last executing test programs:

15.899184441s ago: executing program 5 (id=636):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000780)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}]}, 0x3, 0x440, &(0x7f0000000280)="$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")
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x11f25000)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0)
write$vga_arbiter(r4, 0x0, 0x0)
write$vga_arbiter(r4, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'tunl0\x00', 0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
syz_usb_connect$cdc_ncm(0x0, 0x7b, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x2, 0x1, 0x0, 0x0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x0, 0x9}, {0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0x7d, 0x0, 0xffce}, @obex={0x5}]}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x8}}}}}}}]}}, 0x0)
fsopen(&(0x7f0000000100)='efivarfs\x00', 0x0)

11.894957215s ago: executing program 5 (id=645):
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netfilter\x00')
r1 = fanotify_init(0x0, 0x0)
readv(r1, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r2 = syz_open_dev$MSR(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188)
close_range(r0, 0xffffffffffffffff, 0x0)

11.810257555s ago: executing program 2 (id=646):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000007c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/716], 0x5, 0x558b, &(0x7f00000079c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1817c1, 0x0)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x10, 0xf, 0x0, 0x0, 0x7b96f75f, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
ioctl(0xffffffffffffffff, 0x8b21, &(0x7f0000000040))
connect$bt_l2cap(r5, &(0x7f0000000280)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe)

10.537028352s ago: executing program 5 (id=649):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
r3 = socket(0x2c, 0x3, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r3}, 0x20)
close_range(r2, 0xffffffffffffffff, 0x0)

10.375003694s ago: executing program 3 (id=650):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000)={0x3fc9, 0xfffffff7, 0xffffffc5, 0xfffffffc, 0x16})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})
preadv(r2, &(0x7f0000000400)=[{&(0x7f00000004c0)=""/248, 0xf8}], 0x1, 0x0, 0xc)

8.703317278s ago: executing program 1 (id=652):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000240)={'wg1\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x34, r1, 0x1, 0x70bd25, 0xfffffffc, {0x16}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x34}}, 0x0)

8.358450813s ago: executing program 1 (id=653):
r0 = syz_open_procfs(0x0, &(0x7f00000023c0)='net/tcp\x00')
read$FUSE(r0, &(0x7f0000000000)={0x2020}, 0xe01)
sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000002100)=ANY=[@ANYBLOB="dc010000", @ANYRES16=0x0, @ANYBLOB="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"/472], 0x1dc}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r6}, 0xc)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
syz_emit_ethernet(0x32, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
statfs(&(0x7f0000002040)='./file0\x00', &(0x7f0000002080)=""/73)

8.357696355s ago: executing program 5 (id=654):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, 0x0, 0x0)
syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r2, 0x40045731, &(0x7f0000000140)=0x7)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140040001000010000000000000000000000000a20000000000a03000000000000000000070000230900010073797a30000000004c004c6585ec010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff0008000340000000282400006bc550af000c0a010100be227e2980c100000000000000070000000900010073797a30000000000400038014000000100001000000000000000000"], 0xb8}}, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080))
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x3d, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="60000000020601010500608ff592365bff35d3b33346f73948bd69248e4ff6adecc0614a661b83bd44010007000200737993b68069312d60d47dbb377a30000000001400078005001500f0ffffff0864352eae00000011000300686173683a69702c6d277200000000"], 0x60}, 0x1, 0x0, 0x0, 0x4040}, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r7 = socket$pppoe(0x18, 0x1, 0x0)
syz_io_uring_setup(0x5169, 0x0, &(0x7f0000000100), &(0x7f0000000000))
connect$pppoe(r7, &(0x7f0000000000)={0x18, 0x0, {0x2, @broadcast, 'wg2\x00'}}, 0x1e)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000280)={'wg2\x00'})
r9 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r9, r9, r9}, &(0x7f0000000480)=""/66, 0x42, &(0x7f0000000340)={&(0x7f0000000280)={'sha224-generic\x00'}})
pipe2$watch_queue(&(0x7f0000000040), 0x80)

8.341158989s ago: executing program 0 (id=655):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x6, 0x10001, 0xd, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$packet(0x11, 0x3, 0x300)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711020000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

8.099396257s ago: executing program 4 (id=656):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000002140)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x6c7}, 0x38)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)

8.053239893s ago: executing program 3 (id=657):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc6751dfb265a0d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fd52347125907000000000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1001500a710eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7e197253a2b66c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0842b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f04c7f0be31491eb8c9ff68236c8600000000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcbf31c6ea1893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c15fa12313ffbfa7c2730302b66a99f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca20508011132153c528f7bca92980a3223c5b9cdddedb0a14adddf9a6e70a26b5c0ee0879c349814bee9d96d8bd23db4e801d49201ae84090455682794098afa42b34196b1d849020eeeb1ef48d003d71524683d7cdfa841bca708414fb8ff49742420d1ab7fa678aa4806d5247616e8bc0b02887f8efe9310ccf9bec1c9b7f6671c9d59ac6b09b4436cafdd1887c8e884c930d21ace088ccc99a94d4b33da2fc1b1310bb607a9ad65844655de1ac9fd36d12e07a821fb951368a970c58fb4f3f403fdaf68902874"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$PPPIOCGL2TPSTATS(r4, 0x40047452, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000080000000000000000000001811", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000400))

7.966552607s ago: executing program 2 (id=658):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
io_uring_setup(0x6a0c, &(0x7f00000002c0)={0x0, 0x3429})
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
epoll_create1(0x0)
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$RTC_PIE_ON(r0, 0x7005)
unshare(0x22020400)
socket$xdp(0x2c, 0x3, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x900000000000000}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0)

7.960774424s ago: executing program 0 (id=659):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
r1 = dup3(0xffffffffffffffff, r0, 0x0)
recvmmsg$unix(r1, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001700)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x58ca02a0, 0x0)

6.537242442s ago: executing program 0 (id=660):
r0 = getpid()
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r1}, &(0x7f00000005c0), &(0x7f0000000600)='%pi6   \x00'}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
tgkill(r0, r0, 0x1f)

6.350537517s ago: executing program 2 (id=661):
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netfilter\x00')
r1 = fanotify_init(0x0, 0x0)
readv(r1, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r2 = syz_open_dev$MSR(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188)
close_range(r0, 0xffffffffffffffff, 0x0)

6.237722205s ago: executing program 3 (id=662):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl0\x00', 0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000", @ANYRES32, @ANYRES32=0x0], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
close(r5)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000104000000000005000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028005002c0002000000080004"], 0x44}}, 0x0)

5.692655522s ago: executing program 5 (id=663):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000006c0))
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)

5.341281569s ago: executing program 1 (id=664):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001340)={{r5}, &(0x7f00000012c0), &(0x7f0000001300)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f00000007c0)={0x400000000000000, 0x0, &(0x7f0000000140)={&(0x7f0000001900)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private1}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_x_sec_ctx={0x1}]}, 0xa8}}, 0x0)

5.074895172s ago: executing program 2 (id=665):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'lo\x00'})
r7 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, 0x0)
r8 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xa0})
io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r8, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x0, 0x1}, 0x20)

4.985754185s ago: executing program 3 (id=666):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
r3 = socket(0x2c, 0x3, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r3}, 0x20)
close_range(r2, 0xffffffffffffffff, 0x0)

4.931594624s ago: executing program 5 (id=667):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x6047, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc}}}}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00W\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)

3.775333858s ago: executing program 4 (id=668):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0xf, 0x0, &(0x7f0000000000))
pipe2$9p(&(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018400110800395032303030"], 0x15)
r4 = dup(r3)
write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])

3.662555889s ago: executing program 2 (id=669):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000)={0x3fc9, 0xfffffff7, 0xffffffc5, 0xfffffffc, 0x16})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380))
ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})
preadv(r2, &(0x7f0000000400)=[{&(0x7f00000004c0)=""/248, 0xf8}], 0x1, 0x0, 0xc)

3.6622601s ago: executing program 0 (id=670):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40}, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000600)='./bus\x00', 0x1c14744, &(0x7f00000002c0)={[{@errors_remount}]}, 0xfe, 0x492, &(0x7f0000000f00)="$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")
syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x60000, 0x0, 0x1, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x141201)
openat$urandom(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)

3.326703493s ago: executing program 4 (id=671):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x6, 0x10001, 0xd, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$packet(0x11, 0x3, 0x300)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711020000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

3.049203364s ago: executing program 1 (id=672):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
r1 = dup3(r0, 0xffffffffffffffff, 0x0)
recvmmsg$unix(r1, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001700)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x58ca02a0, 0x0)

3.039644205s ago: executing program 4 (id=673):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80, &(0x7f0000000140)={[], [], 0x22}, 0x0, 0x4c9, &(0x7f0000001a40)="$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")
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000000))
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
readv(r1, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1)
ptrace$getenv(0x4201, r0, 0x2, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
readv(r2, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2)

2.894311859s ago: executing program 1 (id=674):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$PPPIOCGL2TPSTATS(r4, 0x40047452, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000080000000000000000000001811", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000400))

1.930268384s ago: executing program 0 (id=675):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10)
sendmsg$inet(r2, 0x0, 0x0)

1.929647313s ago: executing program 3 (id=676):
r0 = syz_open_procfs(0x0, &(0x7f00000023c0)='net/tcp\x00')
read$FUSE(r0, &(0x7f0000000000)={0x2020}, 0xe01)
sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000002100)=ANY=[@ANYBLOB="dc010000", @ANYRES16=0x0, @ANYBLOB="08002abd7000fedbdf250c000000580004802c000780080001001f000000080001000e0000000800010011000000080002000800000008000100060000000900010073797a30000000001c000780080001001400000008000300050000000800040006000000100007800c00030081000000000000000c0104804400078008000400000000000800030001000000080004000800000008000300000000000800020003000000080001000c000000080002000000000008002300fb0700000900010073797a31000000003c000780080002000b0000000800030007000000080002000500000008000200010100000800030006000000080003000a00000008000400050000000c00078008000200feffffff0900010073797a30000000002c0007802b0d08000400080c0000080004000f0000000800030008000000080002000200000008000200040000002400078008000200060000000800020025000000080003000500000008000300070000000900010073797a30000000001400098008000100040000000800010007000200090000000800020000080000280005800c00028008000300000000100800010065746800070001006962000008000100657468000c000980080002000400"/472], 0x1dc}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r6}, 0xc)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
syz_emit_ethernet(0x32, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
statfs(&(0x7f0000002040)='./file0\x00', &(0x7f0000002080)=""/73)

1.721300871s ago: executing program 1 (id=677):
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netfilter\x00')
r1 = fanotify_init(0x0, 0x0)
readv(r1, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188)
close_range(r0, 0xffffffffffffffff, 0x0)

1.541736657s ago: executing program 2 (id=678):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl0\x00', 0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000", @ANYRES32, @ANYRES32=0x0], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
close(r4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000104000000000005000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028005002c0002000000080004"], 0x44}}, 0x0)

717.914076ms ago: executing program 3 (id=679):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15)
r2 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)={0xb8, 0x0, 0x0, [{{}, {0x0, 0x0, 0x9, 0x0, 'trans=fd,'}}]}, 0xb8)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffb5, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r3, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20)
mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])

716.33918ms ago: executing program 4 (id=680):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000002140)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x6c7}, 0x38)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)

38.539716ms ago: executing program 0 (id=681):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000540)={[{@test_dummy_encryption}]}, 0x1, 0x236, &(0x7f0000000300)="$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")

0s ago: executing program 4 (id=682):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff"], 0x15)
r3 = dup(r2)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}})
write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="a8"], 0xa8)
write$FUSE_DIRENTPLUS(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="b0"], 0x1b0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}})
utimes(&(0x7f0000000280)='./file0\x00', 0x0)

kernel console output (not intermixed with test programs):

