x8031, 0xffffffffffffffff, 0xffffe000)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x4c, r4, 0x1, 0x0, 0x25dfdbfd, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000)

479.730858ms ago: executing program 0 (id=706):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x40}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, 0xffffffffffffffff, 0x38)
io_uring_setup(0xc5e, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x2)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000005c0)='./bus\x00', 0x8205, &(0x7f00000027c0), 0x81, 0x63e, &(0x7f0000000c40)="$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")
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000000240)=[{0x0}], 0x1, &(0x7f0000000280)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x28}, 0x10200)
sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="020300090a00000000000000000000000300060000000e0002000000e00000090000000000000000020001000012486147000002000000000300050000200000020000"], 0x50}}, 0x0)

236.63548ms ago: executing program 8 (id=707):
syz_open_dev$dri(&(0x7f0000000000), 0xcafa, 0x185000)
r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640)
gettid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSSOFTCAR(r3, 0x541a, 0xfffffffffffffffe)

0s ago: executing program 3 (id=708):
syz_mount_image$squashfs(&(0x7f0000000740), &(0x7f0000000280)='./file1\x00', 0x400, &(0x7f0000000500)=ANY=[], 0x29, 0x20e, &(0x7f0000000780)="$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")
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x40)
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open_by_handle_at(r0, 0x0, 0x454680)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setxattr$system_posix_acl(0x0, &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0)
r4 = syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x3, 0x2, 0x0, 0x177}, &(0x7f0000ffe000), &(0x7f0000ffe000), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x2, &(0x7f0000000180), 0xfe)

kernel console output (not intermixed with test programs):

ed promiscuous mode
[  107.185285][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.243274][   T11] hsr_slave_0: left promiscuous mode
[  107.286781][   T11] hsr_slave_1: left promiscuous mode
[  107.321670][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  107.334252][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  107.349805][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  107.360403][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  107.371310][   T11] bridge_slave_1: left allmulticast mode
[  107.381255][   T11] bridge_slave_1: left promiscuous mode
[  107.389115][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.411596][   T11] bridge_slave_0: left allmulticast mode
[  107.423170][   T11] bridge_slave_0: left promiscuous mode
[  107.429972][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.494288][   T11] veth1_macvtap: left promiscuous mode
[  107.504326][   T11] veth0_macvtap: left promiscuous mode
[  107.515124][   T11] veth1_vlan: left promiscuous mode
[  107.524737][   T11] veth0_vlan: left promiscuous mode
[  108.321933][   T11] team0 (unregistering): Port device team_slave_1 removed
[  108.329945][   T51] Bluetooth: hci0: command tx timeout
[  108.365506][   T11] team0 (unregistering): Port device team_slave_0 removed
[  108.405139][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  108.447545][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  108.746325][   T11] bond0 (unregistering): Released all slaves
[  108.924333][ T6090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  108.943224][ T6090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  109.022401][ T6090] team0: Port device team_slave_0 added
[  109.040308][ T6090] team0: Port device team_slave_1 added
[  109.127222][ T6090] batman_adv: batadv0: Adding interface: batadv_slave_0
[  109.134328][ T6090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  109.160377][ T6090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  109.174235][ T6090] batman_adv: batadv0: Adding interface: batadv_slave_1
[  109.181969][ T6090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  109.237644][ T6090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  109.271636][ T6178] netlink: 'syz.3.86': attribute type 1 has an invalid length.
[  109.852386][ T6179] netlink: 'syz.3.86': attribute type 1 has an invalid length.
[  110.031008][ T6201] netlink: 24 bytes leftover after parsing attributes in process `syz.1.92'.
[  110.164243][ T6203] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  110.269575][ T6090] hsr_slave_0: entered promiscuous mode
[  110.322844][ T6090] hsr_slave_1: entered promiscuous mode
[  110.372108][ T6211] loop2: detected capacity change from 0 to 128
[  110.379139][ T6090] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  110.403245][ T6090] Cannot create hsr debugfs directory
[  110.953124][ T6090] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  110.979981][ T6090] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  110.994416][ T6090] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  111.019513][ T6090] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  111.206222][ T6090] 8021q: adding VLAN 0 to HW filter on device bond0
[  111.272108][ T6090] 8021q: adding VLAN 0 to HW filter on device team0
[  111.305681][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.312940][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  111.385081][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.392416][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  111.515311][ T6231] loop1: detected capacity change from 0 to 512
[  111.652161][ T6231] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  111.740254][ T6231] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  111.994725][ T6090] 8021q: adding VLAN 0 to HW filter on device batadv0
[  112.194347][ T6261] syzkaller0: entered promiscuous mode
[  112.215875][ T6261] syzkaller0: entered allmulticast mode
[  112.404908][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.697059][   T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.963219][   T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.134545][   T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.325069][   T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.446496][ T6090] veth0_vlan: entered promiscuous mode
[  114.531872][ T6090] veth1_vlan: entered promiscuous mode
[  114.863379][ T6297] loop2: detected capacity change from 0 to 256
[  114.894805][ T6090] veth0_macvtap: entered promiscuous mode
[  115.041740][ T6090] veth1_macvtap: entered promiscuous mode
[  115.151854][ T6090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  115.408021][ T6090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.652612][ T6090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  115.857749][ T6090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.907475][ T6090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  115.965936][ T6090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.988921][ T6090] batman_adv: batadv0: Interface activated: batadv_slave_0
[  116.336255][ T5788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  116.346505][ T5788] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  116.541972][ T5788] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  116.553454][ T5788] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  116.564130][ T5788] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  116.574188][ T5788] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  117.013466][ T6090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  117.033715][ T6090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.044595][ T6090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  117.059046][ T6090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.086010][ T3067] IPVS: starting estimator thread 0...
[  117.092287][ T6090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  117.135517][ T6090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.171403][ T6090] batman_adv: batadv0: Interface activated: batadv_slave_1
[  117.183633][ T6320] IPVS: using max 21 ests per chain, 50400 per kthread
[  117.260411][ T6090] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  117.281625][ T6090] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  117.309332][ T6090] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  117.330440][ T6090] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  117.681757][ T6341] overlayfs: failed to resolve './file1': -2
[  117.813149][ T6343] loop2: detected capacity change from 0 to 512
[  117.862702][   T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.875757][   T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.920969][ T6343] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  117.958381][ T6343] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  118.157106][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.237600][ T6360] loop2: detected capacity change from 0 to 128
[  118.244190][ T1127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.297976][ T1127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.521905][ T6311] chnl_net:caif_netlink_parms(): no params data found
[  118.726409][ T5788] Bluetooth: hci3: command tx timeout
[  118.884329][ T6387] overlayfs: failed to resolve './file1': -2
[  119.093803][ T6311] bridge0: port 1(bridge_slave_0) entered blocking state
[  119.101642][ T6311] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.109260][ T6311] bridge_slave_0: entered allmulticast mode
[  119.118033][ T6311] bridge_slave_0: entered promiscuous mode
[  119.135129][ T6311] bridge0: port 2(bridge_slave_1) entered blocking state
[  119.142454][ T6311] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.150020][ T6311] bridge_slave_1: entered allmulticast mode
[  119.157728][ T6311] bridge_slave_1: entered promiscuous mode
[  119.361954][ T6395] IPv6: addrconf: prefix option has invalid lifetime
[  120.046958][ T6311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  120.088326][ T6311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  120.158111][ T6406] loop1: detected capacity change from 0 to 128
[  120.201422][   T11] hsr_slave_0: left promiscuous mode
[  120.220700][   T11] hsr_slave_1: left promiscuous mode
[  120.357647][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  120.399373][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  120.454156][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  120.485743][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  120.506511][   T11] bridge_slave_1: left allmulticast mode
[  120.512191][   T11] bridge_slave_1: left promiscuous mode
[  120.526841][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.556464][ T6423] overlayfs: failed to resolve './file1': -2
[  120.567227][   T11] bridge_slave_0: left allmulticast mode
[  120.572910][   T11] bridge_slave_0: left promiscuous mode
[  120.596694][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.700111][ T6428] IPv6: addrconf: prefix option has invalid lifetime
[  120.726223][   T11] veth1_macvtap: left promiscuous mode
[  120.731798][   T11] veth0_macvtap: left promiscuous mode
[  120.746829][   T11] veth1_vlan: left promiscuous mode
[  120.761090][   T11] veth0_vlan: left promiscuous mode
[  120.806290][ T5788] Bluetooth: hci3: command tx timeout
[  121.116312][ T5844] IPVS: starting estimator thread 0...
[  121.142877][ T6442] loop1: detected capacity change from 0 to 128
[  121.215511][ T6442] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  121.231958][ T6442] ext4 filesystem being mounted at /52/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  121.496096][ T6443] IPVS: using max 18 ests per chain, 43200 per kthread
[  121.759382][ T5776] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  121.927493][ T6450] loop2: detected capacity change from 0 to 128
[  121.990668][ T5782] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  122.526055][   T11] team0 (unregistering): Port device team_slave_1 removed
[  122.584866][   T11] team0 (unregistering): Port device team_slave_0 removed
[  122.629214][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  122.657656][ T5823] nvmet: connect request for invalid subsystem testsubsys!
[  122.672048][ T6468] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys"
[  122.699701][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  122.897023][ T5788] Bluetooth: hci3: command tx timeout
[  123.004658][   T11] bond0 (unregistering): Released all slaves
[  123.148278][ T6311] team0: Port device team_slave_0 added
[  123.161102][ T6311] team0: Port device team_slave_1 added
[  123.209664][ T6311] batman_adv: batadv0: Adding interface: batadv_slave_0
[  123.226018][ T6311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  123.267086][ T6311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  123.314645][ T6311] batman_adv: batadv0: Adding interface: batadv_slave_1
[  123.334186][ T6311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  123.397422][ T6311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  123.560448][ T6311] hsr_slave_0: entered promiscuous mode
[  123.595758][ T6311] hsr_slave_1: entered promiscuous mode
[  123.602663][ T6311] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  123.611291][ T6311] Cannot create hsr debugfs directory
[  124.550768][ T6492] FAULT_INJECTION: forcing a failure.
