last executing test programs:

1m0.038137916s ago: executing program 2 (id=581):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x3, 0x2, 0x8, 0x3123, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_TMR_CONTINUE(r4, 0x5404)
ioctl$SNDCTL_TMR_STOP(r4, 0x5403)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r5}, 0x10)
unshare(0x64000600)
bpf$MAP_CREATE(0x0, 0x0, 0x0)

39.675878588s ago: executing program 0 (id=624):
syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000002080), 0x1, 0xba6, &(0x7f0000000c00)="$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")
ioperm(0x0, 0x444, 0x1)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000006c0)={0xb1}, 0x8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_route(0x10, 0x3, 0x0)
epoll_create1(0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000040)="09000000010000", 0x7)
clock_settime(0x0, 0x0)
mount(0x0, 0x0, &(0x7f0000000100)='devpts\x00', 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0/../file0/../file0\x00', 0x0, 0x1218024, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x10, 0x3f6, 0x200, 0x70bd2d, 0x25dfdbfb, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20008000}, 0x30040800)

38.439009213s ago: executing program 0 (id=629):
chdir(0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="020a000007000000000000000000000005001a0000000000000000000000000000000000fc000000000000000000000000ac5e3a29fd2ebd"], 0x38}}, 0x0)
execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)

37.319782789s ago: executing program 0 (id=630):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2800000014001908000000000000000228"], 0x28}}, 0x0)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x220081, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000faffffff0000000000000000850000002c000000850000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x27, 0x8, 0x0, &(0x7f0000000140)="f9ad48cc42cb29fc", 0x0, 0xfffffffe, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000029c0)={0x50, r4, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac02}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "cabee339084eeef16f162471f4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}]}]}, 0x50}}, 0x0)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000a80)={0x1724, r3, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xfffffffa, 0x80}}}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x1368, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x60, 0x2, "84260352a48889da110fe5abb3ce4a7546418df7e8e6522a82cca153309244d6535f6129ae3b0af9da6adbebcbd3cbfaad4ce7284f79de33cf017efc436c998ba2f7ed712637716ed4c2efad0c43c61d0ca81aa4f04bce6b6985d64b"}, @NL80211_BAND_60GHZ={0x19, 0x2, "8f3198a2c723cb69248b3dd8790637aea47b009537"}, @NL80211_BAND_5GHZ={0xd2, 0x1, "271bb964929800de4dc5dc2af780d0f2bcc30d079e6032644acf4e41388ce86c970b5a0efd6083e50dc3d5b9074c184e1c1ac029de79a418282f00b18348765a4094412e47632a1c5a03fc417d1efc4df5ebf47089b0ca857ecd731548b80015353266429c52acb3247dea80a55231b63bd8a0546db7914639e90dfb6a6177d9534344f1efc4343da7c00b7fbb1b02784da1e5c18e9209c33e8c793d977ee878551cc4e5bb4eeceda721a2938ced2d6c8604c41bee15f7f9948c00c27b8b232194a5575bf373b59c22b0196f4022"}, @NL80211_BAND_6GHZ={0x9e, 0x3, "20d8582df96aac3bd670571b8ff974c349c9aebcc5efdd4caa19ff9bd5727fa2854fcec78a4ed38d74fd48a6d0129f3a7d52a2d706e9699e527f85aa9fe5e3e92b287d3c81b71fb2332ec093c8a3599a913eb0ce777332cb6eb7bb88dc78a8c5d0014189c8aaec7a49cd0e580544778fd68d9f64612653125e44a21e5c015e1b8b7915ec2aeb7b99d48111f50d7e17fd6923006551db781f6fab"}, @NL80211_BAND_5GHZ={0x1004, 0x1, "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"}, @NL80211_BAND_6GHZ={0x99, 0x3, "c806f494aca0bde805894f7ae96a00255ba4f8c33754ffbcd88d539547703f41626dfee49f8bd055e993fd770097a7974ab65a7e257738f718dfd0450be61aa945c34f7b81320057c942585a0c18d0b281968b96972241c51bf9c1c7500a8af0f3f553d8d6c6e700e34cef13e20c0e326320282855ca6f03848051037ae000fe97d61ee591513731dd483c69f65c218861193cf2be"}, @NL80211_BAND_2GHZ={0x93, 0x0, "7dc7e21dc2ab5e7f9e85779a8faf3b778b89fb98725b38b147b4a68b863f02513034e35824c73a8fb5eb8ba17e2693f9b4a8645be0b9402af42832572a8d4cb72c9da41d0d16a20f6b7264da1e203bbe6a66f1dd7ddb09f7a3607b48375318e65033f86d187c92206a721bd77d1557232cf483eca995582c30540dfa5ce32e365e272f5c43f0f9156fc7a6e591af81"}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_6GHZ={0x3b, 0x3, "48a9edf03532017a842744feeec623c592af243fcf76cfb5a4fbfe64b92a0a81025ccbabdc95bf3447b9f30709e253834377a9f99b3e2e"}]}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xe3dc}, @NL80211_ATTR_SCAN_SUPP_RATES={0x34c, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xab, 0x2, "c71100552fd07cf9128383f3494aad3ea53e948f127a55bfbd41890bd8389a066b79e23cbca5069cc313afd9799769a05141080db024eeba334631202bfb068d08a0e34b10ccf4c5a3b0b88f633f118d83194e6bfcf5201d3c66eca12a73938192ac3135a54084837d2da7daa45bfa275aec2195c5a9c80f07402bebfdb4b50783239abb866e3f0daee0d9dcfdeddf67aa16bf71237e09edc1353dd4b3eacde3ea80dcbc975217"}, @NL80211_BAND_6GHZ={0xc7, 0x3, "f437b449843767d14f4fee24eb07e9e0a98a392efb0fd6fc8337a67143dcf225299e799679ae26ad9c40671d67005b567c8a3163029ae12c10b7c2af68790b096e893be2aa4d85d00305b30fe07484c10f8459f038f9f647b6e0dfac3a287ca370bd1d8ec7f54d4542b3890744e6a41b729f78aea9c314e015f536c0bcd85f2abecaec3e9c562a78269b63bd4c75c8166c552181597e1c9d2decd0d8f6f1909fc9817e2898501ec29b56f05e150bf041abf3b8180a5950bc2d2a0375612e2730e05f1f"}, @NL80211_BAND_2GHZ={0x5e, 0x0, "e8e9de5de7e80498832c7e847a6e4df1476d2c1457cefa692719e1a244d57af1d430ea2cbce2d3a04d5bb0e169d85773b1015ad9b1cff41e5ce8bb689534dfc3469aefe61d98d3f34945aea668659e2f777e4a67db00fe507131"}, @NL80211_BAND_5GHZ={0x37, 0x1, "fcec42a3f56b117f0bfe5bcb39c32217c0015b24e6a12b2a9b9832b56128f1c0b9aa3a4f37d9951efb256dc02c22eb5327cb60"}, @NL80211_BAND_6GHZ={0x81, 0x3, "e8e25931616d7a9136e1e221761a8c15b9833eac3fe508d49caaf9b0058fc0bcabb46a0875cc6633a01d708214ff231465ca56ab82eeb54d1bc8ff7fdf6dab724f35055e458976f671489028ee7fef3f956874e108553befe999f7ad996bcb12ece745fe6c065fcae7ca98054c8f6a35f6acfc8e37607f6e38d56e8792"}, @NL80211_BAND_2GHZ={0xb7, 0x0, "5d3482c901f630bac5ed54a26fb677e0a3bc2022e52ed175fe4d66cd7791ee68467adc43889fee95ec9d3b746346c4c897c1c1f3cd1ba331d03b2d0e663f7ebf7653d9b5b457f455b97b3100b848abcc1b7ff259f1e7b5151a3c5c412b04813699f99a8bf90d85190f72f97a09c3f6337af5fbcecdd244a9a528fd723b424bb6683da90363df6dbda00fdf6a1d245a2536238697180bcd5a914824b7cd7cd7ea3e0895629206ffac939232a0787f5a1de4137f"}]}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x40, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x1}, @NL80211_BAND_LC={0x8, 0x5, 0x3}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x9}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}]}, 0x1724}, 0x1, 0x0, 0x0, 0x4000}, 0x20000040)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800"/13, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='ext4_remove_blocks\x00', r8}, 0x10)
write$cgroup_int(r9, &(0x7f0000000100), 0x1001)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r7}, &(0x7f0000000000), &(0x7f0000000180)='%pS    \x00'}, 0x20)
ioctl$SIOCSIFHWADDR(r9, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x8}})
r10 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$VT_RESIZEX(r10, 0x560a, &(0x7f0000000000)={0x8, 0x0, 0xfe0, 0xfb9d, 0x3a, 0x1f})

34.23649273s ago: executing program 0 (id=635):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x10)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0}}, 0x10)
r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x8bc4, 0x9, 0x5, 0x14, 0xffffffffffffffff, 0x0, '\x00', r1, r2, 0x5, 0x0, 0x5, 0xb, @void, @value, @void, @value}, 0x48)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @dev}, {0x2, 0x0, @private}, 0x0, 0x0, 0x0, 0x0, 0x800})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@delnexthop={0x40, 0x69, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [{0x8, 0x1, 0x1}, {0x8}, {0x8, 0x1, 0x1}, {0x8}, {0x8, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000090)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22, 0x480, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x4, 0x82011, r6, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0x228, r5, 0x20, 0x70bd2b, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xffffffffffffffd1, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x228}, 0x1, 0x0, 0x0, 0x8024}, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
socket(0x10, 0x3, 0xd7f)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000001800010000000000000000000200000000000009"], 0x28}}, 0x0)

32.509044598s ago: executing program 0 (id=641):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000009c0)='kfree\x00', r0}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000802, 0xffffffffffffffff, &(0x7f0000000100))
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$MSR(&(0x7f00000002c0), 0xc94e, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_int(r3, &(0x7f0000000100)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000700)=ANY=[@ANYBLOB='1-0:', @ANYRESDEC, @ANYBLOB='C'], 0x31)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x18, &(0x7f0000000440)=@raw=[@exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @printk, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x1}], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r6, 0x4)
writev(r5, &(0x7f0000000280), 0x100000000000025d)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000100)='geneve1\x00', 0x10)
r7 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102})
fchownat(r1, &(0x7f0000000280)='./file0\x00', 0xee00, 0x0, 0x1000)
ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000140)={0x2000000000000031, &(0x7f0000000000)=[{}]})

31.564965012s ago: executing program 0 (id=646):
gettid()
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
process_vm_readv(r1, 0x0, 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4)
mkdir(0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, 0x0, 0xf01, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
mmap(&(0x7f00004e7000/0x2000)=nil, 0x2000, 0x0, 0x10, r2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}]}, 0x38}}, 0x0)

14.342746299s ago: executing program 2 (id=601):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4)
sendto$inet6(r0, &(0x7f0000000140)='g', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r0, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x9, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000ba000000270000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f0000000080), 0x12)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='ext4_allocate_blocks\x00', r5}, 0x10)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100), 0x1001)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000300)=[{&(0x7f0000001b80)=""/220, 0xdc}, {&(0x7f00000000c0)=""/42, 0x2a}, {&(0x7f00000003c0)=""/146, 0x92}, {&(0x7f00000017c0)=""/249, 0xf9}, {&(0x7f00000004c0)=""/194, 0xc2}, {&(0x7f0000001a80)=""/236, 0xec}, {&(0x7f00000006c0)=""/31, 0x1f}, {&(0x7f0000000700)=""/4096, 0x1000}], 0x8}, 0x1)
sendto$inet6(r0, &(0x7f0000000180)="83", 0x33b80, 0x0, 0x0, 0x0)

13.337057568s ago: executing program 3 (id=686):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
bind$nfc_llcp(r3, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a07760760beeab11e88509de7f1939e8abff005597c8ef039a5be42200", 0x38}, 0x60)
listen(r3, 0x0)
accept4$nfc_llcp(r3, 0x0, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', <r7=>0x0})
sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x24, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x24}}, 0x0)

11.871700429s ago: executing program 2 (id=687):
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0)
r0 = dup(0xffffffffffffffff)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0)
ioctl$KVM_NMI(r1, 0xae9a)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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")
creat(&(0x7f0000000380)='./bus\x00', 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, 0x0, 0x4000004)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00222200000096231307f7940ef7070f00000016b8ef0a1a7083"], 0x0}, 0x0)
creat(0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)

11.611307516s ago: executing program 3 (id=688):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4)
sendto$inet6(r0, &(0x7f0000000140)='g', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r0, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x9, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000ba000000270000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f0000000080), 0x12)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='ext4_allocate_blocks\x00', r5}, 0x10)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100), 0x1001)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000300)=[{&(0x7f0000001b80)=""/220, 0xdc}, {&(0x7f00000000c0)=""/42, 0x2a}, {&(0x7f00000003c0)=""/146, 0x92}, {&(0x7f00000017c0)=""/249, 0xf9}, {&(0x7f00000004c0)=""/194, 0xc2}, {&(0x7f0000001a80)=""/236, 0xec}, {&(0x7f00000006c0)=""/31, 0x1f}, {&(0x7f0000000700)=""/4096, 0x1000}], 0x8}, 0x1)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e05040f20"], 0x8)

11.452467727s ago: executing program 4 (id=690):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4)
sendto$inet6(r0, &(0x7f0000000140)='g', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r0, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x9, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000ba000000270000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)

11.349612064s ago: executing program 1 (id=691):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000009c0)='kfree\x00', r0}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000802, 0xffffffffffffffff, &(0x7f0000000100))
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$MSR(&(0x7f00000002c0), 0xc94e, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_int(r3, &(0x7f0000000100)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000700)=ANY=[@ANYBLOB='1-0:', @ANYRESDEC, @ANYBLOB='C'], 0x31)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x18, &(0x7f0000000440)=@raw=[@exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @printk, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x1}], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r6, 0x4)
writev(r5, &(0x7f0000000280), 0x100000000000025d)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000100)='geneve1\x00', 0x10)
r7 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000081e3acf251e9a946c79c9e0e521aacda47031cc28bb3beb3cb7675afaa8c840d143c1ccdec9fdf0481fbe591ec33b287f18fe93dc45a90a00958a4a227e4c323f340a0eb0ac9c89f5a8e8ebaf16ea306b634f243ade6550361ee408e9ce6d553"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000140)={0x2000000000000031, &(0x7f0000000000)=[{}]})

11.319925526s ago: executing program 3 (id=692):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0))
socket$nl_generic(0x10, 0x3, 0x10)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10001, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000001600)={0x1, @win={{0x0, 0x0, 0x2, 0x21}, 0x0, 0x8, 0x0, 0x0, &(0x7f0000001540)="e8865f3ada67ab60", 0x5}})
read$msr(0xffffffffffffffff, 0x0, 0x0)
r5 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90b, 0xf4c, '\x00', @p_u16=&(0x7f00000000c0)}})

11.318353966s ago: executing program 4 (id=693):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000002c0)={[{@noauto_da_alloc}, {@grpjquota}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@quota}, {@noauto_da_alloc}, {@orlov}]}, 0x3, 0x59b, &(0x7f0000002800)="$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")
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
socket$inet_tcp(0x2, 0x1, 0x0)
r3 = io_uring_setup(0x2662, &(0x7f0000000440))
io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x5, 0x0, 0x0)

8.664419168s ago: executing program 2 (id=694):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x15)
syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r4 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18)
getdents64(r4, &(0x7f0000000300)=""/154, 0x9a)

8.664065628s ago: executing program 3 (id=695):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x10)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0}}, 0x10)
r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x8bc4, 0x9, 0x5, 0x14, 0xffffffffffffffff, 0x0, '\x00', r1, r2, 0x5, 0x0, 0x5, 0xb, @void, @value, @void, @value}, 0x48)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @dev}, {0x2, 0x0, @private}, 0x0, 0x0, 0x0, 0x0, 0x800})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@delnexthop={0x40, 0x69, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [{0x8, 0x1, 0x1}, {0x8}, {0x8, 0x1, 0x1}, {0x8}, {0x8, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000090)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22, 0x480, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x4, 0x82011, r6, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0x228, r5, 0x20, 0x70bd2b, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xffffffffffffffd1, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x228}, 0x1, 0x0, 0x0, 0x8024}, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
socket(0x10, 0x3, 0xd7f)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000001800010000000000000000000200000000000009"], 0x28}}, 0x0)

8.663879518s ago: executing program 4 (id=696):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4)
sendto$inet6(r0, &(0x7f0000000140)='g', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r0, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x9, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000ba000000270000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f0000000080), 0x12)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='ext4_allocate_blocks\x00', r5}, 0x10)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100), 0x1001)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000300)=[{&(0x7f0000001b80)=""/220, 0xdc}, {&(0x7f00000000c0)=""/42, 0x2a}, {&(0x7f00000003c0)=""/146, 0x92}, {&(0x7f00000017c0)=""/249, 0xf9}, {&(0x7f00000004c0)=""/194, 0xc2}, {&(0x7f0000001a80)=""/236, 0xec}, {&(0x7f00000006c0)=""/31, 0x1f}, {&(0x7f0000000700)=""/4096, 0x1000}], 0x8}, 0x1)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e05040f20"], 0x8)

8.663206598s ago: executing program 1 (id=703):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r3 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VIDIOC_ENUMAUDOUT(r3, 0xc0345642, &(0x7f0000000040)={0xfff, "fe0c9b21c872a2f28f8019c5df98ac6856a01954f2e640ad7d02e385421e1cb7", 0x2})
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
bind$inet(r4, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10)
getpeername(0xffffffffffffffff, 0x0, 0x0)
socket$packet(0x11, 0x0, 0x300)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
r5 = socket$inet6_dccp(0xa, 0x6, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x550, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x480, 0xffffffff, 0xffffffff, 0x480, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0)
io_uring_setup(0x4238, &(0x7f0000000000)={0x0, 0x0, 0x40, 0x0, 0x1ba})

4.576583417s ago: executing program 2 (id=697):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4)
sendmmsg$inet(r3, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800)
socket$inet_udplite(0x2, 0x2, 0x88)
r4 = syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000002140)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x3}}]}, 0x0, 0x46b, &(0x7f00000014c0)="$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")
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
prctl$PR_SET_PTRACER(0x59616d61, r0)
getdents64(r4, &(0x7f0000000000)=""/109, 0x6d)
ioctl$FS_IOC_ENABLE_VERITY(r5, 0x8004587d, &(0x7f0000000140)={0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
creat(&(0x7f0000000140)='./file0/file0\x00', 0x0)

4.576191177s ago: executing program 4 (id=698):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
syz_read_part_table(0x5fd, &(0x7f0000000d00)="$eJzs2z9olGccB/DvxVzOP9B0cHKpcegkFMXRDFWSU7EQTqUQHLS1iJgpQuCkhwc6tBkUM0jHLlK4ReNkzOBQFIXORRxahAwuBV2kdshbrvc2rfaPR8kNxc9n+T338rvn+/zgWZ/wvzaUarkqar+VDz751/5i9I91O8c6E5MHi6IojiaVHE81Y9++s5hkOK/umh1JRv60z/WvNy9/+fxAtfP4yIv3T9ybH1rbs5Z3k2wZeePRa/1PyaDcGL8/evHSbP1y90e9tbL6cXLz2URj6fD8wuKh6v5T3e8Xkgdlf+9ibMq5NHM+Z3Ny+L+kVl7Jb3fzm+NnHtVbK191nuxa3Vbv3D699+X25St3dydz3Yip1/6XN9+vvqzNX+bPjV2dXmjt23lr67U9zTsPG083/Fz0lJHV9ckFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAwbozfH714abZ+uTl+5lG9tfLF9999dPPZRGPp8PzC4qGR/afKvgdlHS7ruTRzPmdzMjOZyWeZ7T9yuvKP+b9sTp7sWt1W79w+vffl5PKVu7vLvqn1GPZvvD7/3NjV6YXWvp23tl7b07zzsPF0Q69vppZPU+2tawM6CwAAAAAAAAAAAAAAAAAAAG+vicmD26c+bBxNKjm+MclPnw91vxflI/ff3+rvKOsPtWRTkusbk/bzA9XO4yMvRk7cm/+x7G+nlnaSLd8sHUveW8u58JfkyqBHow+/BgAA//8hVpWc")
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r3 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0)
preadv2(r3, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x46)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0)

4.393658679s ago: executing program 1 (id=699):
openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0)
quotactl$Q_SETQUOTA(0xffffffff80000801, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x9d})
chdir(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x49}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c000000100064ffffffffffffffff0000000000189a0b61c95fb244a03e3187b418f611d5d2", @ANYRES32=0x0, @ANYBLOB="0000000000000000140035006261746164763000000000000000000008002e0000000000"], 0x3c}}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x5, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={r5, &(0x7f0000000780)="d9", &(0x7f0000000900)=@udp}, 0x20)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@cgroup, 0xffffffffffffffff, 0x20, 0x0, 0x0, @void, @value}, 0x20)

1.45955814s ago: executing program 1 (id=700):
socket$inet6(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$packet(0x11, 0x3, 0x300)
pipe2$watch_queue(&(0x7f0000000440), 0x80)
socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
memfd_create(&(0x7f0000000a40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xadNaC\xa6\xf9\xa7>c\x84\xd8\xfa\xf1\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8g8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93<u\xbe\xeag\xd2\x04e\xf2s\xde}o#\x90\xda\x9cs,r\xfd:\xcb\xc7\vTmPZJ\xac\x8b\xd0\xc0\xbcRK\xcb\x1e8\xce\xbd[N\xb0\xb4<\xeb\x86[\xec\x8f\x14!\xed\xa0\xc3,\x90m\x0f\x00\x00\x00\x00\x00\x00\xff\xd0\xb3\x94\x00\x00\x00\x00\x00\x00\x00\x9dH\xf8\xffRo\xa3W\xe1\x0f\x8eS\xaeX\x93\x7f\xd3\xb9a\xe4\xe0\xbd\xd9\xf5\xe4e\xf9\xcam\xe3\x03\xe4\xad\xd5&A\x02\xc8\xa9\xfe\xcb\x87\xd9\xd3\x84\f\xc08T~\xc4\xbd\x90?\x1f\x9c\x9b0\x19 \x9f\xd1p`\xc0/\x00u\x19\x1d\xac\xe8%\xb7\t\x9f4\xbb\x89\xe9\xc1\x81\xb0\xd6\xf7\x05\x16\xb9\xe9\xdc~\xd3-s\xe6;\x94\x1c^\x06\xdav;\xccD\x95sj\xe0\xd5\xbeS\xac\x9eyl[[\xce\x87\x9dp\xea?/\xcb\x9a\xaa5\'Q\fuG\x81\x8a@\x97M=v\xfe\a\xabp\xf3\x93\x9d\x7f@9\xc0\xd2\xf1#\xe7N\x89\xf8\xe8+\xa1\x82\x13\xb2\xa9\xef\xa5\xf8\x8b \x00\x9ev\x92\x0e\xd1\x1f\x17Dx[\xad\xb0\x9d/\x96\xe42mO\x9fh\xea\xf3\x14\xcd\x96\x89_)2\xe2\xd6\x81\x00b\xaf;\x92T\xafz\x94\x9fG\xfb\xfd|&k\x03\xd7;\x9ay\xee\xf9W?\xb3\xf9\xf8I.E4\xc3eWq\xfa\":$\xd0\x17Q\x94\xf5\xe5mk\x8e&\xf1;#z\xef*\xce\x99\x04\xb9\x90\xbc\xc9#-\x8di\xae\xc5\xdf\x13\xd2K\x8b\xf5\f\xb2x\xdd\xd5\xb4\xa9^~O<\x12\xe3\xc2Ru2Ht\re\xa1\xf6\xbd\xaa\xb0\x83}i\xc3P|7\xc4\xc8\xb1r0Z\x98\x87^\xc8C\x1b\x96\xb4lsyF\xc5\xbc\xffOE\xe9\xd70\xe7\xfep\x83\xa7\xa1\xd9\xe4\xba\x92\x17\xbf\xe0\xe1\x01\xb7\x8b\x18j\x19n\xc8\xff\xe9\xf4\xf4\xcf a\xd7_w\x0f\x9dF\xae\xccA-/\x83\xabU\xd5\xbf8\xa4O\xb4\xed\xc8\xccH\xd1=\x81\x00\x00\x00\xc7;Lb\xce\x1a\xcc\x98\xe8\xe9e\xe0\xc2N\xe7\xd7\x1d\x92\x87F8\x9e\xd6\xdd\xdaW\xf5X\x80\xa0f\xceo\xd8\x7f\xc0\x96\bSB\xce&\x04$\xc3\xe31U\x84\x82\xf0{i\x1d\x02\x10\x86C\x01^\xcf\x93?w\x01\x84\xa0\xd6\xa2\x10\xa4\xfcG\xabD\xd6dGZ\xb2Cx\x1b\xfdD9\x17U\xf0\x16K\xf9&@\xb1[\xe2j$F1n@\xde\n%t.[\xad\xb5\f<o\xdb\xa4\x90\xc4\xd0I\xa6\x96\xa1\x00\xbb\xdd\x94\x00t/1YekG\x7f\xbdrI\x1e\x8a4=\xa2\xe9\x82<\x9e|\xf5#\x7f\xa8\x1f\x14\x82ih\xf9<\x03Q\xf5\xc4\x95\x99 \xa7v~:$\x02O\xe3\xaa\x1f\x00\xebk\'\xd2q\x10\x1e\x94n\xd7w\xb1\xc8G\x89\xf4\x8ct\xf9R\x850\b,r\xc6r\xf7=\xfe\xc1\x16\xe6\xee\xbb:-h\x03;\xe5\x04\xd8\xa9\x9a\xd3\x05(\x7f|\xadU\xafe\x87V.i4$6U,R\x9b\n{\'\xfe1\xc4\xb09\x96\x87\xc0e\xab\xe7\xa9\xb4\x1a\n\xf5\xd7zuvz\x972\xd4\xfb\x13u2\xab\x18\x01~r\xbbcW!\xec\xf7$\xc2\xbaU \x98\xb2\xe3I\xbd\x16T\xb75\xa6\a\xb7\xa1\x8d\xc9\x12\xb1\xbd\xbc\xd9c\xe9\"k\xee\x06\x83\xf4\xab\x18\x038\x8f\xc9^\x0f\xab\xea&P\b\xef#\xf6\xc3\xfc\xd4\xa0\xfd\x15N\xd3\xa0\x80\x9f\bU\xa63\xf6\xc9\xec\x01\'\t\x89(\xf9\x98B\xaf\xde*\x91\xd5k\xa1`d\xf0\x97\xc9e\xc1\"EC\x9a?x\x89\x8d\xb3\xfaF}\x82D\xf8\f\xf1`\x90D\xd1|%(\xd8\t\xea\xdfC\xce\x7fo+?v\xee\xc6bL\x1d\xbe\x84p\x8d\xa3\xec\xf7\xe0\xfe\x8c=<\xf2\x1f@\xc9\xcfw\xf3\x02\x1b\xde\xc3\x86\xe66E\xa7\x9c\xd3\xb6\xf5\xe0\x14\xb8\xd4`\x85\xe3;\x8c\xf8\xf2\xd9)\x0e\xd0\xff\xa5K\xf3\xf1\xc4\x18\xf4Z\xdci\x91\x84\xe8\xb7\x10\x90\xbc\xect\x13\xdfR\xe2\x80\xf8a\x92\xb2R\xdf0\xcdQ\xdf\x83\xbdjp,\xe8\xbb\xe6\xc6Db\xb8\xd6\xcd\x1cj3h\xcf<\x82\x97\xa5s/m\xb2\x1dd\xf7\xfc\xf5\xa9\x1d\xd34{\xcc\x1f\t,i\x16\x82\xad\x8e\xb6\x17\x0f\xaa\x85^/w\xbb~\xff\xce\x92\x90\x83\n\xe5\x14\x95\x92|\xfe-S%\x91i\xafh\x97z\x00@K\xbb\xc2\fcD\xff\xdcl\xa1\xfaR\xbc\xd4k7L\x8a\xa3Z\xf9%{\xfax\x9a\x04\'/\x90\xe6\xe2\xe9\xf1@o\x0ez\xb8\xce\xbeF\x0fkE\xf4ry\x92n\xff\xcb\xf8e\xf3j\xc5[wK\x91\xdb\xf7-r\xd3\x1bx\x9b$\x91\x03q\x9e@\xd8R\x11\x05|\x8f\xb4\xc9\x16\x87C\xab\x96\xc4\xef\xea\xb9\r\xf5\xf3\xbe\x8a\t\xc7\x88\xc0sL;.\xcf\x1d\xc4^\xb0l\xbb\x97\xc5\xf6n\xca\x18M\xb8\x81\xff\xa9~\xf7\xa3\xa6\xd3\x15I\xecXG\x89\xa8\b\x8b\xcc\xe8\x88\xa07Z\x03\xa8.\x7f\x16qlk\xf1\xf1y\x8c\xde\xd6|\xa1(\xf4\x12O\xca3\xf8%1\x8d\xd7\a\xfeJ\xe6\x8bc\xb3\x1bKC.\xafB\x8d\xdd\xf9\x1e\x9d\xa7\x13\x00\x14\xc7\xa1\xf3\x1e\xcb\x19\x13z`\xac\xf3\xd1x\x1b#}\xfaYR\xc5#Zoag@\x18\xfa*\xb4\xc4\x04\x03V\x87\xc5\xe7\xb5\x9bJ\x85-\x7f\xfe\xc0\xb7g\xe8\'`\x96q\x88[\xf8\xe8L\x12\x85\xf5t\x99\x0e}\xd3H\xed\xda\xf3>\xd8\x12\x8cXc5%\x03\x8d`\xdayC\x9b\x9a\xd9c\xe9\xb4\v\x99\x87\xe4\x00\x8a\x8eS\x8e\f\x05ZH\xa2\x0e\xbc\x9c\x95\b2Cf6\x9a\xe7\xb9\x86\xbe\xd0\xda\x91\xc1sl\x11PA\x93\xa5\x93\xc8\xf1w\x7fp6z\xbf\xe8[\'u\xb8\xd2$K\x12\rt\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r\xe2`\xdf\xd2\xb3\xaf\xe9\xc4!Z\xb4&\xa2\x12\xe2i\x91kC$A\xafR\xb3\xff\x1d=\xec\x10\xb4+\x13\'\x92>\x14\x00\a\xb6R\x8b\xdcz\xc3\xd1Y\xd6\xd9;s \xb0\x938\xb7D9\xdcN\xbd\xdbn\xe35\xa7\x02\x9c\xc1\xd9\x13?\xc9\xd7\xab\x9c\xf3\x82\xd1\xee^kk\xce\xdbn\x02\x1f\x80\t\xdbr\xa9\xcc\xf1\xcb\x9f@\x8c\xfc\x02W/p\x97\xb0\xbd\x8f\xdb|n2a\xee\x95u\x83\xca\x8a>}\xd3\xd0\xff6.pa\x17\xe3e\xd2\x7f\xf6\xbc\x9d\x112\x1b\x14<B\x91\xc0{{\x9d@\xb3a\xad\x14\xe9\xcc|\xd7\xa1\xc6\xb9F\x04\xce]\xb9Y\xbd\xbd\f\xa4F;q\xec\x83\x9bM\x93\xa4\x9c\xdd\x93\xa0\x82E\x02d\xd4\x12AI\xd9O\x17\xa6P#\xa35\a\xf6\xbb\t>p\xa1\xd6u\xefn\xb4\xa3\x05D\x8c\xc5l\xcc\b\xeb\xf42\xe9\xf15\xf3\xf2\xee\xd6\xed\t\xb3\xf7\x1a\x7f\xe6\xb4z\x19\xe1\xb4w\xf7\xa6\xd7\\\xfa\x96\xe2\xf9\xb1\x81\xba\xdfg\xadI\x1c\xde*_\xd5\xdf\xeeA\xcd \x91\xc9\xd4\xd1\xcd*.t\x80]\x8e,\x0fC\xb5\xc3\x1e\xc8&z\t\xd0\xac\xf4F\xc8\xba\x83\xad\x99R:\fb\x9a\x8e\x10\xe3]Pc9\xa4d\xab@\xb6\xb6/\x8ej\x15A\x90_\x9d\x17\xf6O\'\xaa`\x95\xad\x18\x8fi\xb8\xb3\xf9\xdc\b\xd6?r\xb7WM\xdf\xe5\xe9}\xf4f\"%\xf7D\xb6\x8bd$Z\xe8\xcd\x1d=\x00\x00\x00\x00\x00', 0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00')
memfd_create(&(0x7f00000002c0)='D\xa3\xd5Wj\x00\x00\x8b\x14\xc2\xac\x1a\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x9b\x12\x0eW\xcf\t\xb0\xa9 +H/\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2y\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xde\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4\x86\xd4\xc9\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg(\x03\xa7\x92\xe5\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xf8A\xaf\\\xaa\xf5u\xde\xfa\xa1\xc0\xf9&gR\x81.\xff\x83k\xe6\rDa\x16\xbd\x1a\xb2w\b\x00'/244, 0x0)
inotify_init1(0x0)
open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
socket(0x22, 0x2, 0x3)
pipe2(&(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x0)
r2 = socket$inet(0x2, 0x3, 0x4)
setsockopt$inet_msfilter(r2, 0x0, 0x23, &(0x7f0000000080)=ANY=[@ANYBLOB="e0000808ac1414aa", @ANYRES64=r1], 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)

1.373232526s ago: executing program 4 (id=701):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
sched_setscheduler(0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020701200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0))
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff)
syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
ptrace$pokeuser(0x6, r3, 0x358, 0x0)

1.361896927s ago: executing program 3 (id=702):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4)
sendto$inet6(r0, &(0x7f0000000140)='g', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r0, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x9, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000ba000000270000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f0000000080), 0x12)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='ext4_allocate_blocks\x00', r5}, 0x10)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100), 0x1001)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000300)=[{&(0x7f0000001b80)=""/220, 0xdc}, {&(0x7f00000000c0)=""/42, 0x2a}, {&(0x7f00000003c0)=""/146, 0x92}, {&(0x7f00000017c0)=""/249, 0xf9}, {&(0x7f00000004c0)=""/194, 0xc2}, {&(0x7f0000001a80)=""/236, 0xec}, {&(0x7f00000006c0)=""/31, 0x1f}, {&(0x7f0000000700)=""/4096, 0x1000}], 0x8}, 0x1)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e05040f20"], 0x8)

1.248609615s ago: executing program 1 (id=704):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x1, 0x0, 0xff34})
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000040)={@broadcast, @empty}, &(0x7f0000000240)=0xc)
sched_setscheduler(r0, 0x1, &(0x7f00000003c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80045503, &(0x7f0000000000))
syz_mount_image$fuse(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x2220081, 0x0, 0x0, 0x0, &(0x7f0000002740)="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")
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
getrandom(&(0x7f0000001340)=""/4099, 0x1003, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

990.789662ms ago: executing program 2 (id=705):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10)
clock_adjtime(0x0, &(0x7f0000000000))
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f00000001c0)={'IDLETIMER\x00'}, &(0x7f00000003c0)=0x1e)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha1\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0)

248.691643ms ago: executing program 3 (id=706):
futex(0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000280)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e6f72746e6128f36567616cead5e854296d653d77696e6e742c726f6469722c757467383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c7065726d69745f6469726500"/130], 0xfd, 0x298, &(0x7f0000000880)="$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")
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r0, 0x8b2c, &(0x7f0000000040))
open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x330)
socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
fchdir(0xffffffffffffffff)
open(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0)
io_setup(0x8, &(0x7f0000000040)=<r2=>0x0)
r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2)
r4 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3)
ftruncate(r4, 0x10000)
fcntl$addseals(r4, 0x409, 0x7)
r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000180)={r4, 0x0, 0x0, 0x1000})
io_submit(r2, 0x1, &(0x7f00000007c0)=[&(0x7f0000000700)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}])
r6 = epoll_create(0xa4)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000480)={0x4})

163.616439ms ago: executing program 1 (id=707):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f00000000c0)=0xc)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000026c0)=ANY=[@ANYBLOB="34000000100000000000", @ANYRES32=0x0, @ANYBLOB="0039a00000000000954d45a4b710534f5241acf900000000040002804ecb85b4f876c2ab0da7407abe8d75e9800321b1c3fb1181d4692aa4787eeffc0d5ed1e2193af2dcf14a35b1b22c22895d002f9a1219c302990418ea5ba13d694db68f8488500710b430ba43aae11c07fe9f50d1564a270ba65641f28db717b47a9cf73b36bde82d1a6663ab1fbb9cca299ae8e24868a54e4dad678538559315b3332c1d2850b3b66ce5e11e73b5db1e834d3f7ae547"], 0x34}}, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='net/dev_mcast\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000008b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
getpid()
ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='ext4_free_inode\x00', r3}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x100010e, &(0x7f00000005c0)={[{@nodelalloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@resgid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@bsdgroups}, {@data_err_abort}, {@init_itable_val={'init_itable', 0x3d, 0x8}}, {@journal_dev={'journal_dev', 0x3d, 0x7fffffff}}, {@auto_da_alloc}]}, 0x2, 0x44f, &(0x7f0000000c00)="$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")
read$FUSE(r1, &(0x7f00000099c0)={0x2020}, 0x2020)
read$FUSE(r1, &(0x7f0000000600)={0x2020}, 0x2020)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r4, @ANYRES8], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r5}, 0x10)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\f'], 0x0, 0x0, 0x0}, 0x0)
preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000000)=""/154, 0x9a}], 0x1, 0x0, 0x0)
read$FUSE(r1, &(0x7f0000006980)={0x2020}, 0x2020)

0s ago: executing program 4 (id=708):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE(r1, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120)
readv(r1, &(0x7f0000002980)=[{&(0x7f0000000700)=""/163, 0xa3}], 0x2)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
tkill(0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40045304, &(0x7f0000000480)={{}, 'port1\x00'})
write$UHID_DESTROY(r1, &(0x7f0000000080), 0x4)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
mkdir(0x0, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = socket(0x3, 0x800, 0x0)
timer_create(0x6, &(0x7f0000000200)={0x0, 0x11, 0x4, @thr={&(0x7f0000000100)="4adb8e13e8f48c21bc28c8441d68", &(0x7f0000000140)="d935f61c9fdf3fdcf0760b5a385ac9ee6403187e47491c67aed30017e58d1b2dd57e8ea6c7047d5fb82672f4ec108071e6c99eb3d558b6eb40d28a18b95ff5435332c16ccdb92027340f1c3cfad97e45c2c88ac58214d9fe8ad8d9e2f40b62b31f9ba360cdd5a9fce25211c45102c378bdb2d05c032d5b4296c5003b67237b9e9fca91c6a660347a5e78e42bf0289a66"}}, &(0x7f0000000240)=<r4=>0x0)
timer_gettime(r4, &(0x7f0000000280))
sendto(r3, &(0x7f0000000380)="da98ca1780c9d56747ca686a8e8322da95b006b2945ef2a6d0d5b67d89d91db0c1584aafee4e83fc78b8d2f02fddba10a13ae58a23fdff07fd665dee93e1762ae597dfcea38854a89ddff3f767801f4ec1287f1355d32c805bfccb987d797e8dcb18", 0x62, 0x4000010, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'xfrm0\x00'})
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x1004080, &(0x7f0000000300)={[{@force}]}, 0x0, 0x5f1, &(0x7f0000000e40)="$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")
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB='iocharset=cp865,utf8=1,utf8=0,utf8=1,iocharset=utf8,sys_immutable,uni_xlate=0,uni_xlate=1,uni_xlate=1,gid=', @ANYRESHEX, @ANYBLOB='A\x00'], 0x1, 0x193, &(0x7f0000000b00)="$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")

kernel console output (not intermixed with test programs):

slave_1
[  243.510299][ T4487] batman_adv: batadv0: Removing interface: batadv_slave_1
[  243.524929][ T4487] device bridge_slave_1 left promiscuous mode
[  243.531177][ T4487] bridge0: port 2(bridge_slave_1) entered disabled state
[  243.545593][ T4487] device bridge_slave_0 left promiscuous mode
[  243.551920][ T4487] bridge0: port 1(bridge_slave_0) entered disabled state
[  243.613010][ T4487] device veth1_macvtap left promiscuous mode
[  243.619057][ T4487] device veth0_macvtap left promiscuous mode
[  243.627533][ T4487] device veth1_vlan left promiscuous mode
[  243.636255][ T4487] device veth0_vlan left promiscuous mode
[  243.654952][ T4487] device veth1_macvtap left promiscuous mode
[  243.661438][ T4487] device veth0_macvtap left promiscuous mode
[  243.663484][ T5256] EXT4-fs (loop3): unmounting filesystem.
[  243.669880][ T4487] device veth1_vlan left promiscuous mode
[  243.679218][ T4487] device veth0_vlan left promiscuous mode
[  243.700802][ T4487] device veth1_macvtap left promiscuous mode
[  243.712418][ T4487] device veth0_macvtap left promiscuous mode
[  243.728622][ T3988] uclogic 0003:256C:006D.0007: interface is invalid, ignoring
[  243.738982][ T4487] device veth1_vlan left promiscuous mode
[  243.782391][ T5700] loop3: detected capacity change from 0 to 512
[  243.832120][ T3628] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  244.326743][ T3681] usb 2-1: USB disconnect, device number 6
[  244.655359][ T4487] infiniband syz0: set down
[  244.810839][ T5701] input: syz0 as /devices/virtual/input/input9
[  245.259826][ T5130] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  245.329203][ T5706] loop1: detected capacity change from 0 to 1024
[  245.384254][ T5706] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  245.472572][ T3634] EXT4-fs (loop1): unmounting filesystem.
[  245.702319][ T5130] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  246.470672][ T5130] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  246.496198][ T5130] usb 4-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.09
[  246.526855][ T5130] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  246.591487][ T5130] usb 4-1: config 0 descriptor??
[  246.660788][ T4487] team0 (unregistering): Port device team_slave_1 removed
[  246.760937][ T4487] team0 (unregistering): Port device team_slave_0 removed
[  246.892275][ T4487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  246.945073][ T4487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  247.528398][ T5130] logitech-hidpp-device 0003:046D:C086.0008: unbalanced collection at end of report description
[  247.588520][ T5130] logitech-hidpp-device 0003:046D:C086.0008: hidpp_probe:parse failed
[  247.626451][ T5130] logitech-hidpp-device: probe of 0003:046D:C086.0008 failed with error -22
[  247.795285][ T4164] usb 4-1: USB disconnect, device number 5
[  247.819969][ T5719] syz.1.338[5719] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  247.820066][ T5719] syz.1.338[5719] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  248.886468][ T5723] loop1: detected capacity change from 0 to 512
[  249.085500][ T5723] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  249.108544][ T5723] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038 (0x7fffffff)
[  249.143333][ T5723] netlink: 'syz.1.339': attribute type 16 has an invalid length.
[  249.309420][ T5723] netlink: 28074 bytes leftover after parsing attributes in process `syz.1.339'.
[  249.850621][   T26] audit: type=1326 audit(1726365534.462:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5732 comm="syz.3.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadab77def9 code=0x7ffc0000
[  249.864611][ T5733] loop3: detected capacity change from 0 to 512
[  249.902097][ T5733] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.341: attempt to clear invalid blocks 1 len 1
[  249.953844][   T26] audit: type=1326 audit(1726365534.462:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5732 comm="syz.3.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fadab77def9 code=0x7ffc0000
[  250.007735][ T5733] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.341: bg 0: block 343: padding at end of block bitmap is not set
[  250.034496][ T5733] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6172: Corrupt filesystem
[  250.050459][   T26] audit: type=1326 audit(1726365534.462:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5732 comm="syz.3.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadab77def9 code=0x7ffc0000
[  250.088286][ T5733] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.341: invalid indirect mapped block 1819239214 (level 0)
[  250.114169][ T4487] bond0 (unregistering): Released all slaves
[  250.120595][ T5733] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.341: invalid indirect mapped block 1819239214 (level 1)
[  250.147478][   T26] audit: type=1326 audit(1726365534.472:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5732 comm="syz.3.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7fadab77def9 code=0x7ffc0000
[  250.179523][ T5733] EXT4-fs (loop3): 1 truncate cleaned up
[  250.191879][   T26] audit: type=1326 audit(1726365534.472:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5732 comm="syz.3.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadab77def9 code=0x7ffc0000
[  250.191918][ T5733] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  250.215004][   T26] audit: type=1326 audit(1726365534.472:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5732 comm="syz.3.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fadab77def9 code=0x7ffc0000
[  250.276278][   T26] audit: type=1326 audit(1726365534.472:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5732 comm="syz.3.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadab77def9 code=0x7ffc0000
[  250.306979][ T3634] EXT4-fs (loop1): unmounting filesystem.
[  250.347668][ T5733] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2186: inode #15: comm syz.3.341: corrupted in-inode xattr
[  250.348619][   T26] audit: type=1326 audit(1726365534.472:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5732 comm="syz.3.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fadab77def9 code=0x7ffc0000
[  250.388390][ T5733] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2186: inode #15: comm syz.3.341: corrupted in-inode xattr
[  250.410748][   T26] audit: type=1326 audit(1726365534.472:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5732 comm="syz.3.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadab77def9 code=0x7ffc0000
[  250.437507][   T26] audit: type=1326 audit(1726365534.472:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5732 comm="syz.3.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7fadab77def9 code=0x7ffc0000
[  250.442763][ T3720] smc: removing ib device syz0
[  255.086016][ T5256] EXT4-fs (loop3): unmounting filesystem.
[  255.632568][ T1261] ieee802154 phy0 wpan0: encryption failed: -22
[  255.639056][ T1261] ieee802154 phy1 wpan1: encryption failed: -22
[  255.669408][ T3651] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  255.680672][ T3651] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  255.689140][ T3651] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  255.706510][ T3651] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  255.714438][ T3651] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  255.721842][ T3651] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  256.465752][ T4487] team0 (unregistering): Port device team_slave_1 removed
[  256.520140][ T4487] team0 (unregistering): Port device team_slave_0 removed
[  256.569255][ T4487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  256.640448][ T4487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  257.280617][ T4487] bond0 (unregistering): Released all slaves
[  257.782139][ T3651] Bluetooth: hci4: command tx timeout
[  257.998617][ T4487] team0 (unregistering): Port device team_slave_1 removed
[  258.081151][ T4487] team0 (unregistering): Port device team_slave_0 removed
[  258.141125][ T4487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  258.213592][ T4487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  258.457351][ T5760] loop1: detected capacity change from 0 to 4096
[  258.612619][ T5761] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  258.778360][   T26] kauditd_printk_skb: 28 callbacks suppressed
[  258.778376][   T26] audit: type=1800 audit(1726365543.402:101): pid=5762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.348" name="bus" dev="loop1" ino=18 res=0 errno=0
[  258.809385][ T5760] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8)
[  258.815947][ T5760] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  258.827976][ T5760] vhci_hcd vhci_hcd.0: Device attached
[  258.833310][   T26] audit: type=1800 audit(1726365543.402:102): pid=5760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.348" name="bus" dev="loop1" ino=18 res=0 errno=0
[  258.852981][ T5760] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(10)
[  258.860409][ T5760] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  258.868369][ T5760] vhci_hcd vhci_hcd.0: Device attached
[  258.890457][ T5760] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(15)
[  258.897246][ T5760] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  258.906337][ T5760] vhci_hcd vhci_hcd.0: Device attached
[  258.918447][ T5760] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(17)
[  258.925080][ T5760] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  258.951791][ T5760] vhci_hcd vhci_hcd.0: Device attached
[  258.973166][ T5768] vhci_hcd: connection closed
[  258.973615][ T3768] vhci_hcd: stop threads
[  258.975052][ T5766] vhci_hcd: connection closed
[  258.978314][ T3768] vhci_hcd: release socket
[  258.982863][ T5764] vhci_hcd: connection closed
[  258.994274][ T3768] vhci_hcd: disconnect device
[  258.995943][ T5770] vhci_hcd: connection closed
[  259.003530][ T3768] vhci_hcd: stop threads
[  259.022166][ T3677] vhci_hcd: vhci_device speed not set
[  259.022429][ T3768] vhci_hcd: release socket
[  259.039680][ T3768] vhci_hcd: disconnect device
[  259.045725][ T3768] vhci_hcd: stop threads
[  259.050027][ T3768] vhci_hcd: release socket
[  259.057936][ T3768] vhci_hcd: disconnect device
[  259.070126][ T3768] vhci_hcd: stop threads
[  259.074574][ T3768] vhci_hcd: release socket
[  259.080135][ T3768] vhci_hcd: disconnect device
[  259.102070][ T3677] usb 11-1: new full-speed USB device number 3 using vhci_hcd
[  259.109946][ T3677] usb 11-1: enqueue for inactive port 0
[  259.139208][ T4487] bond0 (unregistering): Released all slaves
[  259.192253][ T3677] vhci_hcd: vhci_device speed not set
[  259.217204][ T5462] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  259.232723][ T5462] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  259.261704][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  259.270488][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  259.292718][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  259.312870][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  259.330059][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  259.343030][ T3988] lo speed is unknown, defaulting to 1000
[  259.481498][ T5436] 8021q: adding VLAN 0 to HW filter on device bond0
[  259.514524][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  259.577899][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  259.588637][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  259.649603][ T5436] 8021q: adding VLAN 0 to HW filter on device team0
[  259.700258][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  259.732903][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  259.746109][ T3906] bridge0: port 1(bridge_slave_0) entered blocking state
[  259.753265][ T3906] bridge0: port 1(bridge_slave_0) entered forwarding state
[  259.811182][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  259.848896][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  259.862287][ T3651] Bluetooth: hci4: command tx timeout
[  259.869516][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  259.887158][ T3720] bridge0: port 2(bridge_slave_1) entered blocking state
[  259.894398][ T3720] bridge0: port 2(bridge_slave_1) entered forwarding state
[  259.923201][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  259.936695][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  259.947530][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  259.959873][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  259.987281][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  260.000721][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  260.011603][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  260.021210][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  260.039608][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  260.060983][ T5436] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  260.080036][ T5436] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  260.115080][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  260.127870][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  260.180837][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  260.197510][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  260.236101][ T5462] 8021q: adding VLAN 0 to HW filter on device batadv0
[  260.550598][ T5462] device veth0_vlan entered promiscuous mode
[  260.636522][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  260.656098][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  260.977158][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  261.194157][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  261.263390][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  261.386236][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  261.400124][ T5462] device veth1_vlan entered promiscuous mode
[  261.422135][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  261.776798][ T5749] chnl_net:caif_netlink_parms(): no params data found
[  261.943650][ T3651] Bluetooth: hci4: command tx timeout
[  261.967350][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  262.037073][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  262.194592][ T5462] device veth0_macvtap entered promiscuous mode
[  262.245714][ T5462] device veth1_macvtap entered promiscuous mode
[  262.294192][ T5436] 8021q: adding VLAN 0 to HW filter on device batadv0
[  262.372496][ T3919] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  262.380831][ T3919] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  262.420869][ T3919] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  262.432670][ T3919] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  262.473270][ T5462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  262.494353][ T5462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  262.516314][ T5462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  262.531323][ T5462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  262.544631][ T5462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  262.558375][ T5462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  262.599012][ T5462] batman_adv: batadv0: Interface activated: batadv_slave_0
[  262.608795][ T3919] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  262.624377][ T3919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  262.683032][ T5462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  262.701592][ T5462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  262.712217][ T5462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  262.729177][ T5462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  262.739081][ T5462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  262.750429][ T5462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  262.762519][ T5462] batman_adv: batadv0: Interface activated: batadv_slave_1
[  262.770232][ T5749] bridge0: port 1(bridge_slave_0) entered blocking state
[  262.778456][ T5749] bridge0: port 1(bridge_slave_0) entered disabled state
[  262.786966][ T5749] device bridge_slave_0 entered promiscuous mode
[  262.797333][ T5749] bridge0: port 2(bridge_slave_1) entered blocking state
[  262.804512][ T5749] bridge0: port 2(bridge_slave_1) entered disabled state
[  262.812787][ T5749] device bridge_slave_1 entered promiscuous mode
[  262.825886][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  262.834943][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  262.846460][ T5462] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  262.859264][ T5462] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  262.868418][ T5462] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  262.877701][ T5462] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  262.911282][ T5749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  262.952259][ T5749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  263.027459][ T3768] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  263.037162][ T5749] team0: Port device team_slave_0 added
[  263.039401][ T3768] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  263.046321][ T5749] team0: Port device team_slave_1 added
[  263.079250][ T5749] batman_adv: batadv0: Adding interface: batadv_slave_0
[  263.087930][ T5749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  263.120223][ T5749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  263.149198][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  263.158581][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  263.167469][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  263.188986][ T5749] batman_adv: batadv0: Adding interface: batadv_slave_1
[  263.203323][ T5749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  263.230595][ T5749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  263.257937][ T3919] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  263.283173][ T3919] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  263.369266][ T4487] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  263.397635][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  263.423209][ T5749] device hsr_slave_0 entered promiscuous mode
[  263.437170][ T5749] device hsr_slave_1 entered promiscuous mode
[  263.462601][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  263.485289][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  263.502977][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  263.522383][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  263.535177][ T5436] device veth0_vlan entered promiscuous mode
[  263.588148][ T5848] loop3: detected capacity change from 0 to 256
[  263.614272][ T5848] exfat: Unknown parameter 'ÿ½<JÛœúyw¸v+ƒÖ‘‘(Ît´•nÁÜ«_ŠsœæϤ‰Le«—ˆ‚Ô¦£Ó~µÓ>Æw(¶ò?LŒ�ùÛG¨Z»À>ŠŸ­�‘M\ì´âÓ�>`çvåC&Ÿv-ˆ`x¨¹Q¢À†;q›YeQíWíüÁ“•eC‰K%˜C ;;6#²®·²‹¡š„"ú·þcq׿XÜfþÅЮ¥°Vde†êMíˆþ�?l2ÝN¯B[šÈAuùÇ4ŠRÿŒQ�ñJExOF¸D¥–dvÊX4öt¾'
[  263.652552][ T4487] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  264.198338][ T3651] Bluetooth: hci4: command tx timeout
[  264.505619][ T5436] device veth1_vlan entered promiscuous mode
[  264.657270][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  265.116091][ T5859] loop1: detected capacity change from 0 to 128
[  265.145924][ T4487] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  265.293247][ T5864] syz.2.352[5864] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  265.293345][ T5864] syz.2.352[5864] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  265.525187][ T4487] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.337991][ T5869]  loop1:
[  266.392268][    T7] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  266.417182][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  266.435137][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  266.581273][ T5436] device veth0_macvtap entered promiscuous mode
[  266.635207][ T5436] device veth1_macvtap entered promiscuous mode
[  267.036897][ T3634] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000074f)
[  267.083520][ T3634] FAT-fs (loop1): Filesystem has been set read-only
[  267.097330][ T3634] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000074f)
[  267.599046][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  267.618076][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  267.746168][ T5436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  267.759075][ T5436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  267.769635][ T5436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  267.780405][    T7] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e
[  267.789948][ T5436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  267.789989][    T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  267.808453][ T5436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  267.810816][   T26] audit: type=1326 audit(1726365552.422:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5887 comm="syz.2.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7497def9 code=0x7fc00000
[  267.842926][ T5436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  267.853052][   T26] audit: type=1326 audit(1726365552.422:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5887 comm="syz.2.356" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3f7497def9 code=0x0
[  267.853975][    T7] usb 4-1: config 0 descriptor??
[  267.880811][ T5436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  267.891375][ T5436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  267.903769][ T5436] batman_adv: batadv0: Interface activated: batadv_slave_0
[  267.927744][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  267.938387][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  267.956901][ T5436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  267.969842][ T5436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  267.980198][ T5436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  267.998901][   T26] audit: type=1326 audit(1726365552.612:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5887 comm="syz.2.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f3f7497def9 code=0x7fc00000
[  268.030940][ T5436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  268.040923][ T5436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  268.058022][ T5436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  268.068716][ T5436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  268.089555][ T5436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  268.112936][ T5436] batman_adv: batadv0: Interface activated: batadv_slave_1
[  268.150048][ T5436] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  268.165504][ T5436] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  268.175868][ T5436] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  268.184711][ T5436] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  268.195384][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  268.205035][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  268.397676][    T7] ath6kl: Failed to submit usb control message: -71
[  268.404757][    T7] ath6kl: unable to send the bmi data to the device: -71
[  268.411824][    T7] ath6kl: Unable to send get target info: -71
[  268.455305][    T7] ath6kl: Failed to init ath6kl core: -71
[  268.460415][ T3648] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  268.477008][ T3648] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  268.496989][    T7] ath6kl_usb: probe of 4-1:0.0 failed with error -71
[  268.517066][    T7] usb 4-1: USB disconnect, device number 6
[  268.539434][ T3641] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  268.553012][   T26] audit: type=1326 audit(1726365553.172:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5887 comm="syz.2.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7497def9 code=0x7fc00000
[  268.576665][ T3641] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  268.595825][ T3641] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  268.605012][ T3641] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  268.824200][ T3697] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  268.841418][ T3697] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  268.870889][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  268.914198][ T3697] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  268.936587][ T3697] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  269.819470][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  270.651158][ T5895] chnl_net:caif_netlink_parms(): no params data found
[  270.663528][ T3641] Bluetooth: hci0: command tx timeout
[  270.907728][ T5926] loop2: detected capacity change from 0 to 164
[  271.092302][ T5931] loop4: detected capacity change from 0 to 1024
[  271.128986][ T5931] EXT4-fs: Ignoring removed nomblk_io_submit option
[  271.331357][ T5931] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  271.585889][ T5895] bridge0: port 1(bridge_slave_0) entered blocking state
[  271.585961][ T5895] bridge0: port 1(bridge_slave_0) entered disabled state
[  271.587338][ T5895] device bridge_slave_0 entered promiscuous mode
[  271.594474][ T5749] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  271.607758][ T5749] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  272.213730][ T5436] EXT4-fs (loop4): unmounting filesystem.
[  272.281843][ T5895] bridge0: port 2(bridge_slave_1) entered blocking state
[  272.281904][ T5895] bridge0: port 2(bridge_slave_1) entered disabled state
[  272.282942][ T5895] device bridge_slave_1 entered promiscuous mode
[  272.283445][ T5749] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  272.387559][ T5749] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  272.420886][ T5895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  272.424007][ T5895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  272.749363][ T3641] Bluetooth: hci0: command tx timeout
[  273.514365][ T5895] team0: Port device team_slave_0 added
[  273.567312][ T5895] team0: Port device team_slave_1 added
[  273.681283][ T5749] 8021q: adding VLAN 0 to HW filter on device bond0
[  273.769925][ T3879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  273.800931][ T3879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  273.822781][ T5895] batman_adv: batadv0: Adding interface: batadv_slave_0
[  273.835162][ T5895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  274.496580][ T5895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  274.553705][ T5895] batman_adv: batadv0: Adding interface: batadv_slave_1
[  274.560828][ T5895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  274.586933][    C1] vkms_vblank_simulate: vblank timer overrun
[  274.655083][ T5967] loop3: detected capacity change from 0 to 512
[  274.663317][ T5967] ext4: Unknown parameter 'appraise'
[  274.669809][ T5895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  274.707058][ T5969] loop2: detected capacity change from 0 to 256
[  274.721535][ T4487] device hsr_slave_0 left promiscuous mode
[  274.731302][ T4487] device hsr_slave_1 left promiscuous mode
[  274.744368][ T4487] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  274.752805][ T4487] batman_adv: batadv0: Removing interface: batadv_slave_0
[  274.760776][ T4487] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  274.783284][ T4487] batman_adv: batadv0: Removing interface: batadv_slave_1
[  274.806927][ T4487] device bridge_slave_1 left promiscuous mode
[  274.821903][ T4487] bridge0: port 2(bridge_slave_1) entered disabled state
[  274.838052][ T4487] device bridge_slave_0 left promiscuous mode
[  274.844615][ T4487] bridge0: port 1(bridge_slave_0) entered disabled state
[  274.852502][ T3641] Bluetooth: hci0: command tx timeout
[  275.208123][ T4487] device veth1_macvtap left promiscuous mode
[  275.252137][ T4487] device veth0_macvtap left promiscuous mode
[  275.262511][ T4487] device veth1_vlan left promiscuous mode
[  275.271560][ T4487] device veth0_vlan left promiscuous mode
[  276.039359][ T5981] ipt_CLUSTERIP: Please specify destination IP
[  276.890723][   T26] audit: type=1804 audit(1726365561.502:107): pid=5988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.374" name="/newroot/4/bus/bus" dev="overlay" ino=46 res=1 errno=0
[  276.910724][ T3651] Bluetooth: hci0: command tx timeout
[  277.666667][ T5987] netlink: 24 bytes leftover after parsing attributes in process `syz.3.375'.
[  277.735602][ T5989] input: syz0 as /devices/virtual/input/input10
[  278.199745][ T5998] netlink: 'syz.2.377': attribute type 3 has an invalid length.
[  278.207674][ T5998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.377'.
[  278.335255][ T4487] team0 (unregistering): Port device team_slave_1 removed
[  278.382359][ T4487] team0 (unregistering): Port device team_slave_0 removed
[  278.425772][ T4487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  278.479045][ T4487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  278.977779][ T4487] bond0 (unregistering): Released all slaves
[  279.058190][ T5749] 8021q: adding VLAN 0 to HW filter on device team0
[  279.084477][ T5995] netlink: 'syz.4.376': attribute type 4 has an invalid length.
[  279.126375][ T5997] netlink: 'syz.4.376': attribute type 4 has an invalid length.
[  279.139604][ T6000] netlink: 'syz.2.377': attribute type 4 has an invalid length.
[  279.192252][ T6002] netlink: 'syz.2.377': attribute type 4 has an invalid length.
[  279.208583][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  279.222773][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  279.245245][ T6007] dccp_invalid_packet: P.Data Offset(0) too small
[  279.263028][ T3720] bridge0: port 1(bridge_slave_0) entered blocking state
[  279.270152][ T3720] bridge0: port 1(bridge_slave_0) entered forwarding state
[  279.296086][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  279.306384][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  279.316298][ T3720] bridge0: port 2(bridge_slave_1) entered blocking state
[  279.323466][ T3720] bridge0: port 2(bridge_slave_1) entered forwarding state
[  279.331392][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  279.387832][ T6007] tipc: Started in network mode
[  279.402125][ T6007] tipc: Node identity ac1414aa, cluster identity 4711
[  279.420179][ T6007] tipc: Enabled bearer <udp:syz2>, priority 10
[  279.489703][ T6013] loop4: detected capacity change from 0 to 512
[  279.568322][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  279.668524][ T6013] EXT4-fs (loop4): orphan cleanup on readonly fs
[  279.739569][ T6013] EXT4-fs (loop4): 1 orphan inode deleted
[  279.764614][ T6013] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  279.862132][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  279.973708][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  280.077209][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  280.085874][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  280.094989][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  280.104584][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  280.116901][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  280.125414][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  280.166017][ T5895] device hsr_slave_0 entered promiscuous mode
[  280.173193][ T5895] device hsr_slave_1 entered promiscuous mode
[  280.180004][ T5895] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  280.235915][ T5895] Cannot create hsr debugfs directory
[  280.256017][ T5436] EXT4-fs (loop4): unmounting filesystem.
[  280.441670][ T5898] tipc: Node number set to 2886997162
[  280.485978][ T5749] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  280.718005][ T3879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  280.795862][ T3879] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  281.133876][ T6023] loop4: detected capacity change from 0 to 2048
[  281.256143][ T6023] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  281.381463][ T5895] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  281.432316][ T6032] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5882: Corrupt filesystem
[  281.495028][ T6032] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #18: comm syz.4.381: mark_inode_dirty error
[  281.538637][ T6032] EXT4-fs error (device loop4): ext4_map_blocks:744: inode #18: block 114: comm syz.4.381: lblock 2 mapped to illegal pblock 114 (length 1)
[  281.674044][ T5895] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  281.775922][ T6041] loop3: detected capacity change from 0 to 2048
[  281.810447][ T5436] EXT4-fs error (device loop4): ext4_map_blocks:634: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1)
[  281.844937][ T5895] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  281.862616][ T6041] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal
[  281.947002][ T5749] 8021q: adding VLAN 0 to HW filter on device batadv0
[  281.955189][ T5436] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5882: Corrupt filesystem
[  281.988437][ T5436] EXT4-fs error (device loop4): ext4_dirty_inode:6086: inode #18: comm syz-executor: mark_inode_dirty error
[  282.016539][ T5436] EXT4-fs (loop4): unmounting filesystem.
[  282.024496][ T5895] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  282.264986][   T98] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  282.278154][   T98] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  282.460727][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  282.549676][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  282.688136][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  282.697400][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  282.714168][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  282.727433][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  282.737365][ T5749] device veth0_vlan entered promiscuous mode
[  282.807517][ T5749] device veth1_vlan entered promiscuous mode
[  282.956297][   T98] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  282.983462][   T98] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  283.011111][   T98] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  283.053516][   T98] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  283.138698][ T6047] loop3: detected capacity change from 0 to 64
[  283.198521][ T5749] device veth0_macvtap entered promiscuous mode
[  283.224610][ T5895] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  283.254378][ T5749] device veth1_macvtap entered promiscuous mode
[  283.418077][ T5895] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  283.446005][ T3879] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  283.461583][ T3879] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  284.182245][ T5895] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  284.273672][ T5895] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  284.297669][ T5749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  284.336200][ T5749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  284.373252][ T5749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  284.408877][ T5749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  284.443489][ T5749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  284.476048][ T5749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  284.505248][ T5749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  284.536253][ T5749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  284.565174][ T5749] batman_adv: batadv0: Interface activated: batadv_slave_0
[  284.651494][   T98] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  284.668017][   T98] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  284.740344][ T5749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  284.764692][ T5749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  284.778592][ T5749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  284.790023][ T5749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  284.816136][ T5749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  284.853759][ T5749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  284.864716][ T5749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  284.866440][ T3651] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  284.875663][ T5749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  284.897533][ T3651] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  284.903270][ T5749] batman_adv: batadv0: Interface activated: batadv_slave_1
[  284.913822][ T3651] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  284.921395][   T98] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  284.931009][ T3651] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  284.932342][   T98] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  284.947425][ T3651] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  284.955343][ T3651] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  285.014396][ T5749] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  285.027094][ T5749] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  285.036813][ T5749] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  285.049625][ T5749] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  285.351826][ T4485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  285.377869][ T5895] 8021q: adding VLAN 0 to HW filter on device bond0
[  285.390011][ T4485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  285.438914][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  285.455233][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  285.476195][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  285.544318][ T5895] 8021q: adding VLAN 0 to HW filter on device team0
[  285.560718][ T3879] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  285.583857][ T3879] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  285.674070][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  285.737738][   T98] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  285.758884][   T98] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  285.840004][   T98] bridge0: port 1(bridge_slave_0) entered blocking state
[  285.847214][   T98] bridge0: port 1(bridge_slave_0) entered forwarding state
[  285.856357][   T98] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  285.865563][   T98] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  285.879907][   T98] bridge0: port 2(bridge_slave_1) entered blocking state
[  285.886299][ T6061] loop0: detected capacity change from 0 to 16
[  285.887097][   T98] bridge0: port 2(bridge_slave_1) entered forwarding state
[  285.901810][   T98] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  285.920838][ T6063] loop3: detected capacity change from 0 to 1024
[  285.922793][ T6061] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  285.977704][ T4487] device hsr_slave_0 left promiscuous mode
[  286.015653][ T4487] device hsr_slave_1 left promiscuous mode
[  286.041188][ T4487] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  286.060657][ T4487] batman_adv: batadv0: Removing interface: batadv_slave_0
[  286.077034][ T4487] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  286.084891][ T4487] batman_adv: batadv0: Removing interface: batadv_slave_1
[  286.093891][ T4487] device bridge_slave_1 left promiscuous mode
[  286.106153][ T4487] bridge0: port 2(bridge_slave_1) entered disabled state
[  286.116189][ T4487] device bridge_slave_0 left promiscuous mode
[  286.122788][ T4487] bridge0: port 1(bridge_slave_0) entered disabled state
[  286.219837][ T4487] device veth1_macvtap left promiscuous mode
[  286.226519][ T4487] device veth0_macvtap left promiscuous mode
[  286.235311][ T4487] device veth1_vlan left promiscuous mode
[  286.241441][ T4487] device veth0_vlan left promiscuous mode
[  286.392078][   T41] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  286.457165][ T4487] bond1 (unregistering): Released all slaves
[  286.592872][ T6072] loop2: detected capacity change from 0 to 2048
[  286.632012][   T41] usb 4-1: Using ep0 maxpacket: 32
[  286.632717][ T6072] journal_path: Lookup failure for './file0'
[  286.658644][ T6072] EXT4-fs: error: could not find journal device path
[  286.771663][   T41] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 240, changing to 11
[  286.783019][   T41] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 49918, setting to 1024
[  286.794288][   T41] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  286.804522][   T41] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  286.853282][   T41] hub 4-1:4.0: USB hub found
[  286.995416][ T3641] Bluetooth: hci3: command tx timeout
[  287.072258][   T41] hub 4-1:4.0: 2 ports detected
[  287.117547][ T4487] team0 (unregistering): Port device team_slave_1 removed
[  287.159401][ T4487] team0 (unregistering): Port device team_slave_0 removed
[  287.205893][ T4487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  287.250233][ T4487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  287.295799][   T41] hub 4-1:4.0: hub_hub_status failed (err = -71)
[  287.303086][   T41] hub 4-1:4.0: config failed, can't get hub status (err -71)
[  287.356438][   T41] usb 4-1: USB disconnect, device number 7
[  287.818902][ T4487] bond0 (unregistering): Released all slaves
[  287.892043][ T6074] loop3: detected capacity change from 0 to 256
[  288.136873][   T98] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  288.150908][   T98] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  288.165352][   T98] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  288.262043][ T6079] loop2: detected capacity change from 0 to 512
[  288.434336][   T98] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  288.481881][ T6079] EXT4-fs (loop2): 1 truncate cleaned up
[  288.487756][ T6079] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  288.667066][   T98] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  288.722914][   T98] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  288.731593][   T98] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  288.740582][   T98] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  288.749286][   T98] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  288.758393][   T98] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  288.767769][   T98] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  288.821667][ T6056] chnl_net:caif_netlink_parms(): no params data found
[  288.843180][ T5462] EXT4-fs (loop2): unmounting filesystem.
[  288.849329][ T6066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.392'.
[  288.873125][ T5895] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  289.008918][ T6083] loop2: detected capacity change from 0 to 64
[  289.062432][ T3641] Bluetooth: hci3: command tx timeout
[  289.294847][ T6056] bridge0: port 1(bridge_slave_0) entered blocking state
[  289.312114][ T6056] bridge0: port 1(bridge_slave_0) entered disabled state
[  289.321285][ T6056] device bridge_slave_0 entered promiscuous mode
[  289.338222][ T6056] bridge0: port 2(bridge_slave_1) entered blocking state
[  289.476305][ T6056] bridge0: port 2(bridge_slave_1) entered disabled state
[  289.572771][ T6056] device bridge_slave_1 entered promiscuous mode
[  289.989080][ T5462] hfs: node 4:3 still has 1 user(s)!
[  290.160623][ T6056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  290.234097][ T6056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  290.296435][ T6056] team0: Port device team_slave_0 added
[  290.309216][ T6056] team0: Port device team_slave_1 added
[  292.111300][ T3641] Bluetooth: hci3: command tx timeout
[  292.122628][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  292.130213][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  292.139892][ T6056] batman_adv: batadv0: Adding interface: batadv_slave_0
[  292.184424][ T6111] loop2: detected capacity change from 0 to 512
[  292.186910][ T6056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  292.191340][ T6111] ext4: Unknown parameter 'fsuuid'
[  292.216617][    C0] vkms_vblank_simulate: vblank timer overrun
[  292.239064][ T6056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  292.254044][ T5895] 8021q: adding VLAN 0 to HW filter on device batadv0
[  292.262989][ T5747] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  292.281752][ T6056] batman_adv: batadv0: Adding interface: batadv_slave_1
[  292.290534][ T6056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  292.317261][    C0] vkms_vblank_simulate: vblank timer overrun
[  292.333391][ T6056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  292.402327][ T6116] loop3: detected capacity change from 0 to 16
[  292.424115][ T6116] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  292.575810][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  292.706704][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  293.849583][ T6122] loop2: detected capacity change from 0 to 32768
[  293.913186][ T6056] device hsr_slave_0 entered promiscuous mode
[  293.948590][ T6056] device hsr_slave_1 entered promiscuous mode
[  293.968613][ T6056] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  293.979587][ T6056] Cannot create hsr debugfs directory
[  294.005721][ T6122] XFS (loop2): Mounting V5 Filesystem
[  294.045420][ T5895] device veth0_vlan entered promiscuous mode
[  294.066493][ T6132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.407'.
[  294.092974][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  294.129408][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  294.139796][ T6122] XFS (loop2): Ending clean mount
[  294.155147][ T6122] XFS (loop2): Quotacheck needed: Please wait.
[  294.179607][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  294.187973][ T3641] Bluetooth: hci3: command tx timeout
[  294.207702][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  294.326568][ T5895] device veth1_vlan entered promiscuous mode
[  294.333425][ T6122] XFS (loop2): Quotacheck: Done.
[  294.359515][ T5895] device veth0_macvtap entered promiscuous mode
[  294.369607][ T5895] device veth1_macvtap entered promiscuous mode
[  295.332963][ T6144] loop3: detected capacity change from 0 to 8
[  295.433263][ T6144] SQUASHFS error: zstd decompression failed, data probably corrupt
[  295.435609][ T3879] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  295.450140][ T6144] SQUASHFS error: Failed to read block 0x4ec: -5
[  295.460197][ T6144] SQUASHFS error: Unable to read metadata cache entry [4ea]
[  295.467841][ T6144] SQUASHFS error: Unable to read inode 0x2011f
[  295.871698][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  295.902874][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  295.943819][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  295.958662][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  295.965518][ T5462] XFS (loop2): Unmounting Filesystem
[  295.989055][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  296.007820][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  296.138306][ T5895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  296.171004][ T5895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.189918][ T5895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  296.222532][ T5895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.314023][ T5895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  296.439830][ T5895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.531307][ T5895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  296.643269][ T5895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.678067][ T6149] syz.3.409 (6149): /proc/6143/oom_adj is deprecated, please use /proc/6143/oom_score_adj instead.
[  296.834278][ T5895] batman_adv: batadv0: Interface activated: batadv_slave_0
[  296.996623][ T3879] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  297.048483][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  297.073119][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  297.142030][ T5895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  297.182210][ T5895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  297.211989][ T5895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  297.233123][ T5895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  297.266251][ T5895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  297.296081][ T5895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  297.310628][ T5895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  297.325938][ T5895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  297.340060][ T5895] batman_adv: batadv0: Interface activated: batadv_slave_1
[  297.361061][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  297.499804][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  297.658273][ T3879] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  298.235606][ T5895] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  298.336416][ T5895] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  298.361363][ T5895] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  298.377884][ T6165] loop2: detected capacity change from 0 to 128
[  298.388701][ T5895] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  298.460587][ T3879] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  298.713162][ T3697] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  298.728157][ T3697] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  299.637737][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  299.767254][ T3697] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  299.780788][ T6176] capability: warning: `syz.3.416' uses 32-bit capabilities (legacy support in use)
[  299.814407][ T3697] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  299.989031][   T98] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  300.015322][ T6182] loop3: detected capacity change from 0 to 256
[  303.866989][ T6217] loop1: detected capacity change from 0 to 16
[  304.384429][ T6217] erofs: (device loop1): mounted with root inode @ nid 36.
[  304.413641][ T6216] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  304.454842][ T6216] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851]
[  304.467097][ T6216] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117]
[  306.939871][ T6247] loop2: detected capacity change from 0 to 512
[  307.005746][ T6056] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  307.029315][ T6247] EXT4-fs (loop2): orphan cleanup on readonly fs
[  307.045173][ T6247] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #4: comm syz.2.431: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048)
[  307.054785][ T6056] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  307.136355][ T6247] EXT4-fs error (device loop2): ext4_quota_enable:6994: comm syz.2.431: Bad quota inode: 4, type: 1
[  307.869491][ T6247] EXT4-fs warning (device loop2): ext4_enable_quotas:7035: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  307.898741][ T6056] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  308.058708][ T6056] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  308.072164][ T6247] EXT4-fs (loop2): Cannot turn on quotas: error -117
[  308.139135][ T6247] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  309.588335][ T6265] syz.3.434 (6265): drop_caches: 2
[  309.723981][ T6247] EXT4-fs (loop2): shut down requested (2)
[  309.772367][ T6247] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended
[  309.907326][ T6268] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  309.956001][ T6247] EXT4-fs warning (device loop2): ext4_enable_quotas:7035: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  310.000796][ T6056] 8021q: adding VLAN 0 to HW filter on device bond0
[  310.190724][ T6275] loop3: detected capacity change from 0 to 2048
[  310.280845][ T6056] 8021q: adding VLAN 0 to HW filter on device team0
[  310.281221][ T6275] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  310.344528][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  310.360525][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  310.458079][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  310.479231][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  310.528361][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  310.535556][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  310.558195][ T5462] EXT4-fs (loop2): unmounting filesystem.
[  310.591504][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  310.675234][ T6282] i2c i2c-0: Invalid block write size 129
[  310.901579][   T98] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  310.941418][   T98] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  311.003808][   T98] bridge0: port 2(bridge_slave_1) entered blocking state
[  311.010947][   T98] bridge0: port 2(bridge_slave_1) entered forwarding state
[  311.140383][   T98] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  311.212813][   T98] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  311.408080][ T3879] device hsr_slave_0 left promiscuous mode
[  311.480292][ T3879] device hsr_slave_1 left promiscuous mode
[  311.493985][ T6303] syz.0.440[6303] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  311.494079][ T6303] syz.0.440[6303] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  311.509690][ T3879] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  311.692980][ T3879] batman_adv: batadv0: Removing interface: batadv_slave_0
[  312.430159][ T3879] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  312.440579][ T3879] batman_adv: batadv0: Removing interface: batadv_slave_1
[  312.522772][ T3879] device bridge_slave_1 left promiscuous mode
[  312.549236][ T6312] loop2: detected capacity change from 0 to 512
[  312.574553][ T3879] bridge0: port 2(bridge_slave_1) entered disabled state
[  312.638407][ T6312] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  312.653689][ T6312] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  312.674675][ T6312] EXT4-fs (loop2): ea_inode feature is not supported for Hurd
[  312.700128][ T3879] device bridge_slave_0 left promiscuous mode
[  312.715850][ T3879] bridge0: port 1(bridge_slave_0) entered disabled state
[  312.826690][ T3879] device veth1_macvtap left promiscuous mode
[  312.860554][ T3879] device veth0_macvtap left promiscuous mode
[  312.902060][ T3879] device veth1_vlan left promiscuous mode
[  312.907919][ T3879] device veth0_vlan left promiscuous mode
[  313.075257][ T6320] loop3: detected capacity change from 0 to 256
[  313.112168][ T6320] FAT-fs (loop3): Unrecognized mount option "" or missing value
[  313.280121][ T6323] loop3: detected capacity change from 0 to 1024
[  313.353877][ T6323] hfsplus: unable to find HFS+ superblock
[  313.456625][ T6320] Bluetooth: MGMT ver 1.22
[  315.301279][ T3879] team0 (unregistering): Port device team_slave_1 removed
[  315.366840][ T3879] team0 (unregistering): Port device team_slave_0 removed
[  315.422350][ T3879] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  315.600403][ T3879] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  316.012275][ T5897] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  316.283289][ T5897] usb 4-1: Using ep0 maxpacket: 16
[  316.412448][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  316.430937][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  316.441380][ T5897] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  316.463188][ T5897] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  316.479305][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  316.533192][ T5897] usb 4-1: config 0 descriptor??
[  316.805838][ T3879] bond0 (unregistering): Released all slaves
[  316.876866][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  316.886476][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  316.900079][ T6305] netlink: 36 bytes leftover after parsing attributes in process `syz.2.441'.
[  316.932606][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  316.957077][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  316.992926][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  317.013987][ T5897] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0
[  317.021250][ T5897] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0
[  317.037356][ T6056] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  317.235771][ T1261] ieee802154 phy0 wpan0: encryption failed: -22
[  317.239295][ T5897] microsoft 0003:045E:07DA.0009: item fetching failed at offset 30/34
[  317.250508][ T1261] ieee802154 phy1 wpan1: encryption failed: -22
[  317.252997][ T5897] microsoft 0003:045E:07DA.0009: parse failed
[  317.263769][ T5897] microsoft: probe of 0003:045E:07DA.0009 failed with error -22
[  318.110935][ T6056] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  318.154825][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  318.169966][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  318.198255][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  318.222873][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  318.261370][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  318.503443][   T22] usb 4-1: USB disconnect, device number 8
[  318.832956][ T6361] loop2: detected capacity change from 0 to 128
[  319.548684][ T6367] loop0: detected capacity change from 0 to 1024
[  319.583879][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  319.616243][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  319.640505][ T6367] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  319.783757][ T6367] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  319.793988][ T6056] 8021q: adding VLAN 0 to HW filter on device batadv0
[  319.835311][ T6367] EXT4-fs (loop0): orphan cleanup on readonly fs
[  319.933656][ T6374] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  320.574303][ T6367] EXT4-fs error (device loop0): ext4_free_blocks:6212: comm syz.0.455: Freeing blocks not in datazone - block = 0, count = 4096
[  320.716570][ T6367] EXT4-fs (loop0): Remounting filesystem read-only
[  320.765722][ T6367] EXT4-fs (loop0): 1 orphan inode deleted
[  320.827959][ T6367] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  321.097448][ T6386] EXT4-fs error (device loop0): ext4_search_dir:1549: inode #2: block 16: comm syz.0.455: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0
[  321.359255][ T5749] EXT4-fs (loop0): unmounting filesystem.
[  321.528667][ T6395] No such timeout policy "syz0"
[  321.617223][ T6399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.460'.
[  321.635413][ T6399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.460'.
[  321.724082][ T6401] loop1: detected capacity change from 0 to 64
[  322.401405][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  322.425146][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  322.477386][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  322.488807][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  322.510436][ T6056] device veth0_vlan entered promiscuous mode
[  322.527100][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  322.542675][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  322.566563][ T6056] device veth1_vlan entered promiscuous mode
[  322.574566][ T6407] debugfs: Directory 'netdev:nicvf0' with parent 'phy28' already present!
[  322.649040][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  322.659018][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  322.679351][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  322.713819][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  322.741435][ T6056] device veth0_macvtap entered promiscuous mode
[  322.759167][ T6056] device veth1_macvtap entered promiscuous mode
[  323.132146][ T6056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  323.180731][ T6056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  323.243826][ T6056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  323.297441][ T6056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  323.349249][ T6056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  323.422154][ T6056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  323.450276][ T6056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  323.478230][ T6056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  323.511697][ T6056] batman_adv: batadv0: Interface activated: batadv_slave_0
[  323.559838][ T6056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  323.683033][ T6056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  323.697903][ T6056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  323.710067][ T6056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  323.735847][ T6056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  323.759608][ T6418] loop3: detected capacity change from 0 to 512
[  323.769433][ T6056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  323.828778][ T6056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  323.852279][ T6418] EXT4-fs error (device loop3): __ext4_fill_super:5399: inode #2: comm syz.3.466: casefold flag without casefold feature
[  323.866309][ T6056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  323.877974][ T6056] batman_adv: batadv0: Interface activated: batadv_slave_1
[  323.886326][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  323.912606][ T6418] EXT4-fs (loop3): get root inode failed
[  323.918298][ T6418] EXT4-fs (loop3): mount failed
[  323.932836][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  323.984694][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  324.003178][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  324.025323][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  324.061230][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  324.083957][ T6056] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  324.097417][ T6056] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  324.117206][ T6056] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  324.146340][ T6056] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  324.168079][ T6420] dccp_close: ABORT with 68 bytes unread
[  324.262569][ T3648] Bluetooth: hci2: command 0x0406 tx timeout
[  324.328262][ T3698] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  324.348574][ T3698] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  324.360984][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  324.506143][ T4487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  324.557329][ T4487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  324.938129][ T3919] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  325.851285][ T6442] loop4: detected capacity change from 0 to 256
[  327.430661][ T6457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.473'.
[  327.445882][ T6457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.473'.
[  328.049456][   T26] audit: type=1800 audit(1726365612.662:108): pid=6458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.476" name="/" dev="fuse" ino=1 res=0 errno=0
[  330.177476][ T6479] SET target dimension over the limit!
[  330.193096][ T6479] netlink: 40 bytes leftover after parsing attributes in process `syz.2.482'.
[  331.967314][ T6496] loop4: detected capacity change from 0 to 16
[  334.331716][ T6496] erofs: (device loop4): mounted with root inode @ nid 36.
[  334.356449][ T6491] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  334.369961][ T6492] loop2: detected capacity change from 0 to 1024
[  334.376891][ T6491] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851]
[  334.390596][ T6491] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117]
[  334.457886][ T6492] hfsplus: failed to load catalog file
[  334.662125][ T5740] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  338.763211][ T6535] ptrace attach of "./syz-executor exec"[6536] was attempted by "./syz-executor exec"[6535]
[  340.021535][ T6545] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  347.453976][ T3641] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  348.012790][ T3651] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  348.077926][   T26] audit: type=1326 audit(1726365632.692:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6576 comm="syz.2.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7497def9 code=0x7ffc0000
[  348.139998][   T26] audit: type=1326 audit(1726365632.692:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6576 comm="syz.2.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7497def9 code=0x7ffc0000
[  348.169566][ T6577] loop2: detected capacity change from 0 to 128
[  348.476417][ T6584] syz.1.509 (6584): drop_caches: 2
[  348.664843][   T26] audit: type=1326 audit(1726365632.742:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6576 comm="syz.2.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f3f7497def9 code=0x7ffc0000
[  349.627683][ T6565] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  349.791315][ T6589] loop2: detected capacity change from 0 to 1024
[  349.845996][   T26] audit: type=1326 audit(1726365632.752:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6576 comm="syz.2.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7497def9 code=0x7ffc0000
[  349.874637][ T6589] EXT4-fs: Ignoring removed orlov option
[  349.942892][ T3641] Bluetooth: hci1: command 0x0406 tx timeout
[  349.982145][   T26] audit: type=1326 audit(1726365632.752:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6576 comm="syz.2.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7497def9 code=0x7ffc0000
[  350.004674][   T26] audit: type=1326 audit(1726365632.752:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6576 comm="syz.2.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f3f7497def9 code=0x7ffc0000
[  350.027043][   T26] audit: type=1326 audit(1726365632.752:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6576 comm="syz.2.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3f7497df33 code=0x7ffc0000
[  350.050259][   T26] audit: type=1326 audit(1726365632.782:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6576 comm="syz.2.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3f7497c9df code=0x7ffc0000
[  350.082663][ T6589] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  350.252110][   T26] audit: type=1326 audit(1726365632.782:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6576 comm="syz.2.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f3f7497df87 code=0x7ffc0000
[  350.468598][   T26] audit: type=1326 audit(1726365632.782:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6576 comm="syz.2.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3f7497c890 code=0x7ffc0000
[  350.795179][ T3768] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  350.938476][ T5462] EXT4-fs (loop2): unmounting filesystem.
[  351.074489][ T3768] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.199304][ T3768] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  352.003891][ T6603] netlink: 'syz.2.514': attribute type 11 has an invalid length.
[  352.184739][ T3768] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  353.001368][ T6619] loop2: detected capacity change from 0 to 256
[  353.052129][ T3651] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  353.063692][ T6619] exfat: Deprecated parameter 'utf8'
[  353.063705][ T3651] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  353.069020][ T6619] exfat: Bad value for 'errors'
[  353.104107][ T3651] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  353.315079][ T3651] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  353.325386][ T3651] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  353.333061][ T3651] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  355.662074][ T3768] tipc: Disabling bearer <udp:syz2>
[  355.670017][ T3768] tipc: Left network mode
[  355.982015][ T6643] loop4: detected capacity change from 0 to 512
[  357.083588][ T3641] Bluetooth: hci2: command tx timeout
[  357.220067][ T6643] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.522: bg 0: block 248: padding at end of block bitmap is not set
[  357.249209][ T6643] __quota_error: 29 callbacks suppressed
[  357.249228][ T6643] Quota error (device loop4): write_blk: dquota write failed
[  357.262548][ T6643] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  357.272650][ T6643] EXT4-fs error (device loop4): ext4_acquire_dquot:6800: comm syz.4.522: Failed to acquire dquot type 1
[  357.287384][ T6643] EXT4-fs (loop4): 1 truncate cleaned up
[  357.293193][ T6643] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  357.302297][ T6643] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038 (0x7fffffff)
[  357.307816][ T6621] chnl_net:caif_netlink_parms(): no params data found
[  357.728389][ T6056] EXT4-fs (loop4): unmounting filesystem.
[  358.137371][ T6655] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  359.145676][ T3651] Bluetooth: hci2: command tx timeout
[  361.232189][ T3641] Bluetooth: hci2: command tx timeout
[  363.047902][ T6621] bridge0: port 1(bridge_slave_0) entered blocking state
[  363.065716][ T6621] bridge0: port 1(bridge_slave_0) entered disabled state
[  363.086220][ T6621] device bridge_slave_0 entered promiscuous mode
[  363.150274][ T6621] bridge0: port 2(bridge_slave_1) entered blocking state
[  363.157762][ T6621] bridge0: port 2(bridge_slave_1) entered disabled state
[  363.174487][ T6621] device bridge_slave_1 entered promiscuous mode
[  363.304508][ T3641] Bluetooth: hci2: command tx timeout
[  363.428006][ T6621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  363.534845][ T6621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  363.687630][ T6719] loop1: detected capacity change from 0 to 128
[  363.724149][ T6621] team0: Port device team_slave_0 added
[  363.749999][ T6719] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  363.824370][ T6621] team0: Port device team_slave_1 added
[  364.050512][ T6722] netlink: 148 bytes leftover after parsing attributes in process `syz.1.535'.
[  364.839867][ T6725] loop1: detected capacity change from 0 to 256
[  364.947625][ T6621] batman_adv: batadv0: Adding interface: batadv_slave_0
[  364.958115][ T6621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  365.014811][ T6621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  365.180903][ T6621] batman_adv: batadv0: Adding interface: batadv_slave_1
[  365.208358][ T6621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  366.058190][ T6621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  366.278326][ T3768] device hsr_slave_0 left promiscuous mode
[  366.297557][ T3768] device hsr_slave_1 left promiscuous mode
[  366.314908][ T3768] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  366.329919][ T3768] batman_adv: batadv0: Removing interface: batadv_slave_0
[  366.354702][ T3768] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  366.362589][ T3768] batman_adv: batadv0: Removing interface: batadv_slave_1
[  366.370438][ T3768] device bridge_slave_1 left promiscuous mode
[  366.393844][ T3768] bridge0: port 2(bridge_slave_1) entered disabled state
[  366.439400][ T3768] device bridge_slave_0 left promiscuous mode
[  366.470813][ T3768] bridge0: port 1(bridge_slave_0) entered disabled state
[  366.569350][ T3768] device veth1_macvtap left promiscuous mode
[  366.579725][ T3768] device veth0_macvtap left promiscuous mode
[  366.586435][ T3768] device veth1_vlan left promiscuous mode
[  366.592664][ T3768] device veth0_vlan left promiscuous mode
[  368.027300][ T3651] Bluetooth: hci5: command 0x1003 tx timeout
[  368.027629][ T3641] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  368.069675][ T3768] team0 (unregistering): Port device team_slave_1 removed
[  368.191156][ T3768] team0 (unregistering): Port device team_slave_0 removed
[  368.240088][ T3768] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  368.287351][ T3768] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  368.769391][ T3768] bond0 (unregistering): Released all slaves
[  368.898584][ T6621] device hsr_slave_0 entered promiscuous mode
[  368.905934][ T6621] device hsr_slave_1 entered promiscuous mode
[  368.914589][ T6621] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  368.922348][ T6621] Cannot create hsr debugfs directory
[  369.748050][ T6774] loop2: detected capacity change from 0 to 164
[  370.006805][ T6621] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  370.203976][ T6621] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  370.416630][ T6621] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  370.578789][ T6621] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  371.877126][ T6621] 8021q: adding VLAN 0 to HW filter on device bond0
[  371.910636][ T3919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  371.923330][ T3919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  371.941457][ T6774] netlink: 'syz.2.540': attribute type 4 has an invalid length.
[  372.743795][ T6621] 8021q: adding VLAN 0 to HW filter on device team0
[  372.774001][ T3919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  372.803132][ T3919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  372.930138][ T3919] bridge0: port 1(bridge_slave_0) entered blocking state
[  372.937375][ T3919] bridge0: port 1(bridge_slave_0) entered forwarding state
[  373.714829][ T3919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  373.742453][ T3919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  373.806510][ T3919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  375.298085][ T3919] bridge0: port 2(bridge_slave_1) entered blocking state
[  375.305317][ T3919] bridge0: port 2(bridge_slave_1) entered forwarding state
[  375.345617][ T3919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  375.357746][ T3919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  375.367281][ T3919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  375.378193][ T3919] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  375.418824][ T3919] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  375.504975][ T3919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  375.558783][ T3919] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  375.631439][ T3919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  376.384886][ T3919] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  376.450962][ T6621] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  376.487228][ T6621] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  376.534205][ T6836] netem: change failed
[  376.539270][ T3919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  376.575963][ T3919] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  377.045770][ T3641] Bluetooth: hci1: unexpected event for opcode 0x2062
[  377.122702][ T6851] cgroup: release_agent respecified
[  377.373600][ T6621] 8021q: adding VLAN 0 to HW filter on device batadv0
[  377.391234][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  377.415194][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  377.489147][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  377.504830][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  377.586816][ T6621] device veth0_vlan entered promiscuous mode
[  377.603570][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  377.619844][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  377.646987][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  377.672654][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  377.715820][ T6621] device veth1_vlan entered promiscuous mode
[  377.817395][ T6862] loop0: detected capacity change from 0 to 2048
[  377.824145][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  377.834664][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  377.877504][ T6621] device veth0_macvtap entered promiscuous mode
[  377.935878][ T6621] device veth1_macvtap entered promiscuous mode
[  378.556841][ T1261] ieee802154 phy0 wpan0: encryption failed: -22
[  378.574863][ T1261] ieee802154 phy1 wpan1: encryption failed: -22
[  379.099587][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  379.130626][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  379.227437][ T6621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  379.287353][ T6621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  379.321336][ T6621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  379.358087][ T6621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  379.378583][ T6621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  379.542063][ T6621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  379.807739][ T6621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  379.900003][ T6621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  379.997516][ T6621] batman_adv: batadv0: Interface activated: batadv_slave_0
[  380.409254][ T6879] netlink: 24 bytes leftover after parsing attributes in process `syz.2.560'.
[  380.457878][ T3919] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  380.469833][ T3919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  380.508612][ T6621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  380.524149][ T6621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  380.535169][ T6621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  380.546457][ T6621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  380.557713][ T6621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  380.568999][ T6621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  380.580296][ T6621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  380.601566][ T6621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  380.667376][ T6621] batman_adv: batadv0: Interface activated: batadv_slave_1
[  380.684865][ T3919] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  380.723028][ T3919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  380.788920][ T6621] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  380.807557][ T6621] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  380.831160][ T6621] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  380.855060][ T6621] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  381.072199][ T3641] Bluetooth: hci4: command 0x0406 tx timeout
[  381.078631][ T3641] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  381.092438][ T3641] Bluetooth: hci1: Injecting HCI hardware error event
[  381.102301][ T3641] Bluetooth: hci1: hardware error 0x00
[  381.665262][ T3720] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  382.219133][ T3720] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  382.303495][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  382.319156][ T4483] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  382.349776][ T4483] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  382.493895][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  383.142362][ T3641] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  383.392146][ T6928] xt_connbytes: Forcing CT accounting to be enabled
[  384.048997][ T6928] xt_time: invalid argument - start or stop time greater than 23:59:59
[  384.144670][ T6936] loop0: detected capacity change from 0 to 2048
[  384.187087][ T6942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.500'.
[  384.221967][ T6936] UDF-fs: warning (device loop0): udf_fill_super: No fileset found
[  384.313609][ T6945] loop1: detected capacity change from 0 to 2048
[  384.343186][ T6945] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  384.957484][ T6926] loop4: detected capacity change from 0 to 8
[  385.017877][ T6920] SQUASHFS error: Failed to read block 0x4e8: -5
[  385.451226][   T26] audit: type=1800 audit(1726365670.062:148): pid=6920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.568" name="file1" dev="loop4" ino=5 res=0 errno=0
[  386.424958][ T6958] vivid-000: kernel_thread() failed
[  387.589829][ T6977] loop2: detected capacity change from 0 to 512
[  387.603574][ T6977] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  387.722157][ T6977] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  387.751345][ T6985] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  390.703264][ T6977] EXT4-fs warning (device loop2): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop2.
[  391.134076][ T7001] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  391.729531][ T3641] Bluetooth: hci0: command 0x0406 tx timeout
[  394.009398][ T7012] loop1: detected capacity change from 0 to 2048
[  395.144231][ T7012]  loop1: p1 p2 p3
[  395.902235][ T6993] udevd[6993]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  395.939889][ T6990] udevd[6990]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  398.155060][   T26] audit: type=1800 audit(1726365682.582:149): pid=7048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.593" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0
[  400.550628][ T7078] serio: Serial port ptm0
[  402.396182][ T7095] xt_bpf: check failed: parse error
[  402.610627][ T7099] loop3: detected capacity change from 0 to 1024
[  402.688020][ T7099] EXT4-fs: Ignoring removed orlov option
[  402.749541][ T7099] EXT4-fs: Ignoring removed nomblk_io_submit option
[  402.786004][ T7099] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  402.921793][ T7101] loop4: detected capacity change from 0 to 2048
[  403.098344][ T7106] loop0: detected capacity change from 0 to 512
[  403.203330][ T7101] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  403.533193][ T7101] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  403.585899][ T7106] EXT4-fs error (device loop0): __ext4_fill_super:5399: inode #2: comm syz.0.608: casefold flag without casefold feature
[  403.649754][ T7106] EXT4-fs (loop0): get root inode failed
[  403.656736][ T7106] EXT4-fs (loop0): mount failed
[  403.712935][ T7101] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  403.784883][ T3648] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  403.796554][ T3648] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  403.806989][ T3648] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  403.816897][ T3648] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  403.824763][ T3648] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  403.832442][ T3648] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  404.314270][ T7120] loop1: detected capacity change from 0 to 8192
[  405.070545][ T7122] loop0: detected capacity change from 0 to 1024
[  405.862095][ T3648] Bluetooth: hci5: command tx timeout
[  406.282534][ T7134] loop4: detected capacity change from 0 to 256
[  407.942743][ T3648] Bluetooth: hci5: command tx timeout
[  408.679402][ T4487] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  408.938296][ T4487] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  408.981498][ T7166] netlink: 44 bytes leftover after parsing attributes in process `syz.1.618'.
[  409.023823][ T7168] loop0: detected capacity change from 0 to 1024
[  409.032996][ T7168] EXT4-fs: Ignoring removed orlov option
[  409.070968][ T7168] EXT4-fs (loop0): Test dummy encryption mode enabled
[  409.091455][ T4487] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  409.138757][ T7168] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  409.153822][ T7114] chnl_net:caif_netlink_parms(): no params data found
[  409.283410][ T4487] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  409.364644][ T6621] EXT4-fs (loop3): unmounting filesystem.
[  409.445889][ T7114] bridge0: port 1(bridge_slave_0) entered blocking state
[  409.457424][ T7114] bridge0: port 1(bridge_slave_0) entered disabled state
[  409.478685][ T7114] device bridge_slave_0 entered promiscuous mode
[  409.489382][ T7114] bridge0: port 2(bridge_slave_1) entered blocking state
[  409.496748][ T7114] bridge0: port 2(bridge_slave_1) entered disabled state
[  409.505169][ T7114] device bridge_slave_1 entered promiscuous mode
[  409.584060][ T7168] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  409.656480][ T7114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  409.791706][ T7182] netlink: 6 bytes leftover after parsing attributes in process `syz.3.621'.
[  409.833181][ T7114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  410.864829][ T3648] Bluetooth: hci5: command tx timeout
[  411.186974][ T7191] fscrypt (loop0): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  411.204608][ T7191] overlayfs: upper fs does not support tmpfile.
[  411.215459][ T7191] fscrypt (loop0): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  411.302010][ T3651] Bluetooth: hci3: command 0x0406 tx timeout
[  411.338712][ T5749] EXT4-fs (loop0): unmounting filesystem.
[  411.532624][ T7185] netlink: 6 bytes leftover after parsing attributes in process `syz.3.621'.
[  411.626775][ T7185] netlink: 6 bytes leftover after parsing attributes in process `syz.3.621'.
[  411.690437][ T7185] netlink: 6 bytes leftover after parsing attributes in process `syz.3.621'.
[  411.725393][ T7205] loop0: detected capacity change from 0 to 4096
[  411.740612][ T7114] team0: Port device team_slave_0 added
[  411.748839][ T7185] netlink: 6 bytes leftover after parsing attributes in process `syz.3.621'.
[  411.790723][ T7205] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  411.808414][ T7114] team0: Port device team_slave_1 added
[  412.554969][ T5749] EXT4-fs (loop0): unmounting filesystem.
[  412.602710][ T7114] batman_adv: batadv0: Adding interface: batadv_slave_0
[  412.669719][ T7114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  412.806546][ T7222] block device autoloading is deprecated and will be removed.
[  412.864229][ T7114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  412.928111][ T7114] batman_adv: batadv0: Adding interface: batadv_slave_1
[  412.935322][ T7114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  412.976491][ T7114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  413.303702][ T3641] Bluetooth: hci5: command tx timeout
[  413.725773][   T26] audit: type=1326 audit(1726365698.342:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7214 comm="syz.1.627" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2f89b7def9 code=0x0
[  413.777349][ T7114] device hsr_slave_0 entered promiscuous mode
[  413.852392][ T7114] device hsr_slave_1 entered promiscuous mode
[  413.895860][ T7114] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  413.914118][ T7114] Cannot create hsr debugfs directory
[  414.889492][ T7250] loop3: detected capacity change from 0 to 1024
[  417.693871][ T7269] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  417.932191][ T7270] netlink: 12 bytes leftover after parsing attributes in process `syz.0.635'.
[  418.895808][ T7286] loop4: detected capacity change from 0 to 2048
[  418.929021][ T7286] EXT4-fs (loop4): #clusters per group too big: 20480
[  419.126703][ T7286] bad cache= option: nonw
[  419.126703][ T7286] 
[  419.167576][ T7286] CIFS: VFS: bad cache= option: nonw
[  419.191727][ T7296] loop4: detected capacity change from 0 to 128
[  419.225287][ T7295] ALSA: mixer_oss: invalid OSS volume '00000000000000000000'
[  419.238883][ T7296] FAT-fs (loop4): Unrecognized mount option "cache=nonw" or missing value
[  419.269365][ T7295] ALSA: mixer_oss: invalid OSS volume 'OGAINWÁ”1õ›'
[  423.227732][ T4487] device hsr_slave_0 left promiscuous mode
[  423.241300][ T4487] device hsr_slave_1 left promiscuous mode
[  423.253052][ T4487] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  423.260495][ T4487] batman_adv: batadv0: Removing interface: batadv_slave_0
[  423.334231][ T4487] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  423.348434][ T4487] batman_adv: batadv0: Removing interface: batadv_slave_1
[  423.386552][ T4487] device bridge_slave_1 left promiscuous mode
[  423.393193][ T4487] bridge0: port 2(bridge_slave_1) entered disabled state
[  423.403384][ T4487] device bridge_slave_0 left promiscuous mode
[  423.417682][ T4487] bridge0: port 1(bridge_slave_0) entered disabled state
[  423.464437][ T4487] device veth1_macvtap left promiscuous mode
[  423.470480][ T4487] device veth0_macvtap left promiscuous mode
[  423.476845][ T4487] device veth1_vlan left promiscuous mode
[  423.482842][ T4487] device veth0_vlan left promiscuous mode
[  424.767327][ T4487] team0 (unregistering): Port device team_slave_1 removed
[  424.818655][ T4487] team0 (unregistering): Port device team_slave_0 removed
[  424.864129][ T4487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  424.917553][ T4487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  425.455430][ T4487] bond0 (unregistering): Released all slaves
[  425.804634][ T7114] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  425.840697][ T7342] kvm: pic: level sensitive irq not supported
[  425.840930][ T7342] kvm: pic: level sensitive irq not supported
[  425.853117][ T7114] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  425.929462][ T7302] infiniband syz1: set active
[  425.950552][ T7114] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  425.988977][ T7114] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  425.997608][ T7302] infiniband syz1: added ipvlan1
[  426.021054][ T7302] rdma_rxe: unable to create cq
[  426.051161][ T7302] infiniband syz1: Couldn't create ib_mad CQ
[  426.076653][ T7302] infiniband syz1: Couldn't open port 1
[  426.251116][ T7302] RDS/IB: syz1: added
[  426.261090][ T7302] smc: adding ib device syz1 with port count 1
[  426.402053][ T7302] smc:    ib device syz1 port 1 has pnetid 
[  426.417303][ T7114] 8021q: adding VLAN 0 to HW filter on device bond0
[  428.061948][ T7114] 8021q: adding VLAN 0 to HW filter on device team0
[  428.119933][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  428.146482][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  428.195049][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  428.233135][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  428.259801][ T4477] bridge0: port 1(bridge_slave_0) entered blocking state
[  428.267094][ T4477] bridge0: port 1(bridge_slave_0) entered forwarding state
[  428.307012][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  428.333291][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  428.357465][ T4477] bridge0: port 2(bridge_slave_1) entered blocking state
[  428.364649][ T4477] bridge0: port 2(bridge_slave_1) entered forwarding state
[  428.377741][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  428.403267][ T7374] netlink: 4 bytes leftover after parsing attributes in process `syz.4.659'.
[  428.472620][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  428.487364][ T5898] kernel write not supported for file /uinput (pid: 5898 comm: kworker/0:11)
[  428.488829][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  428.573676][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  428.597363][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  428.619785][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  428.628463][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  428.640160][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  428.791620][ T7383] loop3: detected capacity change from 0 to 40427
[  428.812831][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  428.822189][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  428.832943][ T7383] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  428.836340][ T7114] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  428.840686][ T7383] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  428.880888][ T7114] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  428.890239][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  428.912539][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  428.928772][ T7383] F2FS-fs (loop3): Found nat_bits in checkpoint
[  428.942688][ T7386] loop1: detected capacity change from 0 to 1024
[  429.009034][ T7383] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  429.016265][ T7383] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  429.153237][ T7393] cannot load conntrack support for proto=3
[  430.512868][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  430.530890][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  430.588441][ T7114] 8021q: adding VLAN 0 to HW filter on device batadv0
[  430.723738][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  430.734694][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  430.868346][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  432.222800][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  432.270355][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  432.284618][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  432.336207][ T7114] device veth0_vlan entered promiscuous mode
[  432.462554][ T7114] device veth1_vlan entered promiscuous mode
[  433.396273][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  433.422946][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  433.467228][ T7114] device veth0_macvtap entered promiscuous mode
[  433.532601][ T7114] device veth1_macvtap entered promiscuous mode
[  433.545684][ T3651] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  433.558003][ T3651] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  433.566738][ T3651] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  433.576562][ T3651] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  433.595882][ T3651] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  433.605183][ T3651] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  433.631842][ T7114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  433.646153][ T7114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  433.656120][ T7114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  433.667348][ T7114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  433.677357][ T7114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  433.687882][ T7114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  433.700691][ T7114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  433.826015][ T7114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  433.838930][ T7114] batman_adv: batadv0: Interface activated: batadv_slave_0
[  433.973096][ T7447] loop1: detected capacity change from 0 to 64
[  434.022631][ T7447] hfs: bad allocation block size 4095
[  434.028221][ T7447] hfs: can't find a HFS filesystem on dev loop1
[  434.112259][ T7114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  434.643073][ T7114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  434.665268][ T7114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  434.675975][ T7114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  434.688011][ T7114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  434.727304][ T7114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  434.740778][ T7114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  434.752002][ T7114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  434.779807][ T7114] batman_adv: batadv0: Interface activated: batadv_slave_1
[  434.814932][ T7456] loop4: detected capacity change from 0 to 1024
[  434.821987][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  434.831185][ T6993] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  434.858586][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  434.880151][ T7456] EXT4-fs: Ignoring removed nomblk_io_submit option
[  434.889544][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  434.920523][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  434.937045][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  434.948374][ T7456] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  435.150975][ T7114] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  435.170910][ T7114] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  435.202365][ T7114] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  435.211136][ T7114] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  435.244303][ T6056] EXT4-fs (loop4): unmounting filesystem.
[  435.416811][ T4485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  435.441335][ T4485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  435.506355][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  435.611561][ T7476] serio: Serial port ptm0
[  436.202395][ T3641] Bluetooth: hci1: command tx timeout
[  436.321473][ T4485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  436.369787][ T4485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  436.458180][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  436.498646][ T7486] loop1: detected capacity change from 0 to 256
[  436.506301][ T7486] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  436.534730][ T7486] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  436.558217][ T7481] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  436.673326][ T7481] netlink: 12 bytes leftover after parsing attributes in process `syz.4.682'.
[  438.308406][ T3651] Bluetooth: hci1: command tx timeout
[  439.363325][ T7509] loop2: detected capacity change from 0 to 512
[  439.502599][ T7509] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  439.547652][ T7509] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038 (0x7fffffff)
[  439.550935][ T7430] chnl_net:caif_netlink_parms(): no params data found
[  439.809651][ T7528] loop4: detected capacity change from 0 to 1024
[  439.822910][ T7528] EXT4-fs: Ignoring removed orlov option
[  439.828692][ T7528] EXT4-fs: Ignoring removed orlov option
[  439.947452][ T1261] ieee802154 phy0 wpan0: encryption failed: -22
[  439.955256][ T1261] ieee802154 phy1 wpan1: encryption failed: -22
[  440.118376][ T7430] bridge0: port 1(bridge_slave_0) entered blocking state
[  440.206593][ T7430] bridge0: port 1(bridge_slave_0) entered disabled state
[  440.326116][ T7430] device bridge_slave_0 entered promiscuous mode
[  440.416812][ T7430] bridge0: port 2(bridge_slave_1) entered blocking state
[  440.456754][ T7430] bridge0: port 2(bridge_slave_1) entered disabled state
[  440.499998][ T7430] device bridge_slave_1 entered promiscuous mode
[  440.531935][   T14] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  440.560393][ T7528] EXT4-fs (loop4): corrupt root inode, run e2fsck
[  440.574941][ T7528] EXT4-fs (loop4): mount failed
[  440.865145][ T7430] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  440.872017][   T14] usb 3-1: Using ep0 maxpacket: 16
[  440.907155][ T7430] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  440.992161][   T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  441.017051][   T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  441.027832][ T7430] team0: Port device team_slave_0 added
[  441.040016][   T14] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  441.042902][ T7430] team0: Port device team_slave_1 added
[  441.074215][   T14] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  441.086771][   T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  441.096977][   T14] usb 3-1: config 0 descriptor??
[  441.142065][ T3651] Bluetooth: hci1: command tx timeout
[  441.401755][ T3879] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  441.467839][ T7430] batman_adv: batadv0: Adding interface: batadv_slave_0
[  441.483058][ T7430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  441.515897][ T7430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  441.568631][ T3879] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  441.582671][   T14] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  441.589935][   T14] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  441.601168][   T14] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  441.608739][   T14] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  441.616480][   T14] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  441.624275][   T14] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  441.631524][   T14] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  441.639241][   T14] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  441.646796][   T14] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  441.654367][   T14] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  441.665387][   T14] microsoft 0003:045E:07DA.000A: No inputs registered, leaving
[  441.674097][   T14] microsoft 0003:045E:07DA.000A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[  441.687113][   T14] microsoft 0003:045E:07DA.000A: no inputs found
[  441.695927][   T14] microsoft 0003:045E:07DA.000A: could not initialize ff, continuing anyway
[  441.713555][ T7430] batman_adv: batadv0: Adding interface: batadv_slave_1
[  441.729283][ T7430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  441.758465][ T7430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  441.827864][ T5898] usb 3-1: USB disconnect, device number 3
[  441.861591][ T3879] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  441.882393][ T7430] device hsr_slave_0 entered promiscuous mode
[  441.889689][ T7430] device hsr_slave_1 entered promiscuous mode
[  441.896552][ T7430] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  441.904430][ T7430] Cannot create hsr debugfs directory
[  441.947680][ T3879] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  442.401713][ T7114] EXT4-fs (loop2): unmounting filesystem.
[  443.111764][ T7562] Cannot find add_set index 0 as target
[  446.258487][ T3651] Bluetooth: hci1: command tx timeout
[  446.895154][ T7575] loop4: detected capacity change from 0 to 2048
[  447.689404][ T7581] loop2: detected capacity change from 0 to 512
[  449.410138][ T7556] netlink: 12 bytes leftover after parsing attributes in process `syz.3.695'.
[  449.622644][ T3091]  loop4: p1 < > p4
[  449.627687][ T3091] loop4: p4 size 8388608 extends beyond EOD, truncated
[  449.654950][ T7581] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.697: attempt to clear invalid blocks 2 len 1
[  449.671398][ T7581] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters
[  449.685978][ T7581] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.697: invalid indirect mapped block 1819239214 (level 0)
[  449.708719][ T7581] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.697: invalid indirect mapped block 1819239214 (level 1)
[  449.723899][ T7581] EXT4-fs (loop2): 1 truncate cleaned up
[  449.729593][ T7581] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  449.774237][ T7579] EXT4-fs warning (device loop2): dx_probe:833: inode #2: comm syz.2.697: Unrecognised inode hash code 20
[  449.788405][ T7579] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.697: Corrupt directory, running e2fsck is recommended
[  449.804496][ T7579] EXT4-fs (loop2): shut down requested (2)
[  450.066434][ T7114] EXT4-fs (loop2): unmounting filesystem.
[  450.856224][ T7607] loop3: detected capacity change from 0 to 128
[  450.871726][ T7607] FAT-fs (loop3): Unrecognized mount option "shortname=winnortna(óegalêÕèT)me=winnt" or missing value
[  450.882328][ T7566] udevd[7566]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  450.925459][ T7606] loop1: detected capacity change from 0 to 512
[  450.939919][ T7606] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  450.995496][ T7606] EXT4-fs (loop1): 1 orphan inode deleted
[  451.058812][ T7606] EXT4-fs (loop1): 1 truncate cleaned up
[  451.079045][ T7430] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  451.122044][ T7611] udevd[7611]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  451.132750][ T7606] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  451.522485][ T7430] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  451.851439][ T5130] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  451.894988][ T5130] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  451.914431][ T5130] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  451.942479][ T5130] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  451.970359][ T5130] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  452.010901][ T5130] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  452.037521][ T7627] loop4: detected capacity change from 0 to 1024
[  452.049025][ T5130] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  452.075200][ T5130] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  452.101746][ T7627] hfsplus: invalid btree extent records (0 size)
[  452.103174][ T5130] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  452.138214][ T5130] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  452.141159][ T7627] hfsplus: failed to load attributes file
[  452.158477][ T5130] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  452.173108][ T5130] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  452.180679][ T5130] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  452.188654][ T5130] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  452.196990][ T5130] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  452.204814][ T5130] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  452.212911][ T5130] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  452.228544][ T5130] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  452.244698][ T5130] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  452.252608][ T5130] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  452.259837][ T7627] loop4: detected capacity change from 0 to 128
[  452.260005][ T5130] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  452.274852][ T5130] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  452.282884][ T5130] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  452.297604][ T7627] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  452.300584][ T5130] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  452.325227][ T5130] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  452.334043][ T5130] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  452.341475][ T5130] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  452.349433][ T5130] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  452.357199][ T5130] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  452.365191][ T5130] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  452.372868][ T5130] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  452.380360][ T5130] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  452.387817][ T5130] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  452.395367][ T5130] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  452.402831][ T5130] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  452.410326][ T5130] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  452.417887][ T5130] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  452.425443][ T5130] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  452.432922][ T5130] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  452.443384][ T5130] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  452.450810][ T5130] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  452.458832][ T5130] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  452.466344][ T5130] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  452.481223][ T7430] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  452.489829][ T5130] hid-generic 0000:0000:0000.000B: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  452.491057][ T5895] EXT4-fs (loop1): unmounting filesystem.
[  452.533272][ T7430] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  452.754338][ T7430] 8021q: adding VLAN 0 to HW filter on device bond0
[  452.765808][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  452.779366][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  452.807523][ T7430] 8021q: adding VLAN 0 to HW filter on device team0
[  452.820449][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  452.845788][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  452.867027][ T3906] bridge0: port 1(bridge_slave_0) entered blocking state
[  452.874248][ T3906] bridge0: port 1(bridge_slave_0) entered forwarding state
[  452.891671][ T3879] device hsr_slave_0 left promiscuous mode
[  452.898664][ T3879] device hsr_slave_1 left promiscuous mode
[  452.905896][ T3879] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  452.914301][ T3879] batman_adv: batadv0: Removing interface: batadv_slave_0
[  452.922111][ T3879] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  452.929529][ T3879] batman_adv: batadv0: Removing interface: batadv_slave_1
[  452.937529][ T3879] device bridge_slave_1 left promiscuous mode
[  452.944098][ T3879] bridge0: port 2(bridge_slave_1) entered disabled state
[  452.956296][ T3879] device bridge_slave_0 left promiscuous mode
[  452.962699][ T3879] bridge0: port 1(bridge_slave_0) entered disabled state
[  452.986828][ T3879] device veth1_macvtap left promiscuous mode
[  452.993037][ T3879] device veth0_macvtap left promiscuous mode
[  452.999247][ T3879] device veth1_vlan left promiscuous mode
[  453.005302][ T3879] device veth0_vlan left promiscuous mode
[  453.025112][ T3879] infiniband syz1: set down
[  453.237313][ T3720] smc: removing ib device syz1
[  453.590679][ T3879] team0 (unregistering): Port device team_slave_1 removed
[  453.640213][ T3879] team0 (unregistering): Port device team_slave_0 removed
[  453.688551][ T3879] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  453.740748][ T3879] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  454.338272][ T3879] bond0 (unregistering): Released all slaves
[  454.420782][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  454.428953][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  454.438241][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  454.447293][ T3906] bridge0: port 2(bridge_slave_1) entered blocking state
[  454.454471][ T3906] bridge0: port 2(bridge_slave_1) entered forwarding state
[  454.471989][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  454.481769][ T5128] ==================================================================
[  454.489873][ T5128] BUG: KASAN: use-after-free in __ethtool_get_link_ksettings+0x6a/0x180
[  454.498220][ T5128] Read of size 8 at addr ffff88807b336208 by task kworker/1:11/5128
[  454.506189][ T5128] 
[  454.508508][ T5128] CPU: 1 PID: 5128 Comm: kworker/1:11 Not tainted 6.1.110-syzkaller #0
[  454.516728][ T5128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  454.526769][ T5128] Workqueue: events smc_ib_port_event_work
[  454.532575][ T5128] Call Trace:
[  454.535837][ T5128]  <TASK>
[  454.538745][ T5128]  dump_stack_lvl+0x1e3/0x2cb
[  454.543429][ T5128]  ? nf_tcp_handle_invalid+0x642/0x642
[  454.548902][ T5128]  ? panic+0x764/0x764
[  454.552960][ T5128]  ? _printk+0xd1/0x111
[  454.557117][ T5128]  ? __virt_addr_valid+0x17f/0x530
[  454.562216][ T5128]  ? __virt_addr_valid+0x17f/0x530
[  454.567308][ T5128]  print_report+0x15f/0x4f0
[  454.571787][ T5128]  ? __virt_addr_valid+0x17f/0x530
[  454.576887][ T5128]  ? __virt_addr_valid+0x17f/0x530
[  454.581993][ T5128]  ? __virt_addr_valid+0x45b/0x530
[  454.587105][ T5128]  ? __phys_addr+0xb6/0x170
[  454.591592][ T5128]  ? __ethtool_get_link_ksettings+0x6a/0x180
[  454.597638][ T5128]  kasan_report+0x136/0x160
[  454.602122][ T5128]  ? __ethtool_get_link_ksettings+0x6a/0x180
[  454.608259][ T5128]  __ethtool_get_link_ksettings+0x6a/0x180
[  454.614050][ T5128]  ib_get_eth_speed+0x151/0x510
[  454.618885][ T5128]  ? _ib_modify_qp+0xe90/0xe90
[  454.623637][ T5128]  ? rxe_query_port+0x35/0x1a0
[  454.628420][ T5128]  rxe_query_port+0x5a/0x1a0
[  454.632992][ T5128]  ib_query_port+0x15f/0x7c0
[  454.637567][ T5128]  smc_ib_port_event_work+0x15d/0xa60
[  454.643010][ T5128]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  454.648887][ T5128]  ? process_one_work+0x7a9/0x11d0
[  454.654000][ T5128]  process_one_work+0x8a9/0x11d0
[  454.658940][ T5128]  ? worker_detach_from_pool+0x260/0x260
[  454.664580][ T5128]  ? _raw_spin_lock_irqsave+0x120/0x120
[  454.670105][ T5128]  ? kthread_data+0x4e/0xc0
[  454.674592][ T5128]  ? wq_worker_running+0x97/0x190
[  454.679601][ T5128]  worker_thread+0xa47/0x1200
[  454.684272][ T5128]  kthread+0x28d/0x320
[  454.688332][ T5128]  ? worker_clr_flags+0x190/0x190
[  454.693342][ T5128]  ? kthread_blkcg+0xd0/0xd0
[  454.697908][ T5128]  ret_from_fork+0x1f/0x30
[  454.702307][ T5128]  </TASK>
[  454.705323][ T5128] 
[  454.707620][ T5128] Allocated by task 5749:
[  454.711941][ T5128]  kasan_set_track+0x4b/0x70
[  454.716566][ T5128]  __kasan_kmalloc+0x97/0xb0
[  454.721140][ T5128]  __kmalloc_node+0xb3/0x230
[  454.725722][ T5128]  kvmalloc_node+0x6e/0x180
[  454.730210][ T5128]  alloc_netdev_mqs+0x85/0xeb0
[  454.735043][ T5128]  rtnl_create_link+0x2e9/0xa30
[  454.739875][ T5128]  rtnl_newlink+0x1403/0x2050
[  454.744568][ T5128]  rtnetlink_rcv_msg+0x818/0xff0
[  454.749492][ T5128]  netlink_rcv_skb+0x1cd/0x410
[  454.754250][ T5128]  netlink_unicast+0x7d8/0x970
[  454.758992][ T5128]  netlink_sendmsg+0xa26/0xd60
[  454.763734][ T5128]  __sys_sendto+0x480/0x600
[  454.768237][ T5128]  __x64_sys_sendto+0xda/0xf0
[  454.772904][ T5128]  do_syscall_64+0x3b/0xb0
[  454.777309][ T5128]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  454.783213][ T5128] 
[  454.785515][ T5128] Freed by task 3879:
[  454.789483][ T5128]  kasan_set_track+0x4b/0x70
[  454.794083][ T5128]  kasan_save_free_info+0x27/0x40
[  454.799096][ T5128]  ____kasan_slab_free+0xd6/0x120
[  454.804095][ T5128]  __kmem_cache_free+0x25c/0x3c0
[  454.809008][ T5128]  device_release+0x91/0x1c0
[  454.813572][ T5128]  kobject_put+0x224/0x460
[  454.817967][ T5128]  netdev_run_todo+0xe56/0xf40
[  454.822711][ T5128]  default_device_exit_batch+0x95b/0x9d0
[  454.828416][ T5128]  cleanup_net+0x763/0xb60
[  454.832824][ T5128]  process_one_work+0x8a9/0x11d0
[  454.837768][ T5128]  worker_thread+0xa47/0x1200
[  454.842422][ T5128]  kthread+0x28d/0x320
[  454.846470][ T5128]  ret_from_fork+0x1f/0x30
[  454.850869][ T5128] 
[  454.853197][ T5128] The buggy address belongs to the object at ffff88807b336000
[  454.853197][ T5128]  which belongs to the cache kmalloc-cg-4k of size 4096
[  454.867602][ T5128] The buggy address is located 520 bytes inside of
[  454.867602][ T5128]  4096-byte region [ffff88807b336000, ffff88807b337000)
[  454.880946][ T5128] 
[  454.883253][ T5128] The buggy address belongs to the physical page:
[  454.889736][ T5128] page:ffffea0001eccc00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7b330
[  454.899898][ T5128] head:ffffea0001eccc00 order:3 compound_mapcount:0 compound_pincount:0
[  454.908292][ T5128] memcg:ffff888055e8bb81
[  454.912524][ T5128] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  454.920503][ T5128] raw: 00fff00000010200 ffffea0000b4a800 dead000000000002 ffff888017c4c280
[  454.929069][ T5128] raw: 0000000000000000 0000000000040004 00000001ffffffff ffff888055e8bb81
[  454.937625][ T5128] page dumped because: kasan: bad access detected
[  454.944019][ T5128] page_owner tracks the page as allocated
[  454.949705][ T5128] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3644, tgid 3644 (syz-executor), ts 53543244275, free_ts 53534002980
[  454.971044][ T5128]  post_alloc_hook+0x18d/0x1b0
[  454.975797][ T5128]  get_page_from_freelist+0x322e/0x33b0
[  454.981318][ T5128]  __alloc_pages+0x28d/0x770
[  454.985891][ T5128]  alloc_slab_page+0x6a/0x150
[  454.990549][ T5128]  new_slab+0x84/0x2d0
[  454.994608][ T5128]  ___slab_alloc+0xc20/0x1270
[  454.999284][ T5128]  __kmem_cache_alloc_node+0x19f/0x260
[  455.004726][ T5128]  __kmalloc_node_track_caller+0xa0/0x220
[  455.010422][ T5128]  kmemdup+0x26/0x60
[  455.014297][ T5128]  __addrconf_sysctl_register+0xad/0x3e0
[  455.019906][ T5128]  addrconf_sysctl_register+0x128/0x180
[  455.025427][ T5128]  ipv6_add_dev+0xb8e/0x1180
[  455.029996][ T5128]  addrconf_notify+0x7a6/0xf60
[  455.034837][ T5128]  raw_notifier_call_chain+0xd0/0x170
[  455.040186][ T5128]  call_netdevice_notifiers+0x145/0x1b0
[  455.045704][ T5128]  register_netdevice+0x12f2/0x1720
[  455.050880][ T5128] page last free stack trace:
[  455.055588][ T5128]  free_unref_page_prepare+0xf63/0x1120
[  455.061126][ T5128]  free_unref_page+0x33/0x3e0
[  455.065786][ T5128]  __unfreeze_partials+0x1b7/0x210
[  455.070878][ T5128]  put_cpu_partial+0x17b/0x250
[  455.075704][ T5128]  qlist_free_all+0x76/0xe0
[  455.080200][ T5128]  kasan_quarantine_reduce+0x156/0x170
[  455.085640][ T5128]  __kasan_slab_alloc+0x1f/0x70
[  455.090467][ T5128]  slab_post_alloc_hook+0x52/0x3a0
[  455.095566][ T5128]  __kmem_cache_alloc_node+0x137/0x260
[  455.101031][ T5128]  kmalloc_trace+0x26/0xe0
[  455.105444][ T5128]  kset_create_and_add+0x57/0x160
[  455.110459][ T5128]  netdev_register_kobject+0x1a0/0x310
[  455.115914][ T5128]  register_netdevice+0x108a/0x1720
[  455.121101][ T5128]  __ip_tunnel_create+0x2b0/0x370
[  455.126104][ T5128]  ip_tunnel_init_net+0x21f/0x700
[  455.131107][ T5128]  ops_init+0x35d/0x610
[  455.135242][ T5128] 
[  455.137544][ T5128] Memory state around the buggy address:
[  455.143170][ T5128]  ffff88807b336100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  455.151313][ T5128]  ffff88807b336180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  455.159362][ T5128] >ffff88807b336200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  455.167405][ T5128]                       ^
[  455.171711][ T5128]  ffff88807b336280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  455.179766][ T5128]  ffff88807b336300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  455.187817][ T5128] ==================================================================
[  455.197691][ T5128] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  455.204908][ T5128] CPU: 1 PID: 5128 Comm: kworker/1:11 Not tainted 6.1.110-syzkaller #0
[  455.213155][ T5128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  455.223291][ T5128] Workqueue: events smc_ib_port_event_work
[  455.229098][ T5128] Call Trace:
[  455.232363][ T5128]  <TASK>
[  455.235300][ T5128]  dump_stack_lvl+0x1e3/0x2cb
[  455.239973][ T5128]  ? nf_tcp_handle_invalid+0x642/0x642
[  455.245420][ T5128]  ? panic+0x764/0x764
[  455.249490][ T5128]  ? vscnprintf+0x59/0x80
[  455.253806][ T5128]  panic+0x318/0x764
[  455.257683][ T5128]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  455.263832][ T5128]  ? check_panic_on_warn+0x1d/0xa0
[  455.268930][ T5128]  ? memcpy_page_flushcache+0xfc/0xfc
[  455.274375][ T5128]  ? _raw_spin_unlock_irqrestore+0x128/0x130
[  455.280353][ T5128]  ? _raw_spin_unlock+0x40/0x40
[  455.285638][ T5128]  check_panic_on_warn+0x7e/0xa0
[  455.290559][ T5128]  ? __ethtool_get_link_ksettings+0x6a/0x180
[  455.296525][ T5128]  end_report+0x66/0x110
[  455.300747][ T5128]  kasan_report+0x143/0x160
[  455.305281][ T5128]  ? __ethtool_get_link_ksettings+0x6a/0x180
[  455.311281][ T5128]  __ethtool_get_link_ksettings+0x6a/0x180
[  455.317076][ T5128]  ib_get_eth_speed+0x151/0x510
[  455.321916][ T5128]  ? _ib_modify_qp+0xe90/0xe90
[  455.326676][ T5128]  ? rxe_query_port+0x35/0x1a0
[  455.331541][ T5128]  rxe_query_port+0x5a/0x1a0
[  455.336138][ T5128]  ib_query_port+0x15f/0x7c0
[  455.340718][ T5128]  smc_ib_port_event_work+0x15d/0xa60
[  455.346079][ T5128]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  455.351964][ T5128]  ? process_one_work+0x7a9/0x11d0
[  455.357060][ T5128]  process_one_work+0x8a9/0x11d0
[  455.362089][ T5128]  ? worker_detach_from_pool+0x260/0x260
[  455.367987][ T5128]  ? _raw_spin_lock_irqsave+0x120/0x120
[  455.373528][ T5128]  ? kthread_data+0x4e/0xc0
[  455.378033][ T5128]  ? wq_worker_running+0x97/0x190
[  455.383131][ T5128]  worker_thread+0xa47/0x1200
[  455.387810][ T5128]  kthread+0x28d/0x320
[  455.391884][ T5128]  ? worker_clr_flags+0x190/0x190
[  455.396928][ T5128]  ? kthread_blkcg+0xd0/0xd0
[  455.401601][ T5128]  ret_from_fork+0x1f/0x30
[  455.406014][ T5128]  </TASK>
[  455.409140][ T5128] Kernel Offset: disabled
[  455.413466][ T5128] Rebooting in 86400 seconds..