last executing test programs:

4m36.672015736s ago: executing program 1 (id=2):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000000000005e0000000000000000000f300f222566baf80c7741364a81143a3d420f07b8010000000f01c1"], 0x5e})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x541c00, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f00000001c0)={0x1fd, 0x280, 0x200, &(0x7f0000000840)=[0x8cc, 0x9, 0x1, 0x7fff, 0x3, 0x2, 0x7, 0x6, 0xfffffffffffffffd, 0x0, 0x8, 0x0, 0x45b1, 0x4, 0x3, 0xb63, 0x1, 0x100, 0x4, 0xcfd, 0x0, 0x3, 0x81, 0x0, 0xddc, 0x1, 0xa0, 0x1, 0x7, 0x2, 0x7fffffffffffffff, 0x4, 0xfffffffffffff000, 0x8000000000000001, 0x8000, 0x4, 0x24, 0x2, 0x6158cba, 0x0, 0x1, 0x1a6, 0x3, 0x8, 0xe, 0x26ec, 0x4, 0x7ff, 0x100000001, 0x2, 0x2, 0x3, 0x80000000, 0x3, 0x10001, 0xb, 0x1, 0x4ffffffffffffffd, 0x8d0, 0x4, 0xfffffffffffffffd, 0x9, 0x6, 0x9, 0x10000, 0x5, 0x7fffffff, 0x717, 0xbe, 0x9, 0x4, 0x2, 0xa, 0xfffffffffffffffe, 0x0, 0x1, 0xffffffffffffffa3, 0xe0, 0x8000, 0x7, 0x8, 0x2, 0x4, 0x6, 0x2, 0x3, 0x4, 0x8, 0x3406c035, 0x5, 0x3, 0x1, 0x4000000000002, 0x0, 0x1, 0xfffffffffffffffe, 0x4, 0x4, 0x6, 0x6, 0x3, 0x80000000, 0x800, 0x6, 0x40000000000009, 0x4, 0x50, 0xe, 0x1000, 0x6, 0x2, 0x2, 0x80, 0xd38, 0x7, 0x3, 0xc4, 0x8, 0x101, 0x7000000000000000, 0x1, 0x6, 0x2, 0xa2, 0x6, 0x80000001, 0x8, 0x2]})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x90, 0x5, 0x9, 0x7f}})
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000001800000000000000070000000000000001000000000000006b00000000000000c463"], 0x2de})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x5, 0x0, 0x1000000001], 0x1, 0x3c4210})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

4m36.29781712s ago: executing program 1 (id=13):
pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x629, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x8, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0x10002, 0x0, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x187], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0xc, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0x1000, 0x2, 0x4, 0x9, 0x3, 0x7, 0x9, 0x8, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x3, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x9, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x8, 0x2, 0x59, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1000]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
write$P9_RVERSION(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="150000"], 0x15)
r1 = dup(r0)
write$FUSE_BMAP(r1, 0x0, 0x0)
chmod(0x0, 0x111)
chmod(0x0, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x17)

4m34.830590479s ago: executing program 1 (id=16):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2})
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
dup3(r3, r2, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f00000024c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffd}], 0x0, 0x0, 0x0})

4m34.619879121s ago: executing program 1 (id=17):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
syz_mount_image$fuse(&(0x7f0000000200), &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
r1 = socket(0x840000000002, 0x3, 0xff)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0, <r2=>0x0, <r3=>0x0}, &(0x7f0000000140)=0xc)
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r2, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r3, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f5, &(0x7f0000001580)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r4, &(0x7f0000006b40)={0x2020}, 0x206e)

4m32.108021072s ago: executing program 1 (id=24):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r2 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f00000000c0)=0x3, 0x4)
sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000000d80), 0x36f, 0x20102, 0x0)

4m30.377809903s ago: executing program 1 (id=35):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000008000000070000000900000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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")
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$eJzs3V1oXOl5B/DnnSOtRto00WYTb9Jm04GUxCi18VdsBZcgZxW1AccbIit0r6LRh51h5ZGR5MabtkFtSQu9Cd2b0psimi4t5KJX3V5WabaQUAol5CK9KAiaLHvRC10ECi0bhXPmHWlky7ayXlvS7u+3zP7PnHnO+P0YnzkCvzoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAER89nOXTp1OB90KAOBxujL5pVNnff8DwLvKVT//AwAAAAAAAAAAAADAYZeiiGORYujVzTRdPe+oX261b92eGp/Y+7DBFClqUVT15aN++szZc586f2G0m/c//u324Xh+8uqlxnOLN24uzS8vz881ptqt2cW5+X2/w8Mef6eRagAaN168NXft2nLjzMmzu16+Pfz6wJPHhi9eOHF+tFs7NT4xMdlT09f/lv/0u9xrhccTUUQzUrw5/EZqRkQtHn4sHvDZedQGq06MVJ2YGp+oOrLQarZXyhdTLVfVIho9B411x+gxzMVDGYtYLZtfNnik7N7kzeZSc2ZhvvHF5tJKa6W12E61TmvL/jSiFqMpYi0iNgbufrv+KOKjkeLlU5tpJiKK7jh8sloY/OD21B5BH/ehbGejP2KtdgTm7BAbiCKuRIqfvXY8Zssxy4/4eMQXynw14pUyPxORyg/GuYif7vE54mjqiyL+PVIsps00V50PuueVy19ufL59bbGntnteOfLfD4/TIT831aOImeqMv5ne+sUOAAAAAAAAAAAAAAAAAG+3wSji25HiT579vWpdcVTr0t93cfQ9L/x275rxZx7wPmXtyYhYre1vTW5/XjqcauV/j6Bj7Es9ivhGXv/3RwfdGAAAAAAAAAAAAAAAAAAAgHe1Il6IFF85cTytRe89xVvt642rzZmFzl1hu/f+7d4zfWtra6uROjmWczrnas61nOs5N3JGLR+fcyzndM7VnGs513Nu5IwiH59zLOd0ztWcaznXc27kjL58fM6xnNM5V3Ou5VzPuZEzDsm9ewEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3klqUcTPI8W3vraZIkXEWMR0dHJ94KBbBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACU6qmIk5Fi/YV69XytFnE1In6+tbXVfUTEZpkP66D7CgAAAAAAAAAAAAAAAAAAAIdWKuJjkeLp/9tMjYi4Pfz6wJPHhi9eOHF+tIgiUlnSW//85NVLjecWb9xcml9enp9rTLVbs4tz8/v94+qXW+1bt6fGJx5JZx5o8BG3f7D+3OLNl5Za17+6sufrQ/VLM8srS83ZvV+OwahFTPfuGakaPDU+UTV6odVsV4em2j0aWIsY229nAAAAAAAAAAAAAAAAAAAAODSGUhGfixQ/+a9zqbtuvK+z5v9XOs+K7dpX/mDndwEs3JFdvb8/YD/bab8NHakW3jemxicmJnt29/XfXVq2KaUinokUn3j5Q9V6+BRDe66NL+veW9bdOJfrhn+trFvdVVUfmRqfaFxZbJ+4tLCwONtcac4szDcmbzZn9/2LAwAAAAAAAAAAAAAAAAAAAOA+hlIRP4oU//P3/5G6953P6//7Os961v//VrWEvlJPu3Nbtbb/vdXa/s72+y6ODn302XvtfxTr/8s2pVTENyPF2R99qLqffnf9//QdtWXdn0WKN579SK6rPVHWNbvd6bzjtdbC/Kmy9q8jxa+/2a2NqvZ6rn16p/Z0WTsYKf5yc3ftV3PtB3Zqz5S1xyPF9/5779oP7tSeLWt/Ein+6e8a3dqhsvb3c+2xndqTs4sLcw8a1nL+vxMp/vbK76Run+85/z2//2H1jtx215zff/vtmv/hnn2reV7/NM9/8wHzfz5SfKf+kVzXGfuZ/PpT1f935v8TkeI//2137bVc+/6d2tP77dZBK+f/25Hiu3/14+0+5/nPI7szQ73z/6t9u3P7U3JA8/9Uz77h3K7ZX3Is3o2WX/r6i82FhfklGzZs2NjeOOgzE49D+f3/55Hi/48VqXsdk7//39N5tnP997/f2Pn+v3hHbjug7//39+y7mK9a+vsi6is3bvY/E1FffunrJ1o3mtfnr8+3z5w+9elPnz996vT5/ie6F3c7W/seu3eCcv5/ECl++A8/3P45Zvf1397X/0N35LYDmv+ne/u067pm30PxrlTO/99Eiqc+++Ptnzfvd/3f/fn/+Md25/bfvwOa/w/07BvO7Wr9kmMBAAAAAAAAAABwlAylIv4iUvzuH/9m6q4h2s+//5u7I7cd0L//Otazb+4xrWvY9yADABwi5fXfByPFP299f3st9+7rv/iNbm3v9d+9HIb7/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFGXoog/jBRDr26m9YHyeUf9cqt96/bU+MTehw2mSFGLoqovH/XTZ86e+9T5C6PdvP/xb7cPx/OTVy81nlu8cXNpfnl5fq4x1W7NLs7N7/sdHvb4O41UA9C48eKtuWvXlhtnTp7d9fLt4dcHnjw2fPHCifOj3dqp8YmJyZ6avv63/KffJd1j/xNRxPcjxZvDb6TvDkTU4uHH4gGfnUdtsOrESNWJqfGJqiMLrWZ7pXwx1XJVLaLRc9BYd4wew1w8lLGI1bL5ZYNHyu5N3mwuNWcW5htfbC6ttFZai+1U67S27E8jajGaItYiYmPg7rfrjyK+GSlePrWZ/mUgouiOwyevTH7p1NkHt6f2CPq4D2U7G/0Ra7UjMGeH2EAU8Y+R4mevHY/vDUT0RecRH4/4QpmvRrxS5mciUvnBOBfx0z0+RxxNfVHEuUixmDbTawPl+aB7Xrn85cbn29cWe2q755Uj//3wOB3yc1M9ivhBdcbfTP/q7zUAAAAAAAAAAAAAAADAIVLEWqT4yonjqVofvL2muNW+3rjanFnoLOvrrv3rrpne2traaqROjuWczrmacy3nes6NnFHLx+ccyzmdczXnWs71nBs5o8jH5xzLOZ1zNedazvWcGzmjLx+fcyzndM7VnGs513Nu5IxDsnYPAAAAAAAAAAAAAAAAAAB4Z6lFUd3F/Vtf20xbA537S09HJ9fdD/Qd7xcBAAD//0kCdPc=")
r2 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2081413, 0x0, 0x1, 0x0, &(0x7f0000000080))
rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00')
rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000, 0x4010, r1, 0xb3793000)
r3 = epoll_create(0x7)
epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r2)
lstat(&(0x7f00000005c0)='./bus/file0\x00', &(0x7f00000007c0))
socket$inet6_udp(0xa, 0x2, 0x0)

4m30.003031498s ago: executing program 32 (id=35):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000008000000070000000900000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$eJzs3c1vVFUbAPDnzkwLpe9rKzEqLkyjIZAoLS1g8GMBe0LwY+fGSgtBho/QGi2aWBLcmBg3LkhcuRD/CyW6dWXiwoUbV4akGsNGY3TMnbkzDO1MOy0dbu39/ZLbOeeeOz3nQp85Z+49ZyaAwhpLf5Qi9kTE5SRipK2sElnhWOO4O7+/fzrdkqjVXv0tiSTb1zw+yR6Hsyf/PRLx/TdJ7C6vrHdu4er56Wp19kqWn5i/cHlibuHqgXMXps/Onp29OPXc1NEjh48cnTx4X+dXakufuP7WOyMfnXz9i8/+Sia//OlkEsfi1zONsvbz2CxjMRZ/1GofLN+f/rse3ezKclJu/Z3clSzfwZZVyWJkMCIei5Eot/1vjsSHL+faOKCvaklEDSioRPxDQTXHAc339r29Dy71eVQCPAhLx9OfAx3iv9K4NhijMRARe5c9r8MlvQ1J6/ju25PX0y36dB0O6Gzx2o4stTz+k3psjsbOem7XndI913nTEcCp7DHd/8oG6x9blhf/8OAsXouIxzuN/9eO/zfa4v/NDdYv/gEAAAAAAGDz3DoeEc92uv9Xyu7N7Yyn6vf/ksb9vx/urhA8tgn1r33/r3R7E6oBOlg6HvFSx/m/rTm+o+Us9//GbMDkzLnq7MGIeCgi9sfAjjQ/uUodBz7efaNbWfv8v3RL62/OBczacbuy497nzEzPT9/POQMNS9cinqh0n/+T9v9Je/+fSV8PLvdYx+69N091K1s7/oF+qX0esa9j/5+0jklW/3yOifp4YKI5Kljpyfc++apb/eIf8pP2/7tWj//RpP3zeubW9/sHI+LQQqXWrXyj4//B5LVy8/en3p2en78yGTGYnFi5f2p9bYbtqhkPzXhJ43//06tf/2uN/9vicCgiFnus89F/hn/uVqb/h/yk8T+zrv5//Ympm6Nfd6u/t/7/cL1P35/tcf0PVtdrgObdTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4LypFxP8iKY230qXS+HjEcEQ8ErtK1Utz88+cufT2xZm0rP79/6XmN/2ONPJJ8/v/R9vyU8vyhyLi4Yj4tDxUz4+fvlSdyfvkAQAAAAAAAAAAAAAAAAAAYIsY7rL+P/VLOe/WAX1XyR7FOxRPJe8GALkR/1Bc4h+KS/xDcYl/KK4Nxr/bBbAN6P+hqAZ6O2xnv9sB5EH/DwAAAAAA28qtF5+/kUTE4gtD9S01mJW1bgwO5dU6oJ9KeTcAyI05vFBcpv5AcfU4+RfYxpJW6s9ap/Lus/+T/jQIAAAAAAAAAAAAAFhh355bP665/h/Ylqz/h+Ky/h+Ky/p/KC7v8YG1VvFb/w8AAAAAAAAAAAAA+ZtbuHp+ulqdvSIhsdUSAxGxBZqRQ2Iw//DM+YUJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo+TcAAP//Swsk/Q==")
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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")
r2 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2081413, 0x0, 0x1, 0x0, &(0x7f0000000080))
rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00')
rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000, 0x4010, r1, 0xb3793000)
r3 = epoll_create(0x7)
epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r2)
lstat(&(0x7f00000005c0)='./bus/file0\x00', &(0x7f00000007c0))
socket$inet6_udp(0xa, 0x2, 0x0)

2m44.900066183s ago: executing program 0 (id=267):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000340)={[{@nodioread_nolock}, {@min_batch_time}, {@barrier_val={'barrier', 0x3d, 0x40}}, {@nodelalloc}]}, 0x5, 0x795, &(0x7f0000000cc0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000440)=ANY=[@ANYBLOB='shortname=mixed,iocharset=iso8859-=winnt,uni_xlate=1,uni_xlate=1,nonumtail=0,utf8=0,errors=continue,utf8=1,check=strict,iocharset=cp855,utf8=0,iocharset=koi8-u,codepage=857,utf8=0,rodir,shortname=win95,\x00'], 0x6, 0x2d4, &(0x7f0000002a80)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
socket$pppl2tp(0x18, 0x1, 0x1)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000003000000010000000000000100"/42], 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r5, r4}, 0xc)
r6 = syz_open_procfs(0x0, 0x0)
preadv(r6, &(0x7f0000000300)=[{0x0}, {0x0}], 0x2, 0x0, 0x0)

2m42.473642203s ago: executing program 0 (id=274):
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
syz_read_part_table(0x5c8, &(0x7f0000000600)="$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")
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0)

2m37.336083545s ago: executing program 0 (id=282):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)=@delqdisc={0x24, 0x25, 0x300, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0x480bd72125a0c189, 0xa}, {0xffe0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x880)
r3 = syz_open_procfs(0x0, &(0x7f0000000580)='net/tcp6\x00')
preadv(r3, &(0x7f0000000780)=[{&(0x7f0000000000)=""/65, 0x41}], 0x1, 0x91, 0x0)

2m35.972168662s ago: executing program 0 (id=288):
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file0\x00', 0x111)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, 0x0)

2m35.757980265s ago: executing program 0 (id=290):
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
pipe2$9p(&(0x7f0000000240), 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x4}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x20000000, 0x440, 0x6, 0x0, 0x0, 0x2004cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000], 0x0, 0x200306})
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2m30.703415046s ago: executing program 0 (id=298):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="00000c000000070001", @ANYRESOCT=0x0, @ANYRES32=r0, @ANYRES16=r0, @ANYRESOCT=r0], 0x0, 0x0, 0x0}, 0x0)
r1 = getpid()
ioprio_set$pid(0x2, r1, 0x6000)
r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc0f8565c, &(0x7f0000001080)={0x0, 0x5, 0x1, {0x2, @pix={0x401, 0x0, 0xbc403470, 0x7, 0xba, 0x7fff, 0x6, 0x1, 0x0, 0x7, 0x0, 0x3}}})
syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
r3 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f00000005c0)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="200406"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r3, &(0x7f0000000140)={0xc, &(0x7f00000003c0)={0x0, 0xe, 0xbb, {0xbb, 0x9, "077e808c41f39234406eb075c21630a44d688364ea3072a2e23f15237266700578986606a329bc56c239b05bee9535b5599651e806dc5adc27eaa1bd7687affca7e246b43e6c0596b65bd68e2540011b1086809b744e6ffe032b5b98541a0f6557c9722d2bc2d4734fc83d8e434a2542c5c77a7733047c9ef38b19d83dc9f1bc67a32ae41fc782098f6cf441611b24b3bb9382586cb1f188ca564b4e22f7e8ae24f7b43897887bea063ebd377fb4030e05afcd26ffd18924bf"}}, &(0x7f00000000c0)={0x0, 0x3, 0x71, @string={0x71, 0x3, "dbbb5ba2efef602017c7cf2af64d47807bcfc714789b8d3c80a34addb491c91da2d9bac49503113983437ea9899a1895fdadbec5f1c0f4f9f82e7715569ccd81c40629e94652b7f6cd38e8d7075ace767a21e3a0672bbdfbfb0e9bdba09bc2f9505bff3ef1f8fcb3406a08d292cc23"}}}, &(0x7f0000000540)={0x1c, &(0x7f0000000200)={0x20, 0xf, 0x22, "cd0ab1e5807badff8ab46c52f46761ad78f16c0819b17ce4a5c5b890e751c9404e79"}, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x1, 0x1, 0xfc}, &(0x7f0000000500)={0x20, 0x0, 0x1, 0x4}})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x18, &(0x7f0000000380)={0x0, 0x15, 0x4, "9c42c885"}, 0x0, 0x0, 0x0, 0x0})

