last executing test programs:

19.069439585s ago: executing program 3 (id=82):
openat$hwrng(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000002340)='./file1\x00', 0x29ffa08d6e944c7d, &(0x7f0000000240), 0xfe, 0x557, &(0x7f0000000280)="$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")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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")
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00<r\xe9\x9cD\x90\xce\xe1\xc5\x85=\\!\xbbQ\xde\xc3\xe3\x7f\xcf\x1f\x17G\xa6\x13\xae\x92 \x1c\xbf\xfa\xe8e\x8cD\"\xa3w')
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8000, 0x20000000019}, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bd2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x8200, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000012c0)=@nat={'nat\x00', 0x670, 0x5, 0x3d0, 0xf8, 0xf8, 0xfeffffff, 0xf8, 0xf8, 0x338, 0x338, 0xffffffff, 0x338, 0x338, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x4}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @private, @rand_addr, @gre_key, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x430)
syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00')
read$FUSE(0xffffffffffffffff, &(0x7f0000006340)={0x2020}, 0x2020)
mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='devtmpfs\x00', 0x2200892, 0x0)

15.961003284s ago: executing program 3 (id=86):
openat$hwrng(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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")
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00<r\xe9\x9cD\x90\xce\xe1\xc5\x85=\\!\xbbQ\xde\xc3\xe3\x7f\xcf\x1f\x17G\xa6\x13\xae\x92 \x1c\xbf\xfa\xe8e\x8cD\"\xa3w')
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8000, 0x20000000019}, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bd2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x8200, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000012c0)=@nat={'nat\x00', 0x670, 0x5, 0x3d0, 0xf8, 0xf8, 0xfeffffff, 0xf8, 0xf8, 0x338, 0x338, 0xffffffff, 0x338, 0x338, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x4}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @private, @rand_addr, @gre_key, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x430)
syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00')
read$FUSE(0xffffffffffffffff, &(0x7f0000006340)={0x2020}, 0x2020)
mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='devtmpfs\x00', 0x2200892, 0x0)

11.718509556s ago: executing program 0 (id=104):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]})

11.646662557s ago: executing program 0 (id=105):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000001680)=ANY=[], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0xa, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

9.824085592s ago: executing program 3 (id=106):
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x7}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r5 = memfd_create(&(0x7f0000000040)='];\x00\x00\x00\x00\x96\t\xb27\x87Ge@{\xb7\xff]\ah\xd9\xb7\x13W\xb14\xfe\xe7FW\x96\x7f\xe8\xce(Ep\x93\xc9\xdd-\xfc\xf6\xdc\xec9H\x85\xa0\xf2p\x19\xa6\xd3z\x9c\xf0\x16Ax\x18<\x05\b\xa5\x19FN{U\x8b\xb0M5^\x7f+\xc9]E\x1a\x02x\xdc8\xa5|@<\x12\xcc@\xd6\x00\xb9\xf0', 0x0)
mmap(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x1, 0x12, r5, 0x7000)
r6 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100})
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, 0x0)
ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000240)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fe3000/0x4000)=nil, 0x3000})
socket(0x10, 0x803, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

9.568442727s ago: executing program 0 (id=108):
r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20)
fallocate(r0, 0x0, 0x0, 0x1001f0)
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x4028, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1\x00', 0x1e9902, 0x5e)

9.568193247s ago: executing program 2 (id=109):
openat$hwrng(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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")
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00<r\xe9\x9cD\x90\xce\xe1\xc5\x85=\\!\xbbQ\xde\xc3\xe3\x7f\xcf\x1f\x17G\xa6\x13\xae\x92 \x1c\xbf\xfa\xe8e\x8cD\"\xa3w')
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8000, 0x20000000019}, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bd2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x8200, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000012c0)=@nat={'nat\x00', 0x670, 0x5, 0x3d0, 0xf8, 0xf8, 0xfeffffff, 0xf8, 0xf8, 0x338, 0x338, 0xffffffff, 0x338, 0x338, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x4}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @private, @rand_addr, @gre_key, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x430)
syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00')
read$FUSE(0xffffffffffffffff, &(0x7f0000006340)={0x2020}, 0x2020)
mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='devtmpfs\x00', 0x2200892, 0x0)