[  124.550768][ T6492] name failslab, interval 1, probability 0, space 0, times 0
[  124.565341][ T6492] CPU: 0 PID: 6492 Comm: syz.2.155 Not tainted syzkaller #0
[  124.572684][ T6492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  124.582795][ T6492] Call Trace:
[  124.586116][ T6492]  <TASK>
[  124.589106][ T6492]  dump_stack_lvl+0x18c/0x250
[  124.593851][ T6492]  ? show_regs_print_info+0x20/0x20
[  124.599097][ T6492]  ? load_image+0x420/0x420
[  124.603652][ T6492]  ? __lock_acquire+0x7d80/0x7d80
[  124.608730][ T6492]  should_fail_ex+0x394/0x4c0
[  124.613514][ T6492]  should_failslab+0x9/0x20
[  124.618085][ T6492]  slab_pre_alloc_hook+0x59/0x300
[  124.623175][ T6492]  ? string+0x257/0x290
[  124.627382][ T6492]  ? kasprintf+0xe3/0x140
[  124.631752][ T6492]  ? kasprintf+0xe3/0x140
[  124.636128][ T6492]  __kmem_cache_alloc_node+0x53/0x250
[  124.641564][ T6492]  ? kasprintf+0xe3/0x140
[  124.645937][ T6492]  __kmalloc_node_track_caller+0xa4/0x230
[  124.651703][ T6492]  kvasprintf+0xec/0x1a0
[  124.655995][ T6492]  ? bust_spinlocks+0xd0/0xd0
[  124.660719][ T6492]  ? lockdep_lock+0xf5/0x230
[  124.665376][ T6492]  ? lockdep_unlock+0x146/0x2e0
[  124.670277][ T6492]  kasprintf+0xe3/0x140
[  124.674476][ T6492]  ? kvasprintf_const+0x240/0x240
[  124.679546][ T6492]  ? __raw_spin_lock_init+0x45/0x100
[  124.684880][ T6492]  alloc_workqueue+0x57f/0x1380
[  124.689770][ T6492]  ? __asan_memcpy+0x40/0x70
[  124.694420][ T6492]  ? snprintf+0xe9/0x140
[  124.698718][ T6492]  ? lockdep_init_map_type+0x9c/0x8e0
[  124.704140][ T6492]  ? apply_workqueue_attrs+0x180/0x180
[  124.709635][ T6492]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  124.715579][ T6492]  nci_register_device+0x22d/0xa00
[  124.720730][ T6492]  ? lockdep_softirqs_off+0x440/0x440
[  124.726144][ T6492]  ? nci_free_device+0x90/0x90
[  124.730949][ T6492]  ? __init_waitqueue_head+0xa8/0x140
[  124.736376][ T6492]  virtual_ncidev_open+0x12c/0x1a0
[  124.741526][ T6492]  ? virtual_ncidev_ioctl+0xd0/0xd0
[  124.746762][ T6492]  misc_open+0x326/0x3a0
[  124.751053][ T6492]  chrdev_open+0x58c/0x600
[  124.755514][ T6492]  ? cd_forget+0x160/0x160
[  124.759990][ T6492]  ? fsnotify_perm+0x3ed/0x5e0
[  124.764797][ T6492]  do_dentry_open+0x880/0x14b0
[  124.769610][ T6492]  ? cd_forget+0x160/0x160
[  124.774059][ T6492]  path_openat+0x284f/0x3270
[  124.778697][ T6492]  ? do_sys_openat2+0xda/0x1d0
[  124.783501][ T6492]  ? __x64_sys_openat+0x139/0x160
[  124.788588][ T6492]  ? verify_lock_unused+0x140/0x140
[  124.793828][ T6492]  ? do_filp_open+0x430/0x430
[  124.798554][ T6492]  do_filp_open+0x1f2/0x430
[  124.803093][ T6492]  ? vfs_tmpfile+0x620/0x620
[  124.807786][ T6492]  ? _raw_spin_unlock+0x28/0x40
[  124.812687][ T6492]  ? alloc_fd+0x590/0x640
[  124.817070][ T6492]  do_sys_openat2+0x134/0x1d0
[  124.821790][ T6492]  ? do_sys_open+0xe0/0xe0
[  124.826249][ T6492]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  124.832281][ T6492]  ? lock_chain_count+0x20/0x20
[  124.837180][ T6492]  __x64_sys_openat+0x139/0x160
[  124.842103][ T6492]  do_syscall_64+0x55/0xb0
[  124.846559][ T6492]  ? clear_bhb_loop+0x40/0x90
[  124.851287][ T6492]  ? clear_bhb_loop+0x40/0x90
[  124.856009][ T6492]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  124.861977][ T6492] RIP: 0033:0x7fe868d9e159
[  124.866432][ T6492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  124.886070][ T6492] RSP: 002b:00007fe866ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  124.894527][ T6492] RAX: ffffffffffffffda RBX: 00007fe869025fa0 RCX: 00007fe868d9e159
[  124.902541][ T6492] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c
[  124.910553][ T6492] RBP: 00007fe868e3506b R08: 0000000000000000 R09: 0000000000000000
[  124.918559][ T6492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  124.926595][ T6492] R13: 00007fe869026038 R14: 00007fe869025fa0 R15: 00007ffedfc3e778
[  124.934597][ T6492]  </TASK>
[  124.968590][ T5788] Bluetooth: hci3: command tx timeout
[  125.004968][ T6311] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  125.016516][ T6311] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  125.051515][ T6311] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  125.132946][ T6311] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  125.248535][   T28] audit: type=1326 audit(1789765700.898:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6506 comm="syz.4.158" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2dba99e159 code=0x0
[  125.427999][ T6311] 8021q: adding VLAN 0 to HW filter on device bond0
[  125.494080][ T6311] 8021q: adding VLAN 0 to HW filter on device team0
[  125.544887][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.552185][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[  125.578180][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.585423][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  126.029566][ T6536] loop2: detected capacity change from 0 to 512
[  126.079399][ T6536] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  126.105466][ T6540] loop1: detected capacity change from 0 to 1024
[  126.112602][ T6536] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  126.142536][ T6311] 8021q: adding VLAN 0 to HW filter on device batadv0
[  126.181463][ T6540] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  126.242211][ T5779] EXT4-fs error (device loop2): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  126.295553][ T5779] EXT4-fs error (device loop2): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  126.357553][ T5779] EXT4-fs error (device loop2): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  126.418732][ T5779] EXT4-fs error (device loop2): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  126.471764][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.486748][ T5779] EXT4-fs error (device loop2): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  126.550095][ T5779] EXT4-fs error (device loop2): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  126.576877][ T5779] EXT4-fs error (device loop2): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  126.640812][ T5779] EXT4-fs error (device loop2): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  126.696858][ T5779] EXT4-fs error (device loop2): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  126.746342][ T5779] EXT4-fs error (device loop2): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  127.000390][ T6311] veth0_vlan: entered promiscuous mode
[  127.030523][ T6311] veth1_vlan: entered promiscuous mode
[  127.159889][ T6311] veth0_macvtap: entered promiscuous mode
[  127.251705][ T6577] loop1: detected capacity change from 0 to 512
[  127.287368][ T5844] IPVS: starting estimator thread 0...
[  127.310539][ T6311] veth1_macvtap: entered promiscuous mode
[  127.350276][ T6577] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  127.376051][ T6579] IPVS: using max 19 ests per chain, 45600 per kthread
[  127.385769][ T6577] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  127.399692][ T6311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  127.452767][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.477362][ T6311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.493142][   T28] audit: type=1804 audit(1789765703.138:4): pid=6585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.175" name="/newroot/13/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=151 res=1 errno=0
[  127.531139][ T6311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  127.588544][ T6311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.606748][ T5776] EXT4-fs error (device loop1): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  127.623437][ T6311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  127.646472][ T5776] EXT4-fs error (device loop1): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  127.659848][ T6311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.682810][ T6311] batman_adv: batadv0: Interface activated: batadv_slave_0
[  127.715136][ T5776] EXT4-fs error (device loop1): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  127.821209][ T5776] EXT4-fs error (device loop1): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  127.839415][   T59] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.878422][ T5776] EXT4-fs error (device loop1): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  127.892860][ T6311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  127.910088][ T5776] EXT4-fs error (device loop1): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  127.919313][ T6311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.950911][ T5776] EXT4-fs error (device loop1): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  127.956030][ T6311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  127.974945][ T6311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.985187][ T6311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  127.997825][ T5776] EXT4-fs error (device loop1): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  128.002990][ T6311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  128.026442][ T5776] EXT4-fs error (device loop1): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  128.036877][ T6311] batman_adv: batadv0: Interface activated: batadv_slave_1
[  128.071633][ T5776] EXT4-fs error (device loop1): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  128.088310][   T59] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.188843][   T59] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.238600][ T6311] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  128.267754][ T6311] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  128.294852][ T6311] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  128.331335][ T6311] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  128.465520][   T59] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.741442][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.864584][   T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  128.877266][   T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  128.888561][   T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  128.914470][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.929292][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.080912][   T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  129.094965][   T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  129.106764][   T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  129.420761][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  129.475738][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  129.487325][ T5776] syz-executor (5776) used greatest stack depth: 20904 bytes left
[  129.913865][ T6598] chnl_net:caif_netlink_parms(): no params data found
[  130.219317][ T6598] bridge0: port 1(bridge_slave_0) entered blocking state
[  130.245788][ T6598] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.253016][ T6598] bridge_slave_0: entered allmulticast mode
[  130.285337][ T6598] bridge_slave_0: entered promiscuous mode
[  130.307944][ T6598] bridge0: port 2(bridge_slave_1) entered blocking state
[  130.316009][ T6598] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.338473][ T6598] bridge_slave_1: entered allmulticast mode
[  130.358550][ T6598] bridge_slave_1: entered promiscuous mode
[  130.600233][ T6598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  130.716130][ T6598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  131.119767][ T5788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  131.135015][ T5788] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  131.152056][ T5788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  131.172442][ T5788] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  131.193831][ T5788] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  131.209259][ T5788] Bluetooth: hci1: command tx timeout
[  131.218807][ T5788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  131.387542][ T6598] team0: Port device team_slave_0 added
[  131.423805][ T6598] team0: Port device team_slave_1 added
[  131.512543][ T6598] batman_adv: batadv0: Adding interface: batadv_slave_0
[  131.546189][ T6598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  131.581151][ T6598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  131.600971][ T6598] batman_adv: batadv0: Adding interface: batadv_slave_1
[  131.611244][ T6598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  131.653502][ T6598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  131.844895][ T6598] hsr_slave_0: entered promiscuous mode
[  131.864148][ T6598] hsr_slave_1: entered promiscuous mode
[  131.876682][ T6598] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  131.884527][ T6598] Cannot create hsr debugfs directory
[  132.917905][ T3067] IPVS: starting estimator thread 0...
[  133.017304][ T6662] IPVS: using max 21 ests per chain, 50400 per kthread
[  133.065508][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  133.073971][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  133.286409][ T5783] Bluetooth: hci1: command tx timeout
[  133.293137][ T5788] Bluetooth: hci2: command tx timeout
[  134.199812][ T6636] chnl_net:caif_netlink_parms(): no params data found
[  134.421932][ T6682] kvm: pic: non byte read
[  134.446224][ T6682] kvm: pic: non byte read
[  135.177279][ T6598] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  135.217123][ T6598] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  135.343161][ T6598] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  135.366235][ T5788] Bluetooth: hci2: command tx timeout
[  135.366566][ T5783] Bluetooth: hci1: command tx timeout
[  135.486650][ T6598] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  135.743902][ T6636] bridge0: port 1(bridge_slave_0) entered blocking state
[  135.767044][ T6636] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.774360][ T6636] bridge_slave_0: entered allmulticast mode
[  135.781559][ T6636] bridge_slave_0: entered promiscuous mode
[  135.841239][ T6636] bridge0: port 2(bridge_slave_1) entered blocking state
[  136.037900][ T6636] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.142941][ T6636] bridge_slave_1: entered allmulticast mode
[  136.294651][ T6636] bridge_slave_1: entered promiscuous mode
[  136.674983][ T6636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  136.781767][ T6636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  136.981941][ T6636] team0: Port device team_slave_0 added
[  136.991804][ T6636] team0: Port device team_slave_1 added
[  137.189109][ T6636] batman_adv: batadv0: Adding interface: batadv_slave_0
[  137.202038][ T6636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  137.431722][ T6636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  137.608707][ T6724] netlink: 'syz.4.203': attribute type 3 has an invalid length.