2m29.727752848s ago: executing program 33 (id=298):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="00000c000000070001", @ANYRESOCT=0x0, @ANYRES32=r0, @ANYRES16=r0, @ANYRESOCT=r0], 0x0, 0x0, 0x0}, 0x0)
r1 = getpid()
ioprio_set$pid(0x2, r1, 0x6000)
r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc0f8565c, &(0x7f0000001080)={0x0, 0x5, 0x1, {0x2, @pix={0x401, 0x0, 0xbc403470, 0x7, 0xba, 0x7fff, 0x6, 0x1, 0x0, 0x7, 0x0, 0x3}}})
syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
r3 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f00000005c0)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="200406"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r3, &(0x7f0000000140)={0xc, &(0x7f00000003c0)={0x0, 0xe, 0xbb, {0xbb, 0x9, "077e808c41f39234406eb075c21630a44d688364ea3072a2e23f15237266700578986606a329bc56c239b05bee9535b5599651e806dc5adc27eaa1bd7687affca7e246b43e6c0596b65bd68e2540011b1086809b744e6ffe032b5b98541a0f6557c9722d2bc2d4734fc83d8e434a2542c5c77a7733047c9ef38b19d83dc9f1bc67a32ae41fc782098f6cf441611b24b3bb9382586cb1f188ca564b4e22f7e8ae24f7b43897887bea063ebd377fb4030e05afcd26ffd18924bf"}}, &(0x7f00000000c0)={0x0, 0x3, 0x71, @string={0x71, 0x3, "dbbb5ba2efef602017c7cf2af64d47807bcfc714789b8d3c80a34addb491c91da2d9bac49503113983437ea9899a1895fdadbec5f1c0f4f9f82e7715569ccd81c40629e94652b7f6cd38e8d7075ace767a21e3a0672bbdfbfb0e9bdba09bc2f9505bff3ef1f8fcb3406a08d292cc23"}}}, &(0x7f0000000540)={0x1c, &(0x7f0000000200)={0x20, 0xf, 0x22, "cd0ab1e5807badff8ab46c52f46761ad78f16c0819b17ce4a5c5b890e751c9404e79"}, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x1, 0x1, 0xfc}, &(0x7f0000000500)={0x20, 0x0, 0x1, 0x4}})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x18, &(0x7f0000000380)={0x0, 0x15, 0x4, "9c42c885"}, 0x0, 0x0, 0x0, 0x0})

1m42.426527837s ago: executing program 2 (id=393):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x164)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)
mount(&(0x7f0000000300), &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
syz_fuse_handle_req(r2, &(0x7f0000002240)="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", 0x2000, &(0x7f0000007080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1m39.331308875s ago: executing program 2 (id=403):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet_udp(0x2, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500))
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x36)

1m37.867729533s ago: executing program 3 (id=405):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0)
shutdown(r3, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={<r4=>0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, &(0x7f0000000040)=0x84)

1m36.355541551s ago: executing program 3 (id=406):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r5=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r4, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4804}, 0x0)

1m35.064162387s ago: executing program 3 (id=407):
timer_create(0x7, 0x0, 0x0)
socket$inet6(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0)
io_setup(0x3, &(0x7f0000000180)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = dup(r3)
write$UHID_INPUT(r4, &(0x7f0000000ac0)={0xc, {"a2e3ad214fc752f91b25470987f70e06d038e7ff7fc6e5539b3264078b089b3b08346c060890e0878f0e1ac6e70a9b3368959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31350d095d0636cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62239c6f30e065cd5b91cd0a03000000000018001b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd7878a37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4040d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b412435139000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a4cd13c257ac06c7d8ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190ba4d7909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810ba2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e8134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b000000807ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d24145a2e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a0400000000000000f463661c953fcad6f37725c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2ca8378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa04006651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed004000000b53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f090056b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b5c7fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d050000002a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f463934c54edc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a3b89f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d3560aba573bd16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22005b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db239dfe785b54c34a0a5db4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbf4c807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9edbaaadaea56765404e0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901003a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d50b00", 0x1000}}, 0x1006)

1m33.15744836s ago: executing program 3 (id=411):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
syz_mount_image$fuse(&(0x7f0000000200), &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
r1 = socket(0x840000000002, 0x3, 0xff)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0, <r2=>0x0, <r3=>0x0}, &(0x7f0000000140)=0xc)
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r2, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r3, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f5, &(0x7f0000001580)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r4, &(0x7f0000006b40)={0x2020}, 0x206e)

1m32.970911043s ago: executing program 2 (id=414):
creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
r0 = socket$packet(0x11, 0x2, 0x300)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x44c2, 0x0, 0x2, 0xfffffffd}, 0x0, 0x0)
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
socket(0x1d, 0x2, 0x6)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c210000000000b320207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = creat(&(0x7f0000000080)='./file0\x00', 0x2a)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r2, @ANYRES64=r0], 0x0)

1m31.778612097s ago: executing program 3 (id=418):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c"], 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a98", 0x3, 0xfffffffffffffffe)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000100005040000000000000000", @ANYBLOB="ebffffffffffffff280012800b00010065"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = dup(r3)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

1m27.794090376s ago: executing program 3 (id=428):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
getsockopt$inet6_mreq(r4, 0x29, 0x13, &(0x7f0000000000)={@mcast2}, &(0x7f00000000c0)=0x14)

1m27.692071747s ago: executing program 2 (id=429):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
syz_mount_image$fuse(&(0x7f0000000200), &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
r1 = socket(0x840000000002, 0x3, 0xff)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0, <r2=>0x0, <r3=>0x0}, &(0x7f0000000140)=0xc)
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r2, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r3, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f5, &(0x7f0000001580)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r4, &(0x7f0000006b40)={0x2020}, 0x206e)

1m27.077461555s ago: executing program 34 (id=428):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
getsockopt$inet6_mreq(r4, 0x29, 0x13, &(0x7f0000000000)={@mcast2}, &(0x7f00000000c0)=0x14)

1m26.799837788s ago: executing program 2 (id=435):
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
getpid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pipe2$9p(0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
io_uring_enter(0xffffffffffffffff, 0x1864, 0x6429, 0x1, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]})

1m22.933559556s ago: executing program 2 (id=444):
r0 = socket$inet6(0xa, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000002580)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$netlink(0x10, 0x3, 0x0)
bind$inet6(r0, 0x0, 0x0)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x2, 0x0)

1m22.640459139s ago: executing program 35 (id=444):
r0 = socket$inet6(0xa, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000002580)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$netlink(0x10, 0x3, 0x0)
bind$inet6(r0, 0x0, 0x0)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x2, 0x0)

1m8.020732728s ago: executing program 5 (id=471):
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0)
ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000140)={{&(0x7f00005a1000/0x4000)=nil, 0x4000}, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14)
prlimit64(0x0, 0x7, &(0x7f0000000180)={0x2, 0x3}, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1m6.695521044s ago: executing program 5 (id=475):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xe3}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x2e, &(0x7f0000000240)=0x802)
write$tun(0xffffffffffffffff, 0x0, 0x2a)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18)
syz_clone(0x10002000, 0x0, 0x0, 0x0, 0x0, 0x0)
execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000)
r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$6lowpan_control(r3, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b)

1m5.440707589s ago: executing program 5 (id=477):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x69703000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x204100, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@delneigh={0x30, 0x1a, 0x1, 0x470bd2d, 0x800, {0xa, 0x0, 0x0, 0x0, 0x1, 0xe8, 0x8}, [@NDA_CACHEINFO={0x14, 0x3, {0x7, 0x2}}]}, 0x30}}, 0x71d0b8801b5f1c98)
pipe(0x0)

1m4.132134525s ago: executing program 5 (id=478):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0)
mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)

1m2.768036972s ago: executing program 5 (id=480):
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="552987074001d0c3f1863a2d05fb4b8ed03ed833a601ae"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x4976a000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x4000, 0x400000}, &(0x7f0000000100), &(0x7f0000000080))
syz_open_dev$vim2m(&(0x7f0000000300), 0x8000000011d, 0x2)
r4 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0)

56.294251981s ago: executing program 5 (id=490):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40004)
socket$inet(0x2, 0x3, 0x4)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)

55.046665977s ago: executing program 36 (id=490):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40004)
socket$inet(0x2, 0x3, 0x4)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)

15.924549465s ago: executing program 6 (id=564):
chdir(0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x1a031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
r1 = gettid()
rt_sigaction(0x16, &(0x7f00000002c0)={0x0, 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000380))
tkill(r1, 0x16)

12.686219025s ago: executing program 7 (id=569):
mkdir(0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x8, 0x2000, 0x5, 0xffffffffffffffff, 0x2})
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xc, 0x10010, 0xffffffffffffffff, 0x8000000)
r2 = syz_open_dev$ndb(0x0, 0x0, 0x200)
socket(0x28, 0x5, 0x0)
ioctl$NBD_DISCONNECT(r2, 0xab08)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munlockall()
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

10.6099428s ago: executing program 4 (id=571):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_io_uring_setup(0x499, &(0x7f0000002180)={0x0, 0x787f, 0x0, 0x4, 0x800001b0}, 0x0, &(0x7f0000000280))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000007c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r4)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4)
setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x20000000005, 0x21}, 0xd8)
bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10)
splice(r3, 0x0, r4, 0x0, 0xfffd, 0x0)

10.391266462s ago: executing program 6 (id=572):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_read_part_table(0x635, &(0x7f0000000000)="$eJzs3D9oXeUbB/DvSe899yaFtr8fTl1SncViZ28NSHqpdKp061IVJFQc4lSx5Ea6mCGDg7NLEbLUumjo4KAt4iROoYNacRWkqNQiPXLuOfdPBEFsOwifz5Dzvs953vd5n5yTMSf8py2kmxTjYS+dJMdf/kvGZiYJ6df5Sapue+/czuqp01VVVUWdcz7dPPn5oetJOu2S/nSbqqo2ppOTufrB0o13i1F353Zd9ObWgTq82BzjSPL0wbI/3mZuh1TVvoP1HuXvgX/n2uBWUVwp29lTvzxYST76efXs7pmt966/2IY3ki+T+vm/U78Xk+y3cvHYhc54WD/lN+f3/bW5lLPI7HEvprPvDKMr68PtlcHa3iRwdLjz6WvP/X7sRqoT+arsLExuFLP9ymT08O3X/R+u3/7tS4O1veHlxemNJ97//xdZbid3qypH6pL/y/hPZ/kRVAYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4HG4NriVZDTcTtb2hr02unp298xWmeSFV/tt6Pj8qgPt9WIu3KmvG1lPfvgk3fmkov4xjiyku9LEvl+unhkPOpP6vcVmcGmwtje8v5TcefbB0WGzKjc/OzErtzHdeTfPt6N7VWM82fy7JtsS1eEm7+v78/0XnWR9uD2uf/nHotM0/HExmh5zIcnrvbzSNFPdK9u1f8zaAAAAAAAAAAAAAAAAAAAAgIeyeur0G3fb8fl+kp/eXqjHVa/5L/diqdiX/20vWTyZXO2nGK0kuf3Sb+U3h7a+az8dMEovoyQHP9w81y4p920w/URAkap8nJ3xT/wZAAD//8Wbezo=")
r2 = dup(r1)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000000)=@chain)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x4d}, [@ldst={0x3, 0x0, 0xb}]}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000700)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000dc0)={[{@grpquota}], [{@defcontext={'defcontext', 0x3d, 'system_u'}}, {@appraise}, {@dont_appraise}, {@fsname={'fsname', 0x3d, '@@'}}, {@hash}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@measure}, {@uid_eq}, {@context={'context', 0x3d, 'user_u'}}, {@euid_eq}]}, 0x1, 0x569, &(0x7f0000000800)="$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")
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000})
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10.184434595s ago: executing program 8 (id=573):
r0 = socket$rxrpc(0x21, 0x2, 0x2)
setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000540)='string\x00\xa2\xb5\xbf4\x04`P\xfb\b}\xd6\xe1\"\xf9\xae\xa4N\x10\x13!\x04\x00\x97\xb6\x94\xc2\x0f8\x997Vg\xa2\xeb\xb4RU|\x99t\xe0N\x1c\xf4-\t\x80?\x10\xf7J\',\xd1Bxq\x16R\xe4\x88\x02\xfd\x81q<5n^.izR*\xcfL\xb7Q\xb8\xf2e\xbb\xd3r>\x86\x14\x963\xc0N\x18\x1cm%\x01w\xba*\xd1\xfa\xf8\xa3\xfabP\xaf\x9a\x0e\x9fjZ\xcaX\xdaV\x88<A\r\xe6\xe5\xb8u\x10Q\x13\xef\xfe>`\xac\xe4\x86(\xfd\x0f\x96\xffd9;\xb5\xdd?\xbcc#\x17\xea\\\xc1\x12\xa2\xdcb\fB\xddk\xb3\x14=T\xcb\xe0\v\xeb\x18!_\xa6\x06\xb5*_^ns\xd7\xfe\xc1t\'\x1bJ4V\rV\xf0\xabP]\x18\x8c\xe3\xb0@\xe0A:', 0xca)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$unix(0x1, 0x5, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mount$overlay(0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[], [], 0x2f})
chdir(&(0x7f0000000340)='./file0/../file0\x00')
socket$netlink(0x10, 0x3, 0x9)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)

10.184141405s ago: executing program 7 (id=574):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r0}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket(0xa, 0x3, 0x3a)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r3, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r4], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {0xfff2}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0)

10.183463775s ago: executing program 4 (id=575):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000340)={[{@nodioread_nolock}, {@min_batch_time}, {@barrier_val={'barrier', 0x3d, 0x40}}, {@nodelalloc}]}, 0x5, 0x795, &(0x7f0000000cc0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000440)=ANY=[@ANYBLOB='shortname=mixed,iocharset=iso8859-=winnt,uni_xlate=1,uni_xlate=1,nonumtail=0,utf8=0,errors=continue,utf8=1,check=strict,iocharset=cp855,utf8=0,iocharset=koi8-u,codepage=857,utf8=0,rodir,shortname=win95,\x00'], 0x6, 0x2d4, &(0x7f0000002a80)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
socket$pppl2tp(0x18, 0x1, 0x1)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000"], 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r5, r4}, 0xc)
r6 = syz_open_procfs(0x0, 0x0)
preadv(r6, &(0x7f0000000300)=[{0x0}, {0x0}], 0x2, 0x0, 0x0)

8.405466607s ago: executing program 8 (id=576):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x25, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r0 = add_key$user(&(0x7f0000000180), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f733e1a00000000", 0xe, 0xfffffffffffffffe)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'erspan0\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r3, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = dup(r5)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

8.405282757s ago: executing program 4 (id=577):
syz_mount_image$erofs(&(0x7f00000012c0), &(0x7f0000000240)='./file1\x00', 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x232, &(0x7f0000000b00)="$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")
gettid()
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f00000100"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000000c0)={{}, {}, [], {0x4, 0x1}, [], {0x10, 0x3}, {0x20, 0x7}}, 0x24, 0x1)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2}, 0x1c)
sendto$inet6(r4, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c)

8.400496517s ago: executing program 6 (id=585):
openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="9000000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00030000028000006800128009000100766c616e000000005800028006000100020000004c0003800c00010000000000050000000c00010000000000800000000c00010070000000018000000c00010009000000010001000c00010000000000090000000c000100030000000101000008000500", @ANYRES32=r1], 0x90}}, 0x0)
r2 = epoll_create1(0x0)
r3 = epoll_create1(0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000000d})
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000400)={0xa})
syz_usb_connect(0x4, 0x24, 0x0, 0x0)
epoll_pwait(r2, &(0x7f0000000080)=[{}], 0x1, 0x4c6, 0x0, 0x0)

8.280564928s ago: executing program 7 (id=578):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
listen(0xffffffffffffffff, 0x3)
syz_emit_ethernet(0x0, 0x0, 0x0)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x4000, 0x4a080}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}}, 0x0)

7.152074122s ago: executing program 4 (id=579):
r0 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x57, 0x0}}], 0x62, 0x0)

7.133672653s ago: executing program 8 (id=580):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
mlock(&(0x7f0000002000/0x2000)=nil, 0x2000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020)

5.043908728s ago: executing program 9 (id=492):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r0, 0x0, 0x200000c4)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, 0x0, 0x180d4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet_sctp(0x2, 0x5, 0x84)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x10000000)
syz_io_uring_submit(0x0, r2, 0x0)
syz_mount_image$cramfs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x2200409, &(0x7f0000000400)=ANY=[], 0xfe, 0x15f, &(0x7f0000000200)="$eJzs0M1qGmEUxvH/O/M6ClVsqQUptArd2ErBD9pdKU6pVKgdaOmmK8FOP0CxVGjdVSnddSF066JJtiGQK9DoIiToJrmJbNwFsjTMjEkI8Q5yfrt5znueA/Py2SyjuPCi1fz23W233Y/pt061/O5oOCx5uQWd7Uvz4P2oBF/QjDTMe+DFkxh8+tpwjXqr4X3PSxAG7Bt+HgLiZ/fshKanIU+wn3kA4zv+O4OrmVsk5O/d1WDHgywHLNasoO9WkHl9x4AJSlnLY/dM/lSyqdsKOoPs1ub+m+le5fGj5+7fQrn/MJo0s79gHVtFdiefD83l1mxafe1UnVmxUHhazOUNnhz4hd0++lX0B3xQoL0+A7/PInlfv4ffCv75t+Y7KgaM/584zfD5v+7+NNOgUoN6LRnaqCVuGpgZ7U0WrOBPiKwaCSGEEEIIIYQQQgghhBBCCCGEuO5OAwAA//+/BFIO")
chdir(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), 0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0)

4.936185759s ago: executing program 6 (id=581):
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{0x0}], 0x1)
userfaultfd(0x801)
socket$inet6(0xa, 0x3, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6)
fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
write(r2, &(0x7f0000000000)="3f000000010000", 0x7)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)

4.924596s ago: executing program 8 (id=582):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x28, r5, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}]}, 0x28}}, 0x0)
r6 = socket$inet6_dccp(0xa, 0x6, 0x0)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @local, 0x5}, 0x3f)

4.9196945s ago: executing program 4 (id=593):
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bond0\x00'})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000000140)={0x1, 0x0, {0xd, 0xc, 0x201f, 0x8, 0x3, 0x2, 0x6dfd500da6727a8c, 0x6}})
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
socket$inet(0x2, 0x3, 0x8d)
syz_open_dev$loop(0x0, 0x81, 0x2a82)
fsopen(&(0x7f0000000240)='vfat\x00', 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
clock_gettime(0x0, 0x0)
timer_settime(0x0, 0x1, 0x0, 0x0)
shutdown(r1, 0x1)