7.627910464s ago: executing program 2 (id=112):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2602, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x790, 0x80000000002, 0x180, 0x400000004, 0xffffffffffffffff, 0xf1, 0x3, 0xfffffffffffffd7e, 0x45, 0x0, 0x3b9, 0xfffffffffffffffe, 0x0, 0x0, 0x8], 0x8000000, 0x3c4210})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

7.477640077s ago: executing program 1 (id=113):
syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000104fffffffffeffffff00000000", @ANYRES32=0x0, @ANYBLOB="04400000080800001400128009000100626f6e640000000004000280080003", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x48d0}, 0x40008c0)

7.31703267s ago: executing program 0 (id=114):
openat$hwrng(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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")
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00<r\xe9\x9cD\x90\xce\xe1\xc5\x85=\\!\xbbQ\xde\xc3\xe3\x7f\xcf\x1f\x17G\xa6\x13\xae\x92 \x1c\xbf\xfa\xe8e\x8cD\"\xa3w')
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8000, 0x20000000019}, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bd2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x8200, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000012c0)=@nat={'nat\x00', 0x670, 0x5, 0x3d0, 0xf8, 0xf8, 0xfeffffff, 0xf8, 0xf8, 0x338, 0x338, 0xffffffff, 0x338, 0x338, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x4}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @private, @rand_addr, @gre_key, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x430)
syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00')
read$FUSE(0xffffffffffffffff, &(0x7f0000006340)={0x2020}, 0x2020)
mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='devtmpfs\x00', 0x2200892, 0x0)

7.036494315s ago: executing program 1 (id=115):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]})

6.744807311s ago: executing program 1 (id=116):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x6e)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
mknodat$loop(0xffffffffffffffff, 0x0, 0x8000, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f0000000380)='./bus\x00', 0x0, 0x20, &(0x7f0000000740)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@mmap}, {@nodevmap}]}})

4.746037879s ago: executing program 1 (id=117):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r5, 0x0, &(0x7f0000000080))
sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000015}, 0x0)

4.736535149s ago: executing program 0 (id=118):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, &(0x7f00000006c0)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x61, @private0, 0x3}, 0x1c, &(0x7f0000000080)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="95", 0x1}], 0x1}}], 0x2, 0x931766f6319eed40)
shutdown(r0, 0x1)
r1 = socket$inet(0xa, 0x801, 0x84)
listen(r1, 0xfffffffd)
socket$inet(0xa, 0x801, 0x84)
r2 = socket$inet(0xa, 0x801, 0x84)
listen(r2, 0x8)
r3 = socket$inet(0xa, 0x801, 0x84)
listen(r3, 0x1)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000001590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1)

3.409946475s ago: executing program 3 (id=119):
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, 0x0, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
chdir(&(0x7f0000000040)='./file0\x00')
bind$unix(r3, &(0x7f0000000f80)=@file={0x1, './file0\x00'}, 0x6e)

3.306039507s ago: executing program 1 (id=120):
openat$hwrng(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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")
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00<r\xe9\x9cD\x90\xce\xe1\xc5\x85=\\!\xbbQ\xde\xc3\xe3\x7f\xcf\x1f\x17G\xa6\x13\xae\x92 \x1c\xbf\xfa\xe8e\x8cD\"\xa3w')
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8000, 0x20000000019}, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bd2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x8200, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000012c0)=@nat={'nat\x00', 0x670, 0x5, 0x3d0, 0xf8, 0xf8, 0xfeffffff, 0xf8, 0xf8, 0x338, 0x338, 0xffffffff, 0x338, 0x338, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x4}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @private, @rand_addr, @gre_key, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x430)
syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00')
read$FUSE(0xffffffffffffffff, &(0x7f0000006340)={0x2020}, 0x2020)
mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='devtmpfs\x00', 0x2200892, 0x0)

3.210992739s ago: executing program 3 (id=121):
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r0}, 0x10)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
syz_emit_ethernet(0x56, &(0x7f0000000340)={@random="89b72ae666f6", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "000001", 0x20, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x2, 0x0, 0x1, 0x3, [{0x5, 0x2, "c84800000500e4c408501af78df6"}]}}}}}}, 0x0)