0][ T5238] Bluetooth: hci6: command tx timeout
[  297.961566][ T6453] veth0_macvtap: entered promiscuous mode
[  298.060045][ T6453] veth1_macvtap: entered promiscuous mode
[  298.112038][ T6453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  298.143643][ T6453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  298.171246][ T6453] batman_adv: batadv0: Interface activated: batadv_slave_0
[  298.307680][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  298.309897][ T6453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  298.339384][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  298.354069][ T6453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  298.368179][ T6453] batman_adv: batadv0: Interface activated: batadv_slave_1
[  298.406320][ T6453] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  298.424627][ T6453] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  298.450282][ T6453] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  298.459393][ T6453] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  298.472170][   T36] bridge_slave_1: left allmulticast mode
[  298.478808][   T36] bridge_slave_1: left promiscuous mode
[  298.485528][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  298.496583][   T36] bridge_slave_0: left allmulticast mode
[  298.503275][   T36] bridge_slave_0: left promiscuous mode
[  298.509002][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  298.782063][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  298.799393][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  298.811330][   T36] bond0 (unregistering): Released all slaves
[  298.884793][ T6428] 8021q: adding VLAN 0 to HW filter on device batadv0
[  298.931501][   T36] hsr_slave_0: left promiscuous mode
[  298.938922][   T36] hsr_slave_1: left promiscuous mode
[  298.950536][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  298.961610][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  298.980523][   T36] veth0_macvtap: left promiscuous mode
[  298.986290][   T36] veth1_vlan: left promiscuous mode
[  298.991662][   T36] veth0_vlan: left promiscuous mode
[  299.338044][   T36] team0 (unregistering): Port device team_slave_1 removed
[  299.377095][   T36] team0 (unregistering): Port device team_slave_0 removed
[  299.716247][ T2894] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  299.734250][ T6430] 8021q: adding VLAN 0 to HW filter on device batadv0
[  299.741707][ T2894] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  299.860475][ T6517] 8021q: adding VLAN 0 to HW filter on device bond0
[  299.956127][ T6447] veth0_vlan: entered promiscuous mode
[  299.998282][ T6517] 8021q: adding VLAN 0 to HW filter on device team0
[  300.075441][ T6014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  300.106494][ T6447] veth1_vlan: entered promiscuous mode
[  300.112753][ T6014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  300.131625][ T2894] bridge0: port 1(bridge_slave_0) entered blocking state
[  300.138816][ T2894] bridge0: port 1(bridge_slave_0) entered forwarding state
[  300.177915][ T6428] veth0_vlan: entered promiscuous mode
[  300.197207][ T6014] bridge0: port 2(bridge_slave_1) entered blocking state
[  300.204460][ T6014] bridge0: port 2(bridge_slave_1) entered forwarding state
[  300.249604][ T6014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  300.267001][ T6014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  300.283052][ T5356] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  300.334931][ T6428] veth1_vlan: entered promiscuous mode
[  300.391573][ T6447] veth0_macvtap: entered promiscuous mode
[  300.425846][ T6447] veth1_macvtap: entered promiscuous mode
[  300.442918][ T6430] veth0_vlan: entered promiscuous mode
[  300.443507][ T6688] loop3: detected capacity change from 0 to 256
[  300.462267][ T5356] usb 1-1: Using ep0 maxpacket: 8
[  300.479199][ T5356] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  300.511014][ T5356] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  300.513312][ T6430] veth1_vlan: entered promiscuous mode
[  300.538215][ T5356] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  300.550419][ T5356] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  300.594275][ T6447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  300.606339][ T5356] usbtmc 1-1:16.0: bulk endpoints not found
[  300.631888][ T6447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  300.642615][ T6447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  300.657766][ T6688] FAT-fs (loop3): Directory bread(block 64) failed
[  300.657778][ T6447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  300.657817][ T6688] FAT-fs (loop3): Directory bread(block 65) failed
[  300.673777][ T6447] batman_adv: batadv0: Interface activated: batadv_slave_0
[  300.697079][ T6688] FAT-fs (loop3): Directory bread(block 66) failed
[  300.701379][ T6447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  300.724090][ T6688] FAT-fs (loop3): Directory bread(block 67) failed
[  300.727988][ T6447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  300.730736][ T6688] FAT-fs (loop3): Directory bread(block 68) failed
[  300.745252][ T6447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  300.752511][ T6688] FAT-fs (loop3): Directory bread(block 69) failed
[  300.765430][ T6688] FAT-fs (loop3): Directory bread(block 70) failed
[  300.765612][ T6447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  300.772003][ T6688] FAT-fs (loop3): Directory bread(block 71) failed
[  300.797258][ T6447] batman_adv: batadv0: Interface activated: batadv_slave_1
[  300.799835][ T6688] FAT-fs (loop3): Directory bread(block 72) failed
[  300.818524][ T6688] FAT-fs (loop3): Directory bread(block 73) failed
[  300.829311][ T6430] veth0_macvtap: entered promiscuous mode
[  300.839240][ T6430] veth1_macvtap: entered promiscuous mode
[  300.858794][ T6430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  300.869748][ T6430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  300.879817][ T6430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  300.890442][ T6430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  300.900873][ T6430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  300.911948][ T6430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  300.923955][ T6430] batman_adv: batadv0: Interface activated: batadv_slave_0
[  300.934791][ T6428] veth0_macvtap: entered promiscuous mode
[  300.985645][ T6447] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  300.996923][ T6447] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  301.006531][ T6447] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  301.042450][ T6447] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  301.080092][ T6430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  301.100757][ T6430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  301.142549][ T6430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  301.170722][ T6430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  301.180871][ T6430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  301.193409][ T6430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  301.205746][ T6430] batman_adv: batadv0: Interface activated: batadv_slave_1
[  301.240361][ T6517] 8021q: adding VLAN 0 to HW filter on device batadv0
[  301.638875][ T6428] veth1_macvtap: entered promiscuous mode
[  301.665158][ T6430] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  301.692444][ T6430] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  301.701392][ T6430] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  301.718880][ T6430] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  301.908167][ T6428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  301.952112][ T6428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  301.971195][ T6428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  301.994124][ T6428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  302.011407][ T6428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  302.028587][ T6428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  302.041434][ T6428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  302.061479][ T6428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  302.084599][ T6428] batman_adv: batadv0: Interface activated: batadv_slave_0
[  302.183498][ T6428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  302.206401][ T6428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  302.230508][ T6428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  302.249583][ T6428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  302.260009][ T6428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  302.279870][ T6428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  302.290399][ T6428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  302.309576][ T6428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  302.333328][ T6428] batman_adv: batadv0: Interface activated: batadv_slave_1
[  302.364653][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  302.394058][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  302.440061][ T6517] veth0_vlan: entered promiscuous mode
[  302.469763][ T6428] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  302.486627][ T6428] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  302.506814][ T6428] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  302.519923][ T6428] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  302.546831][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  302.590217][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  302.614042][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  302.634470][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  302.687670][   T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  302.704799][ T6517] veth1_vlan: entered promiscuous mode
[  302.721470][   T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  302.890048][ T6517] veth0_macvtap: entered promiscuous mode
[  302.974499][ T6517] veth1_macvtap: entered promiscuous mode
[  303.166487][ T5239] usb 1-1: USB disconnect, device number 10
[  303.282544][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  303.344918][ T6699] loop5: detected capacity change from 0 to 512
[  303.369347][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  303.404832][ T6517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  303.432826][ T6517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  303.443693][ T6517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  303.454674][ T6517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  303.456163][ T6699] EXT4-fs (loop5): 1 truncate cleaned up
[  303.464583][ T6517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  303.464610][ T6517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  303.464632][ T6517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  303.502397][ T6517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  303.512753][ T6517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  303.524869][ T6517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  303.537887][ T6517] batman_adv: batadv0: Interface activated: batadv_slave_0
[  303.565731][ T6517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  303.598322][ T6699] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  303.610711][ T6517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  303.628903][ T6517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  303.639647][ T6517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  303.707588][ T6699] EXT4-fs error (device loop5): ext4_add_entry:2437: inode #2: comm syz.5.248: Directory hole found for htree leaf block 0
[  303.766969][ T6517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  303.799674][ T6699] EXT4-fs (loop5): Remounting filesystem read-only
[  303.820124][ T6517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  303.832003][ T6517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  303.844156][ T6517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  303.854330][ T6517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  303.873825][ T6517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  303.886955][ T6517] batman_adv: batadv0: Interface activated: batadv_slave_1
[  304.143877][ T5384] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  304.453451][ T3007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  304.461417][ T3007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  304.521773][ T5384] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  304.555433][ T6517] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  304.574691][ T5384] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  304.610660][ T6517] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  304.620430][ T5384] usb 5-1: Product: syz
[  304.641258][ T5384] usb 5-1: Manufacturer: syz
[  304.659671][ T6517] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  304.678855][ T5384] usb 5-1: SerialNumber: syz
[  304.715666][ T6517] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  304.725022][ T5384] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  304.762913][ T5314] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  305.014025][ T6430] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  305.982435][ T5314] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[  305.989497][ T5314] ath9k_htc: Failed to initialize the device
[  308.024272][ T5314] usb 5-1: ath9k_htc: USB layer deinitialized
[  308.138590][ T6734] loop0: detected capacity change from 0 to 512
[  308.166411][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  308.174887][ T6014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  308.192342][ T6014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  308.241031][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  308.346597][ T6734] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  308.422837][    T8] usb 5-1: USB disconnect, device number 5
[  308.465183][ T6734] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  309.843577][ T6744] loop2: detected capacity change from 0 to 512
[  310.062849][ T5314] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  310.448748][ T5314] usb 5-1: Using ep0 maxpacket: 8
[  310.469897][ T5314] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  310.483509][ T5314] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  311.292322][ T5314] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  311.315295][ T5314] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  311.328765][ T5314] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  311.339220][ T5314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  311.351766][ T6418] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  311.376868][ T5314] usbtmc 5-1:16.0: bulk endpoints not found
[  311.534929][ T6744] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  311.550687][ T6744] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  313.381491][ T6517] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  314.489497][ T6776] netlink: 'syz.3.268': attribute type 12 has an invalid length.
[  314.589356][ T5300] usb 5-1: USB disconnect, device number 6
[  316.567319][ T6794] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  316.630729][ T1263] ieee802154 phy0 wpan0: encryption failed: -22
[  316.642341][ T1263] ieee802154 phy1 wpan1: encryption failed: -22
[  316.972588][ T5356] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  318.057908][ T5356] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  318.070232][ T5356] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  318.080186][ T5356] usb 5-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00
[  318.089444][ T5356] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  318.100634][ T5356] usb 5-1: config 0 descriptor??
[  318.201778][ T6806] loop3: detected capacity change from 0 to 512
[  318.319795][ T6806] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.275: bad orphan inode 17
[  318.403941][ T6806] ext4_test_bit(bit=16, block=4) = 1
[  318.409354][ T6806] is_bad_inode(inode)=0
[  318.431417][ T6806] NEXT_ORPHAN(inode)=0
[  318.441549][ T6806] max_ino=32
[  318.481111][ T6806] i_nlink=1
[  318.498024][ T6806] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  318.531173][ T5356] input: HID 28bd:1903 Mouse as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28BD:1903.0004/input/input5
[  319.463144][ T6453] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  319.487748][ T5356] uclogic 0003:28BD:1903.0004: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:1903] on usb-dummy_hcd.4-1/input0
[  319.516830][ T5356] usb 5-1: USB disconnect, device number 7
[  319.804096][ T6816] loop4: detected capacity change from 0 to 512
[  320.249983][ T6821] netlink: 'syz.1.282': attribute type 12 has an invalid length.
[  321.097653][ T6816] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  321.493824][ T6816] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  323.411020][ T6839] loop5: detected capacity change from 0 to 40427
[  323.446385][ T6839] F2FS-fs (loop5): Unrecognized mount option "lazytime" or missing value
[  323.558471][ T6814] loop2: detected capacity change from 0 to 65536
[  323.582822][ T6847] loop1: detected capacity change from 0 to 256
[  323.712110][ T6814] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/loop2": -EINTR
[  323.718412][ T6447] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  323.935482][ T6853] loop3: detected capacity change from 0 to 1024
[  324.008323][ T6847] FAT-fs (loop1): Directory bread(block 64) failed
[  324.017147][ T6847] FAT-fs (loop1): Directory bread(block 65) failed
[  324.055895][ T6847] FAT-fs (loop1): Directory bread(block 66) failed
[  324.930721][ T6847] FAT-fs (loop1): Directory bread(block 67) failed
[  324.937621][ T6847] FAT-fs (loop1): Directory bread(block 68) failed
[  324.945106][ T6847] FAT-fs (loop1): Directory bread(block 69) failed
[  324.953249][ T6847] FAT-fs (loop1): Directory bread(block 70) failed
[  324.960769][ T6847] FAT-fs (loop1): Directory bread(block 71) failed
[  324.967934][ T6847] FAT-fs (loop1): Directory bread(block 72) failed
[  324.974578][ T6847] FAT-fs (loop1): Directory bread(block 73) failed
[  325.131080][ T6853] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  325.383877][   T29] audit: type=1800 audit(1729563867.249:30): pid=6853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.289" name="bus" dev="loop3" ino=18 res=0 errno=0
[  326.622410][ T6861] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  326.743441][ T6871] bridge0: port 3(syz_tun) entered blocking state
[  326.750167][ T6871] bridge0: port 3(syz_tun) entered disabled state
[  326.896596][ T6871] syz_tun: entered allmulticast mode
[  326.908514][ T6871] syz_tun: entered promiscuous mode
[  326.914752][ T6871] bridge0: port 3(syz_tun) entered blocking state
[  326.921670][ T6871] bridge0: port 3(syz_tun) entered forwarding state
[  327.044587][ T6852] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28
[  327.082549][ T6852] EXT4-fs (loop3): This should not happen!! Data will be lost
[  327.082549][ T6852] 
[  327.128745][ T5252] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  327.139018][ T5252] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  327.148533][ T5252] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  327.225976][ T6852] EXT4-fs (loop3): Total free blocks count 0
[  327.232026][ T6852] EXT4-fs (loop3): Free/Dirty block details
[  327.299712][ T6852] EXT4-fs (loop3): free_blocks=68451041280
[  327.336011][ T5252] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  327.348207][ T5252] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  327.362176][ T5252] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  327.382553][ T6852] EXT4-fs (loop3): dirty_blocks=64
[  327.387714][ T6852] EXT4-fs (loop3): Block reservation details
[  327.428448][ T6852] EXT4-fs (loop3): i_reserved_data_blocks=4
[  327.606215][ T2952] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  328.164742][ T6453] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  328.363772][ T6883] netlink: 'syz.1.296': attribute type 12 has an invalid length.
[  328.567615][ T2952] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  328.681217][ T6893] loop1: detected capacity change from 0 to 512
[  328.795270][ T2952] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  328.863233][ T6893] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  328.980240][ T6893] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  330.345168][ T5238] Bluetooth: hci1: command tx timeout
[  330.386172][ T2952] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.733554][ T6910] cgroup: Unknown subsys name 'cpuset'
[  330.789526][ T5238] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  330.801546][ T5238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  330.810099][ T5238] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  330.818676][ T5238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  330.993318][ T6428] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  331.065595][ T5238] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  331.074043][ T5238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  331.848958][ T6877] chnl_net:caif_netlink_parms(): no params data found
[  332.038900][ T6924] bridge0: port 3(syz_tun) entered blocking state
[  332.045862][ T6924] bridge0: port 3(syz_tun) entered disabled state
[  332.052635][ T6924] syz_tun: entered allmulticast mode
[  332.059240][ T6924] syz_tun: entered promiscuous mode
[  332.066083][ T6924] bridge0: port 3(syz_tun) entered blocking state
[  332.072657][ T6924] bridge0: port 3(syz_tun) entered forwarding state
[  332.102450][ T2952] bridge_slave_1: left allmulticast mode
[  332.118600][ T2952] bridge_slave_1: left promiscuous mode
[  332.132554][ T2952] bridge0: port 2(bridge_slave_1) entered disabled state
[  332.233585][ T2952] bridge_slave_0: left allmulticast mode
[  332.239390][ T2952] bridge_slave_0: left promiscuous mode
[  332.269684][ T2952] bridge0: port 1(bridge_slave_0) entered disabled state
[  332.270589][ T6937] loop4: detected capacity change from 0 to 512
[  332.383459][ T5238] Bluetooth: hci1: command tx timeout
[  332.395913][ T6937] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  332.455690][ T6937] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  332.707857][ T5356] hid-generic 0000:0000:0000.0005: unknown main item tag 0x3
[  332.732762][ T5356] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  332.744333][ T5356] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  332.751794][ T5356] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  332.759569][ T5356] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  332.777291][ T5356] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  332.813203][ T5356] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  332.852795][ T5356] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  332.861203][ T5356] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  332.897724][ T5356] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  332.906642][ T5356] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  332.932051][ T5356] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  332.948298][ T5356] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  332.956501][ T5356] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  332.973972][ T5356] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  332.995166][ T5356] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  333.019208][ T5356] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  333.034554][ T5356] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  333.050806][ T5356] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  333.067293][ T5356] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  333.089660][ T5356] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  333.104199][ T5356] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  333.112475][ T5238] Bluetooth: hci2: command tx timeout
[  333.124053][ T5356] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  333.131928][ T5356] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  333.142676][ T5356] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  333.151044][ T5356] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  333.158861][ T5356] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  333.166503][ T5356] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  333.174057][ T5356] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  333.181570][ T5356] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  333.190358][ T5356] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  333.197856][ T5356] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  333.205314][ T5356] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  333.212807][ T5356] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  333.220219][ T5356] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  333.227731][ T5356] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  333.235169][ T5356] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  333.330352][ T5356] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  333.354297][ T5356] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  333.451721][ T2952] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  333.483229][ T2952] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  333.501212][ T2952] bond0 (unregistering): Released all slaves
[  333.802522][ T6877] bridge0: port 1(bridge_slave_0) entered blocking state
[  333.809778][ T6877] bridge0: port 1(bridge_slave_0) entered disabled state
[  333.817129][ T6877] bridge_slave_0: entered allmulticast mode
[  333.824362][ T6877] bridge_slave_0: entered promiscuous mode
[  333.832780][ T6877] bridge0: port 2(bridge_slave_1) entered blocking state
[  333.839926][ T6877] bridge0: port 2(bridge_slave_1) entered disabled state
[  333.847374][ T6877] bridge_slave_1: entered allmulticast mode
[  333.854546][ T6877] bridge_slave_1: entered promiscuous mode
[  333.923163][ T6959] loop1: detected capacity change from 0 to 512
[  333.931269][ T6959] EXT4-fs: Ignoring removed i_version option
[  333.949852][ T6959] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  333.987922][ T6959] EXT4-fs (loop1): 1 truncate cleaned up
[  334.004262][ T6959] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  334.134211][ T6447] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  334.170679][ T6877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  334.472649][ T5238] Bluetooth: hci1: command tx timeout
[  334.718992][ T6877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  335.162166][ T6428] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  335.193992][ T5238] Bluetooth: hci2: command tx timeout
[  335.762341][ T2952] hsr_slave_0: left promiscuous mode
[  335.792137][ T2952] hsr_slave_1: left promiscuous mode
[  335.798894][ T2952] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  335.827309][ T2952] batman_adv: batadv0: Removing interface: batadv_slave_0
[  335.835704][ T2952] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  335.862354][ T2952] batman_adv: batadv0: Removing interface: batadv_slave_1
[  335.914019][ T2952] veth1_macvtap: left promiscuous mode
[  335.919604][ T2952] veth0_macvtap: left promiscuous mode
[  335.961166][ T2952] veth1_vlan: left promiscuous mode
[  335.966869][ T2952] veth0_vlan: left promiscuous mode
[  336.240552][ T6984] loop1: detected capacity change from 0 to 1024
[  336.313742][ T6984] ext4: Unknown parameter 'nouser_xattr'
[  336.557490][ T5238] Bluetooth: hci1: command tx timeout
[  336.766762][ T6990] xt_CT: You must specify a L4 protocol and not use inversions on it
[  337.250007][ T5252] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  337.262661][ T5252] Bluetooth: hci2: command tx timeout
[  337.313004][ T5253] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  337.371429][ T5253] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  337.515213][ T5253] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  337.523957][ T5253] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  337.531463][ T5253] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  337.610435][ T6983] loop4: detected capacity change from 0 to 65536
[  337.827643][ T6996] loop3: detected capacity change from 0 to 16
[  337.848572][ T6996] erofs: (device loop3): mounted with root inode @ nid 36.
[  337.944210][ T6983] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  338.143931][ T6983] XFS (loop4): Ending clean mount
[  338.170598][ T6983] XFS (loop4): Quotacheck needed: Please wait.
[  338.723486][ T6983] XFS (loop4): Quotacheck: Done.
[  338.925353][ T6447] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  339.012097][ T7008] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  339.346482][ T5253] Bluetooth: hci2: command tx timeout
[  339.362417][ T2952] team0 (unregistering): Port device team_slave_1 removed
[  339.405110][ T2952] team0 (unregistering): Port device team_slave_0 removed
[  339.584635][ T5253] Bluetooth: hci4: command tx timeout
[  339.800414][ T6877] team0: Port device team_slave_0 added
[  339.865662][ T6877] team0: Port device team_slave_1 added
[  340.060374][ T7020] loop1: detected capacity change from 0 to 512
[  340.077082][ T6907] chnl_net:caif_netlink_parms(): no params data found
[  340.146537][ T7020] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  340.182959][ T6877] batman_adv: batadv0: Adding interface: batadv_slave_0
[  340.189975][ T6877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  340.243028][ T7020] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  340.343703][ T6877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  340.356963][ T6877] batman_adv: batadv0: Adding interface: batadv_slave_1
[  340.365221][ T6877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  340.406393][ T5300] hid-generic 0000:0000:0000.0006: unknown main item tag 0x3
[  340.415324][ T5300] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  340.424396][ T5300] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  340.428830][ T6877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  340.432164][ T5300] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  340.456047][ T5300] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  340.470911][ T5300] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  340.480076][ T5300] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  340.492064][ T5300] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  340.500200][ T5300] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  340.508378][ T5300] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  340.546939][ T5300] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  340.597491][ T5300] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  340.631560][ T5300] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  340.669263][ T5300] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  340.720885][ T5300] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  341.340296][ T5300] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  341.348692][ T5300] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  341.356512][ T5300] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  341.364327][ T5300] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  341.371836][ T5300] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  341.379770][ T5300] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  341.387585][ T5300] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  341.395366][ T5300] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  341.403134][ T5300] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  341.410530][ T5300] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  341.418432][ T5300] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  341.439099][ T5300] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  341.487076][ T5300] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  341.499526][ T5300] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  341.516437][ T5300] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  341.532724][ T5300] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  341.549153][ T5300] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  341.572036][ T5300] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  341.610918][ T5300] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  341.643873][ T5300] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  341.652693][ T5300] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  341.660175][ T5300] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  341.671029][ T5253] Bluetooth: hci4: command tx timeout
[  341.677823][ T5300] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  341.688947][ T5300] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  341.742046][ T6877] hsr_slave_0: entered promiscuous mode
[  341.754946][ T6877] hsr_slave_1: entered promiscuous mode
[  342.415646][ T6428] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  342.455846][ T6907] bridge0: port 1(bridge_slave_0) entered blocking state
[  342.484030][ T6907] bridge0: port 1(bridge_slave_0) entered disabled state
[  342.491386][ T6907] bridge_slave_0: entered allmulticast mode
[  342.508485][ T6907] bridge_slave_0: entered promiscuous mode
[  342.555180][ T6907] bridge0: port 2(bridge_slave_1) entered blocking state
[  342.570449][ T6907] bridge0: port 2(bridge_slave_1) entered disabled state
[  342.585014][ T6907] bridge_slave_1: entered allmulticast mode
[  342.592342][ T6907] bridge_slave_1: entered promiscuous mode
[  342.873944][ T6907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  342.973857][ T6907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  343.309120][ T2952] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  343.339085][ T7063] loop3: detected capacity change from 0 to 1024
[  343.356922][ T7063] ext4: Unknown parameter 'nouser_xattr'
[  343.452106][ T6907] team0: Port device team_slave_0 added
[  343.477729][ T6907] team0: Port device team_slave_1 added
[  343.691400][ T2952] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  343.746104][ T5253] Bluetooth: hci4: command tx timeout
[  343.846271][ T6877] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  343.902052][ T7071] xt_CT: You must specify a L4 protocol and not use inversions on it
[  343.930205][ T6989] chnl_net:caif_netlink_parms(): no params data found
[  343.976630][ T6907] batman_adv: batadv0: Adding interface: batadv_slave_0
[  343.994140][ T6907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  344.068903][ T6907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  344.124046][ T2952] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.316974][ T6877] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.413099][ T6907] batman_adv: batadv0: Adding interface: batadv_slave_1
[  344.436785][ T6907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  344.539475][ T6907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  344.627852][ T2952] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.768075][ T6877] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.871867][ T7055] loop4: detected capacity change from 0 to 65536
[  345.039294][ T6877] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  345.051826][ T7055] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  345.322998][ T7055] XFS (loop4): Ending clean mount
[  345.330369][ T7055] XFS (loop4): Quotacheck needed: Please wait.
[  345.378946][ T7055] XFS (loop4): Quotacheck: Done.
[  345.574062][ T6447] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  345.611072][ T2952] bridge_slave_1: left allmulticast mode
[  345.621485][ T2952] bridge_slave_1: left promiscuous mode
[  345.642443][ T2952] bridge0: port 2(bridge_slave_1) entered disabled state
[  345.712679][ T2952] bridge_slave_0: left allmulticast mode
[  345.718391][ T2952] bridge_slave_0: left promiscuous mode
[  345.738952][ T2952] bridge0: port 1(bridge_slave_0) entered disabled state
[  345.784968][ T2952] bridge_slave_1: left allmulticast mode
[  345.791247][ T2952] bridge_slave_1: left promiscuous mode
[  345.800018][ T2952] bridge0: port 2(bridge_slave_1) entered disabled state
[  345.823003][ T5253] Bluetooth: hci4: command tx timeout
[  345.874051][ T2952] bridge_slave_0: left allmulticast mode
[  345.879766][ T2952] bridge_slave_0: left promiscuous mode
[  345.899052][ T2952] bridge0: port 1(bridge_slave_0) entered disabled state
[  347.355112][ T2952] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  347.367790][ T2952] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  347.381755][ T2952] bond0 (unregistering): Released all slaves
[  347.472080][ T2952] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  347.486946][ T2952] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  347.501458][ T2952] bond0 (unregistering): Released all slaves
[  347.517378][ T6907] hsr_slave_0: entered promiscuous mode
[  347.523890][ T6907] hsr_slave_1: entered promiscuous mode
[  347.529998][ T6907] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  347.538093][ T6907] Cannot create hsr debugfs directory
[  347.564552][ T6989] bridge0: port 1(bridge_slave_0) entered blocking state
[  347.580315][ T6989] bridge0: port 1(bridge_slave_0) entered disabled state
[  347.589947][ T6989] bridge_slave_0: entered allmulticast mode
[  347.598043][ T6989] bridge_slave_0: entered promiscuous mode
[  347.785419][   T29] audit: type=1326 audit(1729563889.649:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7106 comm="syz.4.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8a497dff9 code=0x7fc00000
[  348.028138][ T6877] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  348.113248][ T6989] bridge0: port 2(bridge_slave_1) entered blocking state
[  348.120403][ T6989] bridge0: port 2(bridge_slave_1) entered disabled state
[  348.136879][ T6989] bridge_slave_1: entered allmulticast mode
[  348.150359][ T6989] bridge_slave_1: entered promiscuous mode
[  348.529123][ T7117] loop3: detected capacity change from 0 to 512
[  348.914415][ T7117] EXT4-fs: Ignoring removed i_version option
[  348.923300][ T7117] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  348.959247][ T7117] EXT4-fs (loop3): 1 truncate cleaned up
[  348.966475][ T7117] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  349.054405][ T6877] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  349.228046][ T6989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  349.317271][ T6877] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  349.354260][ T6989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  349.497253][ T6877] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  349.535175][ T5299] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  349.573490][ T6989] team0: Port device team_slave_0 added
[  349.613276][ T6989] team0: Port device team_slave_1 added
[  349.694699][ T5299] usb 2-1: Using ep0 maxpacket: 16
[  349.724024][ T5299] usb 2-1: config 0 has an invalid interface number: 222 but max is 0
[  349.739347][ T6989] batman_adv: batadv0: Adding interface: batadv_slave_0
[  349.747151][ T5299] usb 2-1: config 0 has no interface number 0
[  349.757486][ T6989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  349.776510][ T5299] usb 2-1: New USB device found, idVendor=20a9, idProduct=8df0, bcdDevice=44.0b
[  349.827170][ T6989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  349.833787][ T5299] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  349.865285][ T5299] usb 2-1: Product: syz
[  349.870876][ T6989] batman_adv: batadv0: Adding interface: batadv_slave_1
[  349.875731][ T5299] usb 2-1: Manufacturer: syz
[  349.891825][ T5299] usb 2-1: SerialNumber: syz
[  349.896751][ T6989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  349.914151][ T5299] usb 2-1: config 0 descriptor??
[  349.981486][ T6989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  350.002081][ T5299] usb-storage 2-1:0.222: USB Mass Storage device detected
[  350.233854][   T25] usb 2-1: USB disconnect, device number 2
[  350.666588][ T2952] hsr_slave_0: left promiscuous mode
[  350.692438][ T2952] hsr_slave_1: left promiscuous mode
[  350.723066][ T2952] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  350.730523][ T2952] batman_adv: batadv0: Removing interface: batadv_slave_0
[  350.783289][ T2952] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  350.790749][ T2952] batman_adv: batadv0: Removing interface: batadv_slave_1
[  350.886383][ T2952] hsr_slave_0: left promiscuous mode
[  350.890262][ T7147] loop1: detected capacity change from 0 to 1024
[  350.902762][ T2952] hsr_slave_1: left promiscuous mode
[  350.910374][ T2952] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  350.932485][ T2952] batman_adv: batadv0: Removing interface: batadv_slave_0
[  350.952626][ T7147] ext4: Unknown parameter 'nouser_xattr'
[  350.961598][ T2952] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  351.139767][ T2952] batman_adv: batadv0: Removing interface: batadv_slave_1
[  351.277036][ T2952] veth1_macvtap: left promiscuous mode
[  351.311604][ T2952] veth0_macvtap: left promiscuous mode
[  351.317327][ T2952] veth1_vlan: left promiscuous mode
[  351.332710][ T2952] veth0_vlan: left promiscuous mode
[  351.339308][ T2952] veth1_macvtap: left promiscuous mode
[  351.367256][ T2952] veth0_macvtap: left promiscuous mode
[  351.373066][ T7150] xt_CT: You must specify a L4 protocol and not use inversions on it
[  351.380095][ T2952] veth1_vlan: left promiscuous mode
[  351.399149][ T2952] veth0_vlan: left promiscuous mode
[  352.241613][ T6453] EXT4-fs error (device loop3): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /27/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  352.317171][ T6453] EXT4-fs error (device loop3): ext4_empty_dir:3128: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  352.371685][ T6453] EXT4-fs error (device loop3): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /27/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  352.429902][ T6453] EXT4-fs error (device loop3): ext4_empty_dir:3128: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  352.477461][ T6453] EXT4-fs error (device loop3): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /27/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  352.536840][ T6453] EXT4-fs error (device loop3): ext4_empty_dir:3128: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  352.603560][ T6453] EXT4-fs error (device loop3): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /27/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  352.644060][ T6453] EXT4-fs error (device loop3): ext4_empty_dir:3128: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  352.693338][ T6453] EXT4-fs error (device loop3): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /27/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  352.716816][ T6453] EXT4-fs error (device loop3): ext4_empty_dir:3128: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  353.358078][ T2952] team0 (unregistering): Port device team_slave_1 removed
[  353.490061][ T2952] team0 (unregistering): Port device team_slave_0 removed
[  354.907889][ T2952] team0 (unregistering): Port device team_slave_1 removed
[  354.941944][ T2952] team0 (unregistering): Port device team_slave_0 removed
[  355.171182][   T29] audit: type=1326 audit(1729563897.029:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7162 comm="syz.1.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037d97dff9 code=0x7fc00000
[  355.364531][ T7168] loop1: detected capacity change from 0 to 512
[  355.404365][ T7168] EXT4-fs (loop1): 1 truncate cleaned up
[  355.411167][ T7168] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  355.434090][ T7168] EXT4-fs error (device loop1): ext4_add_entry:2437: inode #2: comm syz.1.350: Directory hole found for htree leaf block 0
[  355.451040][ T7168] EXT4-fs (loop1): Remounting filesystem read-only
[  355.636501][ T6724] bridge0: port 3(syz_tun) entered disabled state
[  355.661114][ T6724] syz_tun (unregistering): left allmulticast mode
[  355.669156][ T6724] syz_tun (unregistering): left promiscuous mode
[  355.677561][ T6724] bridge0: port 3(syz_tun) entered disabled state
[  356.587095][ T6428] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  356.598177][ T6989] hsr_slave_0: entered promiscuous mode
[  356.618109][ T6989] hsr_slave_1: entered promiscuous mode
[  356.637628][ T6989] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  356.656730][ T6989] Cannot create hsr debugfs directory
[  356.758769][ T6877] 8021q: adding VLAN 0 to HW filter on device bond0
[  356.777328][ T6877] 8021q: adding VLAN 0 to HW filter on device team0
[  357.498361][ T6724] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  357.560978][  T196] bridge0: port 1(bridge_slave_0) entered blocking state
[  357.568295][  T196] bridge0: port 1(bridge_slave_0) entered forwarding state
[  357.627646][  T196] bridge0: port 2(bridge_slave_1) entered blocking state
[  357.634855][  T196] bridge0: port 2(bridge_slave_1) entered forwarding state
[  358.142322][ T6907] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  358.227500][ T6907] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  358.392792][ T6907] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  358.447268][ T6907] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  358.813445][ T5238] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  358.826139][ T6907] 8021q: adding VLAN 0 to HW filter on device bond0
[  358.853544][ T5238] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  358.865106][ T5238] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  358.880940][ T6907] 8021q: adding VLAN 0 to HW filter on device team0
[  358.897300][ T6877] 8021q: adding VLAN 0 to HW filter on device batadv0
[  359.033519][ T6014] bridge0: port 1(bridge_slave_0) entered blocking state
[  359.040663][ T6014] bridge0: port 1(bridge_slave_0) entered forwarding state
[  359.052396][ T5238] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  359.061937][ T5238] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  359.069936][ T5238] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  359.091653][ T6014] bridge0: port 2(bridge_slave_1) entered blocking state
[  359.098706][ T7192] loop4: detected capacity change from 0 to 40427
[  359.105290][ T6014] bridge0: port 2(bridge_slave_1) entered forwarding state
[  359.286422][ T6877] veth0_vlan: entered promiscuous mode
[  359.293942][ T7192] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x1fffff
[  359.350944][ T7192] F2FS-fs (loop4): invalid crc value
[  359.367508][ T6877] veth1_vlan: entered promiscuous mode
[  359.418948][ T7192] F2FS-fs (loop4): Found nat_bits in checkpoint
[  359.484279][ T6907] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  359.561928][ T2952] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  359.618815][ T7192] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  359.725554][ T7192] F2FS-fs (loop4): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_do_write_data_page+0x903/0x19e0
[  359.735735][ T2952] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  359.755780][ T7192] bio_check_eod: 7 callbacks suppressed
[  359.755799][ T7192] syz.4.357: attempt to access beyond end of device
[  359.755799][ T7192] loop4: rw=2049, sector=77824, nr_sectors = 160 limit=40427
[  359.783873][ T6877] veth0_macvtap: entered promiscuous mode
[  359.816368][ T7192] syz.4.357: attempt to access beyond end of device
[  359.816368][ T7192] loop4: rw=2049, sector=77984, nr_sectors = 240 limit=40427
[  359.819085][ T6989] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  359.912734][ T7215] syz.4.357: attempt to access beyond end of device
[  359.912734][ T7215] loop4: rw=2049, sector=78224, nr_sectors = 392 limit=40427
[  359.936152][ T2952] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  359.941137][ T7215] syz.4.357: attempt to access beyond end of device
[  359.941137][ T7215] loop4: rw=2049, sector=78624, nr_sectors = 48 limit=40427
[  359.946989][ T7192] syz.4.357: attempt to access beyond end of device
[  359.946989][ T7192] loop4: rw=2049, sector=78616, nr_sectors = 8 limit=40427
[  360.005797][ T7215] F2FS-fs (loop4): inject no more block in inc_valid_block_count of f2fs_reserve_new_blocks+0x195/0xb90
[  360.020902][ T6877] veth1_macvtap: entered promiscuous mode
[  360.079237][ T6989] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  360.096770][ T6989] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  360.125985][ T6447] syz-executor: attempt to access beyond end of device
[  360.125985][ T6447] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  360.157128][ T2952] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  360.167841][ T6447] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  360.176461][ T6447] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  360.183314][ T6989] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  360.317374][ T6877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  360.332962][ T6877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  360.343519][ T6877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  360.354615][ T6877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  360.365397][ T6877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  360.376819][ T6877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  360.389835][ T6877] batman_adv: batadv0: Interface activated: batadv_slave_0
[  360.400740][ T6877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  360.411373][ T6877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  360.422109][ T6877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  360.433314][ T6877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  360.443619][ T6877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  360.454318][ T6877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  360.466509][ T6877] batman_adv: batadv0: Interface activated: batadv_slave_1
[  360.649192][ T6907] 8021q: adding VLAN 0 to HW filter on device batadv0
[  360.659959][ T7207] chnl_net:caif_netlink_parms(): no params data found
[  360.675089][ T2952] bridge_slave_1: left allmulticast mode
[  360.680825][ T2952] bridge_slave_1: left promiscuous mode
[  360.687324][ T2952] bridge0: port 2(bridge_slave_1) entered disabled state
[  360.707159][ T2952] bridge_slave_0: left allmulticast mode
[  360.720387][ T2952] bridge_slave_0: left promiscuous mode
[  360.733309][ T2952] bridge0: port 1(bridge_slave_0) entered disabled state
[  360.922499][   T29] audit: type=1326 audit(1729563902.779:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7219 comm="syz.1.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037d97dff9 code=0x7fc00000
[  361.535309][ T5238] Bluetooth: hci0: command tx timeout
[  361.943574][ T7234] syz.4.359[7234] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  361.943684][ T7234] syz.4.359[7234] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  361.992266][ T7234] syz.4.359[7234] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  362.235852][ T2952] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  362.261351][ T2952] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  362.282162][ T2952] bond0 (unregistering): Released all slaves
[  362.412844][ T7242] loop4: detected capacity change from 0 to 512
[  362.461310][ T7242] EXT4-fs (loop4): 1 truncate cleaned up
[  362.487688][ T7242] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  362.539959][ T7242] EXT4-fs error (device loop4): ext4_add_entry:2437: inode #2: comm syz.4.362: Directory hole found for htree leaf block 0
[  362.560813][ T7242] EXT4-fs (loop4): Remounting filesystem read-only
[  362.774462][ T6877] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  362.784659][ T6877] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  362.802342][ T6877] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  362.952555][ T6877] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  363.484484][ T6447] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  363.591469][ T5253] Bluetooth: hci0: command tx timeout
[  363.899713][ T7261] netlink: 76 bytes leftover after parsing attributes in process `syz.1.363'.
[  365.170436][ T6989] 8021q: adding VLAN 0 to HW filter on device bond0
[  365.329409][  T196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  365.383333][ T7207] bridge0: port 1(bridge_slave_0) entered blocking state
[  365.390526][ T7207] bridge0: port 1(bridge_slave_0) entered disabled state
[  365.402397][  T196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  365.480951][ T7207] bridge_slave_0: entered allmulticast mode
[  365.493557][ T7207] bridge_slave_0: entered promiscuous mode
[  365.550550][ T7207] bridge0: port 2(bridge_slave_1) entered blocking state
[  365.557957][ T7207] bridge0: port 2(bridge_slave_1) entered disabled state
[  365.575384][ T7207] bridge_slave_1: entered allmulticast mode
[  365.595950][ T7207] bridge_slave_1: entered promiscuous mode
[  365.659595][ T2952] hsr_slave_0: left promiscuous mode
[  365.662922][ T5253] Bluetooth: hci0: command tx timeout
[  365.691165][ T2952] hsr_slave_1: left promiscuous mode
[  365.693165][ T7288] loop1: detected capacity change from 0 to 512
[  365.711505][ T2952] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  365.712528][ T7288] EXT4-fs (loop1): Test dummy encryption mode enabled
[  365.757222][ T2952] batman_adv: batadv0: Removing interface: batadv_slave_0
[  365.769373][ T2952] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  365.772724][ T7288] EXT4-fs error (device loop1): __ext4_iget:4952: inode #11: block 1: comm syz.1.367: invalid block
[  365.788108][ T2952] batman_adv: batadv0: Removing interface: batadv_slave_1
[  365.789797][ T7288] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.367: couldn't read orphan inode 11 (err -117)
[  365.817420][ T7288] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  365.849455][ T2952] veth1_macvtap: left promiscuous mode
[  365.858903][ T2952] veth0_macvtap: left promiscuous mode
[  365.864818][ T2952] veth1_vlan: left promiscuous mode
[  365.870148][ T2952] veth0_vlan: left promiscuous mode
[  366.392357][ T7293] EXT4-fs error (device loop1): ext4_add_entry:2437: inode #2: comm syz.1.367: Directory hole found for htree leaf block 0
[  366.931914][ T6428] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  367.386494][ T2952] team0 (unregistering): Port device team_slave_1 removed
[  367.483118][ T2952] team0 (unregistering): Port device team_slave_0 removed
[  367.742651][ T5253] Bluetooth: hci0: command tx timeout
[  367.994743][ T7305] loop4: detected capacity change from 0 to 1024
[  368.089892][ T7305] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  369.203434][   T29] audit: type=1800 audit(1729563911.039:34): pid=7311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.369" name="bus" dev="loop4" ino=18 res=0 errno=0
[  369.343143][ T6447] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  369.343365][ T6907] veth0_vlan: entered promiscuous mode
[  369.364363][ T6907] veth1_vlan: entered promiscuous mode
[  369.398221][ T6907] veth0_macvtap: entered promiscuous mode
[  369.409797][ T6907] veth1_macvtap: entered promiscuous mode
[  369.426947][ T6907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  369.437682][ T6907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  369.447849][ T6907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  369.458569][ T6907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  369.468709][ T6907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  369.479225][ T6907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  369.490824][ T6907] batman_adv: batadv0: Interface activated: batadv_slave_0
[  369.501211][ T6907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  369.511828][ T6907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  369.521746][ T6907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  369.532275][ T6907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  369.542425][ T6907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  369.553258][ T6907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  369.569827][ T6907] batman_adv: batadv0: Interface activated: batadv_slave_1
[  369.580208][ T6907] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  369.589176][ T6907] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  369.598916][ T6907] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  369.607787][ T6907] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  369.639785][ T6989] 8021q: adding VLAN 0 to HW filter on device team0
[  369.718869][ T3007] bridge0: port 1(bridge_slave_0) entered blocking state
[  369.726112][ T3007] bridge0: port 1(bridge_slave_0) entered forwarding state
[  369.770379][ T7207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  369.849572][ T3007] bridge0: port 2(bridge_slave_1) entered blocking state
[  369.856760][ T3007] bridge0: port 2(bridge_slave_1) entered forwarding state
[  369.905715][ T7207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  369.948278][ T3007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  370.002361][ T3007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  370.384200][   T48] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  370.562454][   T48] usb 5-1: Using ep0 maxpacket: 16
[  370.596540][ T7207] team0: Port device team_slave_0 added
[  370.643000][   T48] usb 5-1: config 0 has no interfaces?
[  370.733298][   T48] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  370.868807][ T7207] team0: Port device team_slave_1 added
[  370.889010][   T48] usb 5-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0
[  370.950204][ T7336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.291'.
[  371.055242][   T48] usb 5-1: Product: syz
[  371.059492][   T48] usb 5-1: Manufacturer: syz
[  371.084183][   T48] usb 5-1: config 0 descriptor??
[  371.142536][  T196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  371.150915][  T196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  371.219702][ T6989] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  372.845474][ T7207] batman_adv: batadv0: Adding interface: batadv_slave_0
[  372.871727][ T7207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  372.952940][ T7207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  373.278948][ T7207] batman_adv: batadv0: Adding interface: batadv_slave_1
[  373.325673][ T7207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  373.365769][ T7207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  373.384073][ T6014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  373.404002][ T6014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  373.463275][ T7363] loop1: detected capacity change from 0 to 512
[  373.472405][ T7363] EXT4-fs: Ignoring removed i_version option
[  373.525792][ T7207] hsr_slave_0: entered promiscuous mode
[  373.550309][ T7363] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  373.564013][ T7207] hsr_slave_1: entered promiscuous mode
[  373.570581][ T7363] EXT4-fs (loop1): 1 truncate cleaned up
[  373.583205][ T7363] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  373.597975][ T7207] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  373.612721][ T7207] Cannot create hsr debugfs directory
[  373.981998][ T5300] usb 5-1: USB disconnect, device number 8
[  376.689172][ T6428] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  376.986482][ T6989] 8021q: adding VLAN 0 to HW filter on device batadv0
[  378.065732][ T1263] ieee802154 phy0 wpan0: encryption failed: -22
[  378.072067][ T1263] ieee802154 phy1 wpan1: encryption failed: -22
[  378.135132][ T6989] veth0_vlan: entered promiscuous mode
[  378.170774][ T6989] veth1_vlan: entered promiscuous mode
[  378.315114][ T6989] veth0_macvtap: entered promiscuous mode
[  378.365784][ T6989] veth1_macvtap: entered promiscuous mode
[  378.491336][ T7406] loop5: detected capacity change from 0 to 1024
[  378.573974][ T6989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  378.597585][ T7406] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  378.603797][ T6989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  378.627925][ T6989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  378.639217][ T6989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  378.649497][ T6989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  378.660038][ T6989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  378.669929][ T6989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  378.680576][ T6989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  378.733503][ T6989] batman_adv: batadv0: Interface activated: batadv_slave_0
[  378.779455][ T6989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  378.802991][ T6989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  379.168941][ T6989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  379.201431][ T6989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  379.510653][ T7422] netlink: 60 bytes leftover after parsing attributes in process `syz.0.383'.
[  379.955710][ T6989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  380.020990][ T6989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  380.031002][ T6989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  380.041498][ T6989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  380.053998][ T6989] batman_adv: batadv0: Interface activated: batadv_slave_1
[  380.111561][ T6989] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  380.128820][ T6989] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  380.231597][ T6989] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  380.275202][ T6989] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  380.435555][ T7207] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  380.467752][ T7207] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  380.595164][ T7207] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  380.625374][ T7207] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  380.862606][ T5299] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  380.903260][ T6014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  380.940819][ T7436] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.381: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[  380.970596][ T6014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  381.054297][ T5299] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00
[  381.109357][ T5299] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  381.135686][ T5299] usb 5-1: config 0 descriptor??
[  381.155799][  T196] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  381.178160][  T196] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  381.332524][ T7207] 8021q: adding VLAN 0 to HW filter on device bond0
[  381.352306][ T7207] 8021q: adding VLAN 0 to HW filter on device team0
[  381.422384][ T6014] bridge0: port 1(bridge_slave_0) entered blocking state
[  381.429656][ T6014] bridge0: port 1(bridge_slave_0) entered forwarding state
[  381.476944][ T6014] bridge0: port 2(bridge_slave_1) entered blocking state
[  381.484222][ T6014] bridge0: port 2(bridge_slave_1) entered forwarding state
[  381.501510][ T7446] loop2: detected capacity change from 0 to 512
[  381.677623][ T5299] playstation 0003:054C:0DF2.0007: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0
[  381.780984][ T7446] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  381.794528][ T7446] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  381.816385][ T7428] loop0: detected capacity change from 0 to 40427
[  381.893249][ T7428] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  381.901054][ T7428] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  382.050250][ T7428] F2FS-fs (loop0): invalid crc value
[  382.132531][ T7428] F2FS-fs (loop0): Found nat_bits in checkpoint
[  382.163298][ T5299] playstation 0003:054C:0DF2.0007: Failed to retrieve feature with reportID 32: -71
[  382.172847][ T5299] playstation 0003:054C:0DF2.0007: Failed to retrieve DualSense firmware info: -71
[  382.182710][ T5299] playstation 0003:054C:0DF2.0007: Failed to get firmware info from DualSense
[  382.192421][ T5299] playstation 0003:054C:0DF2.0007: Failed to create dualsense.
[  382.616167][ T7463] loop1: detected capacity change from 0 to 256
[  382.655692][ T7463] msdos: Bad value for 'time_offset'
[  382.662073][ T5299] playstation 0003:054C:0DF2.0007: probe with driver playstation failed with error -71
[  382.752738][ T5299] usb 5-1: USB disconnect, device number 9
[  382.919691][ T6989] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  383.021380][ T7207] 8021q: adding VLAN 0 to HW filter on device batadv0
[  383.143541][ T7207] veth0_vlan: entered promiscuous mode
[  383.158335][ T7207] veth1_vlan: entered promiscuous mode
[  383.546017][ T6907] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  383.638876][ T7207] veth0_macvtap: entered promiscuous mode
[  383.649849][ T7207] veth1_macvtap: entered promiscuous mode
[  383.672130][ T7207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  383.684823][ T7207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  383.704906][ T7207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  383.729931][ T7207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  383.751082][ T7207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  383.767260][ T7207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  383.777321][ T7207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  383.792254][ T7207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  383.802094][ T7207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  383.812879][ T7207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  383.825806][ T7207] batman_adv: batadv0: Interface activated: batadv_slave_0
[  383.887500][ T7207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  383.898041][ T7207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  383.908332][ T7207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  383.919121][ T7207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  383.929314][ T7207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  383.940185][ T7207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  383.955585][ T7207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  383.969245][ T7207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  383.979260][ T7207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  383.990137][ T7207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  384.001810][ T7207] batman_adv: batadv0: Interface activated: batadv_slave_1
[  384.077810][ T7488] loop4: detected capacity change from 0 to 1024
[  384.091086][ T7488] ext4: Unknown parameter 'nouser_xattr'
[  384.112131][ T7207] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  384.121143][ T7207] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  384.129968][ T7207] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  384.138801][ T7207] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  384.635336][ T6014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  384.694313][ T6014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  385.943709][ T7500] loop2: detected capacity change from 0 to 16
[  385.954461][ T7500] erofs: Unknown parameter '������������18446744073709551615�����$)��g��H	��o뿲uw���(�[��_�7N�`d���r����lG!���ܕ�;���A�'
[  386.132809][ T3007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  386.140704][ T3007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  386.301055][ T7505] loop5: detected capacity change from 0 to 1024
[  386.308845][ T7505] EXT4-fs: Ignoring removed nomblk_io_submit option
[  386.324020][ T7506] xt_CT: You must specify a L4 protocol and not use inversions on it
[  386.347608][ T7509] loop2: detected capacity change from 0 to 512
[  386.433935][ T7505] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  386.494478][ T7505] EXT4-fs (loop5): Test dummy encryption mode enabled
[  386.839634][ T7505] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840c02c, mo2=0003]
[  386.977156][ T7505] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  386.992045][ T7509] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  387.056084][ T7509] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  387.495569][ T7535] ptrace attach of "./syz-executor exec"[6877] was attempted by "./syz-executor exec"[7535]
[  388.203435][ T6989] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  389.818547][ T6819] Buffer I/O error on dev loop7, logical block 4095, async page read
[  390.156744][ T7571] loop1: detected capacity change from 0 to 512
[  390.172501][ T7571] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  390.199171][ T7570] netlink: 'syz.2.406': attribute type 12 has an invalid length.
[  390.214415][ T7572] loop0: detected capacity change from 0 to 512
[  390.264698][ T7571] EXT4-fs (loop1): 1 truncate cleaned up
[  390.312732][ T7571] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  390.336372][ T7572] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.408: bad orphan inode 17
[  390.407202][ T7572] ext4_test_bit(bit=16, block=4) = 1
[  390.442495][ T7572] is_bad_inode(inode)=0
[  390.446967][ T7572] NEXT_ORPHAN(inode)=0
[  390.451313][ T7572] max_ino=32
[  390.454750][ T7572] i_nlink=1
[  390.459128][ T7572] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  390.655479][ T7577] loop3: detected capacity change from 0 to 128
[  390.789887][ T6877] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  390.814386][ T7577] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  390.857454][ T7577] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  391.136768][ T6907] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  391.312522][ T5356] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  391.452456][ T5356] usb 2-1: device descriptor read/64, error -71
[  391.476641][ T7596] loop2: detected capacity change from 0 to 512
[  391.797732][ T7600] loop0: detected capacity change from 0 to 16
[  391.804755][ T7600] erofs: Unknown parameter '������������18446744073709551615�����$)��g��H	��o뿲uw���(�[��_�7N�`d���r����lG!���ܕ�;���A�'
[  393.211943][ T5356] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  393.612405][ T7596] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  393.636047][ T7596] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  393.795437][ T7207] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  396.614953][ T6989] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  396.953665][ T7630] overlayfs: failed to resolve './file0': -2
[  397.803649][ T7637] netlink: 12 bytes leftover after parsing attributes in process `syz.2.419'.
[  398.546158][ T7649] netlink: 'syz.5.423': attribute type 12 has an invalid length.
[  398.961910][ T6428] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  399.244469][ T7652] loop2: detected capacity change from 0 to 1024
[  399.286883][ T7652] ext4: Unknown parameter 'nouser_xattr'
[  399.765681][ T7661] loop0: detected capacity change from 0 to 16
[  399.807230][ T7661] erofs: Unknown parameter '������������18446744073709551615�����$)��g��H	��o뿲uw���(�[��_�7N�`d���r����lG!���ܕ�;���A�'
[  401.058043][ T5238] Bluetooth: hci3: command 0x0406 tx timeout
[  401.277995][ T7665] loop5: detected capacity change from 0 to 256
[  401.488737][ T7665] FAT-fs (loop5): Directory bread(block 64) failed
[  401.515902][ T7665] FAT-fs (loop5): Directory bread(block 65) failed
[  401.565564][ T7665] FAT-fs (loop5): Directory bread(block 66) failed
[  401.607551][ T7665] FAT-fs (loop5): Directory bread(block 67) failed
[  401.652725][ T7665] FAT-fs (loop5): Directory bread(block 68) failed
[  401.661326][ T7665] FAT-fs (loop5): Directory bread(block 69) failed
[  401.699360][ T7673] loop3: detected capacity change from 0 to 512
[  401.699668][ T7672] xt_CT: You must specify a L4 protocol and not use inversions on it
[  401.711885][ T7665] FAT-fs (loop5): Directory bread(block 70) failed
[  401.725811][ T7665] FAT-fs (loop5): Directory bread(block 71) failed
[  401.737165][ T7665] FAT-fs (loop5): Directory bread(block 72) failed
[  401.780426][ T7665] FAT-fs (loop5): Directory bread(block 73) failed
[  402.220608][ T7681] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  402.230723][ T7681] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  403.615289][ T7680] usb usb8: usbfs: process 7680 (syz.4.432) did not claim interface 0 before use
[  404.310884][ T7673] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  404.438445][ T7673] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  404.811338][ T7693] overlayfs: failed to clone upperpath
[  405.977701][ T7697] Invalid ELF header magic: != ELF
[  407.316337][ T5238] Bluetooth: hci5: command 0x0406 tx timeout
[  407.615495][ T7701] netlink: 12 bytes leftover after parsing attributes in process `syz.1.436'.
[  407.673973][ T7207] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  407.707270][ T7706] loop4: detected capacity change from 0 to 512
[  407.851487][ T7706] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  407.974206][ T7706] EXT4-fs (loop4): 1 truncate cleaned up
[  408.023333][ T7713] loop5: detected capacity change from 0 to 256
[  408.053398][ T7706] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  408.132230][ T7713] FAT-fs (loop5): Directory bread(block 64) failed
[  408.138826][ T7713] FAT-fs (loop5): Directory bread(block 65) failed
[  408.240588][ T7713] FAT-fs (loop5): Directory bread(block 66) failed
[  408.307596][ T7715] netlink: 'syz.1.441': attribute type 12 has an invalid length.
[  408.316114][ T7713] FAT-fs (loop5): Directory bread(block 67) failed
[  408.333499][ T7713] FAT-fs (loop5): Directory bread(block 68) failed
[  408.340056][ T7713] FAT-fs (loop5): Directory bread(block 69) failed
[  408.391913][ T7713] FAT-fs (loop5): Directory bread(block 70) failed
[  408.500970][ T7713] FAT-fs (loop5): Directory bread(block 71) failed
[  408.526150][ T7713] FAT-fs (loop5): Directory bread(block 72) failed
[  408.559350][ T7713] FAT-fs (loop5): Directory bread(block 73) failed
[  408.922371][ T5299] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  410.072355][ T5299] usb 5-1: device descriptor read/64, error -71
[  411.643489][ T7730] loop2: detected capacity change from 0 to 16
[  411.651042][ T7730] erofs: Unknown parameter '������������18446744073709551615�����$)��g��H	��o뿲uw���(�[��_�7N�`d���r����lG!���ܕ�;���A�'
[  412.047113][ T5299] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  412.788808][ T6447] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  412.841802][ T7743] loop3: detected capacity change from 0 to 512
[  413.072045][ T7743] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  413.072308][ T7743] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  413.527311][ T7753] overlayfs: failed to clone upperpath
[  415.317515][ T7207] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  415.444818][ T7761] netlink: 12 bytes leftover after parsing attributes in process `syz.2.453'.
[  415.800341][ T7770] loop5: detected capacity change from 0 to 1024
[  415.830431][ T7770] ext4: Unknown parameter 'nouser_xattr'
[  416.822284][   T48] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  416.950923][ T7777] loop4: detected capacity change from 0 to 16
[  417.191744][ T7777] erofs: (device loop4): mounted with root inode @ nid 36.
[  417.305730][ T7782] xt_CT: You must specify a L4 protocol and not use inversions on it
[  417.343164][ T7781] netlink: 'syz.0.457': attribute type 12 has an invalid length.
[  417.478621][   T48] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  417.495741][   T48] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  417.532811][   T48] usb 4-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00
[  417.542137][   T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  417.827274][   T48] usb 4-1: config 0 descriptor??
[  418.435103][   T48] belkin 0003:1020:0006.0008: report_id 0 is invalid
[  418.441947][   T48] belkin 0003:1020:0006.0008: item 0 0 1 8 parsing failed
[  418.610884][ T7795] loop4: detected capacity change from 0 to 512
[  418.680904][   T48] belkin 0003:1020:0006.0008: parse failed
[  418.687446][   T48] belkin 0003:1020:0006.0008: probe with driver belkin failed with error -22
[  418.691356][ T7795] EXT4-fs error (device loop4): ext4_orphan_get:1388: inode #15: comm syz.4.461: casefold flag without casefold feature
[  418.700537][   T48] usb 4-1: USB disconnect, device number 9
[  419.798886][ T7795] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.461: couldn't read orphan inode 15 (err -117)
[  419.977843][ T7795] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  419.980485][ T7795] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  420.119810][ T7806] loop1: detected capacity change from 0 to 512
[  420.168733][ T7806] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  420.326136][ T7806] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  420.765287][ T7814] overlayfs: failed to clone upperpath
[  422.595553][ T7823] loop2: detected capacity change from 0 to 512
[  422.632367][ T7823] EXT4-fs (loop2): Invalid default hash set in the superblock
[  422.667123][ T6428] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  423.162056][ T7832] tipc: Started in network mode
[  423.167496][ T7832] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  423.179306][ T7832] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  423.189815][ T7832] tipc: Enabled bearer <udp:syz1>, priority 10
[  423.451783][ T7833] loop5: detected capacity change from 0 to 16
[  423.808600][ T7833] erofs: (device loop5): mounted with root inode @ nid 36.
[  424.227083][ T7825] loop0: detected capacity change from 0 to 40427
[  424.317761][ T7830] loop1: detected capacity change from 0 to 40427
[  424.363803][ T7825] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  424.371727][ T7825] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  424.374188][ T5297] tipc: Node number set to 1
[  424.410679][ T7825] F2FS-fs (loop0): invalid crc value
[  424.425093][ T7830] F2FS-fs (loop1): invalid crc value
[  424.597673][ T7830] F2FS-fs (loop1): Found nat_bits in checkpoint
[  424.680525][ T7830] F2FS-fs (loop1): Start checkpoint disabled!
[  424.701035][ T7830] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  424.738061][ T7830] syz.1.470: attempt to access beyond end of device
[  424.738061][ T7830] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  424.794974][ T7848] netlink: 'syz.2.475': attribute type 12 has an invalid length.
[  424.821617][ T7825] F2FS-fs (loop0): Found nat_bits in checkpoint
[  425.329215][ T7825] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  425.388784][ T7825] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  425.539055][   T11] kworker/u8:0: attempt to access beyond end of device
[  425.539055][   T11] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  425.625368][   T11] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  425.672683][   T11] kworker/u8:0: attempt to access beyond end of device
[  425.672683][   T11] loop1: rw=2049, sector=41000, nr_sectors = 8 limit=40427
[  425.775731][   T11] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  426.700268][ T7865] loop4: detected capacity change from 0 to 16
[  427.114973][ T7865] erofs: (device loop4): mounted with root inode @ nid 36.
[  427.137221][ T7862] loop2: detected capacity change from 0 to 1024
[  427.283339][ T7862] EXT4-fs: Ignoring removed orlov option
[  427.378032][ T7862] EXT4-fs (loop2): Test dummy encryption mode enabled
[  427.438260][ T7862] EXT4-fs (loop2): stripe (7) is not aligned with cluster size (16), stripe is disabled
[  427.547336][ T7862] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  427.642799][ T7871] netlink: 8 bytes leftover after parsing attributes in process `syz.4.480'.
[  428.132669][ T5297] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  428.326054][ T7873] loop4: detected capacity change from 0 to 512
[  428.394781][ T5297] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  428.411719][ T5297] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  428.535325][ T7873] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  428.548516][ T7873] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  428.659781][ T5297] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  428.669711][ T5297] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  428.682810][ T5297] usb 3-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00
[  428.692938][ T5297] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  428.704247][ T5297] usb 3-1: config 0 descriptor??
[  428.819922][ T7887] overlayfs: failed to clone upperpath
[  430.260061][ T6989] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  430.382685][ T5250] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  430.423079][ T5297] usb 3-1: can't set config #0, error -71
[  430.431841][ T5297] usb 3-1: USB disconnect, device number 10
[  430.652567][ T5250] usb 4-1: Using ep0 maxpacket: 16
[  430.672910][ T5250] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  430.692906][ T5250] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  430.738172][ T6447] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  431.491145][ T5250] usb 4-1: config 0 descriptor??
[  431.491536][ T7903] loop2: detected capacity change from 0 to 16
[  431.502833][ T5250] gspca_main: sonixj-2.14.0 probing 0471:0327
[  431.556299][ T7903] erofs: (device loop2): mounted with root inode @ nid 36.
[  432.692260][ T5299] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  432.848516][ T7915] netlink: 'syz.4.491': attribute type 12 has an invalid length.
[  432.857207][ T5299] usb 6-1: Using ep0 maxpacket: 16
[  432.879626][ T5299] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  432.896954][ T5299] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  432.926838][ T5299] usb 6-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00
[  432.946945][ T5299] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  432.963709][ T5299] usb 6-1: config 0 descriptor??
[  433.232417][ T5250] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  434.183965][ T5299] usbhid 6-1:0.0: can't add hid device: -71
[  434.193269][ T5299] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  434.203548][ T5299] usb 6-1: USB disconnect, device number 7
[  434.221552][ T5297] usb 4-1: USB disconnect, device number 10
[  434.285253][ T5250] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[  434.300437][ T5250] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  434.339046][ T7928] pim6reg1: entered promiscuous mode
[  434.345938][ T7928] pim6reg1: entered allmulticast mode
[  434.365437][ T5250] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  434.662377][ T5250] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  434.694830][ T5250] usb 1-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00
[  434.703996][ T5250] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  434.714126][ T5250] usb 1-1: config 0 descriptor??
[  436.431309][ T7945] loop3: detected capacity change from 0 to 512
[  436.610474][ T5250] usbhid 1-1:0.0: can't add hid device: -71
[  436.620736][ T5250] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  436.672330][ T5250] usb 1-1: USB disconnect, device number 11
[  436.727723][ T7945] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  436.774919][ T7945] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  437.955905][ T7958] loop0: detected capacity change from 0 to 40427
[  437.982380][ T7958] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  437.990169][ T7958] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  439.191922][ T7958] F2FS-fs (loop0): Found nat_bits in checkpoint
[  439.266871][ T7958] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  439.274100][ T7958] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  439.507758][ T1263] ieee802154 phy0 wpan0: encryption failed: -22
[  439.514400][ T1263] ieee802154 phy1 wpan1: encryption failed: -22
[  439.673295][ T7207] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  440.247085][   T29] audit: type=1326 audit(1729563982.089:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7973 comm="syz.5.509" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8e5b97dff9 code=0x0
[  440.378544][ T7982] netlink: 4 bytes leftover after parsing attributes in process `syz.4.508'.
[  440.406200][ T7982] netlink: 28 bytes leftover after parsing attributes in process `syz.4.508'.
[  441.882449][   T48] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  441.898924][ T7985] loop4: detected capacity change from 0 to 1024
[  441.954655][ T7985] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  442.232262][   T48] usb 2-1: Using ep0 maxpacket: 16
[  442.242211][   T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  442.253764][   T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  442.271258][   T48] usb 2-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00
[  442.288519][   T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  442.935472][ T7978] netlink: 'syz.3.507': attribute type 12 has an invalid length.
[  443.057219][   T48] usb 2-1: config 0 descriptor??
[  443.062839][   T48] usb 2-1: can't set config #0, error -71
[  443.070318][   T48] usb 2-1: USB disconnect, device number 5
[  443.152709][ T6447] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[  443.304206][ T6447] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[  444.386861][ T8011] loop3: detected capacity change from 0 to 256
[  445.964976][ T8018] overlayfs: failed to clone upperpath
[  446.974336][ T6447] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  447.067255][ T8025] loop3: detected capacity change from 0 to 128
[  449.289817][   T29] audit: type=1326 audit(1729563990.719:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8033 comm="syz.5.524" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8e5b97dff9 code=0x0
[  449.533158][ T3007] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  449.618548][ T8027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.523'.
[  449.627728][ T8028] netlink: 28 bytes leftover after parsing attributes in process `syz.0.523'.
[  450.818137][ T3007] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  451.373653][ T8060] loop1: detected capacity change from 0 to 16
[  451.590319][ T8060] erofs: (device loop1): mounted with root inode @ nid 36.
[  451.627121][ T8060] syz.1.532: attempt to access beyond end of device
[  451.627121][ T8060] loop1: rw=0, sector=1049256, nr_sectors = 128 limit=16
[  451.642086][ T8060] erofs: (device loop1): z_erofs_read_folio: read error -5 @ 0 of nid 36
[  451.671980][   T48] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  451.791796][ T5252] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  451.816990][ T5252] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  451.827370][ T5252] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  451.902366][ T5252] Bluetooth: hci1: command 0x0406 tx timeout
[  451.909165][ T5252] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  451.919151][ T5252] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  451.926840][ T5252] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  451.979730][   T48] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11
[  452.119547][   T48] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024
[  452.131759][   T48] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  452.141176][   T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  452.178690][ T8058] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  452.205005][ T8063] netlink: 'syz.5.530': attribute type 12 has an invalid length.
[  452.251815][ T8064] binder: BINDER_SET_CONTEXT_MGR already set
[  452.258574][ T8064] binder: 8061:8064 ioctl 4018620d 20000040 returned -16
[  452.554799][   T48] aiptek 3-1:17.0: Aiptek using 400 ms programming speed
[  452.566183][   T48] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input6
[  452.592056][ T3007] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  452.860303][   T48] usb 3-1: USB disconnect, device number 11
[  452.866399][    C1] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[  454.100268][ T5253] Bluetooth: hci5: command tx timeout
[  454.566905][ T3007] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  454.827940][ T8087] overlayfs: failed to clone upperpath
[  455.268066][ T8089] loop5: detected capacity change from 0 to 512
[  455.319330][ T8089] EXT4-fs: Ignoring removed mblk_io_submit option
[  455.394805][ T8089] EXT4-fs (loop5): bad s_want_extra_isize: 11962
[  455.519328][ T8089] cgroup: Unknown subsys name 'cpuset'
[  455.596295][ T8052] chnl_net:caif_netlink_parms(): no params data found
[  456.143195][ T5252] Bluetooth: hci5: command tx timeout
[  456.388038][ T8101] loop0: detected capacity change from 0 to 16
[  456.436571][ T8101] erofs: (device loop0): mounted with root inode @ nid 36.
[  457.658178][ T5252] Bluetooth: hci2: command 0x0406 tx timeout
[  458.222478][ T5253] Bluetooth: hci5: command tx timeout
[  458.332619][ T8052] bridge0: port 1(bridge_slave_0) entered blocking state
[  458.339777][ T8052] bridge0: port 1(bridge_slave_0) entered disabled state
[  458.399640][ T8052] bridge_slave_0: entered allmulticast mode
[  458.439894][ T8052] bridge_slave_0: entered promiscuous mode
[  458.469738][ T3007] bridge_slave_1: left allmulticast mode
[  458.475972][ T3007] bridge_slave_1: left promiscuous mode
[  458.501002][ T3007] bridge0: port 2(bridge_slave_1) entered disabled state
[  458.586318][ T3007] bridge_slave_0: left allmulticast mode
[  458.594611][ T3007] bridge_slave_0: left promiscuous mode
[  458.600361][ T3007] bridge0: port 1(bridge_slave_0) entered disabled state
[  460.169759][ T8153] loop2: detected capacity change from 0 to 512
[  460.322186][ T5252] Bluetooth: hci5: command tx timeout
[  460.432525][ T8153] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  460.460527][ T8153] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  460.616105][ T3007] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  460.647446][ T3007] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  460.660715][ T3007] bond0 (unregistering): Released all slaves
[  460.685580][ T8052] bridge0: port 2(bridge_slave_1) entered blocking state
[  460.716769][ T8052] bridge0: port 2(bridge_slave_1) entered disabled state
[  460.755033][ T8052] bridge_slave_1: entered allmulticast mode
[  460.776730][ T6989] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  460.793945][ T8052] bridge_slave_1: entered promiscuous mode
[  460.895586][ T8158] loop5: detected capacity change from 0 to 256
[  461.056735][ T8158] FAT-fs (loop5): Directory bread(block 64) failed
[  461.084175][ T8158] FAT-fs (loop5): Directory bread(block 65) failed
[  461.090821][ T8158] FAT-fs (loop5): Directory bread(block 66) failed
[  461.137257][ T8052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  461.231488][ T8158] FAT-fs (loop5): Directory bread(block 67) failed
[  461.246971][ T8158] FAT-fs (loop5): Directory bread(block 68) failed
[  461.256107][ T8158] FAT-fs (loop5): Directory bread(block 69) failed
[  461.264314][ T8158] FAT-fs (loop5): Directory bread(block 70) failed
[  461.270952][ T8158] FAT-fs (loop5): Directory bread(block 71) failed
[  461.278224][ T8158] FAT-fs (loop5): Directory bread(block 72) failed
[  461.446692][ T8164] overlayfs: failed to clone upperpath
[  461.890674][ T8158] FAT-fs (loop5): Directory bread(block 73) failed
[  462.097021][ T5252] Bluetooth: hci4: command 0x0406 tx timeout
[  462.229187][ T8052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  462.531987][ T8177] loop2: detected capacity change from 0 to 512
[  462.539319][ T8177] EXT4-fs: Ignoring removed mblk_io_submit option
[  462.562411][ T8177] EXT4-fs (loop2): bad s_want_extra_isize: 11962
[  462.631419][ T8177] cgroup: Unknown subsys name 'cpuset'
[  462.719272][ T8180] usb usb8: usbfs: process 8180 (syz.2.555) did not claim interface 0 before use
[  463.042857][ T8052] team0: Port device team_slave_0 added
[  463.496073][ T8052] team0: Port device team_slave_1 added
[  463.681842][ T8052] batman_adv: batadv0: Adding interface: batadv_slave_0
[  463.734702][ T8052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  463.859425][ T8052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  464.178674][   T48] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  464.186985][ T3007] hsr_slave_0: left promiscuous mode
[  464.239243][ T3007] hsr_slave_1: left promiscuous mode
[  464.443964][ T3007] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  464.451595][ T3007] batman_adv: batadv0: Removing interface: batadv_slave_0
[  464.492407][   T48] usb 3-1: Using ep0 maxpacket: 16
[  464.500867][   T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  464.585245][   T48] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  464.806630][ T3007] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  464.967224][ T3007] batman_adv: batadv0: Removing interface: batadv_slave_1
[  465.121329][   T48] usb 3-1: New USB device found, idVendor=1b3d, idProduct=0134, bcdDevice=24.d0
[  465.330106][   T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  465.412508][   T48] usb 3-1: Product: syz
[  465.416910][   T48] usb 3-1: Manufacturer: syz
[  465.421528][   T48] usb 3-1: SerialNumber: syz
[  465.508636][   T48] usb 3-1: config 0 descriptor??
[  465.522224][ T3007] veth1_macvtap: left promiscuous mode
[  465.560984][ T3007] veth0_macvtap: left promiscuous mode
[  465.566734][ T3007] veth1_vlan: left promiscuous mode
[  465.572067][ T3007] veth0_vlan: left promiscuous mode
[  465.698877][ T8204] loop1: detected capacity change from 0 to 1024
[  465.763668][   T48] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[  465.772302][   T48] ftdi_sio ttyUSB0: unknown device type: 0x24d0
[  466.274643][ T8204] EXT4-fs: Ignoring removed mblk_io_submit option
[  466.449080][ T8204] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  468.050284][ T6428] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  468.415018][ T8221] loop3: detected capacity change from 0 to 512
[  468.508334][ T8221] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  468.552544][ T8221] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  468.960691][ T7207] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  469.594557][ T5299] usb 3-1: USB disconnect, device number 12
[  469.606181][ T5299] ftdi_sio 3-1:0.0: device disconnected
[  470.605773][ T8239] loop2: detected capacity change from 0 to 2048
[  470.612995][ T8239] ext4: Unknown parameter 'smackfstransmute'
[  470.677784][ T3007] team0 (unregistering): Port device team_slave_1 removed
[  470.820109][ T3007] team0 (unregistering): Port device team_slave_0 removed
[  470.985308][ T8243] overlayfs: failed to clone upperpath
[  471.986330][ T8052] batman_adv: batadv0: Adding interface: batadv_slave_1
[  471.997738][ T8052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  472.038033][ T8052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  472.724760][ T8253] loop1: detected capacity change from 0 to 512
[  472.924492][ T8253] EXT4-fs: Ignoring removed mblk_io_submit option
[  472.943249][ T8253] EXT4-fs (loop1): bad s_want_extra_isize: 11962
[  475.182451][ T8253] cgroup: Unknown subsys name 'cpuset'
[  475.345944][ T8252] usb usb8: usbfs: process 8252 (syz.1.568) did not claim interface 0 before use
[  475.655561][ T8052] hsr_slave_0: entered promiscuous mode
[  475.879395][ T8265] loop5: detected capacity change from 0 to 256
[  476.321378][ T8052] hsr_slave_1: entered promiscuous mode
[  476.394152][ T8052] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  476.401895][ T8052] Cannot create hsr debugfs directory
[  476.638182][ T8267] loop3: detected capacity change from 0 to 256
[  478.341869][ T8298] overlayfs: failed to clone upperpath
[  479.360188][ T8309] loop0: detected capacity change from 0 to 2048
[  479.837015][ T8309] Alternate GPT is invalid, using primary GPT.
[  480.393780][ T8309]  loop0: p2 p3 p7
[  481.622827][ T8341] loop0: detected capacity change from 0 to 16
[  481.668561][ T8052] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  481.701397][ T8052] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  481.731993][ T8341] erofs: (device loop0): mounted with root inode @ nid 36.
[  481.780288][ T8052] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  482.053491][ T8052] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  482.562259][ T5252] Bluetooth: hci0: command 0x0406 tx timeout
[  482.678026][ T8052] 8021q: adding VLAN 0 to HW filter on device bond0
[  482.695696][ T8052] 8021q: adding VLAN 0 to HW filter on device team0
[  482.730682][ T8052] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  482.741282][ T8052] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  482.773156][ T5467] bridge0: port 1(bridge_slave_0) entered blocking state
[  482.780476][ T5467] bridge0: port 1(bridge_slave_0) entered forwarding state
[  482.789650][ T5467] bridge0: port 2(bridge_slave_1) entered blocking state
[  482.796828][ T5467] bridge0: port 2(bridge_slave_1) entered forwarding state
[  482.970928][ T8329] loop5: detected capacity change from 0 to 40427
[  483.012636][ T8329] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  483.232620][ T8329] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  483.251932][ T8329] F2FS-fs (loop5): invalid crc value
[  483.634961][ T8329] F2FS-fs (loop5): Found nat_bits in checkpoint
[  484.086503][ T8052] 8021q: adding VLAN 0 to HW filter on device batadv0
[  484.545273][ T8329] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  484.600303][ T8329] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  484.941776][ T8384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.594'.
[  485.466927][ T8389] overlayfs: failed to clone upperpath
[  485.825224][ T5314] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  486.346028][ T5314] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  486.400084][ T5314] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  486.485186][ T5314] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  486.592334][ T5314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  486.623625][ T5314] usb 3-1: config 0 descriptor??
[  487.214416][ T8052] veth0_vlan: entered promiscuous mode
[  487.286693][ T8052] veth1_vlan: entered promiscuous mode
[  488.245660][ T8052] veth0_macvtap: entered promiscuous mode
[  488.290078][ T8052] veth1_macvtap: entered promiscuous mode
[  488.308437][ T8052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  488.318945][ T8052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  488.329179][ T8052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  488.339976][ T8052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  488.350203][ T8052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  488.460455][ T8052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  488.470583][ T8052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  488.481240][ T8052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  488.492086][ T8052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  488.521316][ T8402] loop0: detected capacity change from 0 to 40427
[  488.651683][ T8052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  488.679007][ T5299] usb 3-1: USB disconnect, device number 13
[  488.691703][ T8402] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  488.729815][ T8402] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  488.788658][ T8052] batman_adv: batadv0: Interface activated: batadv_slave_0
[  489.393879][ T8052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  489.406051][ T8052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  489.433107][ T8052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  489.456186][ T8402] F2FS-fs (loop0): invalid crc value
[  489.540425][ T8052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  489.580291][ T8052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  489.597059][ T8402] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-4)
[  489.701348][ T8052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  489.765387][ T8052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  489.812669][ T8052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  489.874468][ T8052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  489.909551][ T8052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  489.926406][ T8052] batman_adv: batadv0: Interface activated: batadv_slave_1
[  489.937452][ T8052] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  489.946661][ T8052] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  489.956493][ T8052] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  489.965314][ T8052] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  489.980300][ T8443] netlink: 8 bytes leftover after parsing attributes in process `syz.5.602'.
[  491.008026][ T2894] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  491.059238][ T2894] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  491.098713][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  491.107154][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  491.332669][ T5356] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  492.422197][ T5356] usb 4-1: Using ep0 maxpacket: 8
[  492.993242][ T8475] overlayfs: failed to clone upperpath
[  493.401051][ T5356] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  493.410907][ T5356] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  493.421730][ T5356] usb 4-1: config 0 descriptor??
[  495.829169][ T5356] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  495.870386][ T2894] Bluetooth: hci6: Frame reassembly failed (-84)
[  495.879706][ T5356] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  495.890620][ T5356] asix 4-1:0.0: probe with driver asix failed with error -71
[  496.132816][ T8508] syz.5.615[8508] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  496.132922][ T8508] syz.5.615[8508] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  496.173111][ T8508] syz.5.615[8508] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  496.344576][ T8511] loop0: detected capacity change from 0 to 8192
[  496.363888][ T8511] vfat: Unknown parameter '18446744073709551615�F��~�{h�O�J<|�Y? ��'"���S�S���QU�Kd!��>�d�'
[  496.376216][ T5356] usb 4-1: USB disconnect, device number 11
[  497.942688][ T5238] Bluetooth: hci6: command 0x1003 tx timeout
[  497.949965][ T5253] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  499.134781][ T8545] overlayfs: failed to clone upperpath
[  500.954701][ T1263] ieee802154 phy0 wpan0: encryption failed: -22
[  500.961237][ T1263] ieee802154 phy1 wpan1: encryption failed: -22
[  500.968057][   T48] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  501.124554][   T48] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  501.199020][   T48] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  502.423689][   T48] usb 1-1: string descriptor 0 read error: -71
[  502.430304][   T48] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99
[  502.439704][   T48] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  502.643010][   T48] usb 1-1: config 0 descriptor??
[  502.657166][   T48] usb 1-1: can't set config #0, error -71
[  503.113037][ T8600] loop5: detected capacity change from 0 to 512
[  503.165667][ T8600] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  503.210262][   T48] usb 1-1: USB disconnect, device number 12
[  503.322364][ T8600] EXT4-fs (loop5): 1 truncate cleaned up
[  503.382257][ T5314] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  503.389955][ T8600] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  503.712249][ T5314] usb 4-1: Using ep0 maxpacket: 32
[  503.721724][ T5314] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed
[  503.730953][ T5314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  503.742188][ T5314] usb 4-1: Product: syz
[  503.747731][ T5314] usb 4-1: Manufacturer: syz
[  503.763396][ T5314] usb 4-1: SerialNumber: syz
[  503.770112][ T5314] usb 4-1: config 0 descriptor??
[  504.403155][ T8617] overlayfs: failed to clone upperpath
[  505.842285][ T5299] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  505.927817][ T5314] (unnamed net_device) (uninitialized): Assigned a random MAC address: e6:80:a3:ce:9d:a8
[  505.969767][ T5314] rtl8150 4-1:0.0: eth1: rtl8150 is detected
[  506.174040][ T5356] usb 4-1: USB disconnect, device number 12
[  506.192557][ T5299] usb 6-1: device descriptor read/64, error -71
[  506.472423][ T5299] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  506.904628][ T6907] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  507.132770][ T5250] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  507.252685][ T8646] loop1: detected capacity change from 0 to 1024
[  507.464572][ T5250] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 60, changing to 9
[  507.477078][ T5250] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 41472, setting to 1024
[  507.500164][ T5250] usb 1-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40
[  507.518551][ T5250] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  507.726086][ T8646] EXT4-fs: Ignoring removed orlov option
[  508.263320][ T8646] EXT4-fs: Ignoring removed nomblk_io_submit option
[  508.345470][ T5250] usb 1-1: Product: syz
[  508.349708][ T5250] usb 1-1: Manufacturer: syz
[  508.354887][ T5250] usb 1-1: SerialNumber: syz
[  508.580500][ T8636] loop0: detected capacity change from 0 to 128
[  508.599794][ T8646] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  509.987374][ T5250] usbhid 1-1:1.0: can't add hid device: -71
[  510.032622][ T5250] usbhid 1-1:1.0: probe with driver usbhid failed with error -71
[  510.079039][ T5250] usb 1-1: USB disconnect, device number 13
[  510.285963][ T6428] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  510.611565][ T8681] netlink: 76 bytes leftover after parsing attributes in process `syz.5.654'.
[  513.452922][ T8709] loop5: detected capacity change from 0 to 512
[  513.516321][ T8709] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  513.604500][ T8709] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  515.160365][ T8731] loop0: detected capacity change from 0 to 512
[  515.167896][ T6907] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  515.278312][ T8731] EXT4-fs (loop0): 1 truncate cleaned up
[  515.285054][ T8731] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  515.303883][ T8731] EXT4-fs error (device loop0): ext4_add_entry:2437: inode #2: comm syz.0.670: Directory hole found for htree leaf block 0
[  515.349009][ T8731] EXT4-fs (loop0): Remounting filesystem read-only
[  516.675308][ T8742] loop4: detected capacity change from 0 to 512
[  516.788001][ T8742] ext4: Unknown parameter '"'
[  516.809783][   T48] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  516.849403][ T6877] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  517.286955][   T48] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  517.297581][   T48] usb 6-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[  517.307263][   T48] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  517.319730][   T48] usb 6-1: config 0 descriptor??
[  518.615828][   T48] lenovo 0003:17EF:6047.0009: unknown main item tag 0x0
[  518.628464][   T48] lenovo 0003:17EF:6047.0009: unknown main item tag 0x0
[  518.635528][   T48] lenovo 0003:17EF:6047.0009: unknown main item tag 0x0
[  518.663895][   T48] lenovo 0003:17EF:6047.0009: unknown main item tag 0x0
[  518.772193][   T48] lenovo 0003:17EF:6047.0009: unknown main item tag 0x0
[  518.791292][   T48] lenovo 0003:17EF:6047.0009: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.5-1/input0
[  518.987492][ T8774] ------------[ cut here ]------------
[  518.993524][ T8774] kmem_cache of name '9p-fcall-cache-(null)' already exists
[  519.041510][ T8774] WARNING: CPU: 0 PID: 8774 at mm/slab_common.c:108 __kmem_cache_create_args+0xa7/0x350
[  519.051952][ T8774] Modules linked in:
[  519.056225][ T8774] CPU: 0 UID: 0 PID: 8774 Comm: syz.3.679 Not tainted 6.12.0-rc4-syzkaller #0
[  519.065182][ T8774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  519.075529][ T8774] RIP: 0010:__kmem_cache_create_args+0xa7/0x350
[  519.081855][ T8774] Code: 8e 48 8b 1b 48 39 eb 74 25 48 8b 7b f8 4c 89 fe e8 ee df e1 09 85 c0 75 e8 90 48 c7 c7 92 6f 0b 8e 4c 89 fe e8 7a 7a 78 ff 90 <0f> 0b 90 90 4c 89 ff be 20 00 00 00 e8 48 e1 e1 09 48 85 c0 0f 85
[  519.101873][ T8774] RSP: 0018:ffffc900094b7788 EFLAGS: 00010246
[  519.109488][ T8774] RAX: ae2df62337edf500 RBX: ffff8880430952e8 RCX: 0000000000040000
[  519.118107][ T8774] RDX: ffffc9000bba6000 RSI: 0000000000006699 RDI: 000000000000669a
[  519.126218][ T8774] RBP: ffffffff8ea1fa80 R08: ffffffff8155e402 R09: 1ffff110170c519a
[  519.134400][ T8774] R10: dffffc0000000000 R11: ffffed10170c519b R12: 0000000000020018
[  519.142512][ T8774] R13: 0000000000000000 R14: ffffc900094b7860 R15: ffff888030206640
[  519.150514][ T8774] FS:  00007f2c67d206c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[  519.159527][ T8774] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  519.166227][ T8774] CR2: 000000110c49b534 CR3: 0000000049704000 CR4: 0000000000350ef0
[  519.174385][ T8774] Call Trace:
[  519.177690][ T8774]  <TASK>
[  519.180637][ T8774]  ? __warn+0x168/0x4e0
[  519.184962][ T8774]  ? __kmem_cache_create_args+0xa7/0x350
[  519.190638][ T8774]  ? report_bug+0x2b3/0x500
[  519.195228][ T8774]  ? __kmem_cache_create_args+0xa7/0x350
[  519.200901][ T8774]  ? handle_bug+0x60/0x90
[  519.203671][   T48] lenovo 0003:17EF:6047.0009: Failed to switch middle button: -71
[  519.205327][ T8774]  ? exc_invalid_op+0x1a/0x50
[  519.215549][   T48] lenovo 0003:17EF:6047.0009: Fn-lock setting failed: -71
[  519.218407][ T8774]  ? asm_exc_invalid_op+0x1a/0x20
[  519.225979][   T48] lenovo 0003:17EF:6047.0009: Sensitivity setting failed: -71
[  519.228451][   T48] usb 6-1: USB disconnect, device number 10
[  519.231073][ T8774]  ? __warn_printk+0x292/0x360
[  519.249333][ T8774]  ? __kmem_cache_create_args+0xa7/0x350
[  519.255031][ T8774]  ? __kmem_cache_create_args+0xa6/0x350
[  519.260693][ T8774]  p9_client_create+0xbc0/0x1150
[  519.265781][ T8774]  ? __pfx_p9_client_create+0x10/0x10
[  519.271258][ T8774]  ? __asan_memset+0x23/0x50
[  519.275951][ T8774]  ? __pfx_lockdep_init_map_type+0x10/0x10
[  519.281825][ T8774]  ? srso_alias_return_thunk+0x5/0xfbef5
[  519.287759][ T8774]  ? __raw_spin_lock_init+0x45/0x100
[  519.293395][ T8774]  v9fs_session_init+0x1e4/0x1b80
[  519.298494][ T8774]  ? __pfx_v9fs_session_init+0x10/0x10
[  519.304302][ T8774]  ? srso_alias_return_thunk+0x5/0xfbef5
[  519.309968][ T8774]  ? __kasan_kmalloc+0x98/0xb0
[  519.315621][ T8774]  ? v9fs_mount+0xb2/0xaa0
[  519.320072][ T8774]  ? __kmalloc_cache_noprof+0x19c/0x2c0
[  519.326242][ T8774]  v9fs_mount+0xcf/0xaa0
[  519.330527][ T8774]  ? __pfx_aa_get_newest_label+0x10/0x10
[  519.336236][ T8774]  ? __pfx_v9fs_mount+0x10/0x10
[  519.341091][ T8774]  ? __kmalloc_cache_noprof+0x19c/0x2c0
[  519.346933][ T8774]  legacy_get_tree+0xf0/0x190
[  519.351623][ T8774]  ? __pfx_v9fs_mount+0x10/0x10
[  519.356715][ T8774]  vfs_get_tree+0x92/0x2b0
[  519.361181][ T8774]  do_new_mount+0x2be/0xb40
[  519.365869][ T8774]  ? srso_alias_return_thunk+0x5/0xfbef5
[  519.371544][ T8774]  ? __pfx_do_new_mount+0x10/0x10
[  519.376706][ T8774]  __se_sys_mount+0x2d6/0x3c0
[  519.381426][ T8774]  ? __pfx___se_sys_mount+0x10/0x10
[  519.386711][ T8774]  ? do_syscall_64+0x100/0x230
[  519.391510][ T8774]  ? srso_alias_return_thunk+0x5/0xfbef5
[  519.397198][ T8774]  ? __x64_sys_mount+0x20/0xc0
[  519.401972][ T8774]  do_syscall_64+0xf3/0x230
[  519.406525][ T8774]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  519.412483][ T8774] RIP: 0033:0x7f2c66f7dff9
[  519.417387][ T8774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  519.438075][ T8774] RSP: 002b:00007f2c67d20038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  519.446600][ T8774] RAX: ffffffffffffffda RBX: 00007f2c67135f80 RCX: 00007f2c66f7dff9
[  519.454638][ T8774] RDX: 0000000020000140 RSI: 0000000020000200 RDI: 0000000000000000
[  519.462776][ T8774] RBP: 00007f2c66ff0296 R08: 00000000200002c0 R09: 0000000000000000
[  519.470826][ T8774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  519.479015][ T8774] R13: 0000000000000000 R14: 00007f2c67135f80 R15: 00007ffebdbd8988
[  519.487159][ T8774]  </TASK>
[  519.490181][ T8774] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  519.497452][ T8774] CPU: 0 UID: 0 PID: 8774 Comm: syz.3.679 Not tainted 6.12.0-rc4-syzkaller #0
[  519.506298][ T8774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  519.516367][ T8774] Call Trace:
[  519.519660][ T8774]  <TASK>
[  519.522595][ T8774]  dump_stack_lvl+0x241/0x360
[  519.527284][ T8774]  ? __pfx_dump_stack_lvl+0x10/0x10
[  519.532491][ T8774]  ? __pfx__printk+0x10/0x10
[  519.537091][ T8774]  ? srso_alias_return_thunk+0x5/0xfbef5
[  519.542826][ T8774]  ? vscnprintf+0x5d/0x90
[  519.547186][ T8774]  panic+0x349/0x880
[  519.551092][ T8774]  ? srso_alias_return_thunk+0x5/0xfbef5
[  519.556753][ T8774]  ? __warn+0x177/0x4e0
[  519.560958][ T8774]  ? __pfx_panic+0x10/0x10
[  519.565477][ T8774]  __warn+0x34b/0x4e0
[  519.569474][ T8774]  ? __kmem_cache_create_args+0xa7/0x350
[  519.575142][ T8774]  report_bug+0x2b3/0x500
[  519.579497][ T8774]  ? __kmem_cache_create_args+0xa7/0x350
[  519.585170][ T8774]  handle_bug+0x60/0x90
[  519.589354][ T8774]  exc_invalid_op+0x1a/0x50
[  519.593869][ T8774]  asm_exc_invalid_op+0x1a/0x20
[  519.598745][ T8774] RIP: 0010:__kmem_cache_create_args+0xa7/0x350
[  519.604998][ T8774] Code: 8e 48 8b 1b 48 39 eb 74 25 48 8b 7b f8 4c 89 fe e8 ee df e1 09 85 c0 75 e8 90 48 c7 c7 92 6f 0b 8e 4c 89 fe e8 7a 7a 78 ff 90 <0f> 0b 90 90 4c 89 ff be 20 00 00 00 e8 48 e1 e1 09 48 85 c0 0f 85
[  519.624712][ T8774] RSP: 0018:ffffc900094b7788 EFLAGS: 00010246
[  519.630791][ T8774] RAX: ae2df62337edf500 RBX: ffff8880430952e8 RCX: 0000000000040000
[  519.638798][ T8774] RDX: ffffc9000bba6000 RSI: 0000000000006699 RDI: 000000000000669a
[  519.646781][ T8774] RBP: ffffffff8ea1fa80 R08: ffffffff8155e402 R09: 1ffff110170c519a
[  519.654756][ T8774] R10: dffffc0000000000 R11: ffffed10170c519b R12: 0000000000020018
[  519.662729][ T8774] R13: 0000000000000000 R14: ffffc900094b7860 R15: ffff888030206640
[  519.670712][ T8774]  ? __warn_printk+0x292/0x360
[  519.675509][ T8774]  ? __kmem_cache_create_args+0xa6/0x350
[  519.681174][ T8774]  p9_client_create+0xbc0/0x1150
[  519.686144][ T8774]  ? __pfx_p9_client_create+0x10/0x10
[  519.691554][ T8774]  ? __asan_memset+0x23/0x50
[  519.696187][ T8774]  ? __pfx_lockdep_init_map_type+0x10/0x10
[  519.702047][ T8774]  ? srso_alias_return_thunk+0x5/0xfbef5
[  519.707714][ T8774]  ? __raw_spin_lock_init+0x45/0x100
[  519.713033][ T8774]  v9fs_session_init+0x1e4/0x1b80
[  519.718115][ T8774]  ? __pfx_v9fs_session_init+0x10/0x10
[  519.723606][ T8774]  ? srso_alias_return_thunk+0x5/0xfbef5
[  519.729272][ T8774]  ? __kasan_kmalloc+0x98/0xb0
[  519.734050][ T8774]  ? v9fs_mount+0xb2/0xaa0
[  519.738493][ T8774]  ? __kmalloc_cache_noprof+0x19c/0x2c0
[  519.744070][ T8774]  v9fs_mount+0xcf/0xaa0
[  519.748338][ T8774]  ? __pfx_aa_get_newest_label+0x10/0x10
[  519.753978][ T8774]  ? __pfx_v9fs_mount+0x10/0x10
[  519.758834][ T8774]  ? __kmalloc_cache_noprof+0x19c/0x2c0
[  519.764528][ T8774]  legacy_get_tree+0xf0/0x190
[  519.769213][ T8774]  ? __pfx_v9fs_mount+0x10/0x10
[  519.774077][ T8774]  vfs_get_tree+0x92/0x2b0
[  519.778541][ T8774]  do_new_mount+0x2be/0xb40
[  519.783049][ T8774]  ? srso_alias_return_thunk+0x5/0xfbef5
[  519.788692][ T8774]  ? __pfx_do_new_mount+0x10/0x10
[  519.793849][ T8774]  __se_sys_mount+0x2d6/0x3c0
[  519.798555][ T8774]  ? __pfx___se_sys_mount+0x10/0x10
[  519.803766][ T8774]  ? do_syscall_64+0x100/0x230
[  519.808560][ T8774]  ? srso_alias_return_thunk+0x5/0xfbef5
[  519.814197][ T8774]  ? __x64_sys_mount+0x20/0xc0
[  519.819249][ T8774]  do_syscall_64+0xf3/0x230
[  519.823771][ T8774]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  519.829702][ T8774] RIP: 0033:0x7f2c66f7dff9
[  519.834125][ T8774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  519.853774][ T8774] RSP: 002b:00007f2c67d20038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  519.862394][ T8774] RAX: ffffffffffffffda RBX: 00007f2c67135f80 RCX: 00007f2c66f7dff9
[  519.870380][ T8774] RDX: 0000000020000140 RSI: 0000000020000200 RDI: 0000000000000000
[  519.878382][ T8774] RBP: 00007f2c66ff0296 R08: 00000000200002c0 R09: 0000000000000000
[  519.886356][ T8774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  519.894331][ T8774] R13: 0000000000000000 R14: 00007f2c67135f80 R15: 00007ffebdbd8988
[  519.902347][ T8774]  </TASK>
[  519.905677][ T8774] Kernel Offset: disabled
[  519.910115][ T8774] Rebooting in 86400 seconds..