4.88757948s ago: executing program 7 (id=583):
preadv(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000000080)=""/96, 0x60}], 0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pipe(0x0)
syz_usbip_server_init(0x1)
r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$apparmor_current(r1, &(0x7f0000000040)=@profile={'stack ', ':\x00'}, 0x8)
ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0)
r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0)
connect$llc(r2, 0x0, 0x0)
syz_init_net_socket$llc(0x1a, 0x802, 0x0)

3.875204602s ago: executing program 8 (id=584):
syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, <r0=>0x0})
sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/13, @ANYRES32], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@deltaction={0x4c, 0x18, 0x1, 0x0, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x80, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x6, 0x1, 'tunnel_key\x00'}}, {0x14, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x4c}}, 0x0)

3.377356698s ago: executing program 6 (id=586):
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0}, 0x0)
syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a01"], 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000030400000000000000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000001800128008000100767469000c000280080004"], 0x40}}, 0x0)
r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5d", 0x2, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = dup(r3)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

3.120235772s ago: executing program 9 (id=587):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', <r5=>0x0})
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180)=0x2, 0x4)
bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10)

2.39911045s ago: executing program 7 (id=588):
syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$inet_smc(0x2b, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x3, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000380)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0xfeeb, 0x0, 0x7fffffff}, 0x0, 0x0)

1.031005217s ago: executing program 6 (id=589):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r0, 0x1, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x2a, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = syz_open_dev$sg(&(0x7f00000000c0), 0x2, 0x101001)
ioctl$SG_IO(r5, 0x2285, &(0x7f00000006c0)={0x53, 0xfffffffffffffffe, 0x4e, 0xe, @scatter={0x1, 0x0, &(0x7f0000000280)=[{0x0}]}, &(0x7f00000005c0)="950cce279a959b958d24e800f099edfdd1ba0f82ce47812c4a22de662e6804b469b50c1b7b4c7bcbd8a57329a80f03ca8cd5ea44d7e8f08251873d84aac1dc75bce27f1ca2e1729d883d9614e298", 0x0, 0x3, 0x21, 0x3, &(0x7f00000002c0)})
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr, 0x80, 0x0}, 0x0)
sendmsg$kcm(r1, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x0)

968.110538ms ago: executing program 4 (id=590):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
r1 = socket(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x7800, 0x10, 0x4, 0x4, {{0x5, 0x4, 0x2, 0x2, 0x14, 0x64, 0x0, 0xbd, 0x29, 0x0, @loopback, @empty}}}})
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r2, &(0x7f0000002340)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e22, 0xe2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10000}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000180)="b0", 0x1}], 0x1}}], 0x2, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001700)={0x58, r3, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac08}]}]}, 0x58}}, 0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000240)=@assoc_value, &(0x7f0000000080)=0x8)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x40, r7, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x40}}, 0x0)

784.32966ms ago: executing program 7 (id=591):
bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
socket$netlink(0x10, 0x3, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r2, &(0x7f00000002c0)=ANY=[@ANYRES8=r2], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r2, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x541c, &(0x7f0000000000))

0s ago: executing program 8 (id=592):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_udp_encap(r1, 0x11, 0x64, 0x0, 0x0)
setsockopt$inet6_udp_encap(r1, 0x11, 0x64, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x18)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000))
r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb)
bind$ax25(r5, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
connect$ax25(r5, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48)
ioctl$sock_ifreq(r4, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'})

kernel console output (not intermixed with test programs):