1.467753462s ago: executing program 1 (id=122):
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000200)=[@in_dx={0x82, 0x20, {0x105f, 0x1}}, @out_dx={0xaa, 0x28, {0xf2d9, 0x1}}, @code={0xa, 0x60, {"8f2978c7c50f01c2c402daf7dec159f500c4e1ff2c36c74424000e000000c744240200200000ff1c24c744240000880000c744240240dd0000c7442406000000000f011c2443c05b3100deee80ef0b"}}, @wr_crn={0x46, 0x20, {0x8, 0x400}}, @cpuid={0x14, 0x18, {0x3, 0x832}}], 0xe0})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x7, 0xfe, 0xe1, 0x24, 0x6, 0x56, 0x40, 0x1, 0xfb, 0x8, 0xfe, 0xff, 0x0, 0x40, 0x1, 0x5}})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x0, 0x20, 0x3, 0x3, 0x106c, 0x80000001, 0x8000000000000, 0x0, 0x0, 0xe3, 0x0, 0x4, 0x0, 0x8001], 0x0, 0x3c4210})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.364937904s ago: executing program 3 (id=123):
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000000180)=@file={0x1}, 0x6e)
listen(r1, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
accept$unix(r1, 0x0, 0x0)
connect$unix(r2, &(0x7f0000000000)=@file={0x1}, 0x6e)

1.120684759s ago: executing program 2 (id=124):
syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000104fffffffffeffffff00000000", @ANYRES32=0x0, @ANYBLOB="04400000080800001400128009000100626f6e640000000004000280080003", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x48d0}, 0x40008c0)

823.668184ms ago: executing program 2 (id=125):
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40042, 0x1)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}})
mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x2000002, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

508.766341ms ago: executing program 2 (id=126):
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYRES8=0x0, @ANYBLOB="c014ef4404236f9d646fae87879085133ad8975219d7c5b0e17dd86d11bede6adfc32eed7f19fa34880cce7ec7990f63e5d7996e33044ee8a4b2e6b43a7c6d25d508062bd3333b86453bc2f02b2617adecd3d5a0ea7561f9f63dea03c7f7d0fdec633a94741d77d3104ba57f74dce4b01be342dcc7b2df0a450ac40e4fbe4bebd4f60df318fb469f802375dc7a08f4649f9ed5b384d30b0fd964d74d91db023b617888d7b56cb0", @ANYRESOCT], 0x1, 0x578, &(0x7f0000000640)="$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")
open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000180)=ANY=[@ANYBLOB="20000000020000001d"], 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2400c800)
r0 = fspick(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)

11.42888ms ago: executing program 2 (id=127):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000001200)=ANY=[@ANYBLOB="020000000000000069020000000000000100000000"])

0s ago: executing program 0 (id=128):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x22000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = dup(r2)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="8200000000000000b6000040"])

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.178' (ED25519) to the list of known hosts.
[   68.465423][ T5773] cgroup: Unknown subsys name 'net'
[   68.633667][ T5773] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   70.271718][ T5773] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   71.446816][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[   71.453387][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[   71.898788][ T5784] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   71.925252][ T5784] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   71.933063][ T5784] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   71.941636][ T5784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   71.950171][ T5784] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   71.968845][ T5787] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   71.976429][ T5787] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   71.985831][ T5794] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   72.032779][ T5793] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   72.033170][ T5787] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   72.040754][ T5793] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   72.055309][ T5787] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   72.057145][ T5793] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   72.063732][ T5787] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   72.072076][ T5793] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   72.077338][ T5787] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   72.091224][ T5793] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   72.092789][ T5787] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   72.105789][ T5795] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   72.114678][ T5787] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   72.122166][ T5795] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   72.129636][ T5795] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   72.139624][ T5795] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   72.150303][ T5795] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   72.652101][ T5788] chnl_net:caif_netlink_parms(): no params data found
[   72.708775][ T5782] chnl_net:caif_netlink_parms(): no params data found
[   72.720454][ T5786] chnl_net:caif_netlink_parms(): no params data found
[   72.815281][ T5785] chnl_net:caif_netlink_parms(): no params data found
[   72.934085][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.941316][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.949483][ T5782] bridge_slave_0: entered allmulticast mode
[   72.956865][ T5782] bridge_slave_0: entered promiscuous mode
[   72.965037][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.972399][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.979729][ T5788] bridge_slave_0: entered allmulticast mode
[   72.986648][ T5788] bridge_slave_0: entered promiscuous mode
[   73.029070][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.036403][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.043540][ T5782] bridge_slave_1: entered allmulticast mode
[   73.050876][ T5782] bridge_slave_1: entered promiscuous mode
[   73.070059][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.077298][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.084440][ T5788] bridge_slave_1: entered allmulticast mode
[   73.091983][ T5788] bridge_slave_1: entered promiscuous mode
[   73.099004][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.106307][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.113456][ T5786] bridge_slave_0: entered allmulticast mode
[   73.121222][ T5786] bridge_slave_0: entered promiscuous mode
[   73.130127][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.137526][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.144662][ T5786] bridge_slave_1: entered allmulticast mode
[   73.151728][ T5786] bridge_slave_1: entered promiscuous mode
[   73.242790][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.254934][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.268259][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.290662][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.298620][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.305913][ T5785] bridge_slave_0: entered allmulticast mode
[   73.312890][ T5785] bridge_slave_0: entered promiscuous mode
[   73.322506][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.360061][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.373162][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.383508][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.391014][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.398366][ T5785] bridge_slave_1: entered allmulticast mode
[   73.405487][ T5785] bridge_slave_1: entered promiscuous mode
[   73.473871][ T5782] team0: Port device team_slave_0 added
[   73.483656][ T5788] team0: Port device team_slave_0 added
[   73.493317][ T5788] team0: Port device team_slave_1 added
[   73.514597][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.526151][ T5782] team0: Port device team_slave_1 added
[   73.553769][ T5786] team0: Port device team_slave_0 added
[   73.562093][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.597839][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.604819][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.630831][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.646798][ T5786] team0: Port device team_slave_1 added
[   73.675388][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.682668][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.708809][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.743767][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.751347][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.777802][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.791186][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.798532][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.824568][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.863755][ T5785] team0: Port device team_slave_0 added
[   73.902107][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.909350][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.935840][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.949437][ T5785] team0: Port device team_slave_1 added