[  137.621768][ T5783] Bluetooth: hci2: command tx timeout
[  137.627789][ T5783] Bluetooth: hci1: command tx timeout
[  138.324637][ T6636] batman_adv: batadv0: Adding interface: batadv_slave_1
[  138.332384][ T6636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  138.364633][ T6726] loop5: detected capacity change from 0 to 512
[  138.371200][ T6636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  138.381448][ T6728] loop4: detected capacity change from 0 to 512
[  138.420645][   T59] hsr_slave_0: left promiscuous mode
[  138.422256][ T6726] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  138.439595][   T59] hsr_slave_1: left promiscuous mode
[  138.449692][ T6726] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  138.460784][   T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  138.478079][   T59] batman_adv: batadv0: Removing interface: batadv_slave_0
[  138.487706][   T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  138.495176][   T59] batman_adv: batadv0: Removing interface: batadv_slave_1
[  138.505050][   T59] bridge_slave_1: left allmulticast mode
[  138.511427][   T59] bridge_slave_1: left promiscuous mode
[  138.518755][   T59] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.528596][   T59] bridge_slave_0: left allmulticast mode
[  138.534280][   T59] bridge_slave_0: left promiscuous mode
[  138.541937][   T59] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.586364][   T59] veth1_macvtap: left promiscuous mode
[  138.590412][ T6728] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  138.592047][   T59] veth0_macvtap: left promiscuous mode
[  138.610169][   T59] veth1_vlan: left promiscuous mode
[  138.615569][   T59] veth0_vlan: left promiscuous mode
[  138.656924][ T6728] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  138.679809][ T6311] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.888181][ T6090] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.126115][ T6744] kvm: pic: non byte read
[  139.143088][ T6744] kvm: pic: non byte read
[  139.628471][   T59] team0 (unregistering): Port device team_slave_1 removed
[  139.671731][   T59] team0 (unregistering): Port device team_slave_0 removed
[  139.691536][ T5783] Bluetooth: hci2: command tx timeout
[  139.722651][   T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  139.773522][   T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  140.462498][   T59] bond0 (unregistering): Released all slaves
[  140.938714][ T6598] 8021q: adding VLAN 0 to HW filter on device bond0
[  141.031999][ T6598] 8021q: adding VLAN 0 to HW filter on device team0
[  141.075014][ T6636] hsr_slave_0: entered promiscuous mode
[  141.133483][ T6636] hsr_slave_1: entered promiscuous mode
[  141.170298][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  141.177922][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  141.250539][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  141.257837][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  141.551060][   T59] IPVS: stop unused estimator thread 0...
[  141.730930][ T6636] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  141.742838][ T6636] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  141.763181][ T6636] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  141.776418][ T6636] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  141.900561][   T59] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.410346][   T59] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.162045][   T59] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.857789][   T59] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.138876][ T6773] loop5: detected capacity change from 0 to 1024
[  144.194484][ T6773] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[  144.204661][ T6773] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  144.238945][ T6773] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  144.249139][ T6773] EXT4-fs (loop5): orphan cleanup on readonly fs
[  144.260498][ T6773] EXT4-fs error (device loop5): ext4_read_inode_bitmap:168: comm syz.5.214: Inode bitmap for bg 0 marked uninitialized
[  144.282844][ T6773] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  144.755396][ T6636] 8021q: adding VLAN 0 to HW filter on device bond0
[  144.817444][ T6598] 8021q: adding VLAN 0 to HW filter on device batadv0
[  144.918778][ T6780] kvm: pic: non byte read
[  144.923823][ T6780] kvm: pic: non byte read
[  144.941742][ T6311] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.012858][ T6636] 8021q: adding VLAN 0 to HW filter on device team0
[  145.073635][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.080928][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state
[  145.149109][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[  145.156431][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[  145.980441][ T6636] 8021q: adding VLAN 0 to HW filter on device batadv0
[  146.131479][ T6598] veth0_vlan: entered promiscuous mode
[  146.376511][ T6598] veth1_vlan: entered promiscuous mode
[  146.555800][ T6598] veth0_macvtap: entered promiscuous mode
[  146.601124][ T6598] veth1_macvtap: entered promiscuous mode
[  146.670546][ T6598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  146.709357][ T6598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  146.728217][ T6598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  146.748985][ T6598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  146.768893][ T6598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  146.779679][ T6598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  146.791838][ T6598] batman_adv: batadv0: Interface activated: batadv_slave_0
[  146.803528][ T6598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  146.815411][ T6598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  146.832980][ T6598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  146.844134][ T6598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  146.854580][ T6598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  146.867439][ T6598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  146.888693][ T6598] batman_adv: batadv0: Interface activated: batadv_slave_1
[  146.965873][ T6821] netlink: 40 bytes leftover after parsing attributes in process `syz.5.224'.
[  146.989128][ T6598] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  147.007127][ T6598] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  147.025337][ T6598] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  147.040818][ T6598] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  147.319389][ T6832] kvm: pic: non byte read
[  147.324135][ T6832] kvm: pic: non byte read
[  147.508798][   T59] hsr_slave_0: left promiscuous mode
[  147.519814][   T59] hsr_slave_1: left promiscuous mode
[  147.527004][   T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  147.534567][   T59] batman_adv: batadv0: Removing interface: batadv_slave_0
[  147.551130][   T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  147.559304][   T59] batman_adv: batadv0: Removing interface: batadv_slave_1
[  147.573294][   T59] bridge_slave_1: left allmulticast mode
[  147.579479][   T59] bridge_slave_1: left promiscuous mode
[  147.593357][   T59] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.622015][   T59] bridge_slave_0: left allmulticast mode
[  147.630243][   T59] bridge_slave_0: left promiscuous mode
[  147.640893][   T59] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.701607][   T59] veth1_macvtap: left promiscuous mode
[  147.715963][   T59] veth0_macvtap: left promiscuous mode
[  147.721750][   T59] veth1_vlan: left promiscuous mode
[  147.736021][   T59] veth0_vlan: left promiscuous mode
[  148.518626][ T5823] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  148.749785][ T5823] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 134, changing to 7
[  148.774969][ T5823] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8410, setting to 1024
[  148.796502][ T5823] usb 6-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00
[  148.837219][ T5823] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.860040][ T5823] usb 6-1: Product: syz
[  148.864288][ T5823] usb 6-1: Manufacturer: syz
[  148.895691][ T5823] usb 6-1: SerialNumber: syz
[  148.940414][ T5823] symbolserial 6-1:1.0: required endpoints missing
[  149.030538][   T59] team0 (unregistering): Port device team_slave_1 removed
[  149.124346][   T59] team0 (unregistering): Port device team_slave_0 removed
[  149.167356][ T5784] usb 6-1: USB disconnect, device number 2
[  149.224549][   T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  149.296665][   T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  149.604163][   T59] bond0 (unregistering): Released all slaves
[  149.747212][ T6636] veth0_vlan: entered promiscuous mode
[  149.797391][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  149.800661][ T6636] veth1_vlan: entered promiscuous mode
[  149.805262][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  149.967067][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  149.974965][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  149.987457][ T6636] veth0_macvtap: entered promiscuous mode
[  150.027724][ T6636] veth1_macvtap: entered promiscuous mode
[  150.090990][ T6636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  150.121520][ T6636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.131606][ T6636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  150.151452][ T6636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.301461][ T6636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  150.335839][ T6636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.373017][ T6636] batman_adv: batadv0: Interface activated: batadv_slave_0
[  150.457535][ T6636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  150.472876][ T6636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.484807][ T6636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  150.500963][ T6636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.511140][ T6636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  150.523797][ T6636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.536796][ T6636] batman_adv: batadv0: Interface activated: batadv_slave_1
[  150.551383][ T6636] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  150.563099][ T6636] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  150.595670][ T6636] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  150.604536][ T6636] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  150.727391][   T59] IPVS: stop unused estimator thread 0...
[  150.953928][ T3425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.971403][ T3425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  152.031566][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  152.140578][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  152.422377][ T6867] loop6: detected capacity change from 0 to 1024
[  152.626342][ T6867] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[  152.636534][ T6867] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  152.681431][ T6867] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  152.691343][ T6867] EXT4-fs (loop6): orphan cleanup on readonly fs
[  152.702686][ T6867] EXT4-fs error (device loop6): ext4_read_inode_bitmap:168: comm syz.6.178: Inode bitmap for bg 0 marked uninitialized
[  152.727211][ T6867] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  153.686588][ T6598] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.684045][ T6889] overlayfs: failed to resolve './file1': -2
[  155.021323][    T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  155.219451][    T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 134, changing to 11
[  155.253204][    T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8410, setting to 1024
[  155.316032][    T9] usb 7-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00
[  155.326576][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.334664][    T9] usb 7-1: Product: syz
[  155.344296][    T9] usb 7-1: Manufacturer: syz
[  155.355683][    T9] usb 7-1: SerialNumber: syz
[  155.377895][    T9] symbolserial 7-1:1.0: symbol converter detected
[  155.441952][    T9] usb 7-1: symbol converter now attached to ttyUSB0
[  155.540011][ T6912] loop7: detected capacity change from 0 to 512
[  155.602092][    T9] usb 7-1: USB disconnect, device number 2
[  155.629456][ T6912] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  155.646869][    T9] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0
[  155.655425][    T9] symbolserial 7-1:1.0: device disconnected
[  155.664342][ T6912] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  155.846412][ T6636] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.451118][ T6966] netlink: set zone limit has 8 unknown bytes
[  159.512119][ T6981] IPv6: addrconf: prefix option has invalid lifetime
[  159.985941][    T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  160.380341][    T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 134, changing to 11
[  160.402863][    T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8410, setting to 1024
[  161.138166][    T9] usb 5-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00
[  161.148990][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.157110][    T9] usb 5-1: Product: syz
[  161.161326][    T9] usb 5-1: Manufacturer: syz
[  161.166020][    T9] usb 5-1: SerialNumber: syz
[  161.181182][    T9] symbolserial 5-1:1.0: symbol converter detected
[  161.217878][    T9] usb 5-1: symbol converter now attached to ttyUSB0
[  162.005114][ T5784] usb 5-1: USB disconnect, device number 2
[  162.030624][ T5784] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0
[  162.053279][ T5784] symbolserial 5-1:1.0: device disconnected
[  162.211096][ T7024] loop7: detected capacity change from 0 to 512
[  162.277746][ T7024] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  162.295903][ T7024] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  162.638617][ T6636] EXT4-fs error (device loop7): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  162.746615][ T6636] EXT4-fs error (device loop7): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  162.788961][ T6636] EXT4-fs error (device loop7): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  162.849758][ T6636] EXT4-fs error (device loop7): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  162.875151][ T7041] loop6: detected capacity change from 0 to 1024
[  162.882516][ T6636] EXT4-fs error (device loop7): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  162.910264][ T7041] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  162.926826][ T6636] EXT4-fs error (device loop7): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  162.962594][ T7041] JBD2: no valid journal superblock found
[  162.993062][ T7041] EXT4-fs (loop6): Could not load journal inode
[  163.000299][ T6636] EXT4-fs error (device loop7): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  163.050606][ T6636] EXT4-fs error (device loop7): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  163.274719][ T6636] EXT4-fs error (device loop7): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  163.291084][ T6636] EXT4-fs error (device loop7): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  164.372388][ T7060] loop5: detected capacity change from 0 to 512
[  164.468714][ T7060] EXT4-fs (loop5): failed to initialize system zone (-117)
[  164.509086][ T7064] loop6: detected capacity change from 0 to 512
[  164.516097][ T7060] EXT4-fs (loop5): mount failed
[  164.589685][ T7064] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  164.604931][ T7064] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  164.670030][ T6598] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.848452][ T6636] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.951154][ T7072] netlink: set zone limit has 8 unknown bytes
[  165.559270][ T6636] syz-executor (6636) used greatest stack depth: 20776 bytes left
[  165.661983][ T7079] loop6: detected capacity change from 0 to 512
[  165.899127][ T7079] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  165.925796][ T7079] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  166.075126][ T6598] EXT4-fs error (device loop6): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  166.094123][    T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  166.133151][ T6598] EXT4-fs error (device loop6): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  166.169626][ T6598] EXT4-fs error (device loop6): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  166.212483][ T6598] EXT4-fs error (device loop6): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  166.256762][ T6598] EXT4-fs error (device loop6): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  166.276678][ T6598] EXT4-fs error (device loop6): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  166.306247][ T6598] EXT4-fs error (device loop6): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  166.354171][ T6598] EXT4-fs error (device loop6): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  166.368127][    T9] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  166.401789][    T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  166.411539][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  166.419999][ T6598] EXT4-fs error (device loop6): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  166.453819][    T9] usb 5-1: Product: syz
[  166.463962][    T9] usb 5-1: Manufacturer: syz
[  166.479035][ T6598] EXT4-fs error (device loop6): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  166.500223][    T9] usb 5-1: SerialNumber: syz
[  166.877178][    T9] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  167.704938][ T6598] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.723084][ T5788] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  167.735429][ T5788] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  167.747383][ T5788] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  167.759954][ T5788] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  167.770909][ T5788] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  167.781019][ T5788] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  167.912440][   T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.029632][   T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.173341][   T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.367891][   T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.636788][ T7110] chnl_net:caif_netlink_parms(): no params data found
[  168.724473][ T5845] usb 5-1: USB disconnect, device number 3
[  168.753766][ T5845] usblp0: removed
[  168.838528][ T5783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  168.849412][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  168.956613][ T5783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  168.964574][ T5783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  168.973230][ T5783] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  168.981098][ T5783] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  169.190597][ T7138] netlink: 'syz.4.291': attribute type 3 has an invalid length.
[  169.850866][ T5783] Bluetooth: hci1: command tx timeout
[  169.993672][ T7110] bridge0: port 1(bridge_slave_0) entered blocking state
[  170.035922][ T7110] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.043214][ T7110] bridge_slave_0: entered allmulticast mode
[  170.080866][ T7110] bridge_slave_0: entered promiscuous mode
[  170.299827][ T7110] bridge0: port 2(bridge_slave_1) entered blocking state
[  170.320954][ T7110] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.341389][ T7110] bridge_slave_1: entered allmulticast mode
[  170.449988][ T7110] bridge_slave_1: entered promiscuous mode
[  171.046573][ T5783] Bluetooth: hci2: command tx timeout
[  171.283715][ T7110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  171.319084][ T7110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  171.617811][ T7110] team0: Port device team_slave_0 added
[  171.668870][ T7110] team0: Port device team_slave_1 added
[  171.792950][ T7110] batman_adv: batadv0: Adding interface: batadv_slave_0
[  171.805738][ T1208] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  171.820829][ T7110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  171.846842][    C0] vkms_vblank_simulate: vblank timer overrun
[  171.926723][ T5783] Bluetooth: hci1: command tx timeout
[  171.960160][ T7110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  172.026023][ T1208] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  172.224650][ T1208] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  172.318649][ T1208] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  172.353179][ T7110] batman_adv: batadv0: Adding interface: batadv_slave_1
[  172.360550][ T1208] usb 5-1: Product: syz
[  172.365112][ T1208] usb 5-1: Manufacturer: syz
[  172.380786][ T7110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  172.424500][ T1208] usb 5-1: SerialNumber: syz
[  172.500399][ T7110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  172.672186][ T1208] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  173.126201][ T5783] Bluetooth: hci2: command tx timeout
[  173.430736][ T7110] hsr_slave_0: entered promiscuous mode
[  173.467030][ T7110] hsr_slave_1: entered promiscuous mode
[  173.479765][ T7110] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  173.491147][ T7110] Cannot create hsr debugfs directory
[  173.665504][   T12] hsr_slave_0: left promiscuous mode
[  173.679430][   T12] hsr_slave_1: left promiscuous mode
[  173.696738][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  173.707489][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  173.774377][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  173.811463][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  173.822378][   T12] bridge_slave_1: left allmulticast mode
[  173.840230][   T12] bridge_slave_1: left promiscuous mode
[  173.851197][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.870813][   T12] bridge_slave_0: left allmulticast mode
[  173.954833][   T12] bridge_slave_0: left promiscuous mode
[  173.971919][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  174.037317][ T5783] Bluetooth: hci1: command tx timeout
[  174.066386][   T12] veth1_macvtap: left promiscuous mode
[  174.074322][   T12] veth0_macvtap: left promiscuous mode
[  174.099201][   T12] veth1_vlan: left promiscuous mode
[  174.120443][   T12] veth0_vlan: left promiscuous mode
[  175.205989][ T5783] Bluetooth: hci2: command tx timeout
[  175.557926][   T12] team0 (unregistering): Port device team_slave_1 removed
[  175.609196][   T12] team0 (unregistering): Port device team_slave_0 removed
[  175.655499][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  175.709338][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  176.094142][ T5783] Bluetooth: hci1: command tx timeout
[  176.144710][   T12] bond0 (unregistering): Released all slaves
[  176.357841][ T7130] chnl_net:caif_netlink_parms(): no params data found
[  176.762374][ T7130] bridge0: port 1(bridge_slave_0) entered blocking state
[  176.811427][ T7130] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.819334][ T7130] bridge_slave_0: entered allmulticast mode
[  176.827001][ T7130] bridge_slave_0: entered promiscuous mode
[  176.856790][ T7130] bridge0: port 2(bridge_slave_1) entered blocking state
[  176.874468][ T7130] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.884365][ T7130] bridge_slave_1: entered allmulticast mode
[  176.897461][ T7130] bridge_slave_1: entered promiscuous mode
[  176.998133][ T7130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  177.030916][ T7130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  177.170549][ T7130] team0: Port device team_slave_0 added
[  177.290399][ T5783] Bluetooth: hci2: command tx timeout
[  177.395349][ T7130] team0: Port device team_slave_1 added
[  177.726796][ T7110] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  177.764083][ T7130] batman_adv: batadv0: Adding interface: batadv_slave_0
[  177.801101][ T7130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  177.866021][ T7130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  177.903765][ T7130] batman_adv: batadv0: Adding interface: batadv_slave_1
[  177.915876][ T7130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  177.943444][ T7130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  177.976078][ T7110] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  178.015975][ T7110] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  178.056183][ T7110] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  178.156888][ T7130] hsr_slave_0: entered promiscuous mode
[  178.164797][ T7130] hsr_slave_1: entered promiscuous mode
[  178.184432][ T7130] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  178.198447][ T7130] Cannot create hsr debugfs directory
[  178.623714][ T7110] 8021q: adding VLAN 0 to HW filter on device bond0
[  178.687786][ T7110] 8021q: adding VLAN 0 to HW filter on device team0
[  178.714896][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state
[  178.722096][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state
[  178.760016][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  178.767206][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  178.788798][ T7130] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  178.816398][ T7130] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  178.853713][ T7130] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  178.884590][ T7130] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  179.095242][ T7130] 8021q: adding VLAN 0 to HW filter on device bond0
[  179.178452][ T7130] 8021q: adding VLAN 0 to HW filter on device team0
[  179.214831][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state
[  179.222032][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state
[  179.308374][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  179.315528][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  179.589249][ T7110] 8021q: adding VLAN 0 to HW filter on device batadv0
[  179.659568][ T5844] usb 5-1: USB disconnect, device number 4
[  179.728144][ T5844] usblp0: removed
[  180.810695][ T7130] 8021q: adding VLAN 0 to HW filter on device batadv0
[  181.071431][ T7110] veth0_vlan: entered promiscuous mode
[  181.112174][ T7110] veth1_vlan: entered promiscuous mode
[  181.362704][ T7110] veth0_macvtap: entered promiscuous mode
[  181.618677][ T7110] veth1_macvtap: entered promiscuous mode
[  182.026107][ T7110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  182.074298][ T7110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  182.115657][ T7110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  182.151719][ T7110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  182.161886][ T7110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  182.179475][ T7110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  182.192350][ T7110] batman_adv: batadv0: Interface activated: batadv_slave_0
[  182.208002][ T7110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  182.235708][ T7110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  182.246572][ T7110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  182.275727][ T7110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  182.295729][ T7110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  182.307538][ T7110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  182.319326][ T7110] batman_adv: batadv0: Interface activated: batadv_slave_1
[  182.349926][ T7110] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  182.375614][ T7110] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  182.395659][ T7110] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  182.425809][ T7110] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  182.647466][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  182.655340][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  182.707957][ T7130] veth0_vlan: entered promiscuous mode
[  182.767923][ T7130] veth1_vlan: entered promiscuous mode
[  182.801659][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  182.840494][ T7130] veth0_macvtap: entered promiscuous mode
[  182.859357][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  183.032197][ T7130] veth1_macvtap: entered promiscuous mode
[  183.101047][ T7130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  183.129129][ T7130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.157230][ T7130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  183.179784][ T7130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.192044][ T7130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  183.229853][ T7130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.246644][ T7130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  183.257648][ T7130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.291468][ T7130] batman_adv: batadv0: Interface activated: batadv_slave_0
[  183.329995][ T7130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  183.370921][ T7130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.399271][ T7130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  183.429824][ T7130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.442873][ T7130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  183.442895][ T7130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.442913][ T7130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  183.442928][ T7130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.450094][ T7130] batman_adv: batadv0: Interface activated: batadv_slave_1
[  183.521587][ T7130] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  183.521624][ T7130] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  183.521652][ T7130] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  183.521680][ T7130] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  183.720537][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  183.720556][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  183.832848][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  183.832869][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  185.320684][ T7352] loop9: detected capacity change from 0 to 512
[  185.483095][ T7352] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  185.811507][ T7352] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  186.322720][ T7130] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.362227][ T7372] loop8: detected capacity change from 0 to 512
[  186.388100][ T7372] EXT4-fs: inline encryption not supported
[  186.455752][ T7372] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  186.497126][ T7372] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  186.628197][ T7372] EXT4-fs (loop8): 1 truncate cleaned up
[  186.673209][ T7372] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  186.842880][ T7382] netlink: 'syz.9.326': attribute type 3 has an invalid length.
[  187.046182][ T7110] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  188.899019][ T7409] Bluetooth: MGMT ver 1.22
[  188.924384][ T7409] Bluetooth: hci0: unsupported parameter 255
[  188.961937][ T7409] Bluetooth: hci0: unsupported parameter 255
[  189.281787][ T7420] loop5: detected capacity change from 0 to 512
[  189.348331][ T7420] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  189.376587][ T7420] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  189.731293][ T6311] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.937781][ T7449] Bluetooth: hci0: unsupported parameter 255
[  190.943936][ T7449] Bluetooth: hci0: unsupported parameter 255
[  191.106873][ T7456] netlink: 'syz.8.345': attribute type 12 has an invalid length.
[  191.114679][ T7456] netlink: 'syz.8.345': attribute type 29 has an invalid length.
[  191.177747][ T7456] netlink: 148 bytes leftover after parsing attributes in process `syz.8.345'.
[  191.228971][ T7462] loop4: detected capacity change from 0 to 512
[  191.273077][   T28] audit: type=1800 audit(1789765766.918:5): pid=7456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.345" name="device" dev="configfs" ino=18552 res=0 errno=0
[  191.353244][ T7462] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  191.390420][ T7462] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  191.741414][ T6090] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.774413][ T7505] loop4: detected capacity change from 0 to 2048
[  194.005033][ T7514] usb usb8: usbfs: process 7514 (syz.5.360) did not claim interface 0 before use
[  194.038550][ T7505] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  194.371867][ T6090] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.492300][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  194.512010][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  194.588234][ T7524] loop8: detected capacity change from 0 to 1024
[  194.604947][ T7524] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  194.625736][ T5844] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  194.662412][ T7524] JBD2: no valid journal superblock found
[  194.697414][ T7524] EXT4-fs (loop8): Could not load journal inode
[  194.775979][ T5844] usb 6-1: device descriptor read/64, error -71
[  195.068285][ T7531] netlink: set zone limit has 8 unknown bytes
[  195.215674][ T5844] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  195.389518][ T5844] usb 6-1: device descriptor read/64, error -71
[  195.632623][ T5844] usb usb6-port1: attempt power cycle
[  196.609182][ T7547] loop4: detected capacity change from 0 to 512
[  196.692126][ T7547] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  196.762084][ T7547] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  196.815675][ T5844] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  196.856823][ T5844] usb 6-1: device descriptor read/8, error -71
[  197.087525][ T6090] EXT4-fs error (device loop4): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  197.116793][ T6090] EXT4-fs error (device loop4): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  197.131679][ T6090] EXT4-fs error (device loop4): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  197.155740][ T5844] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  197.192815][ T6090] EXT4-fs error (device loop4): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  197.228604][ T6090] EXT4-fs error (device loop4): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  197.236823][ T5844] usb 6-1: device descriptor read/8, error -71
[  197.296115][ T6090] EXT4-fs error (device loop4): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  197.349029][ T6090] EXT4-fs error (device loop4): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  197.379277][ T5844] usb usb6-port1: unable to enumerate USB device
[  197.431426][ T6090] EXT4-fs error (device loop4): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  197.475068][ T6090] EXT4-fs error (device loop4): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  197.526904][ T6090] EXT4-fs error (device loop4): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  197.649426][ T7567] syz.5.372 (7567) used greatest stack depth: 20592 bytes left
[  197.889920][ T1087] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.028367][ T1087] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.188021][ T1087] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.337155][ T6090] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.464516][ T7581] loop5: detected capacity change from 0 to 1024
[  198.530445][ T1087] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.545030][ T7581] EXT4-fs: Ignoring removed bh option
[  198.574171][ T7581] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  198.600036][ T7583] FAULT_INJECTION: forcing a failure.
[  198.600036][ T7583] name failslab, interval 1, probability 0, space 0, times 0
[  198.663595][ T7583] CPU: 1 PID: 7583 Comm: syz.8.378 Not tainted syzkaller #0
[  198.671097][ T7583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  198.681221][ T7583] Call Trace:
[  198.684542][ T7583]  <TASK>
[  198.687514][ T7583]  dump_stack_lvl+0x18c/0x250
[  198.692254][ T7583]  ? show_regs_print_info+0x20/0x20
[  198.697511][ T7583]  ? load_image+0x420/0x420
[  198.702074][ T7583]  ? __lock_acquire+0x7d80/0x7d80
[  198.707193][ T7583]  should_fail_ex+0x394/0x4c0
[  198.711953][ T7583]  should_failslab+0x9/0x20
[  198.716518][ T7583]  slab_pre_alloc_hook+0x59/0x300
[  198.721613][ T7583]  kmem_cache_alloc_lru+0x4d/0x2b0
[  198.726785][ T7583]  ? sock_alloc_inode+0x28/0xc0
[  198.731702][ T7583]  sock_alloc_inode+0x28/0xc0
[  198.736441][ T7583]  ? sockfs_init_fs_context+0xb0/0xb0
[  198.741954][ T7583]  new_inode_pseudo+0x63/0x1d0
[  198.746790][ T7583]  __sock_create+0x12d/0x940
[  198.751433][ T7583]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  198.757503][ T7583]  __sys_socket+0xd7/0x1b0
[  198.761983][ T7583]  __x64_sys_socket+0x7a/0x90
[  198.766742][ T7583]  do_syscall_64+0x55/0xb0
[  198.771240][ T7583]  ? clear_bhb_loop+0x40/0x90
[  198.775969][ T7583]  ? clear_bhb_loop+0x40/0x90
[  198.780701][ T7583]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  198.786659][ T7583] RIP: 0033:0x7fbcdff9e159
[  198.791128][ T7583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  198.810883][ T7583] RSP: 002b:00007fbce0f4f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  198.819361][ T7583] RAX: ffffffffffffffda RBX: 00007fbce0225fa0 RCX: 00007fbcdff9e159
[  198.827391][ T7583] RDX: 0000000000000000 RSI: 0000000000080805 RDI: 000000000000000a
[  198.835424][ T7583] RBP: 00007fbce003506b R08: 0000000000000000 R09: 0000000000000000
[  198.843447][ T7583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  198.851466][ T7583] R13: 00007fbce0226038 R14: 00007fbce0225fa0 R15: 00007ffd22541138
[  198.859509][ T7583]  </TASK>
[  198.934260][ T7581] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  199.011718][ T7583] socket: no more sockets
[  200.161667][ T6311] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.350691][ T5788] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  200.377508][ T5788] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  200.386753][ T5788] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  200.419088][ T5788] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  200.427725][ T5788] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  200.435174][ T5788] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  200.532377][ T7603] loop8: detected capacity change from 0 to 512
[  200.647203][ T7603] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  200.720136][ T7603] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  200.850128][ T7609] input: syz1 as /devices/virtual/input/input5
[  200.861191][ T5788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  200.870844][ T5788] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  200.880654][ T5788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  200.891817][ T5788] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  200.911237][ T5788] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  200.920513][ T5788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  201.078477][ T7110] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.269953][ T7618] netlink: 'syz.5.385': attribute type 1 has an invalid length.
[  201.439788][ T7621] Bluetooth: MGMT ver 1.22
[  202.023948][ T7643] FAULT_INJECTION: forcing a failure.
[  202.023948][ T7643] name failslab, interval 1, probability 0, space 0, times 0
[  202.045701][ T7643] CPU: 0 PID: 7643 Comm: syz.5.388 Not tainted syzkaller #0
[  202.053091][ T7643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  202.063276][ T7643] Call Trace:
[  202.066615][ T7643]  <TASK>
[  202.069597][ T7643]  dump_stack_lvl+0x18c/0x250
[  202.074337][ T7643]  ? show_regs_print_info+0x20/0x20
[  202.079597][ T7643]  ? load_image+0x420/0x420
[  202.084159][ T7643]  ? __might_sleep+0xe0/0xe0
[  202.088837][ T7643]  ? __lock_acquire+0x7d80/0x7d80
[  202.093883][ T7643]  should_fail_ex+0x394/0x4c0
[  202.098599][ T7643]  should_failslab+0x9/0x20
[  202.103205][ T7643]  slab_pre_alloc_hook+0x59/0x300
[  202.108310][ T7643]  kmem_cache_alloc+0x5a/0x2c0
[  202.113133][ T7643]  ? security_inode_alloc+0x34/0x110
[  202.118488][ T7643]  security_inode_alloc+0x34/0x110
[  202.123656][ T7643]  inode_init_always+0x914/0xc90
[  202.128652][ T7643]  new_inode_pseudo+0x95/0x1d0
[  202.133466][ T7643]  __sock_create+0x12d/0x940
[  202.138106][ T7643]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  202.144126][ T7643]  __sys_socket+0xd7/0x1b0
[  202.148579][ T7643]  __x64_sys_socket+0x7a/0x90
[  202.153285][ T7643]  do_syscall_64+0x55/0xb0
[  202.157729][ T7643]  ? clear_bhb_loop+0x40/0x90
[  202.162443][ T7643]  ? clear_bhb_loop+0x40/0x90
[  202.167200][ T7643]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  202.173134][ T7643] RIP: 0033:0x7f0155f9e159
[  202.177581][ T7643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  202.197216][ T7643] RSP: 002b:00007f0156e79028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  202.205703][ T7643] RAX: ffffffffffffffda RBX: 00007f0156225fa0 RCX: 00007f0155f9e159
[  202.213714][ T7643] RDX: 0000000000000000 RSI: 0000000000080805 RDI: 000000000000000a
[  202.221712][ T7643] RBP: 00007f015603506b R08: 0000000000000000 R09: 0000000000000000
[  202.229711][ T7643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  202.237747][ T7643] R13: 00007f0156226038 R14: 00007f0156225fa0 R15: 00007ffe45f1ac18
[  202.245754][ T7643]  </TASK>
[  202.303981][ T7643] socket: no more sockets
[  202.344795][ T7649] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5)
[  202.351821][ T7649] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  202.361641][ T7649] vhci_hcd vhci_hcd.0: Device attached
[  202.488552][ T5788] Bluetooth: hci0: command tx timeout
[  202.621435][ T7650] vhci_hcd: connection closed
[  202.624459][   T33] vhci_hcd: stop threads
[  202.642177][   T33] vhci_hcd: release socket
[  202.658489][ T5844] usb 49-1: new high-speed USB device number 2 using vhci_hcd
[  202.685276][   T33] vhci_hcd: disconnect device
[  202.841010][ T7598] chnl_net:caif_netlink_parms(): no params data found
[  202.976398][ T5788] Bluetooth: hci2: command tx timeout
[  203.121324][ T7610] chnl_net:caif_netlink_parms(): no params data found
[  203.259248][ T7678] loop5: detected capacity change from 0 to 512
[  203.272575][ T1087] hsr_slave_0: left promiscuous mode
[  203.289877][ T1087] hsr_slave_1: left promiscuous mode
[  203.296975][ T1087] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  203.304459][ T1087] batman_adv: batadv0: Removing interface: batadv_slave_0
[  203.313163][ T1087] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  203.321642][ T1087] batman_adv: batadv0: Removing interface: batadv_slave_1
[  203.342754][ T1087] bridge_slave_1: left allmulticast mode
[  203.350290][ T1087] bridge_slave_1: left promiscuous mode
[  203.356744][ T1087] bridge0: port 2(bridge_slave_1) entered disabled state
[  203.367907][ T1087] bridge_slave_0: left allmulticast mode
[  203.373627][ T1087] bridge_slave_0: left promiscuous mode
[  203.391015][ T1087] bridge0: port 1(bridge_slave_0) entered disabled state
[  203.400676][ T7678] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  203.451811][ T7678] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  203.471879][ T1087] veth1_macvtap: left promiscuous mode
[  203.486187][ T1087] veth0_macvtap: left promiscuous mode
[  203.500639][ T1087] veth1_vlan: left promiscuous mode
[  203.516057][ T1087] veth0_vlan: left promiscuous mode
[  203.604061][ T6311] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.565673][ T5788] Bluetooth: hci0: command tx timeout
[  204.592946][ T1087] team0 (unregistering): Port device team_slave_1 removed
[  204.652570][ T1087] team0 (unregistering): Port device team_slave_0 removed
[  204.699322][ T1087] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  204.754691][ T1087] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  205.052442][ T5788] Bluetooth: hci2: command tx timeout
[  205.140920][ T1087] bond0 (unregistering): Released all slaves
[  205.285488][ T7689] netlink: 'syz.5.392': attribute type 1 has an invalid length.
[  205.424970][ T7692] FAULT_INJECTION: forcing a failure.