command 0x040f tx timeout
[   75.883655][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   75.887252][ T4175] Bluetooth: hci3: command 0x040f tx timeout
[   75.912495][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   75.932052][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   75.952953][ T4177] device veth0_macvtap entered promiscuous mode
[   75.988396][ T4177] device veth1_macvtap entered promiscuous mode
[   76.003422][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.030247][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   76.041875][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   76.052574][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   76.062456][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   76.075032][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   76.086960][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   76.097550][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   76.108307][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   76.124300][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.136567][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   76.146970][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   76.155601][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   76.168093][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   76.191226][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.206467][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.222198][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.246074][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   76.257051][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   76.284726][ T4172] device veth0_vlan entered promiscuous mode
[   76.300163][ T4171] 8021q: adding VLAN 0 to HW filter on device batadv0
[   76.312167][ T4170] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.326364][ T4170] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.337244][ T4170] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.349774][ T4170] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.363887][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   76.374422][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   76.384672][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   76.395131][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   76.407415][ T4169] 8021q: adding VLAN 0 to HW filter on device batadv0
[   76.419075][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   76.431532][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.445865][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.457809][ T4177] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.469439][ T4177] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.480142][ T4177] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.490851][ T4177] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.527555][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   76.538846][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   76.554272][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   76.564859][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   76.577613][ T4172] device veth1_vlan entered promiscuous mode
[   76.628226][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   76.637926][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   76.680887][ T4171] device veth0_vlan entered promiscuous mode
[   76.728947][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   76.738228][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   76.753845][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   76.764193][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   76.773187][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   76.781803][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   76.790936][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   76.800524][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   76.814690][ T4169] device veth0_vlan entered promiscuous mode
[   76.844734][ T4171] device veth1_vlan entered promiscuous mode
[   76.877455][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   76.893190][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   76.902781][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   76.924390][ T4169] device veth1_vlan entered promiscuous mode
[   76.951197][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.967081][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.980298][ T4172] device veth0_macvtap entered promiscuous mode
[   77.014550][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   77.023378][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   77.033294][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   77.043338][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   77.053295][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   77.061778][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   77.072203][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   77.084053][ T4172] device veth1_macvtap entered promiscuous mode
[   77.113754][ T4171] device veth0_macvtap entered promiscuous mode
[   77.129075][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.144702][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.154105][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   77.162598][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   77.172105][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   77.181364][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   77.191062][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   77.204899][ T4169] device veth0_macvtap entered promiscuous mode
[   77.221569][ T4171] device veth1_macvtap entered promiscuous mode
[   77.230116][ T3063] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.248948][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   77.258174][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   77.266509][ T3063] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.278191][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   77.291941][ T4169] device veth1_macvtap entered promiscuous mode
[   77.310869][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   77.341340][  T161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.343898][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   77.363480][  T161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.386238][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.400596][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   77.417978][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.432122][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_0
[   77.451901][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   77.463264][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   77.472659][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   77.494096][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   77.514240][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.526832][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   77.538698][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.550035][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   77.562426][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.576226][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_0
[   77.595624][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.619957][ T4255] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   77.627328][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.654291][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.665542][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.686458][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.698406][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   77.708176][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   77.740023][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   77.756609][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   77.777135][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.798387][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.816852][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.836763][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.860812][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.874833][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.890996][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.901709][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   77.915514][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.926701][ T4259] syz.3.6 uses obsolete (PF_INET,SOCK_PACKET)
[   77.929668][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   77.936201][ T4217] Bluetooth: hci3: command 0x0419 tx timeout
[   77.950776][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.968352][ T4217] Bluetooth: hci1: command 0x0419 tx timeout
[   77.985916][ T4217] Bluetooth: hci0: command 0x0419 tx timeout
[   77.988676][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   77.995890][ T4217] Bluetooth: hci2: command 0x0419 tx timeout
[   78.015061][ T4217] Bluetooth: hci4: command 0x0419 tx timeout
[   78.020741][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.038198][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.056428][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.075153][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_0
[   78.091911][ T4172] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.102980][ T4172] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.114065][ T4172] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.129164][ T4172] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.162193][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   78.174589][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   78.185903][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   78.203859][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   78.225532][ T4171] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.241474][ T4171] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.252470][ T4171] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.269499][ T4171] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.352669][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.403250][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.440584][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.481317][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.527899][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.567034][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.603296][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!!
[   78.629883][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.670646][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.705469][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!!
[   78.718877][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!!
[   78.728483][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!!
[   78.739491][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!!
[   78.749765][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!!
[   78.759933][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!!
[   78.771607][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!!
[   78.781469][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!!
[   78.792224][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!!
[   78.835872][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_1
[   79.199785][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   79.230355][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   79.258235][ T4169] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.280616][ T4169] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.297645][ T4169] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.307314][ T4169] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.358663][ T4267] netlink: 2108 bytes leftover after parsing attributes in process `syz.0.7'.
[   79.400420][ T4267] netlink: 1260 bytes leftover after parsing attributes in process `syz.0.7'.
[   79.570980][ T4271] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[   79.591285][ T4271] device syzkaller0 entered promiscuous mode
[   79.629777][ T4274] loop0: detected capacity change from 0 to 256
[   79.645486][ T1235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.700466][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.719732][ T1235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.719950][ T4245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.742596][ T4274] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[   79.749032][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.792377][  T161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.793834][ T4245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.812855][  T161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.835944][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   79.856032][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   79.885682][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   79.897309][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   79.915100][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.915419][ T4245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.954176][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.964154][ T4245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.997112][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   80.014837][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   80.037405][   T26] audit: type=1800 audit(1748219055.191:2): pid=4274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.9" name="file1" dev="loop0" ino=1048595 res=0 errno=0
[   80.093068][ T4274] attempt to access beyond end of device
[   80.093068][ T4274] loop0: rw=16812033, want=304, limit=256
[   80.336393][ T4285] loop4: detected capacity change from 0 to 16
[   80.446518][ T4285] erofs: (device loop4): mounted with root inode @ nid 36.
[   80.890522][ T4295] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12'.
[   82.327817][ T4312] loop1: detected capacity change from 0 to 256
[   82.498931][ T4312] =======================================================
[   82.498931][ T4312] WARNING: The mand mount option has been deprecated and
[   82.498931][ T4312]          and is ignored by this kernel. Remove the mand
[   82.498931][ T4312]          option from the mount to silence this warning.
[   82.498931][ T4312] =======================================================
[   82.523494][ T1325] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[   82.576446][ T4315] loop4: detected capacity change from 0 to 512
[   83.995626][ T4315] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   84.024470][ T4312] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[   84.314007][ T4315] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   84.358781][ T1325] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   84.435397][ T1325] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[   84.525317][ T4333] binder: BINDER_SET_CONTEXT_MGR already set
[   84.570136][ T1325] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[   84.586261][ T4315] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   84.614419][ T4333] binder: 4330:4333 ioctl 4018620d 200000000040 returned -16
[   84.629532][ T4315] EXT4-fs (loop4): 1 truncate cleaned up
[   84.636472][ T1325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.667834][ T4315] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback.
[   84.693258][ T1325] usb 4-1: config 0 descriptor??
[   84.766895][ T1325] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[   84.817688][ T1325] dvb-usb: bulk message failed: -22 (3/0)
[   84.924470][ T1325] dvb-usb: will use the device's hardware PID filter (table count: 16).
[   85.715440][ T1325] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[   85.725779][ T1325] usb 4-1: media controller created
[   85.735399][ T1325] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   85.787330][ T1325] dvb-usb: bulk message failed: -22 (6/0)
[   85.803952][ T1325] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[   85.875349][ T1325] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5
[   85.941859][ T1325] dvb-usb: schedule remote query interval to 150 msecs.
[   85.986394][ T4352] binder: BINDER_SET_CONTEXT_MGR already set
[   85.995135][ T1325] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[   86.037335][ T4352] binder: 4351:4352 ioctl 4018620d 200000000040 returned -16
[   86.050278][ T4356] loop0: detected capacity change from 0 to 64
[   86.062701][ T1325] usb 4-1: USB disconnect, device number 2
[   86.215348][ T1325] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[   86.358907][ T4362] loop4: detected capacity change from 0 to 2048
[   86.438266][ T4171] syz-executor (4171) used greatest stack depth: 21184 bytes left
[   86.459462][ T4362] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[   86.515170][ T4362] NILFS (loop4): mounting unchecked fs
[   86.606488][  T144] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.648213][ T4362] NILFS (loop4): recovery complete
[   86.717241][ T4376] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   86.723953][ T1347] cfg80211: failed to load regulatory.db
[   87.257845][  T144] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.656769][ T4374] device syzkaller0 entered promiscuous mode
[   87.776466][  T144] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.757785][  T144] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.904255][ T4399] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   88.945976][ T4401] loop4: detected capacity change from 0 to 64
[   89.367098][ T4390] chnl_net:caif_netlink_parms(): no params data found
[   89.697059][ T4411] loop4: detected capacity change from 0 to 256
[   90.407694][ T4422] loop3: detected capacity change from 0 to 1024
[   90.475870][ T4390] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.515102][ T4422] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled
[   90.533778][ T4390] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.571381][ T4390] device bridge_slave_0 entered promiscuous mode
[   90.608245][ T4411] exFAT-fs (loop4): hint_cluster is invalid (17)
[   90.642211][ T4411] exFAT-fs (loop4): error, failed to bmap (inode : ffff88805dc2bbe0 iblock : 8, err : -5)
[   90.692744][ T4390] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.718837][ T4411] exFAT-fs (loop4): Filesystem has been set read-only
[   90.735148][ T4418] exFAT-fs (loop4): error, bogus directory size (clus : ondisk(2) != counted(1))
[   90.776617][ T4422] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,user_xattr,nobarrier,jqfmt=vfsold,usrquota,quota,,errors=continue. Quota mode: writeback.
[   90.794803][ T4390] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.814085][ T1325] Bluetooth: hci3: command 0x0409 tx timeout
[   90.840741][ T4390] device bridge_slave_1 entered promiscuous mode
[   91.704923][ T4449] loop4: detected capacity change from 0 to 2048
[   92.139695][ T4449] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,min_batch_time=0x0000000000000000,barrier=0x0000000000000040,nodelalloc,,errors=continue. Quota mode: none.
[   92.184096][ T4390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   92.583794][ T4390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   92.905987][ T1347] Bluetooth: hci3: command 0x041b tx timeout
[   94.007894][ T4390] team0: Port device team_slave_0 added
[   94.251425][ T4390] team0: Port device team_slave_1 added
[   95.033142][ T4390] batman_adv: batadv0: Adding interface: batadv_slave_0
[   95.101123][ T4222] Bluetooth: hci3: command 0x040f tx timeout
[   95.151341][ T4390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.598101][ T4390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   95.673275][ T4390] batman_adv: batadv0: Adding interface: batadv_slave_1
[   95.695506][ T4390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   96.679191][ T4390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   97.198577][    T7] Bluetooth: hci3: command 0x0419 tx timeout
[   98.114585][ T4390] device hsr_slave_0 entered promiscuous mode
[   98.228604][ T4390] device hsr_slave_1 entered promiscuous mode
[   98.288708][ T4390] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   98.338595][ T4390] Cannot create hsr debugfs directory
[   99.811374][  T144] device hsr_slave_0 left promiscuous mode
[   99.837124][  T144] device hsr_slave_1 left promiscuous mode
[   99.847457][ T4537] loop0: detected capacity change from 0 to 1024
[   99.859032][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   99.870850][ T4535] loop3: detected capacity change from 0 to 2048
[   99.879005][  T144] batman_adv: batadv0: Removing interface: batadv_slave_0
[   99.933276][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   99.971248][  T144] batman_adv: batadv0: Removing interface: batadv_slave_1
[   99.999542][  T144] device bridge_slave_1 left promiscuous mode
[  100.034028][  T144] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.083896][ T4535] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,min_batch_time=0x0000000000000000,barrier=0x0000000000000040,nodelalloc,,errors=continue. Quota mode: none.
[  100.136731][ T4537] hfsplus: request for non-existent node 33423360 in B*Tree
[  100.156862][  T144] device bridge_slave_0 left promiscuous mode
[  100.222623][ T4537] hfsplus: request for non-existent node 33423360 in B*Tree
[  100.253916][  T144] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.386504][ T4542] hfsplus: request for non-existent node 33423360 in B*Tree
[  100.398447][  T144] device veth1_macvtap left promiscuous mode
[  100.428766][  T144] device veth0_macvtap left promiscuous mode
[  100.436546][  T144] device veth1_vlan left promiscuous mode
[  100.437505][ T4542] hfsplus: request for non-existent node 33423360 in B*Tree
[  100.490382][  T144] device veth0_vlan left promiscuous mode
[  100.590358][ T4544] hfsplus: request for non-existent node 33423360 in B*Tree
[  100.646357][ T4544] hfsplus: request for non-existent node 33423360 in B*Tree
[  100.692877][ T4537] hfsplus: request for non-existent node 33423360 in B*Tree
[  100.734297][ T4537] hfsplus: request for non-existent node 33423360 in B*Tree
[  100.923577][ T4552] loop2: detected capacity change from 0 to 8
[  102.848827][ T4565] loop3: detected capacity change from 0 to 2048
[  102.947464][ T4565] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,min_batch_time=0x0000000000000000,barrier=0x0000000000000040,nodelalloc,,errors=continue. Quota mode: none.
[  103.805075][  T144] team0 (unregistering): Port device team_slave_1 removed
[  103.870226][  T144] team0 (unregistering): Port device team_slave_0 removed
[  103.921418][  T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  103.943797][  T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  104.642830][ T4579] loop3: detected capacity change from 0 to 256
[  104.979159][  T144] bond0 (unregistering): Released all slaves
[  105.137170][ T4390] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  105.347704][ T4390] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  106.138652][ T4390] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  107.051448][ T4390] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  107.142632][ T4602] loop2: detected capacity change from 0 to 2048
[  107.264463][ T4600] loop0: detected capacity change from 0 to 2048
[  108.217746][ T4369] Alternate GPT is invalid, using primary GPT.
[  108.340512][ T4600] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,min_batch_time=0x0000000000000000,barrier=0x0000000000000040,nodelalloc,,errors=continue. Quota mode: none.
[  108.377230][ T4369]  loop2: p1 p2 p3
[  109.342823][ T4602] Alternate GPT is invalid, using primary GPT.
[  109.386154][ T4390] 8021q: adding VLAN 0 to HW filter on device bond0
[  109.396160][ T4602]  loop2: p1 p2 p3
[  109.459184][ T4617] MPTCP: addr_signal error, add_addr=1, echo=0
[  109.538452][    C0] sched: RT throttling activated
[  109.601295][ T3548] Alternate GPT is invalid, using primary GPT.
[  109.642763][ T3548]  loop2: p1 p2 p3
[  109.698582][ T4390] 8021q: adding VLAN 0 to HW filter on device team0
[  109.769830][ T4625] tipc: Started in network mode
[  109.776541][ T4625] tipc: Node identity 7, cluster identity 4711
[  109.798501][ T4625] tipc: Node number set to 7
[  109.805811][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  109.840576][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  110.010393][ T4336] udevd[4336]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[  110.032471][ T4253] udevd[4253]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  110.040985][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  110.075081][ T4369] udevd[4369]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  110.747769][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  110.777169][ T4444] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.786200][ T4444] bridge0: port 1(bridge_slave_0) entered forwarding state
[  110.816137][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  110.829990][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  110.846443][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  110.874241][ T4444] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.881677][ T4444] bridge0: port 2(bridge_slave_1) entered forwarding state
[  110.889918][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  110.962601][ T4390] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  111.042063][ T4253] udevd[4253]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  111.056916][ T4336] udevd[4336]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[  111.092835][ T4369] udevd[4369]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  111.116453][ T4390] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  111.223317][ T4650] netlink: 43 bytes leftover after parsing attributes in process `syz.0.95'.
