last executing test programs:

7.828569306s ago: executing program 2 (id=1690):
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x48)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
syz_read_part_table(0x106d, &(0x7f0000001080)="$eJzsz7FNw0AYBeB3trFNR0VD44qaGdiBFiExiBENDSPQ0rAIG7AAI6SOLjpFyQhJiu8r7p6eTvfrD2d2M+UlQ0peP/okJbW8JXVbpyRdUoav9uy2HUvmtPo6ufp/f75v3WNfxvwefhv3V5+7tZaWNnN3HNXSw3dZaq1rks+/p5+TrwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF2gXAAD//wCmE1Q=")
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x16)
request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0xd, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x10000, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x90)
socket$inet6(0xa, 0x3, 0x88)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = dup(r3)
write$UHID_INPUT(r4, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324c078b089b32373b6d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31300d106d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df0784c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d618e462071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af44863c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000510b00", 0x1000}}, 0x1006)
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
epoll_create1(0x0)

7.492608303s ago: executing program 0 (id=1692):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x11, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mlock2(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5423, 0x0)
r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/1661], 0x6b1)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$tty1(0xc, 0x4, 0x1)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)

6.101856157s ago: executing program 2 (id=1697):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0xdc}}, 0x0)
syz_emit_ethernet(0x7a, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa008100000086dd602e5cea00403c0020"], 0x0)

6.076731999s ago: executing program 0 (id=1698):
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x0, 0x5c, 0x160, 0x0, 0x3e0, 0x248, 0x228, 0x228, 0x248, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xc8, 0x52020000}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308)
r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, 0x0}, 0x0)
write$binfmt_script(r3, &(0x7f0000000180), 0xfea7)
syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0xc, 0x0, 0xffffffffffffffff, 0x0, 0x0})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xc, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0})
io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0)

6.059239601s ago: executing program 3 (id=1699):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x13, 0x0, &(0x7f0000000100))

5.903157994s ago: executing program 0 (id=1700):
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff}, 0x80)
read$FUSE(r0, &(0x7f00000013c0)={0x2020}, 0x2020)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r2, 0x0)
socket$unix(0x1, 0x1, 0x0)
connect$unix(r1, 0x0, 0x0)
r3 = msgget$private(0x0, 0x421)
r4 = msgget$private(0x0, 0x21)
shmctl$IPC_SET(r4, 0x1, &(0x7f0000001240)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x71, 0x66c4}, 0xfffffffe, 0x10001, 0x40000000004, 0x965, 0x0, 0x0, 0x80})
msgctl$IPC_SET(r3, 0x1, &(0x7f0000258f88))
msgsnd(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="03000000e6ff0010"], 0x8, 0x0)
r5 = msgget(0x0, 0x0)
msgctl$IPC_STAT(r5, 0x2, 0x0)
msgrcv(r5, &(0x7f0000000080), 0x19, 0x0, 0x1000)
msgrcv(r3, &(0x7f00000000c0)={0x0, ""/245}, 0xfd, 0x0, 0x0)
msgget(0x0, 0x0)
msgctl$IPC_SET(r3, 0x1, &(0x7f0000258f88)={{0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8})
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
msgsnd(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="000000366c87ba0628f135cc290031b79c79"], 0x8, 0x0)
dup3(r2, r1, 0x0)
r6 = msgget(0x0, 0x0)
msgctl$IPC_STAT(r6, 0x2, 0x0)
msgget$private(0x0, 0x202)

5.902550464s ago: executing program 3 (id=1701):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000280)={0x400, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000})

5.863401977s ago: executing program 2 (id=1702):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
socket$netlink(0x10, 0x3, 0x4)
writev(0xffffffffffffffff, &(0x7f0000001800)=[{&(0x7f0000001940)="580000001400192340834b80040d8c560aff01000000000000000000000058000b9923ad4824ca0ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c10000000000022932c9a174281df10b81acb2b2d9e950eb24d160980356277867c7fc7412d2220b7acfce4f6dd2d2d4535530c7e22c2b52736c4453d45571564da4bcfbaf15aee5edf1b29533e8937b23bfc062491", 0x9c}], 0x1)
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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")
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
semget$private(0x0, 0x5, 0x0)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000100)=[0x4])
semop(0x0, &(0x7f0000002480)=[{}, {0x0, 0xff}], 0x2)
semop(0x0, &(0x7f0000000340)=[{}, {0x0, 0xffff}], 0x2)
semctl$IPC_RMID(0x0, 0x0, 0xf)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000040)={0x10000004})
ioctl$int_in(r3, 0x5452, &(0x7f0000000100)=0x3)
r4 = socket$netlink(0x10, 0x3, 0x4)
writev(r4, &(0x7f0000000080)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a11820fffff5bab4e210000000058000b4824ca945f6400940f6a0325010ebc000000000000008007f0fffeffe809005300fff5dd00000010000100080c100000", 0x51}, {&(0x7f00000000c0)}], 0x2)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000280), 0xa7c, r5}, 0x38)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
socket$nl_xfrm(0x10, 0x3, 0x6)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)=ANY=[@ANYBLOB="98030000", @ANYRES16=r7, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r9, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x20000010)
close(r2)