[   73.956663][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.963623][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.989679][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.011193][ T5788] hsr_slave_0: entered promiscuous mode
[   74.018664][ T5788] hsr_slave_1: entered promiscuous mode
[   74.066696][ T5784] Bluetooth: hci0: command tx timeout
[   74.092878][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0
[   74.100345][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.126862][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   74.139764][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.146884][ T5784] Bluetooth: hci2: command tx timeout
[   74.146906][   T50] Bluetooth: hci3: command tx timeout
[   74.147196][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.183835][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.200183][ T5782] hsr_slave_0: entered promiscuous mode
[   74.206689][ T5782] hsr_slave_1: entered promiscuous mode
[   74.212814][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   74.221058][ T5782] Cannot create hsr debugfs directory
[   74.226574][ T5784] Bluetooth: hci1: command tx timeout
[   74.260729][ T5786] hsr_slave_0: entered promiscuous mode
[   74.267405][ T5786] hsr_slave_1: entered promiscuous mode
[   74.273556][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   74.281660][ T5786] Cannot create hsr debugfs directory
[   74.417378][ T5785] hsr_slave_0: entered promiscuous mode
[   74.423923][ T5785] hsr_slave_1: entered promiscuous mode
[   74.430818][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   74.439697][ T5785] Cannot create hsr debugfs directory
[   74.765615][ T5782] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   74.779298][ T5782] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   74.790349][ T5782] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   74.801923][ T5782] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   74.886965][ T5786] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   74.897889][ T5786] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   74.911886][ T5786] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   74.932020][ T5786] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   75.013201][ T5785] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   75.023120][ T5785] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   75.034016][ T5785] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   75.044911][ T5785] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   75.148960][ T5788] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   75.159769][ T5788] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   75.171175][ T5788] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   75.195162][ T5788] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   75.219253][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.321141][ T5782] 8021q: adding VLAN 0 to HW filter on device team0
[   75.345474][   T42] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.352847][   T42] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.374049][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.394137][   T42] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.401304][   T42] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.441802][ T5786] 8021q: adding VLAN 0 to HW filter on device team0
[   75.462158][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.477933][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.485065][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.511690][   T58] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.518966][   T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.560769][ T5785] 8021q: adding VLAN 0 to HW filter on device team0
[   75.619066][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.631773][ T1133] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.638984][ T1133] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.651881][ T1133] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.659137][ T1133] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.735252][ T5788] 8021q: adding VLAN 0 to HW filter on device team0
[   75.767263][ T1322] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.774374][ T1322] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.791319][ T1322] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.798516][ T1322] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.815384][ T5785] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   76.032197][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0
[   76.147705][ T5784] Bluetooth: hci0: command tx timeout
[   76.195132][ T5782] veth0_vlan: entered promiscuous mode
[   76.226269][ T5784] Bluetooth: hci3: command tx timeout
[   76.231939][ T5784] Bluetooth: hci2: command tx timeout
[   76.244717][ T5782] veth1_vlan: entered promiscuous mode
[   76.306306][ T5784] Bluetooth: hci1: command tx timeout
[   76.324747][ T5782] veth0_macvtap: entered promiscuous mode
[   76.337936][ T5782] veth1_macvtap: entered promiscuous mode
[   76.352061][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0
[   76.447112][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0
[   76.478199][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0
[   76.489678][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.505467][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.526448][ T5785] veth0_vlan: entered promiscuous mode
[   76.542263][ T5785] veth1_vlan: entered promiscuous mode
[   76.552244][ T5782] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.563120][ T5782] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.572761][ T5782] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.581584][ T5782] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.661607][ T5786] veth0_vlan: entered promiscuous mode
[   76.691508][ T5786] veth1_vlan: entered promiscuous mode
[   76.740555][ T5788] veth0_vlan: entered promiscuous mode
[   76.760396][ T5785] veth0_macvtap: entered promiscuous mode
[   76.800323][ T5785] veth1_macvtap: entered promiscuous mode
[   76.812920][ T5788] veth1_vlan: entered promiscuous mode
[   76.841923][ T1322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.857237][ T1322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.884394][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.899421][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.911092][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.933082][ T5786] veth0_macvtap: entered promiscuous mode