[  111.875890][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  111.896876][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  111.901951][ T4336] udevd[4336]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  111.915001][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  111.938881][ T4338] udevd[4338]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[  111.951843][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  111.965705][ T4369] udevd[4369]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  112.007629][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  112.019530][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  112.035612][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  112.047016][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  112.064080][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  112.079834][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  112.126817][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  112.164533][ T4650] tipc: Started in network mode
[  113.190947][ T4650] tipc: Node identity aaaaaaaaaa32, cluster identity 4711
[  113.236391][ T4369] udevd[4369]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  113.257425][ T4650] tipc: Enabled bearer <eth:vlan0>, priority 10
[  113.288119][ T4654] tipc: Resetting bearer <eth:vlan0>
[  113.437588][ T4673] loop3: detected capacity change from 0 to 2048
[  113.502123][ T4654] tipc: Disabling bearer <eth:vlan0>
[  113.564194][ T4673] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,min_batch_time=0x0000000000000000,barrier=0x0000000000000040,nodelalloc,,errors=continue. Quota mode: none.
[  114.758217][ T4694] loop0: detected capacity change from 0 to 128
[  114.779652][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  114.818122][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  114.861265][ T4390] 8021q: adding VLAN 0 to HW filter on device batadv0
[  114.907989][ T4694] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  116.514386][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  116.754271][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  117.125428][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  117.169744][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  118.101286][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  118.239150][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  118.291321][ T4754] loop0: detected capacity change from 0 to 128
[  118.313251][ T4743] loop3: detected capacity change from 0 to 2048
[  118.357976][ T4390] device veth0_vlan entered promiscuous mode
[  118.421392][ T4754] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  118.436883][ T4390] device veth1_vlan entered promiscuous mode
[  118.489643][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  118.519575][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  118.530160][ T4754] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  118.603373][ T4743] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,min_batch_time=0x0000000000000000,barrier=0x0000000000000040,nodelalloc,,errors=continue. Quota mode: none.
[  118.616064][ T4390] device veth0_macvtap entered promiscuous mode
[  118.669981][ T4390] device veth1_macvtap entered promiscuous mode
[  119.387950][ T4390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  119.572795][ T4390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.637080][ T4390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  120.656578][ T4390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.667895][ T4390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  120.681786][ T4390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.693769][ T4390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  120.708376][ T4390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.755427][ T4390] batman_adv: batadv0: Interface activated: batadv_slave_0
[  120.774265][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  120.859049][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  120.889369][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  120.911013][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  121.113041][ T4390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  121.143838][ T4390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.500585][ T4390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  121.792970][ T4390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.948534][ T4390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  121.969413][ T4390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.981695][ T4390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  121.998501][ T4390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.018491][ T4390] batman_adv: batadv0: Interface activated: batadv_slave_1
[  122.087609][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  122.139356][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  122.178318][ T4390] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  122.208123][ T4390] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  122.218784][ T4390] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  122.237936][ T4800] loop2: detected capacity change from 0 to 2048
[  122.245031][ T4390] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  123.356998][ T4800] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,min_batch_time=0x0000000000000000,barrier=0x0000000000000040,nodelalloc,,errors=continue. Quota mode: none.
[  125.396144][ T4822] loop0: detected capacity change from 0 to 2048
[  125.866802][ T4822] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,min_batch_time=0x0000000000000000,barrier=0x0000000000000040,nodelalloc,,errors=continue. Quota mode: none.
[  128.943883][ T4458] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  129.342485][ T4458] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  129.536521][ T4857] loop4: detected capacity change from 0 to 256
[  129.582234][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  129.609328][ T4218] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  129.640795][ T4414] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  129.690452][ T4414] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  129.708544][ T4857] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  129.724110][ T4857] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  129.729134][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  129.752902][ T4857] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  130.904406][ T4874] tipc: Started in network mode
[  130.912543][ T4874] tipc: Node identity 68a, cluster identity 4711
[  130.925340][ T4874] tipc: Node number set to 1674
[  130.934573][ T4874] tipc: Cannot configure node identity twice
[  130.970373][ T4218] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  131.009318][ T4218] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  131.230888][ T4218] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00
[  131.243438][ T4218] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.285588][ T4218] usb 4-1: config 0 descriptor??
[  131.819022][ T4218] usb 4-1: can't set config #0, error -71
[  131.930447][ T4217] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  131.958583][ T4218] usb 4-1: USB disconnect, device number 3
[  132.126133][ T4891] loop3: detected capacity change from 0 to 2048
[  132.257390][ T4891] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,min_batch_time=0x0000000000000000,barrier=0x0000000000000040,nodelalloc,,errors=continue. Quota mode: none.
[  132.408803][ T4217] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  132.433616][ T4217] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  132.459715][ T4217] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 202
[  132.802986][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[  132.813219][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[  133.068913][   T21] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  133.228007][ T4217] usb 1-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72
[  133.338608][   T21] usb 3-1: Using ep0 maxpacket: 32
[  133.459866][   T21] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[  133.560212][   T21] usb 3-1: config 0 has no interface number 0
[  133.800437][   T21] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  133.866814][   T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.034833][   T21] usb 3-1: Product: syz
[  134.055157][   T21] usb 3-1: Manufacturer: syz
[  134.100827][ T4217] usb 1-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0
[  134.113319][ T4217] usb 1-1: Manufacturer: syz
[  134.117626][   T21] usb 3-1: SerialNumber: syz
[  134.121248][ T4217] usb 1-1: config 0 descriptor??
[  134.166069][ T4217] usb 1-1: can't set config #0, error -71
[  134.182520][ T4217] usb 1-1: USB disconnect, device number 2
[  134.208238][   T21] usb 3-1: config 0 descriptor??
[  134.291604][   T21] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  134.309839][ T4918] netlink: 12 bytes leftover after parsing attributes in process `syz.5.149'.
[  134.322545][ T4920] netlink: 72 bytes leftover after parsing attributes in process `syz.3.147'.
[  134.506627][   T21] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  134.636944][ T4928] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in;
[  134.636944][ T4928]    program syz.4.150 not setting count and/or reply_len properly
[  134.701377][ T4928] loop4: detected capacity change from 0 to 1024
[  134.978514][    C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71
[  137.255423][   T21] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  137.760006][   T21] usb 3-1: USB disconnect, device number 2
[  137.787562][   T21] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  137.819019][   T21] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  137.849312][   T21] quatech2 3-1:0.51: device disconnected
[  138.701686][ T4928] fscrypt: Error allocating hmac(sha512): -4
[  138.720320][ T4928] EXT4-fs (loop4): Error processing option "test_dummy_encryption" [-4]
[  139.137710][ T4952] loop5: detected capacity change from 0 to 2048
[  139.584861][ T4952] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodioread_nolock,min_batch_time=0x0000000000000000,barrier=0x0000000000000040,nodelalloc,,errors=continue. Quota mode: none.
[  144.067812][ T5002] binder: BINDER_SET_CONTEXT_MGR already set
[  144.107746][ T5002] binder: 5000:5002 ioctl 4018620d 200000000040 returned -16
[  145.234843][ T5017] loop0: detected capacity change from 0 to 2048
[  145.360720][ T5002] syz.5.167 (5002): drop_caches: 2
[  145.623781][ T5017] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,min_batch_time=0x0000000000000000,barrier=0x0000000000000040,nodelalloc,,errors=continue. Quota mode: none.
[  149.841514][ T5065] loop4: detected capacity change from 0 to 256
[  149.855668][ T5061] loop0: detected capacity change from 0 to 2048
[  149.978011][ T5061] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,min_batch_time=0x0000000000000000,barrier=0x0000000000000040,nodelalloc,,errors=continue. Quota mode: none.
[  149.999661][    C0] vkms_vblank_simulate: vblank timer overrun
[  150.473149][   T23] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  151.057777][   T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  151.101794][   T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  151.166156][   T23] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  151.233863][   T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.301911][   T23] usb 6-1: config 0 descriptor??
[  151.595569][ T5092] loop2: detected capacity change from 0 to 2048
[  151.691690][ T5092] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,min_batch_time=0x0000000000000000,barrier=0x0000000000000040,nodelalloc,,errors=continue. Quota mode: none.
[  151.717229][    C0] vkms_vblank_simulate: vblank timer overrun
[  151.985131][   T23] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0
[  152.313124][   T23] cp2112 0003:10C4:EA90.0001: Part Number: 0x82 Device Version: 0xFE
[  153.678662][ T5069] cp2112 0003:10C4:EA90.0001: Multi-message I2C transactions not supported
[  153.738630][   T23] cp2112 0003:10C4:EA90.0001: error reading lock byte: -71
[  153.768134][   T23] usb 6-1: USB disconnect, device number 2
[  153.785610][ T5120] loop2: detected capacity change from 0 to 512
[  153.944442][ T5120] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  154.559117][ T5120] EXT4-fs (loop2): 1 truncate cleaned up
[  154.618052][ T5120] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000358,resuid=0x0000000000000000,max_dir_size_kb=0x0000000000000003,,errors=continue. Quota mode: none.
[  154.771342][   T26] audit: type=1800 audit(1748219129.931:3): pid=5120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.192" name="file1" dev="loop2" ino=15 res=0 errno=0
[  155.517460][ T5130] fido_id[5130]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  156.547303][ T5140] loop3: detected capacity change from 0 to 512
[  156.769121][ T5140] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled
[  156.791587][ T5140] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled
[  156.931808][ T5144] loop5: detected capacity change from 0 to 2048
[  157.030440][ T5140] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  157.108646][ T5140] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002]
[  157.127533][ T5140] System zones: 0-1, 15-15, 18-18, 34-34
[  157.151119][ T5140] EXT4-fs (loop3): orphan cleanup on readonly fs
[  157.159441][ T5140] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0
[  157.179208][ T5140] EXT4-fs warning (device loop3): ext4_enable_quotas:6456: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  157.197346][    C1] vkms_vblank_simulate: vblank timer overrun
[  157.229308][ T5140] EXT4-fs (loop3): Cannot turn on quotas: error -22
[  157.313977][ T5140] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.195: bg 0: block 40: padding at end of block bitmap is not set
[  157.408104][ T5144] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodioread_nolock,min_batch_time=0x0000000000000000,barrier=0x0000000000000040,nodelalloc,,errors=continue. Quota mode: none.
[  157.489613][ T5140] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6183: Corrupt filesystem
[  157.726467][ T5140] EXT4-fs (loop3): 1 truncate cleaned up
[  157.980027][ T5140] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv1,nouid32,jqfmt=vfsv0,norecovery,nogrpid,dioread_lock,,errors=continue. Quota mode: writeback.
[  161.678724][   T21] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  162.128644][   T21] usb 6-1: config 0 has an invalid interface number: 105 but max is 0
[  162.192488][   T21] usb 6-1: config 0 descriptor has 1 excess byte, ignoring
[  162.380973][   T21] usb 6-1: config 0 has no interface number 0
[  163.328318][   T21] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  163.340216][   T21] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.350707][   T21] usb 6-1: Product: syz
[  163.356592][   T21] usb 6-1: Manufacturer: syz
[  163.365069][   T21] usb 6-1: SerialNumber: syz
[  163.391401][   T21] usb 6-1: config 0 descriptor??
[  164.993279][   T21] usb 6-1: can't set config #0, error -71
[  165.201788][   T21] usb 6-1: USB disconnect, device number 3
[  167.066609][ T5218] loop5: detected capacity change from 0 to 2048
[  167.249582][ T5218] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodioread_nolock,min_batch_time=0x0000000000000000,barrier=0x0000000000000040,nodelalloc,,errors=continue. Quota mode: none.
[  167.316800][ T5227] loop0: detected capacity change from 0 to 2048
[  168.286218][   T21] usb 5-1: new low-speed USB device number 2 using dummy_hcd
[  168.378646][   T26] audit: type=1804 audit(1748219143.471:4): pid=5231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.214" name="/newroot/46/file1" dev="fuse" ino=1 res=1 errno=0
[  168.529361][   T26] audit: type=1800 audit(1748219143.501:5): pid=5231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.214" name="/" dev="fuse" ino=1 res=0 errno=0
[  168.559107][   T21] usb 5-1: device descriptor read/64, error -71
[  168.663924][   T26] audit: type=1804 audit(1748219143.501:6): pid=5231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.214" name="/newroot/46/file1" dev="fuse" ino=1 res=1 errno=0
[  168.695828][ T5227] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,min_batch_time=0x0000000000000000,barrier=0x0000000000000040,nodelalloc,,errors=continue. Quota mode: none.
[  168.748479][   T26] audit: type=1800 audit(1748219143.501:7): pid=5231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.214" name="/" dev="fuse" ino=1 res=0 errno=0
[  168.839125][   T21] usb 5-1: new low-speed USB device number 3 using dummy_hcd
[  169.378727][   T21] usb 5-1: device descriptor read/64, error -71
[  169.698682][   T21] usb usb5-port1: attempt power cycle
[  170.229042][   T21] usb 5-1: new low-speed USB device number 4 using dummy_hcd
[  171.008985][ T5272] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  171.916971][   T21] usb 5-1: device not accepting address 4, error -71
[  172.016839][ T5284] device syzkaller0 entered promiscuous mode
[  172.224097][ T5267] tipc: Resetting bearer <eth:syzkaller0>
[  173.142757][ T5267] tipc: Disabling bearer <eth:syzkaller0>
[  174.446928][ T5310] loop2: detected capacity change from 0 to 2048
[  174.466364][ T5308] loop5: detected capacity change from 0 to 2048
[  174.602910][ T5308] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodioread_nolock,min_batch_time=0x0000000000000000,barrier=0x0000000000000040,nodelalloc,,errors=continue. Quota mode: none.
[  174.641090][ T5310] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,min_batch_time=0x0000000000000000,barrier=0x0000000000000040,nodelalloc,,errors=continue. Quota mode: none.
[  174.663725][    C1] vkms_vblank_simulate: vblank timer overrun
[  176.208929][ T5326] netlink: 24 bytes leftover after parsing attributes in process `syz.0.233'.
[  176.429539][ T5341] loop5: detected capacity change from 0 to 1024
[  180.519620][ T5384] loop5: detected capacity change from 0 to 2048
[  181.479114][ T5384] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  181.513640][ T5395] loop0: detected capacity change from 0 to 512
[  181.530279][ T5389] loop3: detected capacity change from 0 to 2048
[  181.566907][ T5384] NILFS (loop5): mounting unchecked fs
[  181.578361][ T4369] udevd[4369]: incorrect nilfs2 checksum on /dev/loop5
[  181.768719][ T5400] netlink: 12 bytes leftover after parsing attributes in process `syz.4.248'.
[  181.807650][ T5400] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  181.817153][ T5400] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  181.827190][ T5400] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  181.836720][ T5400] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  181.875852][ T5400] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  181.886210][ T5400] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  181.895670][ T5400] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  181.906413][ T5400] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  182.240161][ T5389] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,min_batch_time=0x0000000000000000,barrier=0x0000000000000040,nodelalloc,,errors=continue. Quota mode: none.
[  182.425535][   T26] audit: type=1326 audit(1748219157.551:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5393 comm="syz.2.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80e9c20969 code=0x7fc00000
[  182.469181][ T5384] NILFS (loop5): recovery complete
[  183.188601][ T5417] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  183.208005][ T5395] EXT4-fs (loop0): 1 orphan inode deleted
[  183.328521][ T5395] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  183.420561][ T5395] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  183.476783][ T5421] loop4: detected capacity change from 0 to 2048
[  184.355959][ T5421] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,min_batch_time=0x0000000000000000,barrier=0x0000000000000040,nodelalloc,,errors=continue. Quota mode: none.
[  186.285650][ T5428] loop3: detected capacity change from 0 to 1024
[  187.132562][ T5428] dccp_close: ABORT with 32 bytes unread
[  187.341120][ T4414] hfsplus: b-tree write err: -5, ino 4
[  188.510130][ T5465] loop2: detected capacity change from 0 to 40427
[  188.655095][ T5465] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  188.664781][ T5465] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  188.702943][ T5465] F2FS-fs (loop2): invalid crc value
[  189.076102][ T5465] F2FS-fs (loop2): Found nat_bits in checkpoint
[  189.226035][ T5465] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  189.233845][ T5465] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  189.368944][ T5474] loop0: detected capacity change from 0 to 512
[  189.455329][ T5474] EXT4-fs (loop0): Ignoring removed bh option
[  190.015801][ T5480] loop5: detected capacity change from 0 to 2048
[  190.058641][ T5474] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  190.229958][ T5474] EXT4-fs (loop0): 1 truncate cleaned up
[  190.313482][ T5474] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
[  190.389382][ T5490] loop4: detected capacity change from 0 to 4096
[  190.520739][ T5480] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodioread_nolock,min_batch_time=0x0000000000000000,barrier=0x0000000000000040,nodelalloc,,errors=continue. Quota mode: none.
[  192.026530][ T3063] attempt to access beyond end of device
[  192.026530][ T3063] loop2: rw=1, want=45104, limit=40427
[  192.473226][ T5515] loop0: detected capacity change from 0 to 2048
[  193.283523][ T5515] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,min_batch_time=0x0000000000000000,barrier=0x0000000000000040,nodelalloc,,errors=continue. Quota mode: none.
[  194.249038][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[  194.257659][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[  195.422020][ T5547] loop0: detected capacity change from 0 to 2048
[  195.577243][ T5550] loop3: detected capacity change from 0 to 2048
[  196.426887][ T5146] Bluetooth: hci0: command 0x0406 tx timeout
[  196.444852][ T5146] Bluetooth: hci4: command 0x0406 tx timeout
[  196.474304][ T4369] Alternate GPT is invalid, using primary GPT.
[  196.504832][ T4369]  loop0: p1 p2 p3
[  196.700008][ T5146] Bluetooth: hci1: command 0x0406 tx timeout
[  196.723244][ T5146] Bluetooth: hci2: command 0x0406 tx timeout
[  196.842996][ T5568] netlink: 104 bytes leftover after parsing attributes in process `syz.2.277'.
[  197.233775][ T5550] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,min_batch_time=0x0000000000000000,barrier=0x0000000000000040,nodelalloc,,errors=continue. Quota mode: none.
[  198.277796][ T5547] Alternate GPT is invalid, using primary GPT.
[  198.343621][ T5547]  loop0: p1 p2 p3
[  198.613275][ T5589] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready
[  199.924932][ T4369] udevd[4369]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  199.932793][ T5606] loop3: detected capacity change from 0 to 2048
[  199.955047][ T4338] udevd[4338]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[  199.970190][ T4336] udevd[4336]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[  199.998588][ T5602] loop5: detected capacity change from 0 to 2048
[  200.409731][ T5623] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  200.931497][ T5602] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodioread_nolock,min_batch_time=0x0000000000000000,barrier=0x0000000000000040,nodelalloc,,errors=continue. Quota mode: none.
[  202.049722][ T4369] udevd[4369]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  202.102195][ T4338] udevd[4338]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[  202.116904][ T4336] udevd[4336]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[  202.182218][ T5624] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  202.459463][ T5645] loop4: detected capacity change from 0 to 1024
[  203.522710][ T5645] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.291: Invalid block bitmap block 0 in block_group 0
[  203.550049][ T5645] Quota error (device loop4): write_blk: dquota write failed
[  203.558527][ T5645] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  203.569662][ T5645] EXT4-fs error (device loop4): ext4_acquire_dquot:6204: comm syz.4.291: Failed to acquire dquot type 0
[  203.593676][ T5645] EXT4-fs error (device loop4): ext4_free_blocks:6223: comm syz.4.291: Freeing blocks not in datazone - block = 0, count = 4096
[  203.628125][ T5645] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.291: Invalid inode bitmap blk 0 in block_group 0
[  203.651571][ T4444] Quota error (device loop4): remove_tree: Getting block too big (0 >= 9)
[  203.663229][ T5645] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem
[  203.676690][ T5645] EXT4-fs (loop4): 1 orphan inode deleted
[  203.684294][ T5645] EXT4-fs (loop4): mounted filesystem without journal. Opts: ��; max_batch_time=0x0000000000000006,i_version,,errors=continue. Quota mode: writeback.
[  203.987217][ T5645] syz.4.291 (5645) used greatest stack depth: 20224 bytes left
[  204.029516][ T4444] EXT4-fs error (device loop4): ext4_release_dquot:6240: comm kworker/u4:12: Failed to release dquot type 0
[  206.155648][  T154] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.010031][ T5693] loop4: detected capacity change from 0 to 2048
[  208.152873][  T154] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.232344][ T5705] loop5: detected capacity change from 0 to 2048
[  208.254076][ T5693] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,min_batch_time=0x0000000000000000,barrier=0x0000000000000040,nodelalloc,,errors=continue. Quota mode: none.
[  208.932689][  T154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.069729][ T5705] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodioread_nolock,min_batch_time=0x0000000000000000,barrier=0x0000000000000040,nodelalloc,,errors=continue. Quota mode: none.
[  209.329792][  T154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.962375][ T5737] loop2: detected capacity change from 0 to 256
[  211.004254][ T5720] chnl_net:caif_netlink_parms(): no params data found
[  211.038711][ T4219] Bluetooth: hci1: command 0x0409 tx timeout
[  211.126979][ T5736] ODEBUG: Out of memory. ODEBUG disabled
[  211.263547][ T5736] syz.3.309 (5736): drop_caches: 2
[  212.474364][ T5762] loop4: detected capacity change from 0 to 2048
[  212.594586][ T5762] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  212.680968][ T5762] UDF-fs: Scanning with blocksize 512 failed