[  205.424970][ T7692] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  205.440761][ T7692] CPU: 1 PID: 7692 Comm: syz.8.394 Not tainted syzkaller #0
[  205.448142][ T7692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  205.458251][ T7692] Call Trace:
[  205.461578][ T7692]  <TASK>
[  205.464559][ T7692]  dump_stack_lvl+0x18c/0x250
[  205.469302][ T7692]  ? show_regs_print_info+0x20/0x20
[  205.474557][ T7692]  ? load_image+0x420/0x420
[  205.479122][ T7692]  ? __lock_acquire+0x7d80/0x7d80
[  205.484212][ T7692]  should_fail_ex+0x394/0x4c0
[  205.488955][ T7692]  prepare_alloc_pages+0x1e1/0x5b0
[  205.494149][ T7692]  __alloc_pages+0x134/0x460
[  205.498809][ T7692]  ? zone_statistics+0x170/0x170
[  205.503815][ T7692]  ? handle_mm_fault+0xe6/0x4a50
[  205.504320][ T7598] bridge0: port 1(bridge_slave_0) entered blocking state
[  205.508788][ T7692]  ? __lock_acquire+0x7d80/0x7d80
[  205.521007][ T7692]  __folio_alloc+0x10/0x20
[  205.525476][ T7692]  vma_alloc_folio+0x474/0x8f0
[  205.530301][ T7692]  ? handle_mm_fault+0xe6/0x4a50
[  205.535295][ T7692]  handle_mm_fault+0x1881/0x4a50
[  205.540285][ T7692]  ? handle_mm_fault+0xe6/0x4a50
[  205.545287][ T7692]  ? numa_migrate_prep+0x350/0x350
[  205.550457][ T7692]  ? follow_page_pte+0x6dd/0x1ae0
[  205.555547][ T7692]  ? pmd_lock+0x60/0x60
[  205.559771][ T7692]  __get_user_pages+0x604/0x1580
[  205.564792][ T7692]  ? populate_vma_page_range+0x380/0x380
[  205.566112][ T7598] bridge0: port 1(bridge_slave_0) entered disabled state
[  205.570466][ T7692]  populate_vma_page_range+0x2c1/0x380
[  205.570505][ T7692]  ? fixup_user_fault+0x750/0x750
[  205.588112][ T7692]  ? down_read+0x1ac/0x2e0
[  205.592589][ T7692]  __mm_populate+0x260/0x390
[  205.597241][ T7692]  ? faultin_page_range+0x8a0/0x8a0
[  205.602502][ T7692]  ? up_write+0x1be/0x410
[  205.606888][ T7692]  vm_mmap_pgoff+0x2da/0x3f0
[  205.609370][ T7598] bridge_slave_0: entered allmulticast mode
[  205.611533][ T7692]  ? account_locked_vm+0x200/0x200
[  205.622620][ T7692]  ksys_mmap_pgoff+0x4c9/0x720
[  205.627441][ T7692]  ? __x64_sys_mmap+0x7a/0x130
[  205.632262][ T7692]  do_syscall_64+0x55/0xb0
[  205.636738][ T7692]  ? clear_bhb_loop+0x40/0x90
[  205.641483][ T7692]  ? clear_bhb_loop+0x40/0x90
[  205.646217][ T7692]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  205.650043][ T7598] bridge_slave_0: entered promiscuous mode
[  205.652237][ T7692] RIP: 0033:0x7fbcdff9e159
[  205.652261][ T7692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  205.652282][ T7692] RSP: 002b:00007fbce0f4f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  205.690666][ T7692] RAX: ffffffffffffffda RBX: 00007fbce0225fa0 RCX: 00007fbcdff9e159
[  205.698714][ T7692] RDX: 000000000100000e RSI: 0000000000b36000 RDI: 0000200000000000
[  205.706751][ T7692] RBP: 00007fbce003506b R08: 0000000000000004 R09: 0000000000000000
[  205.714803][ T7692] R10: 0000000000028012 R11: 0000000000000246 R12: 0000000000000000
[  205.722835][ T7692] R13: 00007fbce0226038 R14: 00007fbce0225fa0 R15: 00007ffd22541138
[  205.730888][ T7692]  </TASK>
[  205.738994][ T7598] bridge0: port 2(bridge_slave_1) entered blocking state
[  205.750707][ T7598] bridge0: port 2(bridge_slave_1) entered disabled state
[  205.768473][ T7598] bridge_slave_1: entered allmulticast mode
[  205.787529][ T7598] bridge_slave_1: entered promiscuous mode
[  205.963907][ T7598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  206.029842][ T7610] bridge0: port 1(bridge_slave_0) entered blocking state
[  206.073230][ T7610] bridge0: port 1(bridge_slave_0) entered disabled state
[  206.089441][ T7610] bridge_slave_0: entered allmulticast mode
[  206.127501][ T7610] bridge_slave_0: entered promiscuous mode
[  206.147415][ T7598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  206.225405][ T7598] team0: Port device team_slave_0 added
[  206.273621][ T7598] team0: Port device team_slave_1 added
[  206.294614][ T7707] loop5: detected capacity change from 0 to 512
[  206.501647][ T7598] batman_adv: batadv0: Adding interface: batadv_slave_0
[  206.545503][ T7598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  206.687724][ T5783] Bluetooth: hci0: command tx timeout
[  206.708936][ T7707] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  206.811806][ T7598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  206.862412][ T7707] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  206.998410][ T7610] bridge0: port 2(bridge_slave_1) entered blocking state
[  207.090513][ T7610] bridge0: port 2(bridge_slave_1) entered disabled state
[  207.125811][ T5788] Bluetooth: hci2: command tx timeout
[  207.165328][ T7610] bridge_slave_1: entered allmulticast mode
[  207.173315][ T7610] bridge_slave_1: entered promiscuous mode
[  207.260290][ T7598] batman_adv: batadv0: Adding interface: batadv_slave_1
[  207.269484][ T7598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  207.299576][ T7598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  207.340336][ T6311] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.421220][ T7610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  207.442945][ T7610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  207.536254][ T7598] hsr_slave_0: entered promiscuous mode
[  207.557297][ T7598] hsr_slave_1: entered promiscuous mode
[  207.585962][ T7598] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  207.603960][ T7598] Cannot create hsr debugfs directory
[  208.508854][ T5844] vhci_hcd: vhci_device speed not set
[  208.607945][ T7610] team0: Port device team_slave_0 added
[  208.725947][ T5788] Bluetooth: hci0: command tx timeout
[  208.789443][ T7610] team0: Port device team_slave_1 added
[  208.965325][ T7734] netlink: 'syz.5.401': attribute type 1 has an invalid length.
[  208.987084][ T7610] batman_adv: batadv0: Adding interface: batadv_slave_0
[  208.994109][ T7610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  209.020936][ T7610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  209.087187][ T7610] batman_adv: batadv0: Adding interface: batadv_slave_1
[  209.094306][ T7610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  209.122234][ T7610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  209.206426][ T5788] Bluetooth: hci2: command tx timeout
[  209.270218][ T1087] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.365124][ T7743] loop5: detected capacity change from 0 to 512
[  209.402743][ T1087] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.426928][ T7743] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  209.441146][ T7743] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  209.499919][ T6311] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  209.620408][ T1087] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.710468][ T7610] hsr_slave_0: entered promiscuous mode
[  209.730434][ T7610] hsr_slave_1: entered promiscuous mode
[  209.741013][ T7610] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  209.749177][ T7610] Cannot create hsr debugfs directory
[  210.037096][ T1087] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.075884][ T7751] netlink: 4 bytes leftover after parsing attributes in process `syz.5.408'.
[  210.094729][ T7751] ip6tnl1: entered allmulticast mode
[  210.112365][ T7753] netlink: 'syz.8.409': attribute type 1 has an invalid length.
[  210.364067][  T146] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  210.386417][  T146] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  210.396124][ T7140] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  210.436180][    T8] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  210.886300][ T5844] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  213.724462][ T7793] loop5: detected capacity change from 0 to 512
[  214.193044][ T7793] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  214.355845][ T7793] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  214.485940][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  214.587661][ T6311] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  215.103690][ T1087] hsr_slave_0: left promiscuous mode
[  215.129445][ T1087] hsr_slave_1: left promiscuous mode
[  215.138965][ T1087] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  215.147003][ T1087] batman_adv: batadv0: Removing interface: batadv_slave_0
[  215.156046][ T1087] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  215.163532][ T1087] batman_adv: batadv0: Removing interface: batadv_slave_1
[  215.174294][ T1087] bridge_slave_1: left allmulticast mode
[  215.180767][ T1087] bridge_slave_1: left promiscuous mode
[  215.192147][ T1087] bridge0: port 2(bridge_slave_1) entered disabled state
[  215.209404][ T1087] bridge_slave_0: left allmulticast mode
[  215.215406][ T1087] bridge_slave_0: left promiscuous mode
[  215.221768][ T1087] bridge0: port 1(bridge_slave_0) entered disabled state
[  215.269282][ T1087] veth1_macvtap: left promiscuous mode
[  215.281651][ T1087] veth0_macvtap: left promiscuous mode
[  215.290083][ T1087] veth1_vlan: left promiscuous mode
[  215.295502][ T1087] veth0_vlan: left promiscuous mode
[  217.024998][ T1087] team0 (unregistering): Port device team_slave_1 removed
[  217.079540][ T1087] team0 (unregistering): Port device team_slave_0 removed
[  217.133936][ T1087] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  217.187982][ T1087] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  217.746961][ T1087] bond0 (unregistering): Released all slaves
[  218.642572][ T1087] IPVS: stop unused estimator thread 0...
[  219.435985][ T7610] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  219.453767][ T7610] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  219.470742][ T7610] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  219.483216][ T7610] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  219.652634][ T7598] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  219.684536][ T7598] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  219.712682][ T7598] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  219.743961][ T7598] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  219.969939][ T7610] 8021q: adding VLAN 0 to HW filter on device bond0
[  220.000443][ T7598] 8021q: adding VLAN 0 to HW filter on device bond0
[  220.032439][ T7610] 8021q: adding VLAN 0 to HW filter on device team0
[  220.062169][ T7598] 8021q: adding VLAN 0 to HW filter on device team0
[  220.131737][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[  220.138979][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[  220.193666][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[  220.201160][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[  220.233810][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[  220.241029][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[  220.330174][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[  220.337434][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[  220.369679][ T7857] loop5: detected capacity change from 0 to 512
[  220.484907][ T7857] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  220.574878][ T7857] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  220.799058][ T6311] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  221.098236][ T7610] 8021q: adding VLAN 0 to HW filter on device batadv0
[  221.632455][ T7889] netlink: 'syz.8.442': attribute type 3 has an invalid length.
[  222.254365][ T7610] veth0_vlan: entered promiscuous mode
[  222.293513][ T7610] veth1_vlan: entered promiscuous mode
[  222.350810][ T7598] 8021q: adding VLAN 0 to HW filter on device batadv0
[  222.460701][ T7610] veth0_macvtap: entered promiscuous mode
[  222.519239][ T7610] veth1_macvtap: entered promiscuous mode
[  222.551918][ T7610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  222.565046][ T7610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  222.590953][ T7610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  222.615645][ T7610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  222.633357][ T7610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  222.652195][ T7610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  222.667238][ T7610] batman_adv: batadv0: Interface activated: batadv_slave_0
[  222.711984][ T7610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  222.735624][ T7610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  222.758036][ T7610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  222.775627][ T7610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  222.795620][ T7610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  222.817510][ T7610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  222.850399][ T7610] batman_adv: batadv0: Interface activated: batadv_slave_1
[  222.885235][ T7610] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  222.905654][ T7610] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  222.915703][ T7610] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  222.915757][ T7610] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  222.953262][ T7598] veth0_vlan: entered promiscuous mode
[  223.033804][ T7598] veth1_vlan: entered promiscuous mode
[  223.285759][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  223.487122][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  223.489046][ T7598] veth0_macvtap: entered promiscuous mode
[  223.495026][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  223.653451][ T7920] UDC core: g1: couldn't find an available UDC or it's busy
[  224.623833][   T27] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  224.658505][ T7598] veth1_macvtap: entered promiscuous mode
[  224.729083][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  224.774138][ T7598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  224.787886][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  224.835622][ T7598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  224.871453][ T7598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  224.892385][ T7598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  224.939028][ T7598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  224.965588][ T7598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  224.993591][ T7598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  225.033427][ T7598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.058036][   T27] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  225.077703][ T7598] batman_adv: batadv0: Interface activated: batadv_slave_0
[  225.115068][ T7598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  225.158341][ T7598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.173710][ T7598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  225.186897][ T7598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.204664][ T7598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  225.217060][ T7598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.233319][ T7598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  225.245304][ T7598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.293579][ T7598] batman_adv: batadv0: Interface activated: batadv_slave_1
[  225.339731][ T7598] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  225.415709][ T7598] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  225.475416][ T7598] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  225.538052][ T7598] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  225.972058][ T7933] netlink: 'syz.8.449': attribute type 3 has an invalid length.
[  226.335833][    T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  226.655892][    T8] usb 4-1: device descriptor read/64, error -71
[  226.934067][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  226.964452][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  227.045809][    T8] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  227.268775][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  227.304933][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  227.422712][ T7140] IPVS: starting estimator thread 0...
[  227.605968][ T7951] IPVS: using max 17 ests per chain, 40800 per kthread
[  228.262854][    T8] usb 4-1: device descriptor read/64, error -71
[  228.496125][    T8] usb usb4-port1: attempt power cycle
[  231.081511][ T7999] loop3: detected capacity change from 0 to 512
[  231.316995][ T7999] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  231.414150][ T7999] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  231.887192][ T7610] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.975851][ T5825] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  233.894946][ T8047] loop8: detected capacity change from 0 to 512
[  233.925797][ T5825] usb 4-1: device descriptor read/64, error -71
[  233.994605][ T8047] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  234.059956][ T8047] ext4 filesystem being mounted at /58/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  234.251944][   T28] audit: type=1326 audit(1789765809.888:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8053 comm="syz.0.477" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8bbb9e159 code=0x7ffc0000
[  234.337089][ T7110] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  234.363380][   T28] audit: type=1326 audit(1789765809.888:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8053 comm="syz.0.477" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8bbb9e159 code=0x7ffc0000
[  234.400286][   T28] audit: type=1326 audit(1789765809.938:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8053 comm="syz.0.477" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd8bbb9e159 code=0x7ffc0000
[  234.434545][   T28] audit: type=1326 audit(1789765809.938:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8053 comm="syz.0.477" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8bbb9e159 code=0x7ffc0000
[  234.477319][   T28] audit: type=1326 audit(1789765809.948:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8053 comm="syz.0.477" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8bbb9e159 code=0x7ffc0000
[  234.790295][ T5825] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  234.999689][ T5825] usb 4-1: device descriptor read/64, error -71
[  235.080180][ T8065] loop0: detected capacity change from 0 to 256
[  235.184283][ T5825] usb usb4-port1: attempt power cycle
[  236.348653][    T8] input: syz0 as /devices/virtual/misc/uhid/0003:056B:003F.0001/input/input6
[  236.377625][    T8] hid-generic 0003:056B:003F.0001: input,hidraw0: USB HID v0.00 Gamepad [syz0] on syz0
[  237.773158][ T8089] loop3: detected capacity change from 0 to 1024
[  237.803539][ T8076] fido_id[8076]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  237.896576][ T8089] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  238.313800][ T8089] JBD2: no valid journal superblock found
[  238.368492][ T8089] EXT4-fs (loop3): Could not load journal inode
[  240.568409][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  240.902026][ T5845] IPVS: starting estimator thread 0...
[  241.022056][ T8125] IPVS: using max 18 ests per chain, 43200 per kthread
[  242.149492][   T27] IPVS: starting estimator thread 0...
[  242.266219][ T8141] IPVS: using max 17 ests per chain, 40800 per kthread
[  242.692169][ T5788] Bluetooth: hci3: command 0x0406 tx timeout
[  242.977271][ T8145] FAULT_INJECTION: forcing a failure.
[  242.977271][ T8145] name failslab, interval 1, probability 0, space 0, times 0
[  243.036473][ T8145] CPU: 1 PID: 8145 Comm: syz.8.498 Not tainted syzkaller #0
[  243.043881][ T8145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  243.053985][ T8145] Call Trace:
[  243.057310][ T8145]  <TASK>
[  243.060278][ T8145]  dump_stack_lvl+0x18c/0x250
[  243.065009][ T8145]  ? show_regs_print_info+0x20/0x20
[  243.070260][ T8145]  ? load_image+0x420/0x420
[  243.074811][ T8145]  ? __might_sleep+0xe0/0xe0
[  243.079467][ T8145]  ? __lock_acquire+0x7d80/0x7d80
[  243.084562][ T8145]  should_fail_ex+0x394/0x4c0
[  243.089295][ T8145]  should_failslab+0x9/0x20
[  243.093850][ T8145]  slab_pre_alloc_hook+0x59/0x300
[  243.098921][ T8145]  ? __lock_acquire+0x7d80/0x7d80
[  243.103997][ T8145]  ? security_prepare_creds+0x4b/0x130
[  243.109517][ T8145]  ? security_prepare_creds+0x4b/0x130
[  243.115023][ T8145]  __kmem_cache_alloc_node+0x53/0x250
[  243.120440][ T8145]  ? security_prepare_creds+0x4b/0x130
[  243.125941][ T8145]  __kmalloc+0xa7/0x240
[  243.130139][ T8145]  security_prepare_creds+0x4b/0x130
[  243.135481][ T8145]  prepare_creds+0x427/0x5d0
[  243.140104][ T8145]  __sys_setuid+0x96/0x580
[  243.144546][ T8145]  ? lockdep_hardirqs_on+0x98/0x150
[  243.149769][ T8145]  do_syscall_64+0x55/0xb0
[  243.154207][ T8145]  ? clear_bhb_loop+0x40/0x90
[  243.158915][ T8145]  ? clear_bhb_loop+0x40/0x90
[  243.163628][ T8145]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  243.169570][ T8145] RIP: 0033:0x7fbcdff9e159
[  243.174008][ T8145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  243.193639][ T8145] RSP: 002b:00007fbce0f4f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000069
[  243.202082][ T8145] RAX: ffffffffffffffda RBX: 00007fbce0225fa0 RCX: 00007fbcdff9e159
[  243.210088][ T8145] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee01
[  243.218135][ T8145] RBP: 00007fbce003506b R08: 0000000000000000 R09: 0000000000000000
[  243.226142][ T8145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  243.234155][ T8145] R13: 00007fbce0226038 R14: 00007fbce0225fa0 R15: 00007ffd22541138
[  243.242162][ T8145]  </TASK>
[  245.028626][ T8171] loop5: detected capacity change from 0 to 512
[  245.720003][ T8171] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  245.761536][ T8171] ext4 filesystem being mounted at /117/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  245.784093][ T8171] EXT4-fs error (device loop5): ext4_resize_begin:62: comm syz.5.503: resize_inode disabled but reserved GDT blocks non-zero
[  245.831941][ T8171] EXT4-fs (loop5): Remounting filesystem read-only
[  246.015221][ T6311] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  248.918282][ T8229] loop5: detected capacity change from 0 to 1024
[  248.926080][ T8229] EXT4-fs: Ignoring removed bh option
[  248.941183][ T8229] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  248.998475][ T8229] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  249.542801][ T8244] tipc: Started in network mode
[  249.548015][ T8244] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711
[  249.555473][ T8244] tipc: Enabled bearer <eth:syz_tun>, priority 0
[  250.595220][ T6311] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  250.667630][ T5845] tipc: Node number set to 43690
[  251.906420][ T8282] loop5: detected capacity change from 0 to 8
[  251.970446][ T8280] loop8: detected capacity change from 0 to 128
[  252.060286][ T8280] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  254.123381][ T8316] UDC core: g1: couldn't find an available UDC or it's busy
[  254.980453][ T8322] loop0: detected capacity change from 0 to 1024
[  255.077332][ T8322] EXT4-fs: inline encryption not supported
[  255.277446][ T8322] EXT4-fs: Ignoring removed orlov option
[  255.367286][ T8322] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  255.937208][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  255.943582][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  256.066382][ T7598] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  256.254522][ T8347] loop0: detected capacity change from 0 to 512
[  256.284047][ T8347] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  256.574732][ T8347] EXT4-fs (loop0): 1 truncate cleaned up
[  256.582313][ T8347] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  256.877019][ T7598] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  257.975386][   T28] audit: type=1800 audit(1789765833.608:11): pid=8373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.552" name="device" dev="configfs" ino=22631 res=0 errno=0
[  258.401822][ T8382] UDC core: g1: couldn't find an available UDC or it's busy
[  262.299301][ T8449] UDC core: g1: couldn't find an available UDC or it's busy
[  268.744034][ T8567] atomic_op ffff88805e88a998 conn xmit_atomic 0000000000000000
[  268.944475][ T8570] IPVS: wrr: TCP 127.0.0.1:21 - no destination available
[  269.620151][ T8579] loop3: detected capacity change from 0 to 8
[  269.698486][ T8581] loop5: detected capacity change from 0 to 128
[  269.763681][ T8581] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  273.657855][ T8613] sctp: failed to load transform for md5: -4
[  273.657925][ T8618] sctp: failed to load transform for md5: -2
[  274.125868][ T8632] netlink: 'syz.8.610': attribute type 3 has an invalid length.
[  274.485966][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  274.719942][ T8636] loop3: detected capacity change from 0 to 128
[  274.790460][ T8636] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  278.343331][ T8658] loop0: detected capacity change from 0 to 1024
[  278.533014][ T8658] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[  278.543372][ T8658] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  278.562899][ T8658] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  278.572754][ T8658] EXT4-fs (loop0): orphan cleanup on readonly fs
[  278.587622][ T8658] EXT4-fs error (device loop0): ext4_read_inode_bitmap:168: comm syz.0.614: Inode bitmap for bg 0 marked uninitialized
[  278.609310][ T8658] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  280.536033][ T7598] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  282.538039][ T8703] loop0: detected capacity change from 0 to 512
[  282.563054][ T8703] =======================================================
[  282.563054][ T8703] WARNING: The mand mount option has been deprecated and
[  282.563054][ T8703]          and is ignored by this kernel. Remove the mand
[  282.563054][ T8703]          option from the mount to silence this warning.
[  282.563054][ T8703] =======================================================
[  282.654103][ T8703] EXT4-fs (loop0): external journal device major/minor numbers have changed
[  282.809910][ T8703] block device autoloading is deprecated and will be removed.
[  282.832140][ T8703] syz.0.623: attempt to access beyond end of device
[  282.832140][ T8703] md185: rw=0, sector=2, nr_sectors = 2 limit=0
[  282.872291][ T8703] EXT4-fs (loop0): couldn't read superblock of external journal
[  283.399346][ T8718] loop3: detected capacity change from 0 to 1024
[  283.647629][ T8718] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[  283.657757][ T8718] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  283.688757][ T8718] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  283.698726][ T8718] EXT4-fs (loop3): orphan cleanup on readonly fs
[  283.718296][ T8718] EXT4-fs error (device loop3): ext4_read_inode_bitmap:168: comm syz.3.627: Inode bitmap for bg 0 marked uninitialized
[  283.741747][ T8718] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  285.555478][ T7610] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  285.622170][ T8735] loop0: detected capacity change from 0 to 8
[  288.480881][ T8783] UDC core: g1: couldn't find an available UDC or it's busy
[  291.326654][ T8784] loop0: detected capacity change from 0 to 1024
[  293.098638][   T23] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  293.710455][   T23] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  293.733235][ T8784] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[  293.744190][ T8784] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  293.754839][ T8784] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR
[  293.755213][ T8784] EXT4-fs: failed to create workqueue
[  293.770396][ T8784] EXT4-fs (loop0): mount failed
[  294.167457][ T5788] Bluetooth: hci1: command 0x0406 tx timeout
[  295.828921][ T8819] loop3: detected capacity change from 0 to 512
[  295.900398][ T8819] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  295.973492][ T8819] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  296.567717][ T7610] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  298.038528][ T8842] loop5: detected capacity change from 0 to 8
[  299.088220][ T8846] loop3: detected capacity change from 0 to 512
[  299.798998][ T8846] EXT4-fs: Ignoring removed mblk_io_submit option
[  299.892533][ T8846] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  299.930807][ T1145] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.044140][ T8858] netlink: 44 bytes leftover after parsing attributes in process `syz.5.656'.
[  300.072296][ T8846] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  300.115499][ T8858] loop5: detected capacity change from 0 to 512
[  300.137854][ T8846] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  300.155662][ T8858] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  300.199623][ T8858] EXT4-fs (loop5): 1 truncate cleaned up
[  300.226908][ T8858] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  300.278098][ T1145] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.367901][ T8866] EXT4-fs (loop3): shut down requested (1)
[  300.436390][ T8846] overlayfs: upper fs does not support tmpfile.
[  300.479187][ T1145] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.587494][ T7610] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  300.614129][ T1145] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.619421][ T6311] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  302.086020][ T8899] process 'syz.0.664' launched './file1' with NULL argv: empty string added
[  302.797926][ T8907] loop0: detected capacity change from 0 to 4096
[  303.339750][ T8907] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  304.360484][ T8910] loop5: detected capacity change from 0 to 1024
[  304.454010][ T8910] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[  304.465021][ T8910] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  304.490732][ T8910] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  304.500807][ T8910] EXT4-fs (loop5): orphan cleanup on readonly fs
[  304.549119][ T8910] EXT4-fs error (device loop5): ext4_read_inode_bitmap:168: comm syz.5.666: Inode bitmap for bg 0 marked uninitialized
[  304.571061][ T8910] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  305.333605][ T8914] loop3: detected capacity change from 0 to 4096
[  305.601008][ T8914] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  305.652857][ T6311] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  306.521633][ T7598] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  307.944542][ T8965] loop0: detected capacity change from 0 to 8
[  308.870521][ T7610] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  313.635575][ T1145] hsr_slave_0: left promiscuous mode
[  313.882639][ T1145] hsr_slave_1: left promiscuous mode
[  314.576834][ T8997] loop3: detected capacity change from 0 to 1024
[  314.636893][ T8997] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  314.680705][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  314.713926][ T8997] JBD2: no valid journal superblock found
[  314.721649][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_0
[  314.835321][ T8997] EXT4-fs (loop3): Could not load journal inode
[  314.842689][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  314.850722][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_1
[  314.861300][ T1145] bridge_slave_1: left allmulticast mode
[  315.508583][ T9006] loop0: detected capacity change from 0 to 512
[  315.544775][ T1145] bridge_slave_1: left promiscuous mode
[  315.572820][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state
[  315.573300][ T9006] EXT4-fs: Ignoring removed nomblk_io_submit option
[  315.608243][ T9006] ext4: Bad value for 'resgid'
[  315.626696][ T1145] bridge_slave_0: left allmulticast mode
[  315.632387][ T1145] bridge_slave_0: left promiscuous mode
[  315.649764][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state
[  315.816948][ T1145] veth1_macvtap: left promiscuous mode
[  315.835618][ T1145] veth0_macvtap: left promiscuous mode
[  315.848998][ T5790] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  315.873738][ T1145] veth1_vlan: left promiscuous mode
[  315.915668][ T1145] veth0_vlan: left promiscuous mode
[  316.367476][ T9026] loop0: detected capacity change from 0 to 8
[  317.371872][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  318.214276][ T1145] team0 (unregistering): Port device team_slave_1 removed
[  318.309730][ T1145] team0 (unregistering): Port device team_slave_0 removed
[  318.383027][ T1145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  318.453139][ T1145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  319.025049][ T1145] bond0 (unregistering): Released all slaves
[  319.389417][ T9048] loop0: detected capacity change from 0 to 1024
[  319.428925][ T9037] syz_tun: entered allmulticast mode
[  319.446899][ T9048] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[  319.456811][ T9048] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  319.470331][ T9048] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  319.481346][ T9048] EXT4-fs (loop0): orphan cleanup on readonly fs
[  319.491613][ T9048] EXT4-fs error (device loop0): ext4_read_inode_bitmap:168: comm syz.0.693: Inode bitmap for bg 0 marked uninitialized
[  319.507369][ T9048] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  320.259993][ T7598] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  320.477142][ T9077] loop0: detected capacity change from 0 to 8
[  323.137157][ T9093] Bluetooth: hci0: invalid len left 7, exp >= 50
[  323.897245][   T23] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  324.242085][ T9112] loop0: detected capacity change from 0 to 1024
[  324.262313][ T9112] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[  324.272152][ T9112] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  324.294436][ T9112] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  324.303455][ T9112] EXT4-fs (loop0): orphan cleanup on readonly fs
[  324.311434][ T9112] EXT4-fs error (device loop0): ext4_read_inode_bitmap:168: comm syz.0.706: Inode bitmap for bg 0 marked uninitialized
[  324.331779][ T9112] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  324.354655][ T9115] loop3: detected capacity change from 0 to 8
[  324.366175][   T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  324.378705][   T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  324.396236][   T23] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  324.423327][   T23] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  324.433952][   T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  324.447922][   T23] usb 6-1: Product: syz
[  324.580356][ T5783] Bluetooth: hci2: command 0x0406 tx timeout
[  324.586969][ T5783] Bluetooth: hci0: command 0x0406 tx timeout
[  324.621078][   T51] list_del corruption, ffff88802b6c7600->next is LIST_POISON1 (dead000000000100)
[  324.632760][   T51] ------------[ cut here ]------------
[  324.638809][   T51] kernel BUG at lib/list_debug.c:58!
[  324.647831][   T51] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  324.653950][   T51] CPU: 0 PID: 51 Comm: kworker/u5:0 Not tainted syzkaller #0
[  324.661344][   T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  324.671418][   T51] Workqueue: hci0 hci_cmd_sync_work
[  324.676670][   T51] RIP: 0010:__list_del_entry_valid_or_report+0xe9/0x130
[  324.683671][   T51] Code: 48 89 de e8 49 9a 4a 06 0f 0b 48 c7 c7 20 3f 1d 8b 48 89 de e8 38 9a 4a 06 0f 0b 48 c7 c7 80 3f 1d 8b 48 89 de e8 27 9a 4a 06 <0f> 0b 48 c7 c7 e0 3f 1d 8b 48 89 de e8 16 9a 4a 06 0f 0b 48 c7 c7
[  324.703327][   T51] RSP: 0018:ffffc90000bbfa00 EFLAGS: 00010246
[  324.709455][   T51] RAX: 000000000000004e RBX: ffff88802b6c7600 RCX: 031afb6aae784a00
[  324.714292][   T23] usb 6-1: Manufacturer: syz
[  324.717440][   T51] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  324.717455][   T51] RBP: 1ffff110056d8ec3 R08: ffffc90000bbf707 R09: 1ffff92000177ee0
[  324.717471][   T51] R10: dffffc0000000000 R11: fffff52000177ee1 R12: dffffc0000000000
[  324.731720][   T23] usb 6-1: SerialNumber: syz
[  324.738023][   T51] R13: dffffc0000000000 R14: dead000000000100 R15: dead000000000122
[  324.738041][   T51] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  324.738058][   T51] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  324.738071][   T51] CR2: 00007f97ff66a368 CR3: 00000000628c6000 CR4: 00000000003506f0
[  324.738087][   T51] Call Trace:
[  324.738094][   T51]  <TASK>
[  324.738102][   T51]  mgmt_pending_remove+0x53/0x1f0
[  324.738136][   T51]  mgmt_add_adv_patterns_monitor_complete+0x45d/0x730
[  324.738167][   T51]  ? mgmt_add_adv_patterns_monitor_sync+0x90/0x90
[  324.738195][   T51]  ? msft_monitor_supported+0x69/0x80
[  324.738212][   T51]  ? hci_add_adv_monitor+0x17d/0x2a0
[  324.738235][   T51]  ? mgmt_add_adv_patterns_monitor_sync+0x90/0x90
[  324.738262][   T51]  hci_cmd_sync_work+0x24b/0x380
[  324.738283][   T51]  ? process_scheduled_works+0x975/0x1600
[  324.738310][   T51]  process_scheduled_works+0xa60/0x1600
[  324.738347][   T51]  ? worker_attach_to_pool+0x370/0x370
[  324.738374][   T51]  ? assign_work+0x3cc/0x5d0
[  324.738401][   T51]  worker_thread+0xa5e/0xfe0
[  324.738437][   T51]  kthread+0x2fa/0x390
[  324.738455][   T51]  ? pr_cont_work+0x550/0x550
[  324.738479][   T51]  ? kthread_blkcg+0xd0/0xd0
[  324.738498][   T51]  ret_from_fork+0x48/0x80
[  324.738521][   T51]  ? kthread_blkcg+0xd0/0xd0
[  324.738541][   T51]  ret_from_fork_asm+0x11/0x20
[  324.738579][   T51]  </TASK>
[  324.738597][   T51] Modules linked in:
[  324.761838][   T51] ---[ end trace 0000000000000000 ]---
[  324.897568][   T51] RIP: 0010:__list_del_entry_valid_or_report+0xe9/0x130
[  324.904566][   T51] Code: 48 89 de e8 49 9a 4a 06 0f 0b 48 c7 c7 20 3f 1d 8b 48 89 de e8 38 9a 4a 06 0f 0b 48 c7 c7 80 3f 1d 8b 48 89 de e8 27 9a 4a 06 <0f> 0b 48 c7 c7 e0 3f 1d 8b 48 89 de e8 16 9a 4a 06 0f 0b 48 c7 c7
[  324.924332][   T51] RSP: 0018:ffffc90000bbfa00 EFLAGS: 00010246
[  324.930471][   T51] RAX: 000000000000004e RBX: ffff88802b6c7600 RCX: 031afb6aae784a00
[  324.939072][   T51] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  324.961955][   T23] usb 6-1: config 0 descriptor??
[  324.977837][   T23] adutux 6-1:0.0: interrupt endpoints not found
[  325.059420][   T51] RBP: 1ffff110056d8ec3 R08: ffffc90000bbf707 R09: 1ffff92000177ee0
[  325.062460][ T7598] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  325.067587][   T51] R10: dffffc0000000000 R11: fffff52000177ee1 R12: dffffc0000000000
[  325.067605][   T51] R13: dffffc0000000000 R14: dead000000000100 R15: dead000000000122
[  325.067620][   T51] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  325.067636][   T51] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  325.067649][   T51] CR2: 000000110c3a96f4 CR3: 000000000cf32000 CR4: 00000000003506f0
[  325.067667][   T51] Kernel panic - not syncing: Fatal exception
[  325.077175][   T51] Kernel Offset: disabled