[   76.961796][ T5786] veth1_macvtap: entered promiscuous mode
[   76.973218][   T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.974434][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   76.992326][   T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.999679][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.001641][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.039213][ T5785] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.048647][ T5785] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.057796][ T5785] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.067044][ T5785] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.114970][ T5788] veth0_macvtap: entered promiscuous mode
[   77.127876][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   77.142620][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.152521][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   77.163686][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.176325][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0
[   77.191384][ T5788] veth1_macvtap: entered promiscuous mode
[   77.208082][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.218933][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.228892][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.239517][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.251606][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.268389][ T5786] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.278383][ T5786] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.287552][ T5786] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.296641][ T5786] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.334241][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   77.345990][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.362591][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   77.374125][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.384287][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   77.395072][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.407825][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0
[   77.439644][ T5866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'.
[   77.452954][ T5866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'.
[   77.508885][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.526815][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.572647][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.584903][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.601082][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.612558][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.629668][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.740259][ T5788] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.763765][ T5788] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.779076][ T5788] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.802505][ T5788] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.815397][   T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.823677][   T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.897770][  T134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.933310][ T5871] syz.1.5[5871]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   77.990139][  T134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.235871][ T5784] Bluetooth: hci0: command tx timeout
[   78.306464][ T5784] Bluetooth: hci3: command tx timeout
[   78.315895][ T5784] Bluetooth: hci2: command tx timeout
[   78.386468][ T5784] Bluetooth: hci1: command tx timeout
[   78.591239][ T1133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.613588][ T1133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.774478][  T134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.802488][  T134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.861763][ T1133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.892983][ T1133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.984868][   T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.024487][   T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.064623][ T5876] loop2: detected capacity change from 0 to 1024
[   79.124375][ T5777] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   79.327701][ T5876] loop2: detected capacity change from 0 to 1024
[   79.363721][ T5876] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   79.379549][ T5876] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   79.395970][ T5876] JBD2: no valid journal superblock found
[   79.403587][ T5876] EXT4-fs (loop2): Could not load journal inode
[   79.469225][ T5880] overlayfs: failed to resolve './file1': -2
[   80.256053][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   80.264552][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   80.273184][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   80.312443][ T5784] Bluetooth: hci0: command tx timeout
[   80.386154][ T5784] Bluetooth: hci2: command tx timeout
[   80.386173][   T50] Bluetooth: hci3: command tx timeout
[   80.427330][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   80.442835][ T5891] fuse: Bad value for 'fd'
[   80.466637][   T50] Bluetooth: hci1: command tx timeout
[   80.550148][ T5893] loop1: detected capacity change from 0 to 1024
[   80.674337][ T5893] loop1: detected capacity change from 0 to 1024
[   80.727082][ T5893] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   80.783307][ T5893] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   80.808377][ T5893] JBD2: no valid journal superblock found
[   80.814444][ T5893] EXT4-fs (loop1): Could not load journal inode
[   81.116007][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   81.125131][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   81.154057][    T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!!
[   81.195791][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[   81.256534][    T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!!
[   81.257010][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   82.565650][    C1] sched: RT throttling activated
[   83.197107][ T5907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13'.
[   83.240111][ T5907] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13'.
[   84.381779][ T5916] 8021q: adding VLAN 0 to HW filter on device bond1
[   84.752631][ T5925] overlayfs: failed to resolve './file1': -2
[   85.179547][ T5928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18'.
[   85.600984][ T5930] loop3: detected capacity change from 0 to 1024
[   85.704188][ T5930] loop3: detected capacity change from 0 to 1024
[   85.718599][ T5934] binder: 5931:5934 ioctl c0306201 200000000180 returned -14
[   85.742457][ T5930] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   85.774017][ T5930] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   85.835170][ T5930] JBD2: no valid journal superblock found
[   85.851538][ T5930] EXT4-fs (loop3): Could not load journal inode
[   86.056334][ T5938] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   86.131582][ T5777] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   86.881605][    T8] cfg80211: failed to load regulatory.db
[   88.614345][ T5947] loop0: detected capacity change from 0 to 1024
[   88.692464][ T5775] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   88.709119][ T5953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25'.
[   88.782168][ T5947] loop0: detected capacity change from 0 to 1024
[   88.785565][ T5775] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   88.800221][ T5775] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   88.809611][ T5775] Buffer I/O error on dev loop0, logical block 0, async page read
[   88.856758][ T5947] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   88.894788][ T5947] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   88.906363][ T5947] JBD2: no valid journal superblock found
[   88.912152][ T5947] EXT4-fs (loop0): Could not load journal inode
[   90.903556][ T5963] netlink: 4 bytes leftover after parsing attributes in process `syz.2.29'.
[   91.154952][ T5967] binder: 5966:5967 ioctl c0306201 200000000180 returned -14
[   91.717791][ T5974] loop1: detected capacity change from 0 to 1024
[   92.430180][ T5974] loop1: detected capacity change from 0 to 1024
[   92.498302][ T5974] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   92.585841][ T5974] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   92.597516][ T5974] JBD2: no valid journal superblock found
[   92.603306][ T5974] EXT4-fs (loop1): Could not load journal inode
[   92.646415][ T5979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.37'.
[   94.938890][ T5996] overlayfs: failed to resolve './file1': -2
[   95.561233][ T5995] loop3: detected capacity change from 0 to 1024
[   95.686267][ T5777] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   95.757247][ T5995] loop3: detected capacity change from 0 to 1024
[   95.823147][ T5777] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   95.846505][ T5995] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   95.885857][ T5995] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   95.913802][ T5995] JBD2: no valid journal superblock found
[   95.925849][ T5995] EXT4-fs (loop3): Could not load journal inode
[   95.972549][ T6000] 8021q: adding VLAN 0 to HW filter on device bond2
[   96.000123][ T5777] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   97.860407][ T6014] loop2: detected capacity change from 0 to 1024
[   98.028387][ T5777] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   98.040563][ T6018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.48'.
[   98.461879][ T6014] loop2: detected capacity change from 0 to 1024
[   98.472822][ T5777] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   98.777474][ T6014] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   98.827771][ T6014] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   98.885846][ T6014] JBD2: no valid journal superblock found
[   98.891678][ T6014] EXT4-fs (loop2): Could not load journal inode
[  101.879751][ T6032] 8021q: adding VLAN 0 to HW filter on device bond1
[  102.125456][ T6042] loop3: detected capacity change from 0 to 1024
[  102.225747][ T5777] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  102.309465][ T6042] loop3: detected capacity change from 0 to 1024
[  102.309651][ T5777] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  102.340261][ T5777] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  102.365793][ T5777] Buffer I/O error on dev loop3, logical block 0, async page read
[  102.384391][ T6042] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  102.420524][ T6042] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  102.580568][ T6042] JBD2: no valid journal superblock found
[  102.613840][ T6042] EXT4-fs (loop3): Could not load journal inode
[  107.137596][ T6075] 8021q: adding VLAN 0 to HW filter on device bond5
[  107.660691][ T6089] loop0: detected capacity change from 0 to 1024
[  108.405467][ T6066] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  108.553788][ T6093] loop2: detected capacity change from 0 to 1024
[  108.591634][ T6089] loop0: detected capacity change from 0 to 1024
[  108.603450][ T6089] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  108.659810][ T6089] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  108.680167][ T6089] JBD2: no valid journal superblock found
[  108.686066][ T6089] EXT4-fs (loop0): Could not load journal inode
[  110.353359][ T6093] loop2: detected capacity change from 0 to 1024
[  110.425844][ T6093] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  110.464493][ T6093] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  110.525207][ T6093] JBD2: no valid journal superblock found
[  110.607501][ T6093] EXT4-fs (loop2): Could not load journal inode
[  113.482476][ T6120] 8021q: adding VLAN 0 to HW filter on device bond3
[  115.892109][ T6138] loop3: detected capacity change from 0 to 1024
[  116.110526][ T6066] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  116.389654][ T6138] loop3: detected capacity change from 0 to 1024
[  116.405436][ T6138] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  116.425722][ T6138] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  116.438871][ T6138] JBD2: no valid journal superblock found
[  116.445314][ T6138] EXT4-fs (loop3): Could not load journal inode
[  119.320021][ T6172] 8021q: adding VLAN 0 to HW filter on device bond7
[  121.035488][ T6196] loop0: detected capacity change from 0 to 1024
[  121.058873][ T6196] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  121.221547][ T6196] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  121.419943][ T6196] JBD2: no valid journal superblock found
[  121.566345][ T6196] EXT4-fs (loop0): Could not load journal inode
[  122.881369][ T6214] loop3: detected capacity change from 0 to 1024
[  122.892924][ T6214] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  122.915732][ T6214] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  122.997065][ T6214] JBD2: no valid journal superblock found
[  123.012724][ T6214] EXT4-fs (loop3): Could not load journal inode
[  123.066897][ T6213] 8021q: adding VLAN 0 to HW filter on device bond4
[  124.947089][ T6215] bond_slave_0: entered promiscuous mode
[  124.953028][ T6215] bond_slave_1: entered promiscuous mode
[  125.066630][ T6215] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  125.134143][ T6215] bond1: (slave macvlan2): Enslaving as an active interface with an up link
[  125.435599][ T6232] loop2: detected capacity change from 0 to 1024
[  125.470427][ T6232] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  125.515860][ T6232] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  125.564634][ T6232] JBD2: no valid journal superblock found
[  125.585995][ T6232] EXT4-fs (loop2): Could not load journal inode
[  127.823425][ T6246] loop0: detected capacity change from 0 to 1024
[  127.838696][ T6246] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  127.935741][ T6246] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  128.006681][ T6246] JBD2: no valid journal superblock found
[  128.012484][ T6246] EXT4-fs (loop0): Could not load journal inode
[  130.430990][ T6256] 8021q: adding VLAN 0 to HW filter on device bond9
[  130.926852][ T6256] bond_slave_0: entered promiscuous mode
[  130.932700][ T6256] bond_slave_1: entered promiscuous mode
[  130.994765][ T6256] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  131.396977][ T6256] bond2: (slave macvlan3): Enslaving as an active interface with an up link
[  131.640219][ T6265] loop1: detected capacity change from 0 to 1024
[  131.661992][ T6265] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  131.686255][ T6265] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  131.719190][ T6265] JBD2: no valid journal superblock found
[  131.724979][ T6265] EXT4-fs (loop1): Could not load journal inode
[  133.338727][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  133.345083][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  134.507290][ T6282] loop2: detected capacity change from 0 to 164
[  134.780959][ T5785] VFS: Busy inodes after unmount of loop2 (iso9660)
[  134.781206][ T5785] ------------[ cut here ]------------
[  134.795386][ T5785] kernel BUG at fs/super.c:697!
[  134.835706][ T5785] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  134.841822][ T5785] CPU: 0 PID: 5785 Comm: syz-executor Not tainted syzkaller #0
[  134.849362][ T5785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  134.859415][ T5785] RIP: 0010:generic_shutdown_super+0x2ad/0x2b0
[  134.865597][ T5785] Code: e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 3c 84 f0 ff 49 8b 16 48 81 c3 60 06 00 00 48 c7 c7 e0 9c b7 8a 48 89 de e8 c3 bc 76 08 <0f> 0b 90 66 0f 1f 00 55 41 57 41 56 53 48 89 fb 49 bf 00 00 00 00
[  134.885214][ T5785] RSP: 0018:ffffc9000462fd20 EFLAGS: 00010246
[  134.891311][ T5785] RAX: 0000000000000031 RBX: ffff8880296fa660 RCX: bf3887ed9d66c200
[  134.899281][ T5785] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  134.907267][ T5785] RBP: 1ffff110052df4f2 R08: ffffc9000462fa27 R09: 1ffff920008c5f44
[  134.915242][ T5785] R10: dffffc0000000000 R11: fffff520008c5f45 R12: 0000000000000000
[  134.923212][ T5785] R13: dffffc0000000000 R14: ffffffff8cf28220 R15: ffff8880296fa790
[  134.931181][ T5785] FS:  000055556819e500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  134.940105][ T5785] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  134.946687][ T5785] CR2: 00007fffca601ff8 CR3: 0000000062e72000 CR4: 00000000003506f0
[  134.954657][ T5785] Call Trace:
[  134.957934][ T5785]  <TASK>
[  134.960865][ T5785]  kill_block_super+0x44/0x90
[  134.965558][ T5785]  deactivate_locked_super+0x97/0x100
[  134.970938][ T5785]  cleanup_mnt+0x429/0x4c0
[  134.975357][ T5785]  task_work_run+0x1ce/0x250
[  134.979961][ T5785]  ? task_work_cancel+0x240/0x240
[  134.984996][ T5785]  ? exit_to_user_mode_loop+0x3b/0x110
[  134.990457][ T5785]  exit_to_user_mode_loop+0xe6/0x110
[  134.995753][ T5785]  exit_to_user_mode_prepare+0xf6/0x180
[  135.001300][ T5785]  syscall_exit_to_user_mode+0x1a/0x50
[  135.006759][ T5785]  do_syscall_64+0x61/0xb0
[  135.011166][ T5785]  ? clear_bhb_loop+0x40/0x90
[  135.015850][ T5785]  ? clear_bhb_loop+0x40/0x90
[  135.020523][ T5785]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  135.026415][ T5785] RIP: 0033:0x7f218fd901f7
[  135.030857][ T5785] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  135.050457][ T5785] RSP: 002b:00007fffca602258 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  135.058867][ T5785] RAX: 0000000000000000 RBX: 00007f218fe11d7d RCX: 00007f218fd901f7
[  135.066833][ T5785] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffca602310
[  135.074822][ T5785] RBP: 00007fffca602310 R08: 0000000000000000 R09: 0000000000000000
[  135.082786][ T5785] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffca6033a0
[  135.090754][ T5785] R13: 00007f218fe11d7d R14: 0000000000020e2c R15: 00007fffca6033e0
[  135.098732][ T5785]  </TASK>
[  135.101758][ T5785] Modules linked in:
[  135.131585][ T5785] ---[ end trace 0000000000000000 ]---
[  135.137276][ T5785] RIP: 0010:generic_shutdown_super+0x2ad/0x2b0
[  135.143572][ T5785] Code: e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 3c 84 f0 ff 49 8b 16 48 81 c3 60 06 00 00 48 c7 c7 e0 9c b7 8a 48 89 de e8 c3 bc 76 08 <0f> 0b 90 66 0f 1f 00 55 41 57 41 56 53 48 89 fb 49 bf 00 00 00 00
[  135.163284][ T5785] RSP: 0018:ffffc9000462fd20 EFLAGS: 00010246
[  135.189647][ T5785] RAX: 0000000000000031 RBX: ffff8880296fa660 RCX: bf3887ed9d66c200
[  135.213748][ T5785] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  135.232849][ T5785] RBP: 1ffff110052df4f2 R08: ffffc9000462fa27 R09: 1ffff920008c5f44
[  135.243174][ T5785] R10: dffffc0000000000 R11: fffff520008c5f45 R12: 0000000000000000
[  135.253901][ T5785] R13: dffffc0000000000 R14: ffffffff8cf28220 R15: ffff8880296fa790
[  135.293709][ T5785] FS:  000055556819e500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  135.318320][ T5785] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  135.331019][ T5785] CR2: 000000110c26ed93 CR3: 0000000062e72000 CR4: 00000000003526f0
[  135.348269][ T5785] Kernel panic - not syncing: Fatal exception
[  135.354499][ T5785] Kernel Offset: disabled
[  135.358824][ T5785] Rebooting in 86400 seconds..