[  212.723944][  T154] tipc: Left network mode
[  212.741545][ T5762] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  213.666718][ T4221] Bluetooth: hci1: command 0x041b tx timeout
[  213.760059][ T5720] bridge0: port 1(bridge_slave_0) entered blocking state
[  213.767832][ T5720] bridge0: port 1(bridge_slave_0) entered disabled state
[  213.793529][ T5720] device bridge_slave_0 entered promiscuous mode
[  213.828767][ T5720] bridge0: port 2(bridge_slave_1) entered blocking state
[  213.855525][ T5720] bridge0: port 2(bridge_slave_1) entered disabled state
[  214.090231][ T5720] device bridge_slave_1 entered promiscuous mode
[  215.157830][ T5720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  215.248278][ T5720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  215.443714][ T5720] team0: Port device team_slave_0 added
[  215.544413][ T5720] team0: Port device team_slave_1 added
[  215.616009][ T5792] loop2: detected capacity change from 0 to 2048
[  215.678482][ T4221] Bluetooth: hci1: command 0x040f tx timeout
[  215.819984][ T5792] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,min_batch_time=0x0000000000000000,barrier=0x0000000000000040,nodelalloc,,errors=continue. Quota mode: none.
[  215.839751][ T5720] batman_adv: batadv0: Adding interface: batadv_slave_0
[  215.847065][ T5720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  215.873952][    C1] vkms_vblank_simulate: vblank timer overrun
[  215.914974][ T5795] loop3: detected capacity change from 0 to 2048
[  216.011461][ T5795] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,min_batch_time=0x0000000000000000,barrier=0x0000000000000040,nodelalloc,,errors=continue. Quota mode: none.
[  216.430163][ T5720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  217.031550][ T5720] batman_adv: batadv0: Adding interface: batadv_slave_1
[  217.233260][ T5720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  217.266493][ T5720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  217.547191][ T5807] loop5: detected capacity change from 0 to 1024
[  217.655186][ T5720] device hsr_slave_0 entered promiscuous mode
[  217.677486][ T5807] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  217.694117][ T5720] device hsr_slave_1 entered promiscuous mode
[  217.758511][ T4221] Bluetooth: hci1: command 0x0419 tx timeout
[  217.916610][ T5720] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  218.741270][   T26] audit: type=1326 audit(1748219193.901:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5806 comm="syz.5.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3c0003969 code=0x7ffc0000
[  218.796435][ T5817] loop3: detected capacity change from 0 to 2048
[  218.819532][ T5720] Cannot create hsr debugfs directory
[  218.834264][ T5821] loop2: detected capacity change from 0 to 512
[  218.878746][   T26] audit: type=1326 audit(1748219193.941:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5806 comm="syz.5.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7fa3c0003969 code=0x7ffc0000
[  218.940390][ T5821] EXT4-fs (loop2): Test dummy encryption mode enabled
[  219.024306][ T5817]  loop3: p1 < > p3
[  219.077104][ T5817] loop3: p3 size 134217728 extends beyond EOD, truncated
[  219.098352][   T26] audit: type=1326 audit(1748219193.941:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5806 comm="syz.5.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3c0003969 code=0x7ffc0000
[  219.103463][ T5821] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.324: inode #1: comm syz.2.324: iget: illegal inode #
[  219.365653][ T4369] udevd[4369]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  219.386116][ T4338] udevd[4338]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  219.397377][ T5817] loop3: detected capacity change from 0 to 1024
[  219.421804][ T5821] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.324: error while reading EA inode 1 err=-117
[  219.512115][ T5821] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.324: inode #1: comm syz.2.324: iget: illegal inode #
[  219.536520][ T5817] kvm: emulating exchange as write
[  219.675999][ T5821] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.324: error while reading EA inode 1 err=-117
[  219.850480][ T5821] EXT4-fs (loop2): 1 orphan inode deleted
[  219.880950][ T5821] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,discard,norecovery,noinit_itable,test_dummy_encryption,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,jqfmt=vfsold,dioread_lock,noblock_validity,nouid32,,errors=continue. Quota mode: none.
[  220.609129][  T154] device hsr_slave_0 left promiscuous mode
[  220.626487][ T5841] loop5: detected capacity change from 0 to 1024
[  220.711129][  T154] device hsr_slave_1 left promiscuous mode
[  220.915069][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  221.010872][  T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[  221.088279][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  221.137258][  T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[  221.147490][  T154] device bridge_slave_1 left promiscuous mode
[  221.155458][  T154] bridge0: port 2(bridge_slave_1) entered disabled state
[  221.170309][  T154] device bridge_slave_0 left promiscuous mode
[  221.206122][  T154] bridge0: port 1(bridge_slave_0) entered disabled state
[  221.279639][  T154] device veth1_macvtap left promiscuous mode
[  221.288990][  T154] device veth0_macvtap left promiscuous mode
[  221.296437][  T154] device veth1_vlan left promiscuous mode
[  221.304468][  T154] device veth0_vlan left promiscuous mode
[  224.129558][ T5861] loop5: detected capacity change from 0 to 2048
[  224.546961][ T5861] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodioread_nolock,min_batch_time=0x0000000000000000,barrier=0x0000000000000040,nodelalloc,,errors=continue. Quota mode: none.
[  225.984568][  T154] team0 (unregistering): Port device team_slave_1 removed
[  226.019367][  T154] team0 (unregistering): Port device team_slave_0 removed
[  226.065710][  T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  226.165228][  T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  226.908961][ T5891] loop2: detected capacity change from 0 to 256
[  226.913022][  T154] bond0 (unregistering): Released all slaves
[  227.021839][ T5875] netlink: 550 bytes leftover after parsing attributes in process `syz.3.335'.
[  227.163255][ T5720] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  227.271073][ T5720] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  228.743516][ T5907] loop3: detected capacity change from 0 to 512
[  228.953075][ T5897] bridge0: port 3(syz_tun) entered blocking state
[  230.849188][ T5897] bridge0: port 3(syz_tun) entered disabled state
[  230.926014][ T5897] device syz_tun entered promiscuous mode
[  230.958180][ T5897] bridge0: port 3(syz_tun) entered blocking state
[  230.966073][ T5897] bridge0: port 3(syz_tun) entered forwarding state
[  231.054787][ T5720] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  231.193154][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  231.213239][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  231.224174][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  231.332280][ T5720] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  232.405711][ T5720] 8021q: adding VLAN 0 to HW filter on device bond0
[  232.452424][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  232.468065][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  232.502703][ T5720] 8021q: adding VLAN 0 to HW filter on device team0
[  232.543415][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  232.600902][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  232.635302][  T161] bridge0: port 1(bridge_slave_0) entered blocking state
[  232.642616][  T161] bridge0: port 1(bridge_slave_0) entered forwarding state
[  232.695325][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  232.733817][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  232.758120][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  232.805126][  T161] bridge0: port 2(bridge_slave_1) entered blocking state
[  232.812732][  T161] bridge0: port 2(bridge_slave_1) entered forwarding state
[  232.899323][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  232.935768][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  232.944259][ T5941] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  232.957910][ T5941] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  232.976789][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  233.097733][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  233.140471][ T5951] loop3: detected capacity change from 0 to 256
[  233.265964][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  233.391201][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  234.864194][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  234.926334][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  235.003504][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  235.147797][ T5964] Zero length message leads to an empty skb
[  235.164382][ T5720] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  235.219452][ T5720] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  235.264093][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  235.294211][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  235.498674][ T5965] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  235.618889][ T1347] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  235.718065][ T5965] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  236.158904][ T1347] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  236.211136][ T1347] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  236.349251][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  236.356894][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  236.443297][ T5720] 8021q: adding VLAN 0 to HW filter on device batadv0
[  236.582639][ T5989] loop3: detected capacity change from 0 to 4096
[  236.658743][ T1347] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  236.838822][ T1347] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  236.847263][ T1347] usb 6-1: SerialNumber: syz
[  236.961893][ T5997] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  237.005278][ T5991] loop2: detected capacity change from 0 to 8192
[  237.243803][ T1347] usb 6-1: 0:2 : does not exist
[  238.037750][ T1347] usb 6-1: USB disconnect, device number 4
[  238.353171][ T6009] overlayfs: failed to clone upperpath
[  238.597687][ T6013] loop5: detected capacity change from 0 to 2048
[  239.425146][ T6013] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodioread_nolock,min_batch_time=0x0000000000000000,barrier=0x0000000000000040,nodelalloc,,errors=continue. Quota mode: none.
[  239.571804][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  239.619321][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  241.196439][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  241.231815][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  242.076180][ T5720] device veth0_vlan entered promiscuous mode
[  242.434308][ T5720] device veth1_vlan entered promiscuous mode
[  242.683208][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  242.716021][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  242.937824][ T6054] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  244.765061][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  244.842647][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  244.908642][ T5720] device veth0_macvtap entered promiscuous mode
[  245.305115][ T6078] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  245.319525][ T6078] F2FS-fs (loop5): Unable to read 1th superblock
[  245.329997][ T6078] blk_update_request: I/O error, dev loop5, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  245.347425][ T6078] F2FS-fs (loop5): Unable to read 2th superblock
[  245.920651][ T4225] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  245.929299][ T5720] device veth1_macvtap entered promiscuous mode
[  246.219710][ T5720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  246.264251][ T5720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  246.264422][ T5720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  246.264493][ T5720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  246.264604][ T5720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  246.264668][ T5720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  246.265018][ T5720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  246.265081][ T5720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  247.344154][ T4225] usb 4-1: Using ep0 maxpacket: 32
[  247.368642][ T5720] batman_adv: batadv0: Interface activated: batadv_slave_0
[  247.413947][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  247.414704][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  247.415212][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  247.419501][ T5720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  247.570165][ T5720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  247.584479][ T5720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  247.599659][ T4225] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  247.614360][ T5720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  247.648123][ T5720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  247.679791][ T5720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  247.707397][ T5720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  247.756978][ T5720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  247.868591][ T4225] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  247.960294][ T5720] batman_adv: batadv0: Interface activated: batadv_slave_1
[  247.979276][ T4225] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  247.991926][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  249.548290][ T4225] usb 4-1: Product: syz
[  249.569714][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  250.043961][ T5720] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  250.056561][ T5720] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  250.066545][ T5720] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  250.077575][ T5720] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  250.184766][ T6108] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  250.235011][ T6108] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  250.280038][ T4225] usb 4-1: config 0 descriptor??
[  250.298577][ T4225] usb 4-1: can't set config #0, error -71
[  250.309792][ T4225] usb 4-1: USB disconnect, device number 4
[  251.480917][ T4383] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  251.549604][ T4383] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  251.592553][ T6134] [U] 
[  251.596215][ T6134] [U] 
[  251.599305][ T6134] [U] 
[  251.602211][ T6134] [U] 
[  251.606297][ T6134] [U] 
[  251.610083][ T6134] [U] 
[  251.613168][ T6134] [U] 
[  251.616086][ T6134] [U] 
[  251.619788][ T6134] [U] 
[  251.622633][ T6134] [U] 
[  251.625451][ T6134] [U] 
[  251.933571][ T6130] loop5: detected capacity change from 0 to 1024
[  252.122740][ T6128] [U] 
[  252.186998][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  252.223796][ T4414] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  252.302461][ T4414] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  252.905204][ T6130] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  253.235388][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  256.019044][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[  256.025824][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[  256.193592][ T6155] loop3: detected capacity change from 0 to 32768
[  257.183888][ T6183] loop6: detected capacity change from 0 to 40427
[  257.253594][ T6183] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[  257.261916][ T6183] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  257.297623][ T6183] F2FS-fs (loop6): invalid crc value
[  257.343482][ T6183] F2FS-fs (loop6): Found nat_bits in checkpoint
[  257.506202][ T6183] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  257.515918][ T6183] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  260.909678][ T6224] loop5: detected capacity change from 0 to 512
[  261.682504][ T6215] device syzkaller0 entered promiscuous mode
[  262.118814][ T6224] EXT4-fs (loop5): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback.
[  262.118960][ T6224] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  264.384527][ T6261] loop3: detected capacity change from 0 to 256
[  264.494862][ T6261] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  264.828618][ T4219] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  265.051305][ T6265] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  265.068535][ T6265] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  265.219399][ T4219] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  265.259939][ T4219] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  265.479195][ T4219] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  265.662101][ T4219] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  265.949013][ T4219] usb 3-1: SerialNumber: syz
[  266.364415][ T4219] usb 3-1: 0:2 : does not exist
[  266.554417][ T4219] usb 3-1: USB disconnect, device number 3
[  266.776685][ T4177] bridge0: port 3(syz_tun) entered disabled state
[  267.353913][ T4177] device syz_tun left promiscuous mode
[  267.361632][ T4177] bridge0: port 3(syz_tun) entered disabled state
[  267.988696][ T6297] process 'syz.5.425' launched '/dev/fd/3' with NULL argv: empty string added
[  269.217386][ T6312] loop2: detected capacity change from 0 to 256
[  269.718918][ T6312] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  270.150939][ T6327] kvm [6324]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x2af3
[  270.784875][ T6341] usb usb1: usbfs: process 6341 (syz.6.436) did not claim interface 0 before use
[  271.588804][ T6327] kvm [6324]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x187 data 0xbc45
[  272.747444][ T6362] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  272.918862][ T4175] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  273.298588][ T4175] usb 7-1: Using ep0 maxpacket: 16
[  273.459149][ T4175] usb 7-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config
[  273.526424][ T4175] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  273.846859][ T4175] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  273.867391][ T4175] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  273.952025][ T4175] usb 7-1: Product: syz
[  273.957945][ T4175] usb 7-1: Manufacturer: syz
[  274.148577][ T4175] usb 7-1: SerialNumber: syz
[  274.933594][ T4225] Bluetooth: hci4: command 0x0409 tx timeout
[  274.984697][ T6353] chnl_net:caif_netlink_parms(): no params data found
[  275.046020][ T4175] usb 7-1: 0:2 : does not exist
[  275.209993][ T4175] usb 7-1: USB disconnect, device number 2
[  277.010234][ T6353] bridge0: port 1(bridge_slave_0) entered blocking state
[  277.061830][ T6353] bridge0: port 1(bridge_slave_0) entered disabled state
[  277.184731][ T6353] device bridge_slave_0 entered promiscuous mode
[  277.256068][ T6353] bridge0: port 2(bridge_slave_1) entered blocking state
[  277.301882][   T13] Bluetooth: hci4: command 0x041b tx timeout
[  277.310218][ T6353] bridge0: port 2(bridge_slave_1) entered disabled state
[  277.310864][ T4369] udevd[4369]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  277.320273][ T6353] device bridge_slave_1 entered promiscuous mode
[  277.416300][ T6353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  277.656006][ T6353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  279.121037][   T21] Bluetooth: hci2: command 0x0409 tx timeout
[  279.209540][ T6353] team0: Port device team_slave_0 added
[  279.362243][ T6353] team0: Port device team_slave_1 added
[  279.463980][ T4221] Bluetooth: hci4: command 0x040f tx timeout
[  279.513033][ T6353] batman_adv: batadv0: Adding interface: batadv_slave_0
[  279.526845][ T6353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  279.557561][ T6353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  280.415903][ T6353] batman_adv: batadv0: Adding interface: batadv_slave_1
[  280.428452][ T6353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  280.944113][ T6353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  281.070696][ T6353] device hsr_slave_0 entered promiscuous mode
[  281.087966][ T6353] device hsr_slave_1 entered promiscuous mode
[  281.347722][   T21] Bluetooth: hci2: command 0x041b tx timeout
[  282.205074][ T6286] Bluetooth: hci4: command 0x0419 tx timeout
[  282.510159][ T4447] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  282.694127][ T6405] chnl_net:caif_netlink_parms(): no params data found
[  282.805509][ T4447] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  283.932546][ T6405] bridge0: port 1(bridge_slave_0) entered blocking state
[  283.952765][ T6405] bridge0: port 1(bridge_slave_0) entered disabled state
[  283.967369][ T6405] device bridge_slave_0 entered promiscuous mode
[  284.001420][ T4447] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  284.025424][ T6405] bridge0: port 2(bridge_slave_1) entered blocking state
[  284.037557][ T6405] bridge0: port 2(bridge_slave_1) entered disabled state
[  284.052184][ T6405] device bridge_slave_1 entered promiscuous mode
[  284.139176][ T6405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  284.158235][ T4221] Bluetooth: hci2: command 0x040f tx timeout
[  284.179657][ T6474] loop5: detected capacity change from 0 to 64
[  284.200555][ T6405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  284.320867][ T4447] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  285.509744][ T6405] team0: Port device team_slave_0 added
[  285.593550][ T6405] team0: Port device team_slave_1 added
[  286.409049][ T5146] Bluetooth: hci2: command 0x0419 tx timeout
[  286.634703][ T6405] batman_adv: batadv0: Adding interface: batadv_slave_0
[  286.978877][ T6405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  287.322106][ T6405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  287.603460][ T6405] batman_adv: batadv0: Adding interface: batadv_slave_1
[  287.622784][ T6405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  287.718444][ T6405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  289.318602][ T6405] device hsr_slave_0 entered promiscuous mode
[  289.356290][ T6515] kvm [6514]: vcpu0, guest rIP: 0x1be vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x60000e63b, nop
[  289.421402][ T6515] kvm [6514]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0x6000081f5
[  289.459073][ T6405] device hsr_slave_1 entered promiscuous mode
[  289.467155][ T6515] kvm [6514]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x186 data 0x20000f545
[  289.488443][ T6405] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  289.496841][ T6405] Cannot create hsr debugfs directory
[  289.518666][ T6515] kvm [6514]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x187 data 0x460000418b
[  289.592007][ T4447] tipc: Left network mode
[  289.896219][ T6353] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  289.942310][ T6353] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  289.974838][ T6353] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  290.074215][ T6353] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  290.297412][ T6405] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  290.364896][ T6405] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  290.402274][ T6405] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  290.436790][ T6405] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  291.411693][ T6353] 8021q: adding VLAN 0 to HW filter on device bond0
[  291.802109][ T6555] netlink: 'syz.5.477': attribute type 3 has an invalid length.
[  292.223916][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  292.283768][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  292.638487][   T21] Bluetooth: hci2: command 0x0405 tx timeout
[  292.754289][ T6353] 8021q: adding VLAN 0 to HW filter on device team0
[  292.826761][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  292.885410][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  293.008158][ T4245] bridge0: port 1(bridge_slave_0) entered blocking state
[  293.016073][ T4245] bridge0: port 1(bridge_slave_0) entered forwarding state
[  293.193433][ T6405] 8021q: adding VLAN 0 to HW filter on device bond0
[  293.302420][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  293.727760][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  293.783527][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  293.868915][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[  293.876954][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[  293.947919][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  293.979471][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  294.119784][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  294.192264][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  294.229462][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  294.305438][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  294.342201][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  294.620690][ T6405] 8021q: adding VLAN 0 to HW filter on device team0
[  295.142516][ T4447] device hsr_slave_0 left promiscuous mode
[  295.204502][ T4447] device hsr_slave_1 left promiscuous mode
[  295.304690][ T4447] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  295.355803][ T4447] batman_adv: batadv0: Removing interface: batadv_slave_0
[  295.422769][ T4447] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  295.468191][ T4447] batman_adv: batadv0: Removing interface: batadv_slave_1
[  295.524968][ T4447] device bridge_slave_1 left promiscuous mode
[  295.567622][ T4447] bridge0: port 2(bridge_slave_1) entered disabled state
[  295.643058][ T4447] device bridge_slave_0 left promiscuous mode
[  295.684440][ T4447] bridge0: port 1(bridge_slave_0) entered disabled state
[  295.972159][ T4447] device veth1_macvtap left promiscuous mode
[  296.023183][ T4447] device veth0_macvtap left promiscuous mode
[  296.060195][ T4447] device veth1_vlan left promiscuous mode