5.825095811s ago: executing program 3 (id=1703):
socket$unix(0x1, 0x1, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x0, 0x0, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000400)='btrfs_space_reservation\x00'}, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x1a}, [@ldst={0x6, 0x0, 0x5}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_ext_remove_space_done\x00', r5}, 0x10)

5.396956035s ago: executing program 4 (id=1705):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendto$inet6(r0, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)=@nl, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/186}, {0xffffffffffffffff}], 0x0, &(0x7f0000000280)=""/239, 0x13}}, {{&(0x7f0000000e80)=@vsock={0x28, 0x0, 0x0, @host}, 0x0, &(0x7f0000000680)=[{&(0x7f0000000400)=""/18, 0x2}, {&(0x7f0000000440)=""/110}, {&(0x7f00000004c0)=""/165}, {&(0x7f0000001540)=""/4096}, {&(0x7f0000000580)=""/245}], 0xf0, &(0x7f0000000700)=""/27}}, {{&(0x7f0000000740)=@nfc, 0x0, &(0x7f0000000c00), 0x0, &(0x7f0000000cc0)=""/180}}], 0x4000000000001f1, 0x10162, 0x0)

5.252000397s ago: executing program 4 (id=1706):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99bfa00180133070000000f0000bd30", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000001800)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000005c0)="0bd905ef33ee288dc4ef47", 0xb}, {&(0x7f0000000600)="75bbf84065", 0x5}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/11, 0xb}, {&(0x7f0000001840)=""/4107, 0x100b}], 0x2}}], 0x1, 0x0, 0x0)

4.962841271s ago: executing program 0 (id=1707):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000180)={[{@noblock_validity}, {@nodiscard}, {@sysvgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x9}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@norecovery}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0)
rename(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
syz_mount_image$exfat(&(0x7f00000001c0), &(0x7f0000000000)='./file2\x00', 0x1808000, &(0x7f0000001980)=ANY=[@ANYBLOB='dmask=00000000000000000001777,errors=continue,namecase=1,iocharset=cp852,iocharset=cp437,dmask=00000000000000000000005,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c6572726f72733d72656d6f756e742d726f2c757466382c6e616d65636173653d312c00a015ad2d708c74f9cc8a6d18f3c4ff13d78631b4d99080686c311e2853f975b39655752aa2557b5be3efaa7319f377137dcbd05ee93e29b194035bf511554677e3eab90c68fda7bd86d3e037d636cc99d7873c492a8bd44e0e75b84ca0df027159e6b1f317ca6a99e403af30473fc9ccaf4419a50970b451800d9c07fd430c5091a0d4d94030a633fad68d8c931e438c4acefa9152700ae4a6966e0000000000000000"], 0x5, 0x150c, &(0x7f0000000440)="$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")
unlink(&(0x7f0000001080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

4.25692521s ago: executing program 4 (id=1708):
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x48)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
syz_read_part_table(0x106d, &(0x7f0000001080)="$eJzsz7FNw0AYBeB3trFNR0VD44qaGdiBFiExiBENDSPQ0rAIG7AAI6SOLjpFyQhJiu8r7p6eTvfrD2d2M+UlQ0peP/okJbW8JXVbpyRdUoav9uy2HUvmtPo6ufp/f75v3WNfxvwefhv3V5+7tZaWNnN3HNXSw3dZaq1rks+/p5+TrwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF2gXAAD//wCmE1Q=")
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x16)
request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0xd, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x10000, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x90)
socket$inet6(0xa, 0x3, 0x88)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = dup(r3)
write$UHID_INPUT(r4, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324c078b089b32373b6d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31300d106d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df0784c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d618e462071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af44863c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000510b00", 0x1000}}, 0x1006)
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
epoll_create1(0x0)

4.25665296s ago: executing program 0 (id=1709):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x11, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mlock2(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5423, 0x0)
r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/1661], 0x6b1)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$tty1(0xc, 0x4, 0x1)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)

4.25233747s ago: executing program 1 (id=1710):
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x0, 0x5c, 0x160, 0x0, 0x3e0, 0x248, 0x228, 0x228, 0x248, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xc8, 0x52020000}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308)
r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, 0x0}, 0x0)
write$binfmt_script(r3, &(0x7f0000000180), 0xfea7)
syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0xc, 0x0, 0xffffffffffffffff, 0x0, 0x0})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xc, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0})
io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0)

4.172060636s ago: executing program 2 (id=1711):
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0)
mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x89901)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount$tmpfs(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x20000, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f00000023c0)={0x2020}, 0x2020)

4.013630279s ago: executing program 2 (id=1712):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x13, 0x0, &(0x7f0000000100))

3.919870517s ago: executing program 1 (id=1713):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000280)={0x400, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000})

3.657753629s ago: executing program 1 (id=1714):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x0, 0x0, 0x0, 0x2080, 0xffffffffffffffff, 0x401}, 0x48)
dup(0xffffffffffffffff)
syz_open_procfs(0x0, 0x0)
getdents64(0xffffffffffffffff, 0xffffffffffffffff, 0x43)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001340)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4000, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x488}}, 0x0)

3.171972139s ago: executing program 2 (id=1715):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
close(0xffffffffffffffff)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000069000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000280)="63ec8e46dc3f0adffec9f7b986f2", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4")
ptrace$getregset(0x4205, r2, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78})
ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000740)={0x0})

2.056289721s ago: executing program 0 (id=1717):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000880)={r1, r2, 0x6, 0x0, @val=@tcx={@prog_id}}, 0x40)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r3, r4, 0x6, 0x0, @void}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r3, r4, 0x6, 0x0, @val=@tracing}, 0x40)
close_range(r0, 0xffffffffffffffff, 0x0)

1.837684488s ago: executing program 1 (id=1718):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x0, &(0x7f00000003c0)={[{@noauto_da_alloc}, {@quota}, {@noload}, {@jqfmt_vfsold}]}, 0x2, 0x46a, &(0x7f0000000980)="$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")
chdir(&(0x7f0000000000)='./file0\x00')
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0)
syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYRES16, @ANYRES32, @ANYBLOB="2e5113abb96490e8baa757031fd3113d8fd231aecab2c455591d3bec0b6d42a1d9572dc5078c0de5a68dc252aeb457f345aaef1744f717c71738086a77f819bf8ec2164ad9d225996868d5440c2a1f1759386c920214f5b07fdeaa34d7cbb895ee45108d8715e8678c9e65c8b76f3f4f2a1537de01264b0f6c5a5083f49b6737a25758553b72788c48c129ab89ff000e7d0b1da439dc5e7e6cfad150a664ab7d70dd127f473015976f8f2a3603f45a042d8c3578e6eb3060b986ee9e6b4dbf79896d68301c5d9ea34afe122934", @ANYRES64, @ANYRES8=0x0, @ANYBLOB="d60a83a1f0457481edbb22ba9409462e156a7c242a", @ANYRES32, @ANYRES8, @ANYRES32], 0x0, 0x1c4, &(0x7f0000000440)="$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")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118)

1.836879868s ago: executing program 3 (id=1720):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000180)={[{@noblock_validity}, {@nodiscard}, {@sysvgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x9}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@norecovery}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0)
rename(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
syz_mount_image$exfat(&(0x7f00000001c0), &(0x7f0000000000)='./file2\x00', 0x1808000, &(0x7f0000001980)=ANY=[@ANYBLOB='dmask=00000000000000000001777,errors=continue,namecase=1,iocharset=cp852,iocharset=cp437,dmask=00000000000000000000005,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c6572726f72733d72656d6f756e742d726f2c757466382c6e616d65636173653d312c00a015ad2d708c74f9cc8a6d18f3c4ff13d78631b4d99080686c311e2853f975b39655752aa2557b5be3efaa7319f377137dcbd05ee93e29b194035bf511554677e3eab90c68fda7bd86d3e037d636cc99d7873c492a8bd44e0e75b84ca0df027159e6b1f317ca6a99e403af30473fc9ccaf4419a50970b451800d9c07fd430c5091a0d4d94030a633fad68d8c931e438c4acefa9152700ae4a6966e0000000000000000"], 0x5, 0x150c, &(0x7f0000000440)="$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")
unlink(&(0x7f0000001080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

1.722788658s ago: executing program 4 (id=1721):
mkdir(&(0x7f0000000380)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15)
r2 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend}]}})
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000d00)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
chdir(&(0x7f0000000000)='./file0\x00')
mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0x103)
syz_read_part_table(0x609, &(0x7f0000000d40)="$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")

1.3411406s ago: executing program 1 (id=1722):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000002380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0)='configfs\x00', 0x0, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
getdents64(r1, &(0x7f0000000080)=""/44, 0x2c)
getdents(r1, 0x0, 0x58)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000))
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x9, 0x3, 0x228, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x3d}, @private=0xa010102, 0x0, 0xffffff00, 'pimreg1\x00', 'bridge_slave_0\x00', {}, {}, 0x0, 0x2}, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "195726b629b70d317cbae2ea1ddfe5a8361248cd2c0e27e629f13623dc0c"}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@empty, 'vlan0\x00', {0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, 0x0)
pwritev(r2, &(0x7f0000000940)=[{0x0}, {0x0}, {0x0}], 0x3, 0xfffffff9, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x101c08a, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c8, &(0x7f0000002500)="$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")
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000001000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000cc0)={'wlan0\x00', <r6=>0x0})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2508007a0000000000000700000008000300", @ANYRES32=r6, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076657468315f746f5f626f016400000005005300010000000800050004"], 0x54}}, 0x0)

1.125568237s ago: executing program 3 (id=1723):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0)

928.056143ms ago: executing program 4 (id=1724):
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2010410, &(0x7f0000000040)=ANY=[], 0x3, 0x657, &(0x7f0000003180)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x20})

537.093146ms ago: executing program 4 (id=1725):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28"], 0x50}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2b, 0x4, 0x0, 0x0, 0xac, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x4]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xb, 0xdc, [@rand_addr=0x64010102, @multicast1]}]}}}}})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
r3 = dup(r1)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000})
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000380)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@stripe={'stripe', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@max_batch_time}, {@data_err_abort}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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")
bpf$MAP_CREATE(0x0, 0x0, 0x0)

461.356252ms ago: executing program 1 (id=1726):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x11, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mlock2(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5423, 0x0)
r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/1661], 0x6b1)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$tty1(0xc, 0x4, 0x1)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)

0s ago: executing program 3 (id=1727):
io_setup(0x0, &(0x7f0000000180))
syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00')
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8)
r4 = syz_io_uring_setup(0x33c9, &(0x7f00000035c0)={0x0, 0x1d83, 0x40, 0x1, 0xd8}, &(0x7f0000000100)=<r5=>0x0, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
syz_io_uring_submit(r5, 0x0, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x40, 0x0, 0x6d1, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2}})
io_uring_enter(r4, 0x291c, 0xc923, 0x0, 0x0, 0x0)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0)
readv(r6, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/165, 0xa5}], 0x1)
r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0)
ioctl$SNDCTL_SEQ_PANIC(r7, 0x5100)

kernel console output (not intermixed with test programs):

roblem.
[  359.547402][ T8687] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  359.649795][ T8774] loop3: detected capacity change from 0 to 47
[  359.714387][ T8774] MINIX-fs: deleted inode referenced: 9
[  359.724836][ T8774] MINIX-fs: deleted inode referenced: 9
[  359.818153][ T3650] Bluetooth: hci4: command tx timeout
[  359.889083][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  359.913220][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  359.958158][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  359.985598][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  359.997795][ T8484] device veth0_macvtap entered promiscuous mode
[  360.005284][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  360.162515][ T8484] device veth1_macvtap entered promiscuous mode
[  360.236543][ T8687] device hsr_slave_0 entered promiscuous mode
[  360.261058][ T8687] device hsr_slave_1 entered promiscuous mode
[  360.297344][ T8687] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  360.317173][ T8687] Cannot create hsr debugfs directory
[  360.350742][ T8797] loop3: detected capacity change from 0 to 512
[  360.454206][ T8797] EXT4-fs (loop3): 1 orphan inode deleted
[  360.492434][ T8484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  360.537029][ T8797] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  360.545986][ T8797] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038 (0x7fffffff)
[  360.594228][ T8484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  360.614136][ T8484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  360.644519][ T8484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  360.673871][ T8484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  360.702475][ T8484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  360.712717][ T8484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  360.725274][ T8484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  360.756722][ T8484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  360.769821][ T7874] EXT4-fs error (device loop3): ext4_map_blocks:607: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1)
[  360.785522][ T8484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  360.798372][ T8484] batman_adv: batadv0: Interface activated: batadv_slave_0
[  360.809895][ T7874] EXT4-fs (loop3): Remounting filesystem read-only
[  360.816553][ T7874] EXT4-fs warning (device loop3): htree_dirblock_to_tree:1082: inode #2: lblock 0: comm syz-executor: error -117 reading directory block
[  360.868924][ T7874] EXT4-fs (loop3): unmounting filesystem.
[  360.913163][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  360.934925][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  361.056387][ T8484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  361.083112][ T8484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  361.103160][ T8484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  361.123994][ T8484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  361.134507][ T8484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  361.152612][ T8484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  361.162520][ T8484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  361.173213][ T8484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  361.183366][ T8484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  361.194061][ T8484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  361.214908][ T8484] batman_adv: batadv0: Interface activated: batadv_slave_1
[  361.334926][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  361.347385][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  361.450896][ T8596] 8021q: adding VLAN 0 to HW filter on device bond0
[  361.466271][ T8484] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  361.486744][ T8484] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  361.495511][ T8484] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  361.511920][ T8484] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  361.702961][ T8596] 8021q: adding VLAN 0 to HW filter on device team0
[  361.774820][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  361.804501][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  361.906921][ T3650] Bluetooth: hci4: command tx timeout
[  361.924667][ T5064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  361.947675][ T5064] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  361.956205][ T5064] bridge0: port 1(bridge_slave_0) entered blocking state
[  361.963447][ T5064] bridge0: port 1(bridge_slave_0) entered forwarding state
[  361.971258][ T5064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  361.987654][ T5064] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  362.004841][ T5064] bridge0: port 2(bridge_slave_1) entered blocking state
[  362.012006][ T5064] bridge0: port 2(bridge_slave_1) entered forwarding state
[  362.037790][ T5064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  362.277990][ T5071] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  362.286062][ T5071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  362.305338][ T5071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  362.320725][ T5071] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  362.339894][ T5071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  362.357822][ T5071] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  362.376795][ T5071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  362.385343][ T5071] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  362.421567][ T8596] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  362.447076][ T8596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  362.477569][ T3654] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  362.489733][ T3654] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  362.497810][ T3654] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  362.505558][ T3654] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  362.515785][ T3654] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  362.523252][ T3654] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  362.569338][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  362.594105][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  362.628772][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  362.798219][ T5574] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  362.806387][ T5574] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  362.833544][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  363.110598][ T5751] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  363.126800][ T5751] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  363.293499][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  363.650770][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  363.676964][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  363.712271][   T67] device hsr_slave_0 left promiscuous mode
[  363.747409][   T67] device hsr_slave_1 left promiscuous mode
[  363.764240][   T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  363.782020][   T67] batman_adv: batadv0: Removing interface: batadv_slave_0
[  363.806628][   T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  363.826293][   T67] batman_adv: batadv0: Removing interface: batadv_slave_1
[  363.848033][   T67] device bridge_slave_1 left promiscuous mode
[  363.854249][   T67] bridge0: port 2(bridge_slave_1) entered disabled state
[  363.891720][   T67] device bridge_slave_0 left promiscuous mode
[  363.903351][   T67] bridge0: port 1(bridge_slave_0) entered disabled state
[  363.925824][   T67] device hsr_slave_0 left promiscuous mode
[  363.945858][   T67] device hsr_slave_1 left promiscuous mode
[  363.955299][   T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  363.968905][   T67] batman_adv: batadv0: Removing interface: batadv_slave_0
[  363.977107][ T3650] Bluetooth: hci4: command tx timeout
[  363.983649][   T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  363.993111][   T67] batman_adv: batadv0: Removing interface: batadv_slave_1
[  364.001452][   T67] device bridge_slave_1 left promiscuous mode
[  364.008128][   T67] bridge0: port 2(bridge_slave_1) entered disabled state
[  364.028547][   T67] device bridge_slave_0 left promiscuous mode
[  364.034735][   T67] bridge0: port 1(bridge_slave_0) entered disabled state
[  364.108945][   T67] device veth1_macvtap left promiscuous mode
[  364.115021][   T67] device veth0_macvtap left promiscuous mode
[  364.126944][   T67] device veth1_vlan left promiscuous mode
[  364.135044][   T67] device veth0_vlan left promiscuous mode
[  364.148624][   T67] device veth1_macvtap left promiscuous mode
[  364.157067][   T67] device veth0_macvtap left promiscuous mode
[  364.165456][   T67] device veth1_vlan left promiscuous mode
[  364.177143][   T67] device veth0_vlan left promiscuous mode
[  364.537143][ T3654] Bluetooth: hci3: command tx timeout
[  365.169075][   T67] team0 (unregistering): Port device team_slave_1 removed
[  365.213180][   T67] team0 (unregistering): Port device team_slave_0 removed
[  365.255842][   T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  365.299963][   T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  365.852224][   T67] bond0 (unregistering): Released all slaves
[  365.943918][   T67] bond1 (unregistering): Released all slaves
[  366.536204][   T67] team0 (unregistering): Port device team_slave_1 removed
[  366.579519][   T67] team0 (unregistering): Port device team_slave_0 removed
[  366.616984][ T3654] Bluetooth: hci3: command tx timeout
[  366.631502][   T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  366.684772][   T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  367.348363][   T67] bond0 (unregistering): Released all slaves
[  367.431906][ T8596] 8021q: adding VLAN 0 to HW filter on device batadv0
[  367.688677][ T8687] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  367.740854][ T8820] chnl_net:caif_netlink_parms(): no params data found
[  367.763216][ T8687] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  367.860681][ T8687] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  367.888832][ T8687] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  368.135331][ T8820] bridge0: port 1(bridge_slave_0) entered blocking state
[  368.154075][ T8820] bridge0: port 1(bridge_slave_0) entered disabled state
[  368.195488][ T8820] device bridge_slave_0 entered promiscuous mode
[  368.216623][ T8820] bridge0: port 2(bridge_slave_1) entered blocking state
[  368.240808][ T8820] bridge0: port 2(bridge_slave_1) entered disabled state
[  368.287081][ T8893] loop2: detected capacity change from 0 to 512
[  368.293781][ T8820] device bridge_slave_1 entered promiscuous mode
[  368.420904][ T8687] 8021q: adding VLAN 0 to HW filter on device bond0
[  368.450190][ T8893] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  368.477294][ T8893] ext4 filesystem being mounted at /9/wÅü5ÔTÕÔ)­`)Y�Fæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8 supports timestamps until 2038 (0x7fffffff)
[  368.503814][ T8820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  368.555491][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  368.571585][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  368.593899][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  368.602110][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  368.667983][ T8687] 8021q: adding VLAN 0 to HW filter on device team0
[  368.677374][ T8820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  368.686725][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  368.694929][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  368.703486][ T3654] Bluetooth: hci3: command tx timeout
[  368.713282][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  368.721380][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  368.764559][ T8596] device veth0_vlan entered promiscuous mode
[  368.771622][ T8484] EXT4-fs (loop2): unmounting filesystem.
[  368.815491][ T5071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  369.005901][ T5071] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  369.134699][ T5071] bridge0: port 1(bridge_slave_0) entered blocking state
[  369.141862][ T5071] bridge0: port 1(bridge_slave_0) entered forwarding state
[  369.329629][ T5071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  369.404944][ T5071] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  369.472908][ T5071] bridge0: port 2(bridge_slave_1) entered blocking state
[  369.480069][ T5071] bridge0: port 2(bridge_slave_1) entered forwarding state
[  369.525586][ T5071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  369.541227][ T5071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  369.570821][ T8820] team0: Port device team_slave_0 added
[  369.638684][ T8820] team0: Port device team_slave_1 added
[  369.673449][ T8596] device veth1_vlan entered promiscuous mode
[  369.695816][ T5064] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  369.711301][ T5064] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  369.929931][ T8820] batman_adv: batadv0: Adding interface: batadv_slave_0
[  369.941810][ T8820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  370.195183][ T8820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  370.738845][ T8820] batman_adv: batadv0: Adding interface: batadv_slave_1
[  370.745947][ T8820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  370.776862][ T3654] Bluetooth: hci3: command tx timeout
[  370.802266][ T8820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  370.833171][ T5064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  370.908337][ T8921] netlink: 'syz.1.1360': attribute type 1 has an invalid length.
[  371.308533][ T8920] loop2: detected capacity change from 0 to 65536
[  371.319323][ T5064] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  371.328117][ T5064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  371.337005][ T5064] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  371.345485][ T5064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  371.354838][ T5064] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  371.363290][ T5064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  371.372846][ T5064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  371.389210][ T5064] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  371.397182][ T5064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  371.405428][ T5064] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  371.413859][ T8920] XFS (loop2): Mounting V5 Filesystem
[  371.434055][ T8687] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  371.464646][ T8920] XFS (loop2): Ending clean mount
[  371.473359][ T8920] XFS (loop2): Quotacheck needed: Please wait.
[  371.529333][ T8920] XFS (loop2): Quotacheck: Done.
[  371.749852][ T8596] device veth0_macvtap entered promiscuous mode
[  371.770852][ T8820] device hsr_slave_0 entered promiscuous mode
[  372.238866][ T8820] device hsr_slave_1 entered promiscuous mode
[  372.278258][ T8820] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  372.313574][ T8820] Cannot create hsr debugfs directory
[  372.408353][ T5064] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  372.467183][ T8596] device veth1_macvtap entered promiscuous mode
[  372.487424][ T8484] XFS (loop2): Unmounting Filesystem
[  372.637591][ T8596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  372.656881][ T8596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  372.686723][ T8596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  372.716683][ T8596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  372.726511][ T8596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  372.766689][ T8596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  372.776558][ T8596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  372.806731][ T8596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  372.839423][ T8596] batman_adv: batadv0: Interface activated: batadv_slave_0
[  372.860844][ T8596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  372.871926][ T8596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  372.881988][ T8596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  372.906681][ T8596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  372.916501][ T8596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  372.937382][ T8596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  372.956726][ T8596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  372.983027][ T8596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  373.015738][ T8596] batman_adv: batadv0: Interface activated: batadv_slave_1
[  373.050850][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  373.061523][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  373.098557][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  373.127732][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  373.142354][ T8596] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  373.196917][ T8596] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  373.205724][ T8596] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  373.243686][ T8596] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  373.347414][ T5070] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  373.354956][ T5070] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  373.397864][ T8687] 8021q: adding VLAN 0 to HW filter on device batadv0
[  373.482042][ T5575] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  373.506178][ T5575] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  373.609816][ T8820] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  373.727159][ T8687] device veth0_vlan entered promiscuous mode
[  373.752637][ T5070] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  373.762022][ T5070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  373.787102][ T8946] loop2: detected capacity change from 0 to 2048
[  373.794123][ T8946] ext4: Unknown parameter 'euid>00000000000000000000'
[  373.838333][ T5070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  373.892919][ T5070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  374.649491][ T5070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  374.667738][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  374.675807][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  374.719673][ T8687] device veth1_vlan entered promiscuous mode
[  374.850059][ T8820] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  374.884523][ T5575] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  374.924676][ T5575] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  374.989012][ T8820] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  375.032591][ T5071] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  375.056840][ T5071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  375.076941][ T5071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  375.090621][ T8687] device veth0_macvtap entered promiscuous mode
[  375.199153][ T8820] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  375.233523][ T8956] netlink: 'syz.1.1369': attribute type 1 has an invalid length.
[  375.244676][ T8958] o2cb: This node has not been configured.
[  375.245475][ T8687] device veth1_macvtap entered promiscuous mode
[  375.257108][ T8958] o2cb: Cluster check failed. Fix errors before retrying.
[  375.257308][ T8958] (syz.4.1271,8958,0):user_dlm_register:674 ERROR: status = -22
[  375.287445][ T8958] (syz.4.1271,8958,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0"
[  375.337269][ T8687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  375.402124][ T8687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  375.432421][ T8687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  375.463726][ T8687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  375.485360][ T8687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  375.506336][ T8687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  375.527360][ T8687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  375.549868][ T8687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  375.560002][ T8687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  375.571846][ T8687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  375.617981][ T8687] batman_adv: batadv0: Interface activated: batadv_slave_0
[  375.670212][ T8962] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1370'.
[  375.680523][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  375.690872][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  375.713738][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  375.732519][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  375.760967][ T8687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  375.783663][ T8687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  375.795951][ T8966] loop4: detected capacity change from 0 to 512
[  375.799179][ T8687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  375.813096][ T8687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  375.823920][ T8687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  375.836039][ T8966] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors
[  375.847705][ T8687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  375.859954][ T8966] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 2)!
[  375.870506][ T8687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  375.882292][ T8966] EXT4-fs (loop4): group descriptors corrupted!
[  375.888971][ T8687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  375.900365][ T8687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  375.911234][ T8687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  375.922817][ T8687] batman_adv: batadv0: Interface activated: batadv_slave_1
[  376.074919][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  376.094676][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  376.120596][ T8687] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  376.149231][ T8687] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  376.176191][ T8687] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  376.189526][ T8968] loop4: detected capacity change from 0 to 1024
[  376.200310][ T8687] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  376.222232][ T8968] EXT4-fs: Ignoring removed mblk_io_submit option
[  376.295445][ T8968] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  376.361740][ T8968] EXT4-fs error (device loop4): ext4_protect_reserved_inode:182: inode #4: comm syz.4.1372: blocks 32-33 from inode overlap system zone
[  376.389996][ T8968] EXT4-fs (loop4): failed to initialize system zone (-117)
[  376.454530][ T8968] EXT4-fs (loop4): mount failed
[  376.582785][ T8820] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  376.654674][ T8820] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  376.811630][ T8820] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  376.913272][ T8820] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  377.947457][ T5751] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  377.955670][ T5751] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  378.119952][ T5071] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  378.324086][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[  378.331342][ T1268] ieee802154 phy1 wpan1: encryption failed: -22
[  378.999297][ T8988] netlink: 'syz.2.1378': attribute type 1 has an invalid length.
[  379.007197][ T5575] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  379.148094][ T5575] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  379.214027][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  379.817773][ T5508] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  379.912712][ T8820] 8021q: adding VLAN 0 to HW filter on device bond0
[  379.934136][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  379.948419][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  379.970839][ T8820] 8021q: adding VLAN 0 to HW filter on device team0
[  380.053441][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  380.070669][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  380.092413][ T5159] bridge0: port 1(bridge_slave_0) entered blocking state
[  380.099529][ T5159] bridge0: port 1(bridge_slave_0) entered forwarding state
[  380.113532][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  380.122285][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  380.248561][ T5159] bridge0: port 2(bridge_slave_1) entered blocking state
[  380.255648][ T5159] bridge0: port 2(bridge_slave_1) entered forwarding state
[  380.286846][ T5508] usb 3-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[  380.303695][ T5508] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  380.323142][ T5508] usb 3-1: config 0 descriptor??
[  380.577169][   T67] device hsr_slave_0 left promiscuous mode
[  380.585320][   T67] device hsr_slave_1 left promiscuous mode
[  380.597329][   T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  380.605166][   T67] batman_adv: batadv0: Removing interface: batadv_slave_0
[  380.616479][   T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  380.624294][   T67] batman_adv: batadv0: Removing interface: batadv_slave_1
[  380.635073][   T67] device bridge_slave_1 left promiscuous mode
[  380.643646][   T67] bridge0: port 2(bridge_slave_1) entered disabled state
[  380.654601][   T67] device bridge_slave_0 left promiscuous mode
[  380.663723][   T67] bridge0: port 1(bridge_slave_0) entered disabled state
[  380.776636][   T67] device veth1_macvtap left promiscuous mode
[  380.812178][   T67] device veth0_macvtap left promiscuous mode
[  380.831517][   T67] device veth1_vlan left promiscuous mode
[  380.865685][   T67] device veth0_vlan left promiscuous mode
[  381.026965][ T5508] hackrf 3-1:0.0: usb_control_msg() failed -71 request 0f
[  381.037847][ T5508] hackrf 3-1:0.0: Could not detect board
[  381.048134][ T5508] hackrf: probe of 3-1:0.0 failed with error -71
[  381.074004][ T5508] usb 3-1: USB disconnect, device number 17
[  381.672127][   T67] team0 (unregistering): Port device team_slave_1 removed
[  381.723826][   T67] team0 (unregistering): Port device team_slave_0 removed
[  381.794318][   T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  381.901353][   T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  382.201988][ T9018] loop0: detected capacity change from 0 to 32768
[  382.443349][ T9018] XFS (loop0): DAX unsupported by block device. Turning off DAX.
[  382.460185][ T9018] XFS (loop0): Mounting V5 Filesystem
[  382.564080][ T9018] XFS (loop0): Ending clean mount
[  382.594684][ T9018] XFS (loop0): Quotacheck needed: Please wait.
[  382.644949][ T9018] XFS (loop0): Quotacheck: Done.
[  382.845918][ T8687] XFS (loop0): Unmounting Filesystem
[  383.022596][   T67] bond0 (unregistering): Released all slaves
[  383.254928][ T9038] loop2: detected capacity change from 0 to 40427
[  383.295811][ T9038] F2FS-fs (loop2): Small segment_count (9 < 1 * 24)
[  383.302618][ T9038] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  383.456974][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  383.477807][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  383.487436][ T9038] F2FS-fs (loop2): Found nat_bits in checkpoint
[  383.513820][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  383.536363][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  383.561983][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  383.572590][ T9038] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  383.580533][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  383.588865][ T9038] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  383.615918][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  383.637948][ T9016] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  383.694839][ T8820] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  383.870195][ T8820] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  383.888923][   T26] audit: type=1804 audit(1721962066.048:34): pid=9038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1393" name="/newroot/25/file2/file0" dev="loop2" ino=10 res=1 errno=0
[  384.365139][ T8484] syz-executor: attempt to access beyond end of device
[  384.365139][ T8484] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  384.810276][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  384.824404][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  384.851733][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  384.896235][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  384.920842][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  384.963782][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  385.547577][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  385.558900][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  385.638706][ T8820] 8021q: adding VLAN 0 to HW filter on device batadv0
[  385.691098][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  385.710002][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  386.685662][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  386.782530][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  386.830789][ T8820] device veth0_vlan entered promiscuous mode
[  386.850816][ T9090] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1408'.
[  386.950919][ T9092] device veth1_to_batadv entered promiscuous mode
[  386.980132][ T9092] bridge0: port 3(macvlan2) entered blocking state
[  387.019188][ T9092] bridge0: port 3(macvlan2) entered disabled state
[  387.054087][ T9092] device macvlan2 entered promiscuous mode
[  387.079095][ T9092] bridge0: port 3(macvlan2) entered blocking state
[  387.086183][ T9092] bridge0: port 3(macvlan2) entered forwarding state
[  387.187612][ T5064] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  387.195474][ T5064] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  387.263130][ T3654] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  387.275116][ T3654] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  387.287675][ T3654] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  387.299607][ T3654] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  387.308022][ T9087] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  387.316023][ T3654] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  387.325235][ T3654] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  387.703588][ T9087] bridge0: port 3(macvlan2) entered disabled state
[  387.818363][ T9087] device macvlan2 left promiscuous mode
[  387.823986][ T9087] bridge0: port 3(macvlan2) entered disabled state
[  387.909160][ T9087] batman_adv: batadv0: Removing interface: batadv_slave_1
[  387.931727][ T8820] device veth1_vlan entered promiscuous mode
[  388.110545][ T9093] loop0: detected capacity change from 0 to 40427
[  388.113981][ T9105] loop4: detected capacity change from 0 to 16
[  388.153586][ T9093] F2FS-fs (loