last executing test programs:

2m16.782677868s ago: executing program 0 (id=1):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_delrule={0x28, 0x21, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x18, {0x0, 0xffffffffffffffff}}]}, 0x28}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10)
bpf$PROG_BIND_MAP(0x23, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000000, &(0x7f0000000440)={[{@nolazytime}, {@orlov}, {@usrjquota}, {@usrjquota}, {@nojournal_checksum}, {@journal_dev={'journal_dev', 0x3d, 0x5}}]}, 0x1, 0x513, &(0x7f0000000c40)="$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")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000040000002000000000000000002020207b1af8ff00000000000007010000f8ffffffb702000000000000b7030000deab44f4851500002d00000095000000000000da376ef12f799298813d4b79d093832125f7fb897460c015bdda29a5"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaa6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r6}, 0x10)

2m12.124466426s ago: executing program 0 (id=14):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffa}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x1}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
clock_getres(0x3, 0x0)

2m9.023014488s ago: executing program 0 (id=19):
syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d303030303030303030303030303030303030feec97df372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4abf019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x140, &(0x7f0000000340)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=")
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', <r2=>0x0})
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
socket$packet(0x11, 0xa, 0x300)
sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)
syz_emit_ethernet(0x3a, &(0x7f0000000480)=ANY=[], 0x0)

2m6.677853728s ago: executing program 0 (id=23):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
pipe(&(0x7f0000002480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r1, 0x0, r3, 0x0, 0x7, 0x9)
read(r2, &(0x7f0000032440)=""/102364, 0x18fdc)

2m5.259570303s ago: executing program 0 (id=30):
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='vxcan1\x00', 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000140)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nodiscard}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$eJzs289rHFUcAPDv7GZT01+Jpf5oWjVaxeCPpElr7cGLouBBQdBDPcYkLbHbRpoItgSNIvUoBe/iUfAv8KQXUU8Fr3oXoUgurZ5WZncm2d1sfnaTrd3PByb5vpm3vPfNzNt9My8bQNcaSn8kEfsj4veI6K8VGysM1X7dXlqY/GdpYTKJSuXtv5NqvVtLC5N51fx1+/JCT0Th8ySOtmh37srVCxPl8vTlrDw6f/GD0bkrV5+fuThxfvr89KXxM2dOnRx78fT4C23JM83r1uDHs8eOvP7u9Tcnz15/75fvkjz/pjzaZGi9g09VKm1urrMO1MVJTwc7wpYUa8M0StXx3x/FWDl5/fHaZx3tHLCjKpVK5cG1Dy9WgHtYEp3uAdAZ+Qd9ev+bb7s09bgr3Hy5dgOU5n0722pHeqKQ1Sk13d+201BEnF389+t0i515DgEA0OCHdP7zXKv5XyHqnwsdzNZQBiLi/og4FBGnI+JwRDwQUa37UEQ8vMX2mxdJVs9/Dm4rr81K538vZWtbjfO/fPYXA8WsdKCafyk5N1OePpH1bDhKe9Ly2Dpt/Pjqb1+2PJA1kc//0i1tP58LZpX+6tnT+LKpifmJO8m53s1PIwZ7WuWfLK8EJBFxJCIGt9nGzDPfHlvr2NCG+a+jDetMlW8inq6d/8Voyj+XrL8+OXpflKdPjOZXxWq/3rj21lrt31H+bZCe/70tr//l/AeS+vXaua23ce2PL9a8p9k4/9bXf2/yTsO+jybm5y+PRfQmb9Q6Xb9/vKne+Er9NP/h463H/6FY+UscjYj0In4kIh6NiMeyvj8eEU9ExPHVqd3ozYKfX3ny/WpQ2k7+OyvNf2pL538l6I3mPa2D4oWfvm9odGAr+afn/1Q1Gs72bOb9bzP92t7VDAAAAP8/hYjYH0lhZDkuFEZGav/Dfzj2Fsqzc/PPnpv98NJU7TsCA1Eq5E+6+uueh45lt/V5ebypfDJ7bvxVsa9aHpmcLU91OnnocvvWGP+pP4ud7h2w43xfC7qX8Q/dy/iH7mX8Q/dqMf77OtEPYPe1+vz/pAP9AHZf0/i37AddxP0/dC/jH7qX8Q9daa4vNv6SvECwKojCXdENwQ4FnX5nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaI//AgAA//9Lr+a0")
r4 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r4, 0x0, 0x0)
write$binfmt_script(r4, 0x0, 0x0)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r6 = dup(r5)
write$UHID_INPUT(r6, &(0x7f0000001080)={0xc, {"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", 0x1000}}, 0x1006)

1m49.064713916s ago: executing program 32 (id=30):
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='vxcan1\x00', 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000140)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nodiscard}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$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")
r4 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r4, 0x0, 0x0)
write$binfmt_script(r4, 0x0, 0x0)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r6 = dup(r5)
write$UHID_INPUT(r6, &(0x7f0000001080)={0xc, {"a2e3ad2107c752f91b25470987f70e06d038e7ff7fc6e5539b3264078b089b3b083468060890e0878f0e1ac6e70a9b3368959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31350d095d0636cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4040d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f5f71d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810930500ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab974c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc660db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d154d8a5ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21e5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006)

19.339884652s ago: executing program 2 (id=263):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES16, @ANYRESHEX, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES8, @ANYRESHEX=0x0], 0x48)
r1 = getpid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
getsockopt$sock_buf(r5, 0x1, 0x1f, 0x0, &(0x7f0000000100))
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, 0x0}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10)
creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb)
prctl$PR_MCE_KILL_GET(0x22)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020}, 0x2020)

14.164475601s ago: executing program 2 (id=280):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x2400c005}, 0x0)

13.788062422s ago: executing program 2 (id=281):
pipe(&(0x7f0000000640)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000a80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10)
sendmmsg$inet(r3, &(0x7f0000003300)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a'], 0x70}}], 0x1, 0x2000c044)
writev(r1, &(0x7f0000000200)=[{&(0x7f0000000c00)="2933ed5098e211ef165be6ee27f5f66001b7ae4eae0a5b497cdf4a60f4883fe38142f08ce6b90a23af62613a6c23ff0b60bd53fe1ad561bcde49fe95471bdc5f604784", 0x43}, {&(0x7f0000000400)="dd4959153df1f740afad0ea01c53fecfbbf1813b204783c8cf8954869be5", 0x1e}], 0x2)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x1)

12.530543594s ago: executing program 5 (id=285):
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003)
ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f00000000c0)={0x7, 0x21, 0x0, 0x17, 0x4, 0xc0, 0x5, 0x14c, 0x1})
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
write(r1, &(0x7f0000004200)='t', 0x1)
sendfile(r1, r0, 0x0, 0x3ffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$restrict_keyring(0x1d, r2, 0xfffffffffffffffe, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000a80)='./file1\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@sb={'sb', 0x3d, 0x50cf}}, {@orlov}, {@norecovery}, {@barrier}, {@data_journal}]}, 0x66, 0x50a, &(0x7f0000000200)="$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")
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000140)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xc, 0x0, &(0x7f0000000000))
sendfile(r1, r0, 0x0, 0x7ffff000)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}})

12.375569877s ago: executing program 2 (id=287):
kcmp(0x0, 0x0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000c00)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18)
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x802, &(0x7f0000000ac0)=ANY=[@ANYRESDEC=r0, @ANYRES16, @ANYBLOB="19446bca01f8cb08b739d038070289528b4d7adde13df681296eded4e47b2e59a82740b7ff9b157c9ff26d58226a722848cd0ffa040d94b78a55ceb173408c5478621a96a1499f77c1139faaa089f17c3f821f72d6fd2c4797175971acdcfc5e296f3fc464b4f7cfa466869421ab1178381e6f47dea16f730446352ebf791b3b64d08845e8e91be5352623c27f7d37e79dd7e07e5e005cb7b5d5ce0d5702a7d0e3f39147038b9ab568a7b4b20c1cb309213a34", @ANYRES8], 0x1, 0x2bb, &(0x7f0000000d40)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
lstat(0x0, &(0x7f0000000cc0))
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x4, 0x408, 0x0, 0x0, 0x108, 0x320, 0x320, 0x320, 0x4, 0x0, {[{{@arp={@remote, @local, 0xffffff00, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x19}, @multicast2, 0x0, 0xff, 0x5, 0x2, {@mac=@multicast, {[0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x2, 0x4, 0x2, 0x2, 0x5, 0x7, 'ip6tnl0\x00', 'veth0_to_team\x00', {0xff}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @broadcast, 0x8}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1, 'syz1\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x458)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f0000000140), 0x10)
sendmsg$can_bcm(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000008c0)=ANY=[@ANYBLOB="0500000002080000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000)

11.118182618s ago: executing program 4 (id=289):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b0000000500000000040000"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
fchdir(0xffffffffffffffff)
r4 = epoll_create1(0x0)
r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000b80)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="1100000000000000", @ANYRES32=r5, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x11)

9.562888035s ago: executing program 5 (id=292):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[], 0x15)
r6 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r6}})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]})

9.398228948s ago: executing program 4 (id=294):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={0x0, 0x0, 0x2e, 0x0, 0x1}, 0x28)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x20081e, &(0x7f0000000100), 0x1, 0x502, &(0x7f0000000a00)="$eJzs3c9vI1cdAPCvnV9OmjZp6QEQokspLGi1TuJto6oHKCeEUCVEjyBtQ+KNothxFDulCXvY/g9IVOIER/4Azj3xJyC4cYEDEj8iULMSSFPNeLzrzdob7yaxs/HnI41m3ryxv+/t7rzn+W7iF8DYuhYR9yJiOiI+iIiF/Hwh3+Ld9pZe99nR3fXjo7vrhUiS9/9VyOrTc9H1mtQL+XuWIuLH34/4WeHxuM2Dw+21Wq261y7OLrXqu0vNg8ObW/W1zepmdadSWV1ZXX771luVc+vra/Xp9sFE2sBv/yJt1nxe192Pc/T/JDP1IE5qMiJ+eAHBRmEi78/0qBvCMylGxCsR8Xp2/y/ERPa3CQBcZUmyEMlCdxkAuOqKWQ6sUCznuYD5KBbL5XYO79WYK9YazdaNO439nY12rmwxpop3tmrV5TxXuBhThbS8kh0/LFdOlG9FxMsR8cuZ2axcXm/UNkb5wQcAxtgLJ+b//860538A4IorjboBAMDQmf8BYPyY/wFg/Jj/AWD8mP8BYPyY/wFg/Jj/AWCs/Oi999ItOc6//3rjw4P97caHNzeqze1yfX+9vN7Y2y1vNhqb2Xf21E97v1qjsbvyZux/tPid3WZrqXlweLve2N9p3c6+1/t2dWoovQIAnuTl1z79cyEi7r0zm23RtZaDuRqutuJZXjx7fu0Ahm9i1A0ARsZqXzC+zvCMLz0AV0SPJXofUXrkcT+/OkmS5GKbBVyg61+S/4dx1ZX/91PAMGbk/2F8DZr/Py0/ADx/kqQw6Jr/MeiFAMDlJscP9Hm+fyXf/y7/z4Gfbpy84pOLbBUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcbp31f8v5WuDzUSyWyxEvRsRiTBXubNWqyxHxUkT8aWZqJi2vjLjNAMBZFf9eyNf/ur7wxvzJ2unC/ZlsHxE///X7v/pordXa+2N6/t8Pzrc+yc9XRtF+AOA0nXk623c9yH92dHe9sw2zPf/4XkSU2vGPj6bj+EH8yZjM9qWYioi5/xTycluhK3dxFvc+jogv9up/IeazHEh75dOT8dPYLw41fvGR+MWsrr1P/yy+8NSRk4VzaD481z5Nx593e91/xbiW7Xvf/6VshDq7fPxL32r9OBsDH8bvjH8Tfca/a4PGePMPP2gfzT5e93HElycjOrGPu8afTvxCn/hvDBj/L1/56uv96pLfRFyP3vG7Yy216rtLzYPDm1v1tc3qZnWnUlldWV1++9ZblaUsR73Ufzb45zs3XupXl/Z/rk/80in9/8aA/f/t/z74ydeeEP9bX+8VvxivPiF+Oid+c8D4a3O/L/WrS+Nv9Ox/R//+3xgw/l//dvjYsuEAwOg0Dw6312q16t4wDzofJIYa1MEVOEj/1VyCZvQ8+O6wYk3HU70qSZ4pVr8R4zyybsBl0L7Xk+peRNwfdWMAAAAAAAAAAAAAAICehvEbS6PuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFfX5wEAAP//90HVog==")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ptrace$pokeuser(0x6, r0, 0x2, 0x7f)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000006080)={0x14, 0x14, 0x211, 0x0, 0x0, {0x2b}}, 0x14}}, 0x0)
recvmsg(r5, &(0x7f0000000400)={&(0x7f00000004c0)=@l2, 0x80, &(0x7f0000000300)=[{&(0x7f0000000540)=""/193, 0xc1}, {&(0x7f0000000000)=""/33, 0x21}], 0x2, &(0x7f0000000700)=""/154, 0x9a}, 0x10001)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x59e16000)
syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00')

8.463698744s ago: executing program 5 (id=296):
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000002880)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})

7.428867618s ago: executing program 2 (id=299):
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$binfmt_script(r4, &(0x7f0000001200)={'#! ', './file0'}, 0xb)
close(r4)
execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r5 = getpid()
r6 = syz_pidfd_open(r5, 0x0)
r7 = pidfd_getfd(r6, r6, 0x0)
setns(r7, 0x66020000)

5.741381984s ago: executing program 2 (id=300):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$inet_tcp(0x2, 0x1, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000029c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xf}, {}, {0x7, 0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x18, 0x2, [@TCA_FLOW_EMATCHES={0x14, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x3, 0x0, 0x0, {{0x5, 0x4, 0x3}}}]}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10040090}, 0x2008c014)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1, 0x0, 0x0, 0x5, 0xfffffffffffffffa}, {0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@empty, 0x0, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x7c, 0xfffffffe}}, 0xe8)
connect$inet6(r9, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)

5.663611491s ago: executing program 5 (id=302):
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003)
ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f00000000c0)={0x7, 0x21, 0x0, 0x17, 0x4, 0xc0, 0x5, 0x14c, 0x1})
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
write(r1, &(0x7f0000004200)='t', 0x1)
sendfile(r1, r0, 0x0, 0x3ffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$restrict_keyring(0x1d, r2, 0xfffffffffffffffe, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000a80)='./file1\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@sb={'sb', 0x3d, 0x50cf}}, {@orlov}, {@norecovery}, {@barrier}, {@data_journal}]}, 0x66, 0x50a, &(0x7f0000000200)="$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")
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000140)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xc, 0x0, &(0x7f0000000000))
sendfile(r1, r0, 0x0, 0x7ffff000)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}})

4.597663617s ago: executing program 3 (id=303):
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440), 0x10)
listen(0xffffffffffffffff, 0x0)
getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), &(0x7f0000000280)=0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioprio_get$pid(0x1, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
socket$pppl2tp(0x18, 0x1, 0x1)
syz_clone(0x10008000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000010000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095fa24da47250fc444299cb0cfef81004ff8f88789233f787ebe322e921cbe6d9d6d0953d4eb9c9281cc4c55"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r5, 0x40045402, &(0x7f0000000140)=0x1)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0x2)
readv(r6, &(0x7f00000008c0)=[{&(0x7f00000002c0)=""/156, 0x9c}], 0x1)
ioctl$TIOCVHANGUP(r6, 0x5437, 0x2)

4.32231063s ago: executing program 5 (id=304):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b0000000500000000040000"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
fchdir(0xffffffffffffffff)
r4 = epoll_create1(0x0)
r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000b80)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="1100000000000000", @ANYRES32=r5, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x11)

4.083982309s ago: executing program 1 (id=305):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a90f16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0", 0x89}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0)

3.609658047s ago: executing program 3 (id=306):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x2400c005}, 0x0)

3.501848786s ago: executing program 3 (id=307):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0xff, 0xe4}]}, 0x10)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x90050, r1, 0x22e7f000)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x1001a, &(0x7f0000000180)={[{@quota}, {@discard}, {@inlinecrypt}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nojournal_checksum}, {@jqfmt_vfsv1}]}, 0x1, 0x42e, &(0x7f0000001980)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x8042, 0x1fe)
r3 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001100)={0x0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
write$UHID_INPUT(r3, &(0x7f0000000680)={0x8, {"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", 0x1000}}, 0x1006)
splice(r3, 0x0, r2, 0x0, 0x20000000000007, 0xa)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r9}, 0xc)

3.490382187s ago: executing program 1 (id=308):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[], 0x15)
r6 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r6}})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]})

2.456686311s ago: executing program 1 (id=309):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
syz_emit_ethernet(0xfed7, &(0x7f00000002c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "00641a", 0x0, 0x3a, 0x0, @mcast1, @mcast1, [], "1e520b4c951ee12e"}}}}}}}, 0x0)

2.429590963s ago: executing program 4 (id=310):
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94)
r0 = socket$pptp(0x18, 0x1, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x2000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x94)
gettid()
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e)
connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0)
ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1)
readv(r1, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/66, 0x42}], 0x1)

2.388620516s ago: executing program 5 (id=311):
bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000840)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet6(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, 0x0, &(0x7f0000000040)}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)

2.21598143s ago: executing program 3 (id=312):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r3, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x70bd24, 0xffffffea, {0x0, 0x0, 0xe403, r4, 0x3, 0x54000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008004}, 0x4008040)

1.248754989s ago: executing program 1 (id=313):
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushpolicy={0x18, 0x12, 0x105, 0x4, 0x25dfdbff, "", [@proto={0x5, 0x19, 0x32}]}, 0x18}, 0x1, 0x0, 0x0, 0x880}, 0x20040840)

1.169424785s ago: executing program 4 (id=314):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
pipe2$9p(&(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000180)=ANY=[], 0x15)
r4 = dup(r3)
mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4])

1.044057825s ago: executing program 4 (id=315):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000080)=0x4)
ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0x2000004)
pwritev(r2, &(0x7f0000000280)=[{&(0x7f00000002c0)='\x00!', 0x2}], 0x1, 0x8, 0x49d)

1.043433345s ago: executing program 3 (id=316):
memfd_create(&(0x7f00000001c0)='=\\\x94\x00\x00', 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000600)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000900)={'filter\x00', 0x6001, 0x4, 0x3f0, 0x0, 0x0, 0x110, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}}}, {{@arp={@dev, @remote, 0x0, 0x0, 0x0, 0x8, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'team_slave_0\x00', {}, {}, 0x0, 0xe2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @multicast2, @private, 0xf}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
add_key$keyring(&(0x7f0000000540), 0x0, 0x0, 0x0, 0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f00000005c0)={0x2, {0x2, 0x100, 0x5, 0xe, 0x4, 0x2}})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8082, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CLEAR_DIRTY_LOG(r7, 0xc018aec0, &(0x7f0000000040)={0x1, 0x3c0, 0xc0, 0x0})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2)
syz_open_dev$tty1(0xc, 0x4, 0x1)

1.043171325s ago: executing program 1 (id=317):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$pptp(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x2, {0xfeff, @local}}, 0x1e)
connect$pptp(0xffffffffffffffff, &(0x7f0000000700)={0x18, 0x2, {0x0, @multicast1}}, 0x1e)
connect$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x2, @local}}, 0x1e)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000201000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeb0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_subtree(r6, &(0x7f0000000180)=ANY=[], 0xb)

142.662729ms ago: executing program 1 (id=318):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r0}, 0x50)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000210000000000000000003f510018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r4}, 0x18)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r5}, 0x10)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940))

49.439236ms ago: executing program 4 (id=319):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008800}, 0x0)

0s ago: executing program 3 (id=320):
syz_mount_image$erofs(&(0x7f00000001c0), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000001040)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES64, @ANYRES64, @ANYRESHEX, @ANYRES16, @ANYRES8, @ANYRES32], 0xfe, 0x1d1, &(0x7f0000000640)="$eJzsmb0L00AYxp+7pB8WEURwcHGwYEWbJqlKlw4VHAWhFXUsNpZq2koboS04FBcXRwfB1X/AwaGTg5ubqw4qCA52dBMid7k2Z/qB1SXg+4Nen7t77+69t82zBARB/Ld8+fzj09MrtdYFAEdRRE6NfzPiGK7Ff3z+8Pyz+tUXrz68fDs49miR3I8BCMNDMjiBNw0DgeqF4e+rQ0ULHEU1dgMc55S+CQYrkj+jyKjjgeG2irmn6eERJXzPujP0O3d7vmeLxhGNK5qqfr4JYDln6ADIq3yYNj+ezu63fd8bJUUmXJ2zMXWo2Fc9mV+Do67VS/xet548nou+qg1srX4OOBylq2BoKl1DDpZlxSXR7n/KjPc3/uT+aRDHy6lIg0S6BEuOiAd6PXJyuXi3ueprWpL/CyGNC8DG1PuC71/7h52zygS2xsT+xEzgrOZPJsy1f1SC/oPKeDor9/rtrtf1Bq5bvWxftO1LbkUaUdTu8b+89KeCtn9mR2yWZTFpB8HImQDByFn33ajVHLf5evhdruHS/zhKZ6I9xF9FXju3/QymPlx+C1UydiZPEARBEARBEARBEARBEARxEKfBVm/NmPYCLYl7XUb/CgAA//+BWndb")

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.181' (ED25519) to the list of known hosts.
[   65.090594][ T4170] cgroup: Unknown subsys name 'net'
[   65.240584][ T4170] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   66.730431][ T4170] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k FS
[   68.816166][ T4186] chnl_net:caif_netlink_parms(): no params data found
[   68.867204][ T4181] chnl_net:caif_netlink_parms(): no params data found
[   68.881127][ T4189] chnl_net:caif_netlink_parms(): no params data found
[   68.942035][ T4185] chnl_net:caif_netlink_parms(): no params data found
[   69.036929][ T4184] chnl_net:caif_netlink_parms(): no params data found
[   69.075974][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.083962][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.092115][ T4186] device bridge_slave_0 entered promiscuous mode
[   69.137296][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.144624][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.152708][ T4186] device bridge_slave_1 entered promiscuous mode
[   69.168518][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.176044][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.184290][ T4185] device bridge_slave_0 entered promiscuous mode
[   69.198343][ T4181] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.205999][ T4181] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.214037][ T4181] device bridge_slave_0 entered promiscuous mode
[   69.228636][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.236110][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.244349][ T4189] device bridge_slave_0 entered promiscuous mode
[   69.251991][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.259464][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.267502][ T4185] device bridge_slave_1 entered promiscuous mode
[   69.279063][ T4181] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.286698][ T4181] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.295505][ T4181] device bridge_slave_1 entered promiscuous mode
[   69.309628][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.317149][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.325671][ T4189] device bridge_slave_1 entered promiscuous mode
[   69.359437][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.390830][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.410027][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.436128][ T4181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.454232][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.463542][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.470710][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.479535][ T4184] device bridge_slave_0 entered promiscuous mode
[   69.496243][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.507893][ T4181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.525880][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.533892][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.541986][ T4184] device bridge_slave_1 entered promiscuous mode
[   69.557672][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.602324][ T4186] team0: Port device team_slave_0 added
[   69.627228][ T4185] team0: Port device team_slave_0 added
[   69.635560][ T4185] team0: Port device team_slave_1 added
[   69.649422][ T4186] team0: Port device team_slave_1 added
[   69.666600][ T4189] team0: Port device team_slave_0 added
[   69.675516][ T4181] team0: Port device team_slave_0 added
[   69.682656][ T4189] team0: Port device team_slave_1 added
[   69.697427][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.716773][ T4181] team0: Port device team_slave_1 added
[   69.723585][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.730872][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.757595][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   69.787131][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.804995][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1
[   69.811985][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.838870][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   69.864142][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.871302][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.897924][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   69.929194][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.936493][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.963598][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   69.975272][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1
[   69.982330][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.008769][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.034393][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.041395][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.068130][ T4181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.080809][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.087805][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.114167][ T4181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.126457][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.133824][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.159989][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.177611][ T4184] team0: Port device team_slave_0 added
[   70.194574][ T4184] team0: Port device team_slave_1 added
[   70.250684][ T4189] device hsr_slave_0 entered promiscuous mode
[   70.257985][ T4189] device hsr_slave_1 entered promiscuous mode
[   70.286447][ T4186] device hsr_slave_0 entered promiscuous mode
[   70.293483][ T4186] device hsr_slave_1 entered promiscuous mode
[   70.300250][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   70.308393][ T4186] Cannot create hsr debugfs directory
[   70.323627][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.330630][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.356842][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.381297][ T4181] device hsr_slave_0 entered promiscuous mode
[   70.388367][ T4181] device hsr_slave_1 entered promiscuous mode
[   70.395546][ T4181] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   70.403530][ T4181] Cannot create hsr debugfs directory
[   70.418478][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.425821][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.452599][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.479286][ T4185] device hsr_slave_0 entered promiscuous mode
[   70.486933][ T4185] device hsr_slave_1 entered promiscuous mode
[   70.494224][   T13] Bluetooth: hci4: command 0x0409 tx timeout
[   70.500815][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   70.501442][   T13] Bluetooth: hci2: command 0x0409 tx timeout
[   70.515395][ T4185] Cannot create hsr debugfs directory
[   70.515582][   T13] Bluetooth: hci3: command 0x0409 tx timeout
[   70.527191][   T13] Bluetooth: hci0: command 0x0409 tx timeout
[   70.533950][   T13] Bluetooth: hci1: command 0x0409 tx timeout
[   70.585843][ T4184] device hsr_slave_0 entered promiscuous mode
[   70.596148][ T4184] device hsr_slave_1 entered promiscuous mode
[   70.602984][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   70.611778][ T4184] Cannot create hsr debugfs directory
[   70.909549][ T4189] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   70.921726][ T4189] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   70.931144][ T4189] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   70.946973][ T4189] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   71.000745][ T4185] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   71.010473][ T4185] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   71.035999][ T4185] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   71.062962][ T4185] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   71.147747][ T4181] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   71.161338][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.182438][ T4181] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   71.220634][ T4181] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   71.235670][ T4181] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   71.249241][ T4184] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   71.265858][ T4184] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   71.276036][ T4184] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   71.292613][ T4184] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   71.304052][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   71.319389][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   71.334860][ T4189] 8021q: adding VLAN 0 to HW filter on device team0
[   71.364709][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   71.377243][ T1428] ieee802154 phy0 wpan0: encryption failed: -22
[   71.380734][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   71.384932][ T1428] ieee802154 phy1 wpan1: encryption failed: -22
[   71.394343][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.405796][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.415174][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   71.425843][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   71.435959][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.443163][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.457599][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   71.468024][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   71.477480][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   71.512341][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.521440][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   71.534245][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   71.546709][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   71.556596][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   71.566326][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   71.575347][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   71.584852][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   71.595496][ T4186] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   71.606750][ T4186] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   71.630734][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   71.640402][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   71.649650][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   71.660633][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   71.674177][ T4185] 8021q: adding VLAN 0 to HW filter on device team0
[   71.684589][ T4186] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   71.694206][ T4186] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   71.723641][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   71.733484][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   71.742263][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.749719][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.759630][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   71.777078][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   71.831560][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   71.847716][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   71.858954][ T4256] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.866200][ T4256] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.891947][ T4181] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.912787][ T4181] 8021q: adding VLAN 0 to HW filter on device team0
[   71.946218][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   71.955233][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   71.965460][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   71.975290][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   71.986278][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   71.995849][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   72.005230][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   72.016399][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   72.025751][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   72.041853][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   72.050968][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   72.060731][ T1219] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.068182][ T1219] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.078772][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   72.088033][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   72.097138][ T1219] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.104493][ T1219] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.130916][ T4185] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   72.142524][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   72.157485][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   72.166729][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   72.177677][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   72.189556][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   72.198678][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   72.227909][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   72.239210][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   72.248721][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   72.259510][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   72.269304][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   72.278578][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   72.292911][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.319242][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   72.329835][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   72.341797][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   72.357771][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   72.367108][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   72.376002][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   72.394471][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   72.403578][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   72.415659][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   72.431535][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   72.444953][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.463720][ T4181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   72.475123][ T4184] 8021q: adding VLAN 0 to HW filter on device team0
[   72.500816][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.520071][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   72.536769][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   72.550437][ T1219] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.557977][ T1219] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.583210][ T1107] Bluetooth: hci1: command 0x041b tx timeout
[   72.589946][ T1107] Bluetooth: hci0: command 0x041b tx timeout
[   72.603323][ T1107] Bluetooth: hci3: command 0x041b tx timeout
[   72.610110][ T4186] 8021q: adding VLAN 0 to HW filter on device team0
[   72.614317][ T1107] Bluetooth: hci2: command 0x041b tx timeout
[   72.626642][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   72.633756][ T1107] Bluetooth: hci4: command 0x041b tx timeout
[   72.642179][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   72.652457][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   72.662632][ T1219] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.669863][ T1219] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.678309][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   72.688258][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   72.697519][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   72.706522][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   72.715689][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   72.723575][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   72.741787][ T4189] device veth0_vlan entered promiscuous mode
[   72.758413][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   72.769500][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   72.779424][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   72.788931][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   72.797623][ T1219] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.804934][ T1219] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.814146][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   72.822700][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   72.831465][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   72.840571][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   72.850017][ T1219] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.857406][ T1219] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.867553][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   72.876551][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   72.885736][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   72.894348][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   72.930878][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.944047][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   72.959046][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   72.969086][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   72.990194][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   73.002077][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   73.010943][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   73.019676][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   73.029633][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   73.038082][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   73.047285][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   73.056213][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   73.063826][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   73.071319][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   73.090599][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.110609][ T4189] device veth1_vlan entered promiscuous mode
[   73.118491][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   73.150821][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   73.160500][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   73.170351][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   73.178157][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   73.187360][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   73.196068][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   73.205675][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   73.216379][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   73.248080][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   73.307604][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   73.318038][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   73.344184][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   73.353010][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   73.365014][ T4189] device veth0_macvtap entered promiscuous mode
[   73.402684][ T4189] device veth1_macvtap entered promiscuous mode
[   73.412685][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   73.437036][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   73.455847][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   73.466291][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   73.476679][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   73.490639][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   73.505296][ T4181] device veth0_vlan entered promiscuous mode
[   73.525078][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.548731][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   73.561456][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   73.578945][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   73.590111][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   73.610010][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.624455][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.633617][ T4189] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.642890][ T4189] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.654307][ T4189] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.663652][ T4189] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.675065][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   73.684111][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   73.695855][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   73.705173][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   73.717295][ T4181] device veth1_vlan entered promiscuous mode
[   73.779504][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   73.791087][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   73.799978][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   73.809847][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   73.818800][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   73.826669][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   73.834626][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   73.842693][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   73.871682][ T4181] device veth0_macvtap entered promiscuous mode
[   73.885608][ T4185] device veth0_vlan entered promiscuous mode
[   73.893174][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   73.906842][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   73.915829][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   73.925459][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   73.938068][ T4181] device veth1_macvtap entered promiscuous mode
[   73.955119][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.972986][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   73.981985][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   74.024945][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.036554][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.048404][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.064000][ T4185] device veth1_vlan entered promiscuous mode
[   74.076142][ T4186] device veth0_vlan entered promiscuous mode
[   74.086202][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   74.095755][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   74.106403][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   74.115155][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   74.125395][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   74.136159][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   74.152998][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.163823][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.176736][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.206332][ T4256] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.214032][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   74.220902][ T4256] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.225504][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   74.242712][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   74.251865][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   74.262379][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   74.271473][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   74.280311][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   74.288990][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   74.297139][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   74.308787][ T4181] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.318949][ T4181] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.328185][ T4181] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.338841][ T4181] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.352019][ T4186] device veth1_vlan entered promiscuous mode
[   74.394852][ T4184] device veth0_vlan entered promiscuous mode
[   74.410506][ T4277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.427037][ T4277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.450294][ T4186] device veth0_macvtap entered promiscuous mode
[   74.464741][ T4186] device veth1_macvtap entered promiscuous mode
[   74.472904][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   74.481378][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   74.490432][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   74.499002][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   74.509718][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   74.520848][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   74.529457][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   74.565297][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   74.579500][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   74.613934][ T4185] device veth0_macvtap entered promiscuous mode
[   74.621908][ T4184] device veth1_vlan entered promiscuous mode
[   74.654058][ T1107] Bluetooth: hci4: command 0x040f tx timeout
[   74.661815][ T4256] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.670663][ T1107] Bluetooth: hci2: command 0x040f tx timeout
[   74.677567][ T1107] Bluetooth: hci3: command 0x040f tx timeout
[   74.685039][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.695530][ T4256] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.696590][ T1107] Bluetooth: hci0: command 0x040f tx timeout
[   74.709603][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.719903][ T1107] Bluetooth: hci1: command 0x040f tx timeout
[   74.720056][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.737563][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.749921][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.788837][ T4185] device veth1_macvtap entered promiscuous mode
[   74.812057][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   74.825107][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   74.834681][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   74.845445][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   74.854496][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   74.862696][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   74.872733][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   74.884439][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.902703][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.916753][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.933970][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.956843][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.052499][ T4299] loop2: detected capacity change from 0 to 512
[   75.119760][ T4299] =======================================================
[   75.119760][ T4299] WARNING: The mand mount option has been deprecated and
[   75.119760][ T4299]          and is ignored by this kernel. Remove the mand
[   75.119760][ T4299]          option from the mount to silence this warning.
[   75.119760][ T4299] =======================================================
[   75.308287][ T4299] EXT4-fs (loop2): orphan cleanup on readonly fs
[   75.342143][ T4299] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.3: bg 0: block 248: padding at end of block bitmap is not set
[   75.364888][ T4299] Quota error (device loop2): write_blk: dquota write failed
[   75.373147][ T4299] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[   75.383484][ T4299] EXT4-fs error (device loop2): ext4_acquire_dquot:6207: comm syz.2.3: Failed to acquire dquot type 1
[   75.412638][ T4299] EXT4-fs (loop2): 1 truncate cleaned up
[   75.434213][ T4299] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback.
[   75.772688][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   75.789571][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   76.360993][ T4299] syz.2.3 (4299) used greatest stack depth: 21128 bytes left
[   76.734244][ T4193] Bluetooth: hci3: command 0x0419 tx timeout
[   76.741254][ T4193] Bluetooth: hci2: command 0x0419 tx timeout
[   76.753755][ T4193] Bluetooth: hci4: command 0x0419 tx timeout
[   76.783057][    C1] sched: RT throttling activated
[   76.790547][ T4269] Bluetooth: hci0: command 0x0419 tx timeout
[   76.800753][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.810152][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.815228][ T4241] Bluetooth: hci1: command 0x0419 tx timeout
[   76.825668][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.834798][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.874982][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.892680][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.145133][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   77.163656][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   77.172896][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   77.184488][ T4184] device veth0_macvtap entered promiscuous mode
[   77.204473][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   77.229537][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.240710][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   77.251704][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.261955][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   77.283370][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.300227][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0
[   77.311596][ T4184] device veth1_macvtap entered promiscuous mode
[   77.351567][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   77.380344][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   77.394307][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   77.410276][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.427286][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.439288][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.457146][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.481295][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.513159][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.553203][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.582723][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   77.594687][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.604687][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   77.618239][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.628860][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   77.639828][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.650347][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   77.661507][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.768576][ T4308] syz.1.2[4308] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   77.850314][ T4308] serio: Serial port ttyS3
[   78.137083][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0
[   78.410570][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.422495][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.454058][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.472642][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.483302][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.515297][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.551364][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.580546][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.595330][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1
[   78.757609][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   78.771358][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   78.786938][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   78.837173][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   79.004074][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   79.033815][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   79.067517][ T4185] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.091823][ T4185] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.120921][ T4185] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.150259][ T4185] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.261887][ T4184] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.271680][ T4184] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.280780][ T4184] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.293577][ T4184] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.388563][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.412597][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.435552][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   79.455860][ T1219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.487641][ T1219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.516943][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   79.557222][ T1219] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.565829][ T4310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.576002][ T4310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.590535][ T1219] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.605107][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   79.622373][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   79.657982][ T1219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.706613][ T1219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.756001][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   79.795474][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.820342][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.842200][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   81.018713][ T4251] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   83.507911][ T4331] loop0: detected capacity change from 0 to 512
[   83.943365][ T4251] usb 3-1: device not accepting address 2, error -71
[   85.097005][ T4351] loop3: detected capacity change from 0 to 512
[   86.815372][ T1110] cfg80211: failed to load regulatory.db
[   87.197013][   T26] audit: type=1326 audit(1755877056.281:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4362 comm="syz.0.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f711e492be9 code=0x7ffc0000
[   87.245891][ T4351] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   87.257085][ T4351] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   87.349332][   T26] audit: type=1326 audit(1755877056.331:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4362 comm="syz.0.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f711e492be9 code=0x7ffc0000
[   87.538242][   T26] audit: type=1326 audit(1755877056.331:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4362 comm="syz.0.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f711e492be9 code=0x7ffc0000
[   87.603171][ T4338] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   87.612041][   T26] audit: type=1326 audit(1755877056.331:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4362 comm="syz.0.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f711e492be9 code=0x7ffc0000
[   87.656461][ T4373] loop0: detected capacity change from 0 to 128
[   87.685168][ T4373] FAT-fs (loop0): Unrecognized mount option "dmask=000000000000000000���7" or missing value
[   87.737465][   T26] audit: type=1326 audit(1755877056.331:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4362 comm="syz.0.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f711e492be9 code=0x7ffc0000
[   87.776327][   T26] audit: type=1326 audit(1755877056.351:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4362 comm="syz.0.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f711e492be9 code=0x7ffc0000
[   87.804452][   T26] audit: type=1326 audit(1755877056.411:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4362 comm="syz.0.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f711e492be9 code=0x7ffc0000
[   87.913132][   T26] audit: type=1326 audit(1755877056.411:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4362 comm="syz.0.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f711e492be9 code=0x7ffc0000
[   87.914225][ T4338] usb 2-1: Using ep0 maxpacket: 32
[   87.952867][   T26] audit: type=1326 audit(1755877056.431:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4362 comm="syz.0.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f711e492be9 code=0x7ffc0000
[   87.978486][   T26] audit: type=1326 audit(1755877056.431:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4362 comm="syz.0.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f711e492be9 code=0x7ffc0000
[   89.023319][ T4338] usb 2-1: unable to get BOS descriptor or descriptor too short
[   89.126661][ T4384] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   89.153426][ T4338] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x1 has invalid maxpacket 2047, setting to 1024
[   89.841135][ T4338] usb 2-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 1024
[   89.859433][ T4338] usb 2-1: config 1 interface 0 has no altsetting 0
[   90.207469][ T4388] syz.3.22 (4388) used greatest stack depth: 20960 bytes left
[   90.991476][ T4338] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[   91.001644][ T4338] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.009871][ T4338] usb 2-1: Product: syz
[   91.014313][ T4338] usb 2-1: Manufacturer: syz
[   91.166210][ T4338] usb 2-1: can't set config #1, error -71
[   91.191641][ T4338] usb 2-1: USB disconnect, device number 2
[   92.729051][ T4406] loop3: detected capacity change from 0 to 1024
[   92.834866][ T4414] loop0: detected capacity change from 0 to 512
[   92.906991][ T4414] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   92.920393][ T4414] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   93.172914][ T4406] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   93.176449][ T4414] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   93.192527][ T4406] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   93.216942][ T4414] EXT4-fs (loop0): 1 truncate cleaned up
[   93.222810][ T4414] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nodiscard,quota,. Quota mode: writeback.
[   93.299409][ T4406] EXT4-fs error (device loop3): ext4_free_blocks:6223: comm syz.3.27: Freeing blocks not in datazone - block = 0, count = 16
[   93.530617][ T4420] team0: Port device team_slave_0 removed
[   94.490314][ T4435] loop2: detected capacity change from 0 to 512
[   94.626554][ T4437] loop3: detected capacity change from 0 to 256
[   94.740068][ T4437] exfat: Unknown parameter 'fsmagic'
[   94.897503][ T4437] xt_hashlimit: max too large, truncated to 1048576
[   95.661454][ T4435] EXT4-fs (loop2): Test dummy encryption mode enabled
[   95.683163][ T4435] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   95.742706][ T4435] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.35: bad orphan inode 131083
[   95.846351][ T4450] loop4: detected capacity change from 0 to 128
[   95.880342][ T4435] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none.
[   95.929203][ T4450] FAT-fs (loop4): Unrecognized mount option "dmask=000000000000000000���7" or missing value
[   96.753749][ T4454] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   97.281571][ T4462] netlink: 'syz.3.39': attribute type 5 has an invalid length.
[   98.411698][ T4475] loop3: detected capacity change from 0 to 4096
[   99.828807][ T4475] EXT4-fs (loop3): Ignoring removed mblk_io_submit option
[   99.839942][ T4475] EXT4-fs (loop3): Test dummy encryption mode enabled
[  100.095897][ T4475] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000000000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback.
[  100.224239][ T4475] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  102.846781][ T4504] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  102.964449][ T4498] team0: Port device team_slave_0 removed
[  103.101215][ T4511] loop3: detected capacity change from 0 to 4096
[  103.123178][ T4509] tipc: Started in network mode
[  103.138838][ T4509] tipc: Node identity b24fa68778aa, cluster identity 4711
[  103.210001][ T4509] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  103.247324][ T4511] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  103.398184][ T4505] tipc: Resetting bearer <eth:syzkaller0>
[  103.941491][ T4505] tipc: Disabling bearer <eth:syzkaller0>
[  104.295065][ T4525] loop2: detected capacity change from 0 to 512
[  104.397947][ T4525] EXT4-fs (loop2): Test dummy encryption mode enabled
[  104.469986][ T4525] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  104.626347][ T4525] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.50: bad orphan inode 131083
[  104.683783][ T4525] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none.
[  105.655277][ T4538] loop4: detected capacity change from 0 to 512
[  105.748740][ T4538] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  105.821185][ T4540] loop2: detected capacity change from 0 to 128
[  105.973595][ T4540] FAT-fs (loop2): Unrecognized mount option "dmask=000000000000000000���7" or missing value
[  111.685016][ T4571] loop4: detected capacity change from 0 to 512
[  111.787816][ T4571] EXT4-fs (loop4): Test dummy encryption mode enabled
[  111.807281][ T4571] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  111.883347][ T4574] loop1: detected capacity change from 0 to 4096
[  111.896361][ T4571] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.64: bad orphan inode 131083
[  111.927012][ T4571] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none.
[  111.978395][ T4574] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  113.213145][ T4172] Bluetooth: hci5: command 0x0409 tx timeout
[  114.143563][ T4564] chnl_net:caif_netlink_parms(): no params data found
[  115.369387][ T4269] Bluetooth: hci5: command 0x041b tx timeout
[  117.269605][ T4564] bridge0: port 1(bridge_slave_0) entered blocking state
[  117.335321][ T4622] loop3: detected capacity change from 0 to 512
[  117.364254][ T4564] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.601343][ T4564] device bridge_slave_0 entered promiscuous mode
[  117.613160][ T4269] Bluetooth: hci5: command 0x040f tx timeout
[  117.621086][ T4622] EXT4-fs (loop3): Test dummy encryption mode enabled
[  117.668266][ T4622] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  117.668735][ T4564] bridge0: port 2(bridge_slave_1) entered blocking state
[  117.686097][ T4564] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.694727][ T4564] device bridge_slave_1 entered promiscuous mode
[  117.732873][   T26] kauditd_printk_skb: 4 callbacks suppressed
[  117.732894][   T26] audit: type=1326 audit(1755877086.811:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4626 comm="syz.2.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e54881be9 code=0x7ffc0000
[  117.764090][ T4622] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.78: bad orphan inode 131083
[  117.775188][ T4622] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none.
[  117.941309][   T26] audit: type=1326 audit(1755877086.821:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4626 comm="syz.2.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f6e54881be9 code=0x7ffc0000
[  118.057032][ T4564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  118.099637][   T26] audit: type=1326 audit(1755877086.821:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4626 comm="syz.2.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e54881be9 code=0x7ffc0000
[  118.259384][ T4564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  118.545535][ T4564] team0: Port device team_slave_0 added
[  118.599693][ T4564] team0: Port device team_slave_1 added
[  118.770572][ T4564] batman_adv: batadv0: Adding interface: batadv_slave_0
[  118.770591][ T4564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  118.770627][ T4564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  118.774677][ T4564] batman_adv: batadv0: Adding interface: batadv_slave_1
[  118.774693][ T4564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  118.774718][ T4564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  120.166191][ T4172] Bluetooth: hci5: command 0x0419 tx timeout
[  120.226962][ T4564] device hsr_slave_0 entered promiscuous mode
[  120.313689][ T4564] device hsr_slave_1 entered promiscuous mode
[  120.327878][ T4564] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  120.370105][ T4564] Cannot create hsr debugfs directory
[  120.530963][ T4659] serio: Serial port ttyS3
[  120.850982][ T4564] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  120.882651][ T4564] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  120.924915][ T4564] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  121.051388][ T4564] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  125.262601][ T4564] 8021q: adding VLAN 0 to HW filter on device bond0
[  125.382078][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  125.399886][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  125.452884][ T4564] 8021q: adding VLAN 0 to HW filter on device team0
[  125.507736][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  125.583815][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  125.592621][ T4440] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.599791][ T4440] bridge0: port 1(bridge_slave_0) entered forwarding state
[  125.715109][ T4691] loop1: detected capacity change from 0 to 512
[  125.833848][ T4691] EXT4-fs (loop1): Test dummy encryption mode enabled
[  125.855669][ T4691] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  125.855758][ T4687] device bridge0 entered promiscuous mode
[  125.917366][ T4687] device macsec1 entered promiscuous mode
[  126.187703][ T4687] bridge0: port 3(macsec1) entered blocking state
[  126.220481][ T4687] bridge0: port 3(macsec1) entered disabled state
[  126.256233][ T4691] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.97: bad orphan inode 131083
[  126.319962][ T4691] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none.
[  126.561734][ T4687] device bridge0 left promiscuous mode
[  126.610837][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  126.658316][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  126.904945][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  126.953457][ T4440] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.960646][ T4440] bridge0: port 2(bridge_slave_1) entered forwarding state
[  127.016990][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  127.056870][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  127.098035][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  127.148165][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  127.287539][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  127.311183][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  127.825156][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  127.844057][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  127.864263][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  127.889478][ T4564] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  127.912132][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  127.953893][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  127.968376][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  128.350256][ T4712] loop2: detected capacity change from 0 to 8192
[  129.283764][   T26] audit: type=1800 audit(1755877098.361:19): pid=4711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.102" name="bus" dev="loop2" ino=1048590 res=0 errno=0
[  129.538581][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  129.562784][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  129.589064][ T4729] loop1: detected capacity change from 0 to 256
[  129.631818][ T4729] FAT-fs (loop1): Unrecognized mount option "u0000000000000000005" or missing value
[  129.781401][ T4564] 8021q: adding VLAN 0 to HW filter on device batadv0
[  130.601995][ T4256] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.881172][ T4256] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.006632][ T4256] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.047273][ T4751] netlink: 'syz.4.111': attribute type 5 has an invalid length.
[  131.147152][ T4256] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.295679][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  131.309144][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  131.458980][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  131.480139][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  131.851009][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  131.890442][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  131.940855][ T4564] device veth0_vlan entered promiscuous mode
[  132.089000][ T4564] device veth1_vlan entered promiscuous mode
[  132.230882][ T4564] device veth0_macvtap entered promiscuous mode
[  132.330236][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  132.363191][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  132.410083][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  132.442241][ T4564] device veth1_macvtap entered promiscuous mode
[  132.607549][ T4564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  132.642194][ T4564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  132.690788][ T4564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  132.742521][ T4564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  132.790147][ T4564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  132.815214][ T1428] ieee802154 phy0 wpan0: encryption failed: -22
[  132.821606][ T1428] ieee802154 phy1 wpan1: encryption failed: -22
[  132.853266][ T4564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  132.881118][ T4564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  132.962502][ T4564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  132.980101][ T4564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  133.000920][ T4564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  133.037227][ T4564] batman_adv: batadv0: Interface activated: batadv_slave_0
[  133.069735][ T4776] loop2: detected capacity change from 0 to 2048
[  133.091260][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  133.104296][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  133.154800][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  133.168645][ T4564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  133.203791][ T4366]  loop2: p4 < >
[  133.210748][ T4564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  133.253493][ T4776]  loop2: p4 < >
[  133.297864][ T4564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  133.329982][ T4564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  133.369393][ T4564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  133.403134][ T4564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  133.463107][ T4564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  133.504337][ T4564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  133.553168][ T4564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  133.589719][ T4564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  133.627034][ T4564] batman_adv: batadv0: Interface activated: batadv_slave_1
[  133.673580][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  133.683657][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  133.706894][ T4564] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  133.723155][ T4564] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  133.742240][ T4564] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  133.762529][ T4564] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  133.846616][ T4366] udevd[4366]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  133.993284][ T4366] udevd[4366]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  134.049066][ T1219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  134.077998][ T1219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  134.164328][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  134.263813][ T4480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  134.271995][ T4480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  134.326086][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  134.855736][ T4811] serio: Serial port ttyS3
[  135.272198][ T4820] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  135.800756][ T4256] device hsr_slave_0 left promiscuous mode
[  135.829639][ T4256] device hsr_slave_1 left promiscuous mode
[  135.916482][ T4256] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  135.934559][ T4256] batman_adv: batadv0: Removing interface: batadv_slave_0
[  135.983314][ T4256] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  135.991160][ T4256] batman_adv: batadv0: Removing interface: batadv_slave_1
[  136.010042][ T4256] device bridge_slave_1 left promiscuous mode
[  136.020502][ T4256] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.039014][ T4256] device bridge_slave_0 left promiscuous mode
[  136.045562][ T4256] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.775638][ T4256] device veth1_macvtap left promiscuous mode
[  136.782311][ T4256] device veth0_macvtap left promiscuous mode
[  136.804509][ T4256] device veth1_vlan left promiscuous mode
[  136.810716][ T4256] device veth0_vlan left promiscuous mode
[  137.221526][ T4831] loop4: detected capacity change from 0 to 512
[  137.333889][ T4831] EXT4-fs (loop4): Test dummy encryption mode enabled
[  137.383972][ T4831] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.125: inode #1: comm syz.4.125: iget: illegal inode #
[  137.415348][ T4831] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.125: error while reading EA inode 1 err=-117
[  137.438758][ T4831] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.125: inode #1: comm syz.4.125: iget: illegal inode #
[  137.484518][ T4256] team0 (unregistering): Port device team_slave_1 removed
[  137.486241][ T4831] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.125: error while reading EA inode 1 err=-117
[  137.507761][ T4256] team0 (unregistering): Port device team_slave_0 removed
[  137.527871][ T4256] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  137.547843][ T4256] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  137.561538][ T4831] EXT4-fs (loop4): 1 orphan inode deleted
[  137.577236][ T4831] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,discard,norecovery,noinit_itable,test_dummy_encryption,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,jqfmt=vfsold,dioread_lock,noblock_validity,nouid32,,errors=continue. Quota mode: none.
[  137.851201][ T4256] bond0 (unregistering): Released all slaves
[  138.488129][ T4859] syz.2.132[4859] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  140.765171][ T4883] loop2: detected capacity change from 0 to 4096
[  140.836969][ T4883] EXT4-fs (loop2): Ignoring removed mblk_io_submit option
[  140.847397][ T4883] EXT4-fs (loop2): Test dummy encryption mode enabled
[  141.052529][ T4883] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000000000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback.
[  141.222091][ T4883] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  141.947598][ T4902] syz.5.141[4902] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  141.947741][ T4902] syz.5.141[4902] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  141.966415][ T4902] loop5: detected capacity change from 0 to 256
[  142.194671][ T4904] xt_NFQUEUE: number of total queues is 0
[  142.945199][ T4902] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  142.981509][ T4898] netlink: 104 bytes leftover after parsing attributes in process `syz.5.141'.
[  143.334219][ T4915] syz.4.144[4915] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  143.360708][ T4915] serio: Serial port ttyS3
[  144.487216][ T4931] syz.2.145[4931] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  144.575649][ T4928] loop5: detected capacity change from 0 to 128
[  145.183206][ T4928] FAT-fs (loop5): bogus sectors per cluster 0
[  145.189359][ T4928] FAT-fs (loop5): Can't find a valid FAT filesystem
[  145.328935][ T4943] netlink: 'syz.2.152': attribute type 14 has an invalid length.
[  146.370491][ T4955] loop3: detected capacity change from 0 to 512
[  146.467343][ T4955] EXT4-fs (loop3): Test dummy encryption mode enabled
[  146.494882][ T4955] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  146.794548][ T4953] xt_NFQUEUE: number of total queues is 0
[  147.230628][ T4955] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.157: bad orphan inode 131083
[  147.276296][ T4955] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none.
[  148.520240][ T4987] syz.1.160[4987] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  148.548428][ T4987] serio: Serial port ttyS3
[  149.422582][ T4989] loop4: detected capacity change from 0 to 4096
[  149.567035][ T4989] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  150.782855][ T5011] syz.1.164[5011] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  152.445503][ T5031] loop1: detected capacity change from 0 to 512
[  152.594437][ T5031] EXT4-fs (loop1): Test dummy encryption mode enabled
[  152.763428][ T5031] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  152.909915][ T5041] syz.3.173[5041] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  153.444645][ T5031] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.171: bad orphan inode 131083
[  153.563117][ T5031] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none.
[  154.873248][ T4319] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  155.075616][ T5062] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  155.199078][ T5050] loop3: detected capacity change from 0 to 40427
[  155.297052][ T4319] usb 2-1: Using ep0 maxpacket: 32
[  155.423725][ T4319] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  155.676823][ T4319] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  156.118436][ T4319] usb 2-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00
[  156.161598][ T5050] F2FS-fs (loop3): invalid crc value
[  156.486522][ T4319] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.689920][ T5050] F2FS-fs (loop3): Found nat_bits in checkpoint
[  156.824940][ T4319] usb 2-1: config 0 descriptor??
[  157.757156][ T4319] hid (null): invalid report_size -60084347
[  157.787561][ T5050] F2FS-fs (loop3): Start checkpoint disabled!
[  158.005822][ T5083] syz.4.179[5083] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  158.217282][ T4319] uclogic 0003:28BD:0042.0001: invalid report_size -60084347
[  158.237730][ T4319] uclogic 0003:28BD:0042.0001: item 0 4 1 7 parsing failed
[  158.253572][ T4319] uclogic 0003:28BD:0042.0001: parse failed
[  158.259717][ T4319] uclogic: probe of 0003:28BD:0042.0001 failed with error -22
[  158.291408][ T4319] usb 2-1: USB disconnect, device number 3
[  160.513542][ T5114] syz.4.185[5114] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  160.830559][ T5112] syz.5.182 (5112) used greatest stack depth: 20800 bytes left
[  162.714245][   T26] audit: type=1326 audit(1755877131.461:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5126 comm="syz.3.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9faecbe9 code=0x7ffc0000
[  163.711118][   T26] audit: type=1326 audit(1755877131.471:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5126 comm="syz.3.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9faecbe9 code=0x7ffc0000
[  163.778714][   T26] audit: type=1326 audit(1755877131.531:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5126 comm="syz.3.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f9f9faecbe9 code=0x7ffc0000
[  163.802000][   T26] audit: type=1326 audit(1755877131.541:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5126 comm="syz.3.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9faecbe9 code=0x7ffc0000
[  164.354299][   T26] audit: type=1326 audit(1755877131.541:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5126 comm="syz.3.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9faecbe9 code=0x7ffc0000
[  166.036646][ T5153] syz.4.195[5153] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  167.463501][ T5176] syz.5.199[5176] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  168.096025][ T5178] loop4: detected capacity change from 0 to 512
[  168.230424][ T5082] Bluetooth: hci5: command 0x0405 tx timeout
[  170.189533][ T5199] Zero length message leads to an empty skb
[  170.779803][ T5198] loop3: detected capacity change from 0 to 512
[  171.182774][ T5198] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  171.637063][ T5198] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  172.523139][ T4550] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  172.568072][ T5216] loop1: detected capacity change from 0 to 128
[  172.729742][ T5216] EXT4-fs (loop1): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,,errors=continue. Quota mode: none.
[  172.745357][ T5216] ext4 filesystem being mounted at /45/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  172.757931][ T5216] netlink: 64 bytes leftover after parsing attributes in process `syz.1.209'.
[  174.173473][ T5232] loop5: detected capacity change from 0 to 2048
[  174.475226][ T5232] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier=0x0000000000000000,resuid=0x0000000000000000,block_validity,errors=remount-ro,. Quota mode: none.
[  174.609361][ T5243] process 'syz.3.213' launched '/dev/fd/-1' with NULL argv: empty string added
[  175.987944][ T5248] binder_alloc: 5247: binder_alloc_buf, no vma
[  176.361256][ T5261] syz.1.217[5261] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  176.362012][ T5261] syz.1.217[5261] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  176.495578][ T5261] loop1: detected capacity change from 0 to 256
[  176.875493][ T5260] netlink: 12 bytes leftover after parsing attributes in process `syz.3.220'.
[  177.709636][ T5264] HTB: quantum of class 8003000C is small. Consider r2q change.
[  177.817211][ T5261] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  181.263913][ T5297] loop2: detected capacity change from 0 to 256
[  181.860772][ T5297] FAT-fs (loop2): Directory bread(block 64) failed
[  181.867729][ T5297] FAT-fs (loop2): Directory bread(block 65) failed
[  181.875059][ T5297] FAT-fs (loop2): Directory bread(block 66) failed
[  181.881807][ T5297] FAT-fs (loop2): Directory bread(block 67) failed
[  181.889399][ T5297] FAT-fs (loop2): Directory bread(block 68) failed
[  181.896679][ T5297] FAT-fs (loop2): Directory bread(block 69) failed
[  181.903928][ T5297] FAT-fs (loop2): Directory bread(block 70) failed
[  181.910718][ T5297] FAT-fs (loop2): Directory bread(block 71) failed
[  181.917907][ T5297] FAT-fs (loop2): Directory bread(block 72) failed
[  181.924745][ T5297] FAT-fs (loop2): Directory bread(block 73) failed
[  184.766076][ T5268] bridge0: port 2(bridge_slave_1) entered disabled state
[  184.774571][ T5268] bridge0: port 1(bridge_slave_0) entered disabled state
[  185.010199][ T5268] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  185.027059][ T5268] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  185.259855][ T5268] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  185.271632][ T5268] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  185.281165][ T5268] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  185.290484][ T5268] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  185.477346][ T5320] binder_alloc: 5319: binder_alloc_buf, no vma
[  185.533128][ T5291] netlink: 24 bytes leftover after parsing attributes in process `syz.1.224'.
[  186.183211][ T4550] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  188.613200][ T4550] usb 3-1: Using ep0 maxpacket: 16
[  188.736256][ T5359] binder: BINDER_SET_CONTEXT_MGR already set
[  188.755631][ T4550] usb 3-1: config 0 has an invalid interface number: 105 but max is 0
[  188.811374][ T4550] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  188.826700][ T5362] xt_NFQUEUE: number of total queues is 0
[  188.859139][ T5359] binder: 5358:5359 ioctl 4018620d 200000004a80 returned -16
[  188.899859][ T4550] usb 3-1: config 0 has no interface number 0
[  189.013383][ T4550] usb 3-1: string descriptor 0 read error: -71
[  189.042009][ T4550] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  189.261363][ T5372] loop4: detected capacity change from 0 to 1024
[  190.429188][ T5372] EXT4-fs (loop4): Ignoring removed nobh option
[  191.351180][ T5372] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #11: comm syz.4.240: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  191.377028][ T5372] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.240: couldn't read orphan inode 11 (err -117)
[  191.391689][ T5372] EXT4-fs (loop4): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,norecovery,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback.
[  191.783614][ T4550] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.793514][ T4550] usb 3-1: config 0 descriptor??
[  192.327646][ T4550] usb 3-1: can't set config #0, error -71
[  192.334947][ T4550] usb 3-1: USB disconnect, device number 4
[  192.596778][ T4172] Bluetooth: hci1: command 0x0406 tx timeout
[  192.621829][ T4172] Bluetooth: hci0: command 0x0406 tx timeout
[  193.135014][    T7] Bluetooth: hci2: command 0x0406 tx timeout
[  193.336409][ T5146] Bluetooth: hci4: command 0x0406 tx timeout
[  194.302393][ T1428] ieee802154 phy0 wpan0: encryption failed: -22
[  194.318230][ T1428] ieee802154 phy1 wpan1: encryption failed: -22
[  195.078065][ T5421] binder: BINDER_SET_CONTEXT_MGR already set
[  195.104646][ T5421] binder: 5419:5421 ioctl 4018620d 200000004a80 returned -16
[  196.712584][ T5435] input: syz0 as /devices/virtual/input/input5
[  197.490536][ T5462] loop5: detected capacity change from 0 to 1024
[  198.340920][ T5467] loop1: detected capacity change from 0 to 512
[  198.409194][ T5460] fuse: Bad value for 'fd'
[  198.490567][ T5469] loop3: detected capacity change from 0 to 1024
[  198.545564][ T5467] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  198.573445][ T5467] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  198.630457][ T5469] EXT4-fs (loop3): Ignoring removed orlov option
[  199.195456][ T5469] EXT4-fs (loop3): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback.
[  199.341583][    T7] hid-generic 7052:422140FB:2770E98C.0002: item fetching failed at offset 0/23
[  199.349043][   T26] audit: type=1804 audit(1755877168.431:25): pid=5469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.267" name="/newroot/56/bus/bus" dev="loop3" ino=18 res=1 errno=0
[  199.372030][    T7] hid-generic: probe of 7052:422140FB:2770E98C.0002 failed with error -22
[  199.498484][ T5469] EXT4-fs (loop3): Ignoring removed orlov option
[  199.550176][ T5469] EXT4-fs (loop3): Remounting file system with no journal so ignoring journalled data option
[  199.637492][ T5469] EXT4-fs (loop3): re-mounted. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,sb=0x00000000000050cf,orlov,norecovery,barrier,data=journal,. Quota mode: writeback.
[  199.809455][ T5494] syz.4.271[5494] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  199.838782][ T5494] serio: Serial port ttyS3
[  200.368789][ T5493] loop5: detected capacity change from 0 to 4096
[  200.420709][ T5493] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  200.756355][ T5493] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  200.765674][ T5493] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  201.881370][ T5521] loop5: detected capacity change from 0 to 128
[  203.694194][   T26] audit: type=1326 audit(1755877172.501:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5549 comm="syz.3.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9faecbe9 code=0x7ffc0000
[  203.945062][   T26] audit: type=1326 audit(1755877172.511:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5549 comm="syz.3.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9faecbe9 code=0x7ffc0000
[  204.125046][   T26] audit: type=1326 audit(1755877172.521:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5549 comm="syz.3.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f9f9faecbe9 code=0x7ffc0000
[  204.238691][ T5559] loop5: detected capacity change from 0 to 1024
[  204.327130][ T5559] EXT4-fs (loop5): Ignoring removed orlov option
[  204.350339][ T5565] loop2: detected capacity change from 0 to 256
[  204.362100][   T26] audit: type=1326 audit(1755877172.521:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5549 comm="syz.3.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9faecbe9 code=0x7ffc0000
[  204.430095][ T5565] FAT-fs (loop2): Unrecognized mount option "18446744073709551615��Dk�
���9�8�R�Mz��=��)n���{.Y�'@���|��mX"jr(H�����Uαs@�Txb��I�w������|?�r��" or missing value
[  204.730094][ T5570] syz.3.286[5570] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  204.756468][ T5570] serio: Serial port ttyS3
[  205.044923][ T5572] syz.1.284[5572] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  205.704595][ T5559] EXT4-fs (loop5): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback.
[  205.752655][   T26] audit: type=1326 audit(1755877172.521:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5549 comm="syz.3.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9faecbe9 code=0x7ffc0000
[  205.960798][   T26] audit: type=1326 audit(1755877172.521:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5549 comm="syz.3.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f9f9faecbe9 code=0x7ffc0000
[  206.825487][   T26] audit: type=1326 audit(1755877172.521:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5549 comm="syz.3.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9faecbe9 code=0x7ffc0000
[  206.960777][   T26] audit: type=1326 audit(1755877172.531:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5549 comm="syz.3.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9faecbe9 code=0x7ffc0000
[  206.983375][   T13] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  207.063447][   T26] audit: type=1326 audit(1755877172.541:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5549 comm="syz.3.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9f9faecbe9 code=0x7ffc0000
[  207.208281][ T5602] loop4: detected capacity change from 0 to 512
[  207.224966][   T26] audit: type=1326 audit(1755877172.541:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5549 comm="syz.3.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9faecbe9 code=0x7ffc0000
[  207.305300][   T13] usb 4-1: Using ep0 maxpacket: 32
[  207.330980][ T5604] 9pnet: Insufficient options for proto=fd
[  207.386191][ T5604] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  207.732477][ T5602] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  207.770770][   T26] audit: type=1326 audit(1755877172.541:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5549 comm="syz.3.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9faecbe9 code=0x7ffc0000
[  208.017999][ T5602] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  208.088575][   T26] audit: type=1326 audit(1755877172.551:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5549 comm="syz.3.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7f9f9faecbe9 code=0x7ffc0000
[  208.111341][   T26] audit: type=1326 audit(1755877172.551:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5549 comm="syz.3.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9faecbe9 code=0x7ffc0000
[  208.153325][   T13] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  208.202377][   T13] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  208.375467][   T13] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  208.395131][   T13] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  208.425647][   T13] usb 4-1: Product: syz
[  208.431131][   T13] usb 4-1: Manufacturer: syz
[  208.498377][   T13] hub 4-1:4.0: USB hub found
[  208.788899][   T13] hub 4-1:4.0: config failed, can't read hub descriptor (err -22)
[  208.877038][   T13] usb 4-1: USB disconnect, device number 2
[  209.382618][ T5624] syz.3.298[5624] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  209.454028][ T5624] serio: Serial port ttyS3
[  211.070653][ T5640] loop5: detected capacity change from 0 to 1024
[  211.103359][ T5640] EXT4-fs (loop5): Ignoring removed orlov option
[  211.470000][ T5640] EXT4-fs (loop5): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback.
[  211.887299][   T26] kauditd_printk_skb: 2 callbacks suppressed
[  211.887315][   T26] audit: type=1804 audit(1755877180.971:41): pid=5640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.302" name="/newroot/38/bus/bus" dev="loop5" ino=18 res=1 errno=0
[  211.984520][ T5640] EXT4-fs (loop5): Ignoring removed orlov option
[  212.022253][ T5640] EXT4-fs (loop5): Remounting file system with no journal so ignoring journalled data option
[  212.083859][ T5640] EXT4-fs (loop5): re-mounted. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,sb=0x00000000000050cf,orlov,norecovery,barrier,data=journal,. Quota mode: writeback.
[  212.333861][ T5652] syz.3.303[5652] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  212.373653][ T5652] serio: Serial port ttyS3
[  213.085843][ T5666] loop3: detected capacity change from 0 to 512
[  213.123665][ T5666] EXT4-fs (loop3): inline encryption not supported
[  213.137205][ T5666] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  213.221150][ T5670] 9pnet: Insufficient options for proto=fd
[  213.232496][ T5670] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  213.360986][ T5666] EXT4-fs (loop3): 1 truncate cleaned up
[  213.367828][ T5666] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,discard,inlinecrypt,debug_want_extra_isize=0x0000000000000080,nojournal_checksum,jqfmt=vfsv1,,errors=continue. Quota mode: writeback.
[  214.189130][ T5666] syz.3.307 (5666) used greatest stack depth: 19704 bytes left
[  215.760016][ T5709] xt_NFQUEUE: number of total queues is 0
[  216.557623][ T5719] loop3: detected capacity change from 0 to 16
[  216.583076][    C0] 
[  216.585763][    C0] ======================================================
[  216.592800][    C0] WARNING: possible circular locking dependency detected
[  216.599931][    C0] 5.15.189-syzkaller #0 Not tainted
[  216.605142][    C0] ------------------------------------------------------
[  216.612167][    C0] syz.4.319/5717 is trying to acquire lock:
[  216.618353][    C0] ffff88805ff8c1b8 (&trie->lock){..-.}-{2:2}, at: trie_delete_elem+0x90/0x710
[  216.627558][    C0] 
[  216.627558][    C0] but task is already holding lock:
[  216.634935][    C0] ffff8880b9028098 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270
[  216.643906][    C0] 
[  216.643906][    C0] which lock already depends on the new lock.
[  216.643906][    C0] 
[  216.654522][    C0] 
[  216.654522][    C0] the existing dependency chain (in reverse order) is:
[  216.663628][    C0] 
[  216.663628][    C0] -> #2 (&base->lock){-.-.}-{2:2}:
[  216.670933][    C0]        _raw_spin_lock_irqsave+0xa4/0xf0
[  216.676750][    C0]        lock_timer_base+0x123/0x270
[  216.682041][    C0]        __mod_timer+0x117/0xd20
[  216.687072][    C0]        queue_delayed_work_on+0x126/0x1e0
[  216.692884][    C0]        kvfree_call_rcu+0x4a9/0x7c0
[  216.698170][    C0]        rtnl_register_internal+0x44e/0x540
[  216.704074][    C0]        rtnl_register+0x2e/0x70
[  216.709012][    C0]        ip_rt_init+0x2e0/0x3a0
[  216.713866][    C0]        ip_init+0xa/0x20
[  216.718234][    C0]        inet_init+0x28b/0x3a0
[  216.723003][    C0]        do_one_initcall+0x1ee/0x680
[  216.728290][    C0]        do_initcall_level+0x137/0x1f0
[  216.733861][    C0]        do_initcalls+0x4b/0x90
[  216.738987][    C0]        kernel_init_freeable+0x3ce/0x560
[  216.745272][    C0]        kernel_init+0x19/0x1b0
[  216.750144][    C0]        ret_from_fork+0x1f/0x30
[  216.755117][    C0] 
[  216.755117][    C0] -> #1 (krc.lock){..-.}-{2:2}:
[  216.762413][    C0]        _raw_spin_lock+0x2a/0x40
[  216.767475][    C0]        kvfree_call_rcu+0x186/0x7c0
[  216.772777][    C0]        trie_delete_elem+0x58c/0x710
[  216.778165][    C0]        0xffffffffa0016cc2
[  216.782696][    C0]        bpf_trace_run3+0x17e/0x320
[  216.787914][    C0]        __bpf_trace_kmem_cache_free+0x99/0xc0
[  216.794079][    C0]        kmem_cache_free+0x1e7/0x210
[  216.799377][    C0]        __dentry_kill+0x4ef/0x650
[  216.804507][    C0]        dentry_kill+0xb8/0x290
[  216.809368][    C0]        dput+0xd8/0x1a0
[  216.813615][    C0]        __fput+0x5ee/0x930
[  216.818133][    C0]        task_work_run+0x125/0x1a0
[  216.823261][    C0]        exit_to_user_mode_loop+0x10f/0x130
[  216.829169][    C0]        exit_to_user_mode_prepare+0xb1/0x140
[  216.835351][    C0]        syscall_exit_to_user_mode+0x16/0x40
[  216.841357][    C0]        do_syscall_64+0x58/0xa0
[  216.846320][    C0]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  216.852982][    C0] 
[  216.852982][    C0] -> #0 (&trie->lock){..-.}-{2:2}:
[  216.860298][    C0]        __lock_acquire+0x2c33/0x7c60
[  216.865692][    C0]        lock_acquire+0x197/0x3f0
[  216.870734][    C0]        _raw_spin_lock_irqsave+0xa4/0xf0
[  216.876503][    C0]        trie_delete_elem+0x90/0x710
[  216.881954][    C0]        bpf_prog_fdee3c9a1e8a2a6e+0x3d/0x67c
[  216.888035][    C0]        bpf_trace_run3+0x17e/0x320
[  216.893522][    C0]        enqueue_timer+0x394/0x520
[  216.898747][    C0]        __mod_timer+0x8e1/0xd20
[  216.903702][    C0]        mrp_join_timer+0x142/0x180
[  216.908913][    C0]        call_timer_fn+0x16c/0x530
[  216.914035][    C0]        __run_timers+0x525/0x7c0
[  216.919257][    C0]        run_timer_softirq+0x63/0xf0
[  216.924726][    C0]        handle_softirqs+0x328/0x820
[  216.930024][    C0]        __irq_exit_rcu+0x12f/0x220
[  216.935427][    C0]        irq_exit_rcu+0x5/0x20
[  216.940209][    C0]        sysvec_apic_timer_interrupt+0xa0/0xc0
[  216.946376][    C0]        asm_sysvec_apic_timer_interrupt+0x16/0x20
[  216.952892][    C0]        free_pages_and_swap_cache+0x4c/0x90
[  216.958981][    C0]        tlb_flush_mmu+0xc5/0x170
[  216.964115][    C0]        unmap_page_range+0x2096/0x2520
[  216.969855][    C0]        unmap_vmas+0x11b/0x230
[  216.974724][    C0]        exit_mmap+0x38f/0x5f0
[  216.979505][    C0]        __mmput+0x115/0x3b0
[  216.984107][    C0]        exit_mm+0x567/0x6c0
[  216.988716][    C0]        do_exit+0x5a1/0x20a0
[  216.993407][    C0]        do_group_exit+0x12e/0x300
[  216.998637][    C0]        __x64_sys_exit_group+0x3b/0x40
[  217.004195][    C0]        do_syscall_64+0x4c/0xa0
[  217.009151][    C0]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  217.015740][    C0] 
[  217.015740][    C0] other info that might help us debug this:
[  217.015740][    C0] 
[  217.026237][    C0] Chain exists of:
[  217.026237][    C0]   &trie->lock --> krc.lock --> &base->lock
[  217.026237][    C0] 
[  217.037986][    C0]  Possible unsafe locking scenario:
[  217.037986][    C0] 
[  217.045616][    C0]        CPU0                    CPU1
[  217.051304][    C0]        ----                    ----
[  217.056696][    C0]   lock(&base->lock);
[  217.060870][    C0]                                lock(krc.lock);
[  217.067378][    C0]                                lock(&base->lock);
[  217.074061][    C0]   lock(&trie->lock);
[  217.078140][    C0] 
[  217.078140][    C0]  *** DEADLOCK ***
[  217.078140][    C0] 
[  217.086301][    C0] 4 locks held by syz.4.319/5717:
[  217.091332][    C0]  #0: ffffc90000007be0 ((&app->join_timer)){+.-.}-{0:0}, at: call_timer_fn+0xbb/0x530
[  217.101095][    C0]  #1: ffff8880613920c8 (&app->lock){+.-.}-{2:2}, at: mrp_join_timer+0xd2/0x180
[  217.110260][    C0]  #2: ffff8880b9028098 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270
[  217.119806][    C0]  #3: ffffffff8c11c360 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30
[  217.129402][    C0] 
[  217.129402][    C0] stack backtrace:
[  217.135304][    C0] CPU: 0 PID: 5717 Comm: syz.4.319 Not tainted 5.15.189-syzkaller #0
[  217.143393][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  217.154099][    C0] Call Trace:
[  217.157497][    C0]  <IRQ>
[  217.160523][    C0]  dump_stack_lvl+0x168/0x230
[  217.165209][    C0]  ? load_image+0x3b0/0x3b0
[  217.169899][    C0]  ? show_regs_print_info+0x20/0x20
[  217.175108][    C0]  ? print_circular_bug+0x12b/0x1a0
[  217.180413][    C0]  check_noncircular+0x274/0x310
[  217.185358][    C0]  ? add_chain_block+0x940/0x940
[  217.190429][    C0]  ? lockdep_lock+0xdc/0x1e0
[  217.195041][    C0]  ? mark_lock+0x94/0x320
[  217.199384][    C0]  __lock_acquire+0x2c33/0x7c60
[  217.204255][    C0]  ? __lock_acquire+0x12d9/0x7c60
[  217.209390][    C0]  ? verify_lock_unused+0x140/0x140
[  217.214778][    C0]  ? __lock_acquire+0x13ad/0x7c60
[  217.219830][    C0]  lock_acquire+0x197/0x3f0
[  217.224452][    C0]  ? trie_delete_elem+0x90/0x710
[  217.229841][    C0]  ? verify_lock_unused+0x140/0x140
[  217.235145][    C0]  ? __lock_acquire+0x13ad/0x7c60
[  217.240455][    C0]  ? read_lock_is_recursive+0x10/0x10
[  217.246057][    C0]  ? __lock_acquire+0x13ad/0x7c60
[  217.251230][    C0]  _raw_spin_lock_irqsave+0xa4/0xf0
[  217.256645][    C0]  ? trie_delete_elem+0x90/0x710
[  217.261680][    C0]  ? _raw_spin_lock+0x40/0x40
[  217.266813][    C0]  trie_delete_elem+0x90/0x710
[  217.271768][    C0]  ? __rwlock_init+0x140/0x140
[  217.276536][    C0]  bpf_prog_fdee3c9a1e8a2a6e+0x3d/0x67c
[  217.282278][    C0]  bpf_trace_run3+0x17e/0x320
[  217.286960][    C0]  ? bpf_trace_run2+0x2d0/0x2d0
[  217.291910][    C0]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  217.297813][    C0]  ? _raw_spin_lock_irqsave+0xb0/0xf0
[  217.303293][    C0]  ? _raw_spin_lock+0x40/0x40
[  217.308327][    C0]  enqueue_timer+0x394/0x520
[  217.313100][    C0]  __mod_timer+0x8e1/0xd20
[  217.317574][    C0]  mrp_join_timer+0x142/0x180
[  217.322352][    C0]  ? mrp_init_applicant+0x4e0/0x4e0
[  217.327553][    C0]  call_timer_fn+0x16c/0x530
[  217.332241][    C0]  ? mrp_init_applicant+0x4e0/0x4e0
[  217.337443][    C0]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  217.343433][    C0]  ? __run_timers+0x7c0/0x7c0
[  217.348122][    C0]  ? rcu_is_watching+0x11/0xa0
[  217.352895][    C0]  ? _raw_spin_unlock_irq+0x1f/0x40
[  217.358187][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[  217.363390][    C0]  ? mrp_init_applicant+0x4e0/0x4e0
[  217.368629][    C0]  __run_timers+0x525/0x7c0
[  217.373164][    C0]  ? detach_timer+0x2b0/0x2b0
[  217.377852][    C0]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  217.383843][    C0]  ? sched_clock_cpu+0x15/0x3c0
[  217.388785][    C0]  ? ktime_get_real_ts64+0x420/0x420
[  217.394266][    C0]  run_timer_softirq+0x63/0xf0
[  217.399040][    C0]  handle_softirqs+0x328/0x820
[  217.403979][    C0]  ? __irq_exit_rcu+0x12f/0x220
[  217.408834][    C0]  ? do_softirq+0x200/0x200
[  217.413342][    C0]  __irq_exit_rcu+0x12f/0x220
[  217.418120][    C0]  ? irq_exit_rcu+0x20/0x20
[  217.422638][    C0]  irq_exit_rcu+0x5/0x20
[  217.426880][    C0]  sysvec_apic_timer_interrupt+0xa0/0xc0
[  217.432614][    C0]  </IRQ>
[  217.435549][    C0]  <TASK>
[  217.438614][    C0]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  217.445224][    C0] RIP: 0010:free_pages_and_swap_cache+0x4c/0x90
[  217.451563][    C0] Code: db 7e 4e 89 d8 4c 8d 3c c5 f8 ff ff ff 45 31 e4 49 bd 00 00 00 00 00 fc ff df 4b 8d 3c 26 48 89 f8 48 c1 e8 03 42 80 3c 28 00 <74> 05 e8 6d 86 07 00 4b 8b 3c 26 e8 84 fa ff ff 4d 39 e7 74 0b e8
[  217.471263][    C0] RSP: 0018:ffffc90002fcf830 EFLAGS: 00000246
[  217.477560][    C0] RAX: 1ffff1100c872e70 RBX: 00000000000001fe RCX: ffff88807d239dc0
[  217.485550][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888064397380
[  217.493526][    C0] RBP: 00000000000001fe R08: dffffc0000000000 R09: fffff9400031f999
[  217.501499][    C0] R10: fffff9400031f999 R11: 1ffffd400031f998 R12: 0000000000000370
[  217.509477][    C0] R13: dffffc0000000000 R14: ffff888064397010 R15: 0000000000000fe8
[  217.517592][    C0]  tlb_flush_mmu+0xc5/0x170
[  217.522112][    C0]  unmap_page_range+0x2096/0x2520
[  217.527250][    C0]  ? uprobe_munmap+0x165/0x3f0
[  217.532118][    C0]  unmap_vmas+0x11b/0x230
[  217.536690][    C0]  ? uprobe_clear_state+0x4f/0x460
[  217.541825][    C0]  ? unmap_page_range+0x2520/0x2520
[  217.547047][    C0]  ? __mutex_lock_common+0x431/0x2390
[  217.552439][    C0]  ? memset+0x1e/0x40
[  217.556532][    C0]  exit_mmap+0x38f/0x5f0
[  217.560785][    C0]  ? vm_brk+0x20/0x20
[  217.564796][    C0]  ? uprobe_clear_state+0x2f6/0x460
[  217.570037][    C0]  ? mm_update_next_owner+0x5e1/0x640
[  217.575706][    C0]  __mmput+0x115/0x3b0
[  217.579900][    C0]  exit_mm+0x567/0x6c0
[  217.584088][    C0]  ? _raw_spin_lock_irqsave+0xf0/0xf0
[  217.589737][    C0]  ? do_exit+0x20a0/0x20a0
[  217.594287][    C0]  ? taskstats_exit+0x439/0xab0
[  217.599503][    C0]  ? sync_mm_rss+0x211/0x350
[  217.604107][    C0]  do_exit+0x5a1/0x20a0
[  217.608457][    C0]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  217.614541][    C0]  ? put_task_struct+0x80/0x80
[  217.619499][    C0]  ? lock_chain_count+0x20/0x20
[  217.624464][    C0]  ? _raw_spin_unlock_irq+0x1f/0x40
[  217.629844][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[  217.635047][    C0]  do_group_exit+0x12e/0x300
[  217.639776][    C0]  __x64_sys_exit_group+0x3b/0x40
[  217.644810][    C0]  do_syscall_64+0x4c/0xa0
[  217.649413][    C0]  ? clear_bhb_loop+0x30/0x80
[  217.654115][    C0]  ? clear_bhb_loop+0x30/0x80
[  217.658903][    C0]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  217.664809][    C0] RIP: 0033:0x7f58b86e7be9
[  217.669530][    C0] Code: Unable to access opcode bytes at RIP 0x7f58b86e7bbf.
[  217.676946][    C0] RSP: 002b:00007ffcfcbe7a58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  217.685455][    C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f58b86e7be9
[  217.693438][    C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000
[  217.701497][    C0] RBP: 00007ffcfcbe7abc R08: 00000003fcbe7b4f R09: 00000000000927c0
[  217.709577][    C0] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000049
[  217.718090][    C0] R13: 00000000000927c0 R14: 0000000000034aa1 R15: 00007ffcfcbe7b10
[  217.726369][    C0]  </TASK>
[  217.756393][ T5719] erofs: (device loop3): mounted with root inode @ nid 36.