[  296.105434][ T4447] device veth0_vlan left promiscuous mode
[  296.603714][ T4447] team0 (unregistering): Port device team_slave_1 removed
[  296.625797][ T4447] team0 (unregistering): Port device team_slave_0 removed
[  296.644382][ T4447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  296.680652][ T4447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  296.789795][ T4447] bond0 (unregistering): Released all slaves
[  296.875916][ T6584] ipt_REJECT: TCP_RESET invalid for non-tcp
[  297.664851][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  297.674387][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  297.689631][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  297.707535][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  297.717652][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[  297.724894][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[  297.772322][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  297.781518][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  297.790919][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[  297.798282][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[  297.806508][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  297.823501][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  297.837095][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  297.856895][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  297.872924][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  297.891491][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  297.916156][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  297.970678][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  297.979738][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  297.990392][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  298.009476][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  298.131921][ T6591] UBIFS error (pid: 6591): cannot open "c:::", error -22
[  298.937276][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  299.007954][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  299.235429][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  299.267114][ T6405] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  300.427083][ T6353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  300.466705][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  300.489638][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  301.809506][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  301.828517][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  301.869062][ T6405] 8021q: adding VLAN 0 to HW filter on device batadv0
[  301.895983][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  301.917512][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  301.959184][ T6353] 8021q: adding VLAN 0 to HW filter on device batadv0
[  302.635190][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  302.799633][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  303.521819][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  303.591041][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  303.610318][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  303.628895][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  303.642941][ T6405] device veth0_vlan entered promiscuous mode
[  303.731785][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  303.759445][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  303.850730][ T6405] device veth1_vlan entered promiscuous mode
[  303.857228][ T6658] loop6: detected capacity change from 0 to 2048
[  303.957066][ T6353] device veth0_vlan entered promiscuous mode
[  303.978087][ T6658] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodioread_nolock,min_batch_time=0x0000000000000000,barrier=0x0000000000000040,nodelalloc,,errors=continue. Quota mode: none.
[  304.013785][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  304.023105][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  304.059087][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  304.072390][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  304.688685][   T21] Bluetooth: hci3: command 0x0409 tx timeout
[  304.924593][ T6353] device veth1_vlan entered promiscuous mode
[  305.154127][ T6636] chnl_net:caif_netlink_parms(): no params data found
[  305.231924][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  305.255392][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  305.313621][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  305.349601][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  305.416614][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  305.480253][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  305.537119][ T6353] device veth0_macvtap entered promiscuous mode
[  305.580571][ T6405] device veth0_macvtap entered promiscuous mode
[  305.977257][ T6405] device veth1_macvtap entered promiscuous mode
[  306.246223][ T6353] device veth1_macvtap entered promiscuous mode
[  306.490111][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  306.527506][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  306.554931][ T6687] loop6: detected capacity change from 0 to 512
[  306.574290][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  306.692514][ T6687] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  306.795171][ T6687] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  306.808590][ T6286] Bluetooth: hci3: command 0x041b tx timeout
[  307.155002][ T6636] bridge0: port 1(bridge_slave_0) entered blocking state
[  307.182046][ T6636] bridge0: port 1(bridge_slave_0) entered disabled state
[  307.225557][ T6636] device bridge_slave_0 entered promiscuous mode
[  307.272787][ T6636] bridge0: port 2(bridge_slave_1) entered blocking state
[  307.305552][ T6636] bridge0: port 2(bridge_slave_1) entered disabled state
[  307.351606][ T6636] device bridge_slave_1 entered promiscuous mode
[  307.509252][ T6636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  307.547421][ T6405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  307.592165][ T6405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.640937][ T6405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  307.677739][ T6405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.719190][ T6405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  307.745390][ T6405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.764545][ T6405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  307.788516][ T6405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.831526][ T6405] batman_adv: batadv0: Interface activated: batadv_slave_0
[  307.852273][ T6405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  307.888482][ T6405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.912171][ T6405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  307.938202][ T6405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.973799][ T6405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  307.998972][ T6405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  308.012064][ T6405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  308.026919][ T6405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  308.040456][ T6405] batman_adv: batadv0: Interface activated: batadv_slave_1
[  308.084998][ T6636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  308.138596][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  308.199182][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  308.211238][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  308.246258][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  308.262143][ T6353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  308.275619][ T6353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  308.288736][ T6353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  308.309354][ T6353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  308.331019][ T6353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  308.346954][ T6353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  308.365769][ T6353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  308.378238][ T6353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  308.390881][ T6353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  308.427655][ T6353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  308.457024][ T6715] loop6: detected capacity change from 0 to 2048
[  308.561160][ T6353] batman_adv: batadv0: Interface activated: batadv_slave_0
[  308.594498][ T6405] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  308.607356][ T6405] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  308.617368][ T6405] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  308.627766][ T6405] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  308.646585][ T6715] Alternate GPT is invalid, using primary GPT.
[  308.656255][ T6715]  loop6: p1 p2 p3
[  308.680935][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  308.752575][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  308.807527][ T6353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  308.830331][ T6353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  308.864207][ T6353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  308.878482][ T4221] Bluetooth: hci3: command 0x040f tx timeout
[  308.931294][ T6353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  308.949754][ T6353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  308.965200][ T6353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  308.979158][ T6353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  308.994848][ T6353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  309.007372][ T6353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  309.026330][ T6353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  309.039795][ T6353] batman_adv: batadv0: Interface activated: batadv_slave_1
[  309.062335][ T6636] team0: Port device team_slave_0 added
[  309.072574][ T6636] team0: Port device team_slave_1 added
[  309.100709][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  309.120847][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  309.153459][ T4338] udevd[4338]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  309.172967][ T6353] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  309.184820][ T4336] udevd[4336]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory
[  309.190257][ T4369] udevd[4369]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory
[  309.207412][ T6353] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  309.231817][ T6353] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  309.244439][ T6353] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  309.272863][ T6718] loop6: detected capacity change from 0 to 2048
[  309.298912][ T6636] batman_adv: batadv0: Adding interface: batadv_slave_0
[  309.316995][ T6636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  309.387769][ T6636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  309.520758][ T4338] udevd[4338]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  309.547848][ T4336] udevd[4336]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory
[  309.559662][ T6693] delete_channel: no stack
[  309.591830][ T4369] udevd[4369]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory
[  309.754831][ T6636] batman_adv: batadv0: Adding interface: batadv_slave_1
[  309.881703][ T6725] libceph: resolve '.
[  309.881703][ T6725] #)|.��f��ǝ�a���2s�o�w��Չf��C���z�e�Sb3L)Hy�o����������Ǥ�Y�M�����h�E$
[  309.881703][ T6725] ' (ret=-3): failed
[  309.953569][ T6636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  310.314600][ T6636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  310.527235][ T6636] device hsr_slave_0 entered promiscuous mode
[  310.546545][ T6636] device hsr_slave_1 entered promiscuous mode
[  310.607951][ T6636] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  310.628499][ T6636] Cannot create hsr debugfs directory
[  310.933348][  T161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  310.956193][  T161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  310.958554][ T4219] Bluetooth: hci3: command 0x0419 tx timeout
[  311.039463][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  311.135976][ T3063] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  311.168295][ T3063] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  311.285716][  T161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  311.298632][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  311.299208][  T161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  311.416484][ T6750] overlayfs: failed to clone upperpath
[  311.660088][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  311.671722][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  311.700365][ T4447] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  311.732365][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  311.796955][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  311.947248][ T4447] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  312.047849][ T4447] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  312.728045][ T6765] loop7: detected capacity change from 0 to 256
[  312.796221][ T4447] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  312.884040][ T6766] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem
[  312.911647][ T4175] kernel read not supported for file /vga_arbiter (pid: 4175 comm: kworker/0:4)
[  314.405757][ T6782] netlink: 'syz.8.512': attribute type 1 has an invalid length.
[  314.611179][ T6788] netlink: 'syz.7.514': attribute type 1 has an invalid length.
[  316.098009][ T6636] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  316.126103][ T4447] tipc: Left network mode
[  316.141233][ T6636] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  316.528728][ T6636] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  316.565665][ T6636] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  317.018700][   T26] audit: type=1326 audit(1748219292.071:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6825 comm="syz.4.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7c3f57969 code=0x7ffc0000
[  317.136858][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[  317.145537][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[  317.507392][   T26] audit: type=1326 audit(1748219292.071:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6825 comm="syz.4.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7c3f57969 code=0x7ffc0000
[  317.543714][   T26] audit: type=1326 audit(1748219292.081:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6825 comm="syz.4.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7c3f57969 code=0x7ffc0000
[  317.613542][   T26] audit: type=1326 audit(1748219292.081:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6825 comm="syz.4.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc7c3f57969 code=0x7ffc0000
[  317.640055][   T26] audit: type=1326 audit(1748219292.081:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6825 comm="syz.4.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7c3f57969 code=0x7ffc0000
[  317.758874][   T26] audit: type=1326 audit(1748219292.081:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6825 comm="syz.4.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fc7c3f57969 code=0x7ffc0000
[  318.708454][   T26] audit: type=1326 audit(1748219292.091:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6825 comm="syz.4.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7c3f57969 code=0x7ffc0000
[  319.585341][ T6847] overlayfs: failed to clone upperpath
[  319.853430][ T6636] 8021q: adding VLAN 0 to HW filter on device bond0
[  320.342594][   T26] audit: type=1326 audit(1748219292.091:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6825 comm="syz.4.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc7c3f57969 code=0x7ffc0000
[  320.381083][   T26] audit: type=1326 audit(1748219292.091:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6825 comm="syz.4.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7c3f57969 code=0x7ffc0000
[  320.442033][ T6636] 8021q: adding VLAN 0 to HW filter on device team0
[  320.569060][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  320.633513][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  320.662986][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  321.456687][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  321.468539][   T26] audit: type=1326 audit(1748219292.091:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6825 comm="syz.4.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc7c3f57969 code=0x7ffc0000
[  321.645482][ T4383] bridge0: port 1(bridge_slave_0) entered blocking state
[  321.652876][ T4383] bridge0: port 1(bridge_slave_0) entered forwarding state
[  321.691705][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  321.726582][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  321.750682][ T4383] bridge0: port 2(bridge_slave_1) entered blocking state
[  321.757806][ T4383] bridge0: port 2(bridge_slave_1) entered forwarding state
[  321.773374][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  321.836329][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  321.902609][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  321.945807][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  322.006846][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  322.027435][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  322.050209][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  322.084134][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  322.114153][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  322.149354][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  322.201361][ T6636] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  322.257684][ T6636] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  324.607913][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  324.640082][ T6889] loop7: detected capacity change from 0 to 1024
[  324.649040][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  325.309695][ T6889] EXT4-fs (loop7): Ignoring removed orlov option
[  325.440947][ T6889] EXT4-fs (loop7): mounted filesystem without journal. Opts: jqfmt=vfsv1,resgid=0x0000000000000000,nodioread_nolock,norecovery,debug_want_extra_isize=0x0000000000000080,quota,errors=remount-ro,grpid,orlov,. Quota mode: writeback.
[  329.842282][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  330.084581][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  331.861734][ T6636] 8021q: adding VLAN 0 to HW filter on device batadv0
[  332.941958][ T4268] Bluetooth: hci5: command 0x1003 tx timeout
[  332.954490][  T146] Bluetooth: hci5: sending frame failed (-49)
[  332.969620][ T6963] loop6: detected capacity change from 0 to 2048
[  333.028471][ T4447] device hsr_slave_0 left promiscuous mode
[  333.090665][ T6963] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found
[  333.101931][ T6971] loop7: detected capacity change from 0 to 2048
[  333.106138][ T4447] device hsr_slave_1 left promiscuous mode
[  333.108970][ T6963] UDF-fs: Scanning with blocksize 512 failed
[  333.157471][ T6963] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  333.198689][ T6971] EXT4-fs (loop7): mounted filesystem without journal. Opts: nodioread_nolock,min_batch_time=0x0000000000000000,barrier=0x0000000000000040,nodelalloc,,errors=continue. Quota mode: none.
[  333.237581][ T4447] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  333.263935][ T4447] batman_adv: batadv0: Removing interface: batadv_slave_0
[  333.310945][ T4447] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  333.375657][ T4447] batman_adv: batadv0: Removing interface: batadv_slave_1
[  333.414148][ T4447] device bridge_slave_1 left promiscuous mode
[  333.450618][ T4447] bridge0: port 2(bridge_slave_1) entered disabled state
[  333.655555][ T4447] device bridge_slave_0 left promiscuous mode
[  333.673941][ T4447] bridge0: port 1(bridge_slave_0) entered disabled state
[  333.904103][ T4447] device veth1_macvtap left promiscuous mode
[  333.916314][ T4447] device veth0_macvtap left promiscuous mode
[  333.940380][ T4447] device veth1_vlan left promiscuous mode
[  333.946506][ T4447] device veth0_vlan left promiscuous mode
[  334.558552][ T4220] Bluetooth: hci1: command 0x0406 tx timeout
[  335.269622][ T4268] Bluetooth: hci5: command 0x1001 tx timeout
[  335.277087][  T146] Bluetooth: hci5: sending frame failed (-49)
[  335.610994][ T4447] team0 (unregistering): Port device team_slave_1 removed
[  335.878079][ T4447] team0 (unregistering): Port device team_slave_0 removed
[  336.197220][ T4447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  336.252577][ T4447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  336.399426][ T4447] bond0 (unregistering): Released all slaves
[  336.463192][ T7000] loop7: detected capacity change from 0 to 1024
[  336.477546][ T6985] netlink: 'syz.6.551': attribute type 10 has an invalid length.
[  336.486481][ T6985] netlink: 40 bytes leftover after parsing attributes in process `syz.6.551'.
[  336.497871][ T6985] device batadv0 entered promiscuous mode
[  336.504543][ T6985] bridge0: port 3(batadv0) entered blocking state
[  336.511436][ T6985] bridge0: port 3(batadv0) entered disabled state
[  336.519672][ T6985] bridge0: port 3(batadv0) entered blocking state
[  336.527176][ T6985] bridge0: port 3(batadv0) entered forwarding state
[  336.548643][ T6997] netlink: 'syz.4.554': attribute type 1 has an invalid length.
[  336.617216][ T7000] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  336.771028][ T6998] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  336.780012][ T6998] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  336.789784][ T6998] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  336.802118][ T6998] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  336.813785][ T6998] bond1: (slave geneve2): making interface the new active one
[  336.823404][ T6998] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  336.843632][ T6998] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  337.359025][ T4219] Bluetooth: hci5: command 0x1009 tx timeout
[  337.694455][   T26] kauditd_printk_skb: 2 callbacks suppressed
[  337.694476][   T26] audit: type=1326 audit(1748219312.051:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6999 comm="syz.7.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f530c969 code=0x7ffc0000
[  337.808260][ T1235] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  337.820954][ T1235] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  337.848654][   T26] audit: type=1326 audit(1748219312.061:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6999 comm="syz.7.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f530c969 code=0x7ffc0000
[  337.899099][ T6998] syz.4.554 (6998) used greatest stack depth: 19368 bytes left
[  338.019188][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  338.036576][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  338.062654][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  338.094923][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  338.142153][ T6636] device veth0_vlan entered promiscuous mode
[  338.266308][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  338.299244][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  339.423488][ T6636] device veth1_vlan entered promiscuous mode
[  339.684286][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  339.693968][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  340.892034][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  340.905272][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  340.919992][ T6636] device veth0_macvtap entered promiscuous mode
[  340.942046][ T6636] device veth1_macvtap entered promiscuous mode
[  340.981388][ T6636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  340.992402][ T6636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  341.004378][ T6636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  341.036378][ T6636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  341.152172][ T6636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  341.234270][ T6636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  341.244871][ T6636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  341.258433][ T6636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  341.269457][ T6636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  341.280898][ T6636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  341.305935][ T6636] batman_adv: batadv0: Interface activated: batadv_slave_0
[  341.314468][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  341.335731][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  341.354233][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  341.436122][ T6636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  342.028546][ T6636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  342.077534][ T6636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  342.092378][ T6636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  342.104974][ T6636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  342.153478][ T6636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  342.176140][ T6636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  342.207314][ T6636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  344.290282][ T6636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  344.302065][ T6636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  344.330482][ T6636] batman_adv: batadv0: Interface activated: batadv_slave_1
[  344.448106][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  344.474229][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  345.163829][ T7080] loop8: detected capacity change from 0 to 164
[  346.387658][ T6636] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  346.409140][ T6636] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  346.516161][ T6636] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  346.618479][ T6636] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  346.732309][ T7097] netlink: 4 bytes leftover after parsing attributes in process `syz.7.574'.
[  346.778465][ T7097] device vlan0 entered promiscuous mode
[  348.676627][  T161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  348.715216][  T161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  349.495588][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  349.581034][ T4298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  349.632843][ T4298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  349.643997][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  352.180268][ T7132] loop9: detected capacity change from 0 to 16
[  353.399032][ T7132] MTD: Attempt to mount non-MTD device "/dev/loop9"
[  353.729504][ T7164] IPv6: NLM_F_CREATE should be specified when creating new route
[  355.711127][   T26] audit: type=1326 audit(1748219330.871:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7166 comm="syz.7.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f530c969 code=0x7fc00000
[  357.058246][ T7190] 
[  357.060644][ T7190] ======================================================
[  357.067945][ T7190] WARNING: possible circular locking dependency detected
[  357.075107][ T7190] 5.15.184-syzkaller #0 Not tainted
[  357.080750][ T7190] ------------------------------------------------------
[  357.088160][ T7190] syz.8.592/7190 is trying to acquire lock:
[  357.094063][ T7190] ffff88805dbfc120 (sk_lock-AF_AX25){+.+.}-{0:0}, at: ax25_device_event+0x217/0x4f0
[  357.103890][ T7190] 
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  357.103890][ T7190] but task is already holding lock:
[  357.111841][ T7190] ffffffff8d22a848 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x54e/0xe50
[  357.120655][ T7190] 
[  357.120655][ T7190] which lock already depends on the new lock.
[  357.120655][ T7190] 
[  357.131339][ T7190] 
[  357.131339][ T7190] the existing dependency chain (in reverse order) is:
[  357.140674][ T7190] 
[  357.140674][ T7190] -> #1 (rtnl_mutex){+.+.}-{3:3}:
[  357.147924][ T7190]        __mutex_lock_common+0x1eb/0x2390
[  357.153777][ T7190]        mutex_lock_nested+0x17/0x20
[  357.159576][ T7190]        ax25_setsockopt+0x830/0xa40
[  357.164894][ T7190]        __sys_setsockopt+0x3d6/0x5e0
[  357.170480][ T7190]        __x64_sys_setsockopt+0xb1/0xc0
[  357.176358][ T7190]        do_syscall_64+0x4c/0xa0
[  357.181315][ T7190]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  357.188035][ T7190] 
[  357.188035][ T7190] -> #0 (sk_lock-AF_AX25){+.+.}-{0:0}:
[  357.197596][ T7190]        __lock_acquire+0x2c33/0x7c60
[  357.203172][ T7190]        lock_acquire+0x197/0x3f0
[  357.208514][ T7190]        lock_sock_nested+0x44/0x100
[  357.214350][ T7190]        ax25_device_event+0x217/0x4f0
[  357.221005][ T7190]        raw_notifier_call_chain+0xcb/0x160
[  357.227284][ T7190]        dev_close_many+0x28d/0x400
[  357.232490][ T7190]        dev_close+0x14c/0x200
[  357.237462][ T7190]        bpq_device_event+0x2f4/0x9c0
[  357.242930][ T7190]        raw_notifier_call_chain+0xcb/0x160
[  357.248959][ T7190]        dev_close_many+0x28d/0x400
[  357.254377][ T7190]        dev_close+0x14c/0x200
[  357.259316][ T7190]        bond_setup_by_slave+0x61/0x3a0
[  357.265255][ T7190]        bond_enslave+0x77c/0x3a40
[  357.270569][ T7190]        bond_do_ioctl+0x2a2/0x8c0
[  357.275684][ T7190]        dev_ifsioc+0xc01/0xe70
[  357.281993][ T7190]        dev_ioctl+0x55f/0xe50
[  357.287154][ T7190]        sock_do_ioctl+0x222/0x2f0
[  357.293075][ T7190]        sock_ioctl+0x4ed/0x6e0
[  357.298018][ T7190]        __se_sys_ioctl+0xfa/0x170
[  357.303616][ T7190]        do_syscall_64+0x4c/0xa0
[  357.308729][ T7190]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  357.315336][ T7190] 
[  357.315336][ T7190] other info that might help us debug this:
[  357.315336][ T7190] 
[  357.326041][ T7190]  Possible unsafe locking scenario:
[  357.326041][ T7190] 
[  357.334616][ T7190]        CPU0                    CPU1
[  357.340528][ T7190]        ----                    ----
[  357.346065][ T7190]   lock(rtnl_mutex);
[  357.350316][ T7190]                                lock(sk_lock-AF_AX25);
[  357.357432][ T7190]                                lock(rtnl_mutex);
[  357.364786][ T7190]   lock(sk_lock-AF_AX25);
[  357.369412][ T7190] 
[  357.369412][ T7190]  *** DEADLOCK ***
[  357.369412][ T7190] 
[  357.378106][ T7190] 1 lock held by syz.8.592/7190:
[  357.383823][ T7190]  #0: ffffffff8d22a848 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x54e/0xe50
[  357.393366][ T7190] 
[  357.393366][ T7190] stack backtrace:
[  357.399760][ T7190] CPU: 0 PID: 7190 Comm: syz.8.592 Not tainted 5.15.184-syzkaller #0
[  357.408003][ T7190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  357.418262][ T7190] Call Trace:
[  357.421544][ T7190]  <TASK>
[  357.424628][ T7190]  dump_stack_lvl+0x168/0x230
[  357.429754][ T7190]  ? load_image+0x3b0/0x3b0
[  357.434399][ T7190]  ? show_regs_print_info+0x20/0x20
[  357.439819][ T7190]  ? print_circular_bug+0x12b/0x1a0
[  357.445169][ T7190]  check_noncircular+0x274/0x310
[  357.450428][ T7190]  ? add_chain_block+0x940/0x940
[  357.455648][ T7190]  ? lockdep_lock+0xdc/0x1e0
[  357.461158][ T7190]  ? lockdep_unlock+0x134/0x2d0
[  357.466313][ T7190]  ? mark_lock+0x94/0x320
[  357.471106][ T7190]  __lock_acquire+0x2c33/0x7c60
[  357.476231][ T7190]  ? lock_chain_count+0x20/0x20
[  357.482170][ T7190]  ? mark_lock+0x94/0x320
[  357.487687][ T7190]  ? verify_lock_unused+0x140/0x140
[  357.494232][ T7190]  ? verify_lock_unused+0x140/0x140
[  357.500644][ T7190]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  357.507469][ T7190]  ? lockdep_hardirqs_on_prepare+0x760/0x760
[  357.513482][ T7190]  ? __local_bh_enable_ip+0x12a/0x1b0
[  357.518959][ T7190]  ? mark_lock+0x94/0x320
[  357.523300][ T7190]  lock_acquire+0x197/0x3f0
[  357.528179][ T7190]  ? ax25_device_event+0x217/0x4f0
[  357.533541][ T7190]  ? lock_chain_count+0x20/0x20
[  357.538519][ T7190]  ? read_lock_is_recursive+0x10/0x10
[  357.544078][ T7190]  ? __local_bh_enable_ip+0x12a/0x1b0
[  357.549620][ T7190]  ? lockdep_hardirqs_on+0x94/0x140
[  357.554912][ T7190]  ? __local_bh_enable_ip+0x12a/0x1b0
[  357.560733][ T7190]  ? _local_bh_enable+0xa0/0xa0
[  357.565636][ T7190]  lock_sock_nested+0x44/0x100
[  357.570746][ T7190]  ? ax25_device_event+0x217/0x4f0
[  357.578709][ T7190]  ax25_device_event+0x217/0x4f0
[  357.585046][ T7190]  raw_notifier_call_chain+0xcb/0x160
[  357.592758][ T7190]  dev_close_many+0x28d/0x400
[  357.598020][ T7190]  ? _raw_spin_unlock+0x40/0x40
[  357.603831][ T7190]  ? __dev_open+0x420/0x420
[  357.608536][ T7190]  ? bond_netdev_event+0x159/0xea0
[  357.613860][ T7190]  ? try_to_del_timer_sync+0x165/0x1b0
[  357.619980][ T7190]  dev_close+0x14c/0x200
[  357.624407][ T7190]  ? __dev_close_many+0x2a0/0x2a0
[  357.629623][ T7190]  ? macvlan_device_event+0x10b/0x930
[  357.635276][ T7190]  bpq_device_event+0x2f4/0x9c0
[  357.641342][ T7190]  ? lockdep_rtnl_is_held+0x22/0x30
[  357.646865][ T7190]  ? team_device_event+0x11b/0x9e0
[  357.652175][ T7190]  raw_notifier_call_chain+0xcb/0x160
[  357.657743][ T7190]  dev_close_many+0x28d/0x400
[  357.662594][ T7190]  ? __dev_open+0x420/0x420
[  357.667096][ T7190]  ? lock_chain_count+0x20/0x20
[  357.672047][ T7190]  ? lockdep_hardirqs_on_prepare+0x760/0x760
[  357.678263][ T7190]  dev_close+0x14c/0x200
[  357.682905][ T7190]  ? __dev_close_many+0x2a0/0x2a0
[  357.688208][ T7190]  ? __local_bh_enable_ip+0x12a/0x1b0
[  357.694240][ T7190]  ? _local_bh_enable+0xa0/0xa0
[  357.699299][ T7190]  bond_setup_by_slave+0x61/0x3a0
[  357.705055][ T7190]  bond_enslave+0x77c/0x3a40
[  357.710171][ T7190]  ? stack_trace_save+0x98/0xe0
[  357.715217][ T7190]  ? slab_free_freelist_hook+0xea/0x170
[  357.721146][ T7190]  ? verify_lock_unused+0x140/0x140
[  357.726723][ T7190]  ? mark_lock+0x94/0x320
[  357.731957][ T7190]  ? bond_lower_state_changed+0x150/0x150
[  357.737997][ T7190]  ? __lock_acquire+0x12d9/0x7c60
[  357.743259][ T7190]  ? apparmor_capable+0x12c/0x190
[  357.748379][ T7190]  ? bpf_lsm_capable+0x5/0x10
[  357.753557][ T7190]  ? full_name_hash+0x8e/0xe0
[  357.759055][ T7190]  bond_do_ioctl+0x2a2/0x8c0
[  357.763835][ T7190]  ? bond_eth_ioctl+0x200/0x200
[  357.769076][ T7190]  ? rcu_lock_release+0x20/0x20
[  357.773935][ T7190]  ? lock_chain_count+0x20/0x20
[  357.779230][ T7190]  ? dev_ioctl+0x54e/0xe50
[  357.783757][ T7190]  ? dev_ioctl+0x54e/0xe50
[  357.788328][ T7190]  ? dev_ioctl+0x54e/0xe50
[  357.792833][ T7190]  ? __mutex_lock_common+0x431/0x2390
[  357.798403][ T7190]  ? full_name_hash+0x8e/0xe0
[  357.803403][ T7190]  ? dev_siocbond+0xcf/0x100
[  357.808014][ T7190]  dev_ifsioc+0xc01/0xe70
[  357.812445][ T7190]  ? dev_ioctl+0xe50/0xe50
[  357.816868][ T7190]  ? apparmor_capable+0x12c/0x190
[  357.822231][ T7190]  ? full_name_hash+0x8e/0xe0
[  357.827297][ T7190]  dev_ioctl+0x55f/0xe50
[  357.831709][ T7190]  ? _copy_from_user+0x111/0x170
[  357.837107][ T7190]  sock_do_ioctl+0x222/0x2f0
[  357.841811][ T7190]  ? sock_show_fdinfo+0xb0/0xb0
[  357.846699][ T7190]  sock_ioctl+0x4ed/0x6e0
[  357.851257][ T7190]  ? sock_poll+0x3f0/0x3f0
[  357.855902][ T7190]  ? bpf_lsm_file_ioctl+0x5/0x10
[  357.861262][ T7190]  ? security_file_ioctl+0x7c/0xa0
[  357.866500][ T7190]  ? sock_poll+0x3f0/0x3f0
[  357.871102][ T7190]  __se_sys_ioctl+0xfa/0x170
[  357.875709][ T7190]  do_syscall_64+0x4c/0xa0
[  357.880142][ T7190]  ? clear_bhb_loop+0x30/0x80
[  357.885445][ T7190]  ? clear_bhb_loop+0x30/0x80
[  357.890453][ T7190]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  357.897488][ T7190] RIP: 0033:0x7f182a05b969
[  357.902126][ T7190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  357.924320][ T7190] RSP: 002b:00007f1827ea2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  357.934454][ T7190] RAX: ffffffffffffffda RBX: 00007f182a283080 RCX: 00007f182a05b969
[  357.943179][ T7190] RDX: 0000200000000180 RSI: 0000000000008990 RDI: 000000000000000b
[  357.952123][ T7190] RBP: 00007f182a0ddab1 R08: 0000000000000000 R09: 0000000000000000
[  357.962580][ T7190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  357.971468][ T7190] R13: 0000000000000001 R14: 00007f182a283080 R15: 00007ffcdf78e6b8
[  357.980346][ T7190]  </TASK>
[  358.160714][ T7190] ==================================================================
[  358.169982][ T7190] BUG: KASAN: use-after-free in ax25_dev_device_down+0x35e/0x520
[  358.177837][ T7190] Write of size 4 at addr ffff88805cacd5b8 by task syz.8.592/7190
[  358.185927][ T7190] 
[  358.188262][ T7190] CPU: 1 PID: 7190 Comm: syz.8.592 Not tainted 5.15.184-syzkaller #0
[  358.196517][ T7190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  358.207002][ T7190] Call Trace:
[  358.210871][ T7190]  <TASK>
[  358.214601][ T7190]  dump_stack_lvl+0x168/0x230
[  358.219790][ T7190]  ? show_regs_print_info+0x20/0x20
[  358.226623][ T7190]  ? load_image+0x3b0/0x3b0
[  358.231838][ T7190]  ? _raw_spin_lock_irqsave+0xb0/0xf0
[  358.238606][ T7190]  print_address_description+0x60/0x2d0
[  358.245070][ T7190]  ? ax25_dev_device_down+0x35e/0x520
[  358.251421][ T7190]  kasan_report+0xdf/0x130
[  358.256493][ T7190]  ? ax25_dev_device_down+0x35e/0x520
[  358.262269][ T7190]  ? kfree+0xef/0x2a0
[  358.266464][ T7190]  kasan_check_range+0x27b/0x290
[  358.271550][ T7190]  ax25_dev_device_down+0x35e/0x520
[  358.276801][ T7190]  ax25_device_event+0x4b4/0x4f0
[  358.281846][ T7190]  raw_notifier_call_chain+0xcb/0x160
[  358.287327][ T7190]  dev_close_many+0x28d/0x400
[  358.292577][ T7190]  ? _raw_spin_unlock+0x40/0x40
[  358.297615][ T7190]  ? __dev_open+0x420/0x420
[  358.302297][ T7190]  ? bond_netdev_event+0x159/0xea0
[  358.307597][ T7190]  ? try_to_del_timer_sync+0x165/0x1b0
[  358.313352][ T7190]  dev_close+0x14c/0x200
[  358.317741][ T7190]  ? __dev_close_many+0x2a0/0x2a0
[  358.322952][ T7190]  ? macvlan_device_event+0x10b/0x930
[  358.328331][ T7190]  bpq_device_event+0x2f4/0x9c0
[  358.333181][ T7190]  ? lockdep_rtnl_is_held+0x22/0x30
[  358.338583][ T7190]  ? team_device_event+0x11b/0x9e0
[  358.344072][ T7190]  raw_notifier_call_chain+0xcb/0x160
[  358.349660][ T7190]  dev_close_many+0x28d/0x400
[  358.354368][ T7190]  ? __dev_open+0x420/0x420
[  358.359617][ T7190]  ? lock_chain_count+0x20/0x20
[  358.364799][ T7190]  ? lockdep_hardirqs_on_prepare+0x760/0x760
[  358.370978][ T7190]  dev_close+0x14c/0x200
[  358.375519][ T7190]  ? __dev_close_many+0x2a0/0x2a0
[  358.380772][ T7190]  ? __local_bh_enable_ip+0x12a/0x1b0
[  358.386234][ T7190]  ? _local_bh_enable+0xa0/0xa0
[  358.391367][ T7190]  bond_setup_by_slave+0x61/0x3a0
[  358.396970][ T7190]  bond_enslave+0x77c/0x3a40
[  358.401671][ T7190]  ? stack_trace_save+0x98/0xe0
[  358.406526][ T7190]  ? slab_free_freelist_hook+0xea/0x170
[  358.412161][ T7190]  ? verify_lock_unused+0x140/0x140
[  358.417372][ T7190]  ? mark_lock+0x94/0x320
[  358.421846][ T7190]  ? bond_lower_state_changed+0x150/0x150
[  358.427667][ T7190]  ? __lock_acquire+0x12d9/0x7c60
[  358.433093][ T7190]  ? apparmor_capable+0x12c/0x190
[  358.438292][ T7190]  ? bpf_lsm_capable+0x5/0x10
[  358.443065][ T7190]  ? full_name_hash+0x8e/0xe0
[  358.448183][ T7190]  bond_do_ioctl+0x2a2/0x8c0
[  358.453339][ T7190]  ? bond_eth_ioctl+0x200/0x200
[  358.458471][ T7190]  ? rcu_lock_release+0x20/0x20
[  358.463488][ T7190]  ? lock_chain_count+0x20/0x20
[  358.469271][ T7190]  ? dev_ioctl+0x54e/0xe50
[  358.474078][ T7190]  ? dev_ioctl+0x54e/0xe50
[  358.478701][ T7190]  ? dev_ioctl+0x54e/0xe50
[  358.483151][ T7190]  ? __mutex_lock_common+0x431/0x2390
[  358.488826][ T7190]  ? full_name_hash+0x8e/0xe0
[  358.493939][ T7190]  ? dev_siocbond+0xcf/0x100
[  358.498736][ T7190]  dev_ifsioc+0xc01/0xe70
[  358.503247][ T7190]  ? dev_ioctl+0xe50/0xe50
[  358.508004][ T7190]  ? apparmor_capable+0x12c/0x190
[  358.513128][ T7190]  ? full_name_hash+0x8e/0xe0
[  358.517812][ T7190]  dev_ioctl+0x55f/0xe50
[  358.522146][ T7190]  ? _copy_from_user+0x111/0x170
[  358.527170][ T7190]  sock_do_ioctl+0x222/0x2f0
[  358.531762][ T7190]  ? sock_show_fdinfo+0xb0/0xb0
[  358.536803][ T7190]  sock_ioctl+0x4ed/0x6e0
[  358.541372][ T7190]  ? sock_poll+0x3f0/0x3f0
[  358.546070][ T7190]  ? bpf_lsm_file_ioctl+0x5/0x10
[  358.551015][ T7190]  ? security_file_ioctl+0x7c/0xa0
[  358.556406][ T7190]  ? sock_poll+0x3f0/0x3f0
[  358.561113][ T7190]  __se_sys_ioctl+0xfa/0x170
[  358.566050][ T7190]  do_syscall_64+0x4c/0xa0
[  358.570787][ T7190]  ? clear_bhb_loop+0x30/0x80
[  358.575981][ T7190]  ? clear_bhb_loop+0x30/0x80
[  358.580655][ T7190]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  358.586772][ T7190] RIP: 0033:0x7f182a05b969
[  358.591498][ T7190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  358.611916][ T7190] RSP: 002b:00007f1827ea2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  358.620560][ T7190] RAX: ffffffffffffffda RBX: 00007f182a283080 RCX: 00007f182a05b969
[  358.629186][ T7190] RDX: 0000200000000180 RSI: 0000000000008990 RDI: 000000000000000b
[  358.637585][ T7190] RBP: 00007f182a0ddab1 R08: 0000000000000000 R09: 0000000000000000
[  358.645572][ T7190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  358.653746][ T7190] R13: 0000000000000001 R14: 00007f182a283080 R15: 00007ffcdf78e6b8
[  358.661929][ T7190]  </TASK>
[  358.664958][ T7190] 
[  358.667395][ T7190] Allocated by task 5589:
[  358.671710][ T7190]  __kasan_kmalloc+0xb5/0xf0
[  358.676389][ T7190]  ax25_dev_device_up+0x50/0x580
[  358.681484][ T7190]  ax25_device_event+0x483/0x4f0
[  358.686566][ T7190]  raw_notifier_call_chain+0xcb/0x160
[  358.692033][ T7190]  __dev_notify_flags+0x178/0x2d0
[  358.697354][ T7190]  dev_change_flags+0xe3/0x1a0
[  358.702308][ T7190]  dev_ifsioc+0x147/0xe70
[  358.706839][ T7190]  dev_ioctl+0x55f/0xe50
[  358.711106][ T7190]  sock_do_ioctl+0x222/0x2f0
[  358.715881][ T7190]  sock_ioctl+0x4ed/0x6e0
[  358.720205][ T7190]  __se_sys_ioctl+0xfa/0x170
[  358.724795][ T7190]  do_syscall_64+0x4c/0xa0
[  358.729335][ T7190]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  358.735351][ T7190] 
[  358.737845][ T7190] Freed by task 7190:
[  358.741820][ T7190]  kasan_set_track+0x4b/0x70
[  358.746643][ T7190]  kasan_set_free_info+0x1f/0x40
[  358.751750][ T7190]  ____kasan_slab_free+0xd5/0x110
[  358.756863][ T7190]  slab_free_freelist_hook+0xea/0x170
[  358.762253][ T7190]  kfree+0xef/0x2a0
[  358.766055][ T7190]  ax25_dev_device_down+0x1c0/0x520
[  358.771508][ T7190]  ax25_device_event+0x4b4/0x4f0
[  358.776528][ T7190]  raw_notifier_call_chain+0xcb/0x160
[  358.781898][ T7190]  dev_close_many+0x28d/0x400
[  358.786670][ T7190]  dev_close+0x14c/0x200
[  358.791040][ T7190]  bpq_device_event+0x2f4/0x9c0
[  358.795995][ T7190]  raw_notifier_call_chain+0xcb/0x160
[  358.801545][ T7190]  dev_close_many+0x28d/0x400
[  358.806320][ T7190]  dev_close+0x14c/0x200
[  358.810565][ T7190]  bond_setup_by_slave+0x61/0x3a0
[  358.815673][ T7190]  bond_enslave+0x77c/0x3a40
[  358.820356][ T7190]  bond_do_ioctl+0x2a2/0x8c0
[  358.824961][ T7190]  dev_ifsioc+0xc01/0xe70
[  358.829718][ T7190]  dev_ioctl+0x55f/0xe50
[  358.833953][ T7190]  sock_do_ioctl+0x222/0x2f0
[  358.838630][ T7190]  sock_ioctl+0x4ed/0x6e0
[  358.843141][ T7190]  __se_sys_ioctl+0xfa/0x170
[  358.848001][ T7190]  do_syscall_64+0x4c/0xa0
[  358.852484][ T7190]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  358.858843][ T7190] 
[  358.861423][ T7190] Last potentially related work creation:
[  358.867307][ T7190]  kasan_save_stack+0x35/0x60
[  358.872318][ T7190]  kasan_record_aux_stack+0xb8/0x100
[  358.877690][ T7190]  insert_work+0x54/0x3d0
[  358.882126][ T7190]  __queue_work+0x9c5/0xd50
[  358.886814][ T7190]  queue_work_on+0x11d/0x1d0
[  358.891662][ T7190]  netdevice_event+0x803/0x900
[  358.897093][ T7190]  raw_notifier_call_chain+0xcb/0x160
[  358.903078][ T7190]  register_netdevice+0x1275/0x16b0
[  358.908523][ T7190]  veth_newlink+0x8ed/0xda0
[  358.913586][ T7190]  rtnl_newlink+0x114c/0x17d0
[  358.918505][ T7190]  rtnetlink_rcv_msg+0x9b9/0xe60
[  358.924307][ T7190]  netlink_rcv_skb+0x1e0/0x430
[  358.929287][ T7190]  netlink_unicast+0x77c/0x920
[  358.934696][ T7190]  netlink_sendmsg+0x8ab/0xbc0
[  358.939457][ T7190]  ____sys_sendmsg+0x5a2/0x8c0
[  358.944958][ T7190]  ___sys_sendmsg+0x1f0/0x260
[  358.950566][ T7190]  __se_sys_sendmsg+0x190/0x250
[  358.955624][ T7190]  do_syscall_64+0x4c/0xa0
[  358.960315][ T7190]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  358.966846][ T7190] 
[  358.970329][ T7190] The buggy address belongs to the object at ffff88805cacd500
[  358.970329][ T7190]  which belongs to the cache kmalloc-192 of size 192
[  358.986565][ T7190] The buggy address is located 184 bytes inside of
[  358.986565][ T7190]  192-byte region [ffff88805cacd500, ffff88805cacd5c0)
[  359.000941][ T7190] The buggy address belongs to the page:
[  359.006772][ T7190] page:ffffea000172b340 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5cacd
[  359.017770][ T7190] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff)
[  359.025661][ T7190] raw: 00fff00000000200 ffffea0001ceb040 0000000700000004 ffff888016841a00
[  359.034720][ T7190] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[  359.044245][ T7190] page dumped because: kasan: bad access detected
[  359.050750][ T7190] page_owner tracks the page as allocated
[  359.057185][ T7190] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 4279, ts 82168126253, free_ts 21752597704
[  359.074595][ T7190]  get_page_from_freelist+0x1b77/0x1c60
[  359.080448][ T7190]  __alloc_pages+0x1e1/0x470
[  359.085735][ T7190]  new_slab+0xc0/0x4b0
[  359.091204][ T7190]  ___slab_alloc+0x81e/0xdf0
[  359.096251][ T7190]  kmem_cache_alloc_trace+0x1a5/0x2a0
[  359.102284][ T7190]  do_check+0x220d/0xeac0
[  359.107724][ T7190]  do_check_common+0xe67/0x16c0
[  359.113091][ T7190]  bpf_check+0x31f3/0xf090
[  359.117626][ T7190]  bpf_prog_load+0x1043/0x1550
[  359.122954][ T7190]  __sys_bpf+0x4c2/0x670
[  359.127293][ T7190]  __x64_sys_bpf+0x78/0x90
[  359.131795][ T7190]  do_syscall_64+0x4c/0xa0
[  359.136263][ T7190]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  359.142491][ T7190] page last free stack trace:
[  359.147167][ T7190]  free_unref_page_prepare+0x637/0x6c0
[  359.152753][ T7190]  free_unref_page+0x94/0x280
[  359.157530][ T7190]  free_contig_range+0x96/0xf0
[  359.162394][ T7190]  destroy_args+0xef/0x8b0
[  359.166987][ T7190]  debug_vm_pgtable+0x318/0x370
[  359.171985][ T7190]  do_one_initcall+0x1ee/0x680
[  359.177183][ T7190]  do_initcall_level+0x137/0x1f0
[  359.182201][ T7190]  do_initcalls+0x4b/0x90
[  359.186538][ T7190]  kernel_init_freeable+0x3ce/0x560
[  359.191835][ T7190]  kernel_init+0x19/0x1b0
[  359.196193][ T7190]  ret_from_fork+0x1f/0x30
[  359.200925][ T7190] 
[  359.203283][ T7190] Memory state around the buggy address:
[  359.209256][ T7190]  ffff88805cacd480: 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  359.217533][ T7190]  ffff88805cacd500: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  359.226376][ T7190] >ffff88805cacd580: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  359.234803][ T7190]                                         ^
[  359.240929][ T7190]  ffff88805cacd600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  359.249088][ T7190]  ffff88805cacd680: 04 fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  359.257311][ T7190] ==================================================================
[  359.444031][ T7190] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  359.451382][ T7190] CPU: 1 PID: 7190 Comm: syz.8.592 Tainted: G    B             5.15.184-syzkaller #0
[  359.461691][ T7190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  359.473016][ T7190] Call Trace:
[  359.476498][ T7190]  <TASK>
[  359.479630][ T7190]  dump_stack_lvl+0x168/0x230
[  359.484798][ T7190]  ? show_regs_print_info+0x20/0x20
[  359.490913][ T7190]  ? load_image+0x3b0/0x3b0
[  359.495744][ T7190]  panic+0x2c9/0x7f0
[  359.500976][ T7190]  ? bpf_jit_dump+0xd0/0xd0
[  359.506954][ T7190]  ? _raw_spin_unlock_irqrestore+0xf6/0x100
[  359.515199][ T7190]  ? _raw_spin_unlock+0x40/0x40
[  359.522578][ T7190]  ? ax25_dev_device_down+0x35e/0x520
[  359.529236][ T7190]  check_panic_on_warn+0x80/0xa0
[  359.535166][ T7190]  ? ax25_dev_device_down+0x35e/0x520
[  359.541973][ T7190]  end_report+0x6d/0xf0
[  359.547735][ T7190]  kasan_report+0x102/0x130
[  359.554164][ T7190]  ? ax25_dev_device_down+0x35e/0x520
[  359.561355][ T7190]  ? kfree+0xef/0x2a0
[  359.566184][ T7190]  kasan_check_range+0x27b/0x290
[  359.572097][ T7190]  ax25_dev_device_down+0x35e/0x520
[  359.578680][ T7190]  ax25_device_event+0x4b4/0x4f0
[  359.585799][ T7190]  raw_notifier_call_chain+0xcb/0x160
[  359.593713][ T7190]  dev_close_many+0x28d/0x400
[  359.599865][ T7190]  ? _raw_spin_unlock+0x40/0x40
[  359.605242][ T7190]  ? __dev_open+0x420/0x420
[  359.610669][ T7190]  ? bond_netdev_event+0x159/0xea0
[  359.616138][ T7190]  ? try_to_del_timer_sync+0x165/0x1b0
[  359.622366][ T7190]  dev_close+0x14c/0x200
[  359.626808][ T7190]  ? __dev_close_many+0x2a0/0x2a0
[  359.631911][ T7190]  ? macvlan_device_event+0x10b/0x930
[  359.638411][ T7190]  bpq_device_event+0x2f4/0x9c0
[  359.644102][ T7190]  ? lockdep_rtnl_is_held+0x22/0x30
[  359.649741][ T7190]  ? team_device_event+0x11b/0x9e0
[  359.654889][ T7190]  raw_notifier_call_chain+0xcb/0x160
[  359.660716][ T7190]  dev_close_many+0x28d/0x400
[  359.665505][ T7190]  ? __dev_open+0x420/0x420
[  359.670029][ T7190]  ? lock_chain_count+0x20/0x20
[  359.675620][ T7190]  ? lockdep_hardirqs_on_prepare+0x760/0x760
[  359.682252][ T7190]  dev_close+0x14c/0x200
[  359.686596][ T7190]  ? __dev_close_many+0x2a0/0x2a0
[  359.691798][ T7190]  ? __local_bh_enable_ip+0x12a/0x1b0
[  359.697845][ T7190]  ? _local_bh_enable+0xa0/0xa0
[  359.702807][ T7190]  bond_setup_by_slave+0x61/0x3a0
[  359.707929][ T7190]  bond_enslave+0x77c/0x3a40
[  359.712816][ T7190]  ? stack_trace_save+0x98/0xe0
[  359.718197][ T7190]  ? slab_free_freelist_hook+0xea/0x170
[  359.724369][ T7190]  ? verify_lock_unused+0x140/0x140
[  359.730933][ T7190]  ? mark_lock+0x94/0x320
[  359.736112][ T7190]  ? bond_lower_state_changed+0x150/0x150
[  359.742256][ T7190]  ? __lock_acquire+0x12d9/0x7c60
[  359.747731][ T7190]  ? apparmor_capable+0x12c/0x190
[  359.752865][ T7190]  ? bpf_lsm_capable+0x5/0x10
[  359.758089][ T7190]  ? full_name_hash+0x8e/0xe0
[  359.763238][ T7190]  bond_do_ioctl+0x2a2/0x8c0
[  359.768765][ T7190]  ? bond_eth_ioctl+0x200/0x200
[  359.774672][ T7190]  ? rcu_lock_release+0x20/0x20
[  359.780570][ T7190]  ? lock_chain_count+0x20/0x20
[  359.786021][ T7190]  ? dev_ioctl+0x54e/0xe50
[  359.791891][ T7190]  ? dev_ioctl+0x54e/0xe50
[  359.797397][ T7190]  ? dev_ioctl+0x54e/0xe50
[  359.801947][ T7190]  ? __mutex_lock_common+0x431/0x2390
[  359.808912][ T7190]  ? full_name_hash+0x8e/0xe0
[  359.814409][ T7190]  ? dev_siocbond+0xcf/0x100
[  359.819973][ T7190]  dev_ifsioc+0xc01/0xe70
[  359.824497][ T7190]  ? dev_ioctl+0xe50/0xe50
[  359.829955][ T7190]  ? apparmor_capable+0x12c/0x190
[  359.836536][ T7190]  ? full_name_hash+0x8e/0xe0
[  359.842443][ T7190]  dev_ioctl+0x55f/0xe50
[  359.847709][ T7190]  ? _copy_from_user+0x111/0x170
[  359.853041][ T7190]  sock_do_ioctl+0x222/0x2f0
[  359.858470][ T7190]  ? sock_show_fdinfo+0xb0/0xb0
[  359.864112][ T7190]  sock_ioctl+0x4ed/0x6e0
[  359.868853][ T7190]  ? sock_poll+0x3f0/0x3f0
[  359.875041][ T7190]  ? bpf_lsm_file_ioctl+0x5/0x10
[  359.882541][ T7190]  ? security_file_ioctl+0x7c/0xa0
[  359.888934][ T7190]  ? sock_poll+0x3f0/0x3f0
[  359.895942][ T7190]  __se_sys_ioctl+0xfa/0x170
[  359.902038][ T7190]  do_syscall_64+0x4c/0xa0
[  359.908026][ T7190]  ? clear_bhb_loop+0x30/0x80
[  359.914876][ T7190]  ? clear_bhb_loop+0x30/0x80
[  359.920929][ T7190]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  359.929378][ T7190] RIP: 0033:0x7f182a05b969
[  359.934936][ T7190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  359.959074][ T7190] RSP: 002b:00007f1827ea2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  359.968047][ T7190] RAX: ffffffffffffffda RBX: 00007f182a283080 RCX: 00007f182a05b969
[  359.976734][ T7190] RDX: 0000200000000180 RSI: 0000000000008990 RDI: 000000000000000b
[  359.985270][ T7190] RBP: 00007f182a0ddab1 R08: 0000000000000000 R09: 0000000000000000
[  359.994018][ T7190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  360.002182][ T7190] R13: 0000000000000001 R14: 00007f182a283080 R15: 00007ffcdf78e6b8
[  360.010322][ T7190]  </TASK>
[  360.013767][ T7190] Kernel Offset: disabled
[  360.018551][ T7190] Rebooting in 86400 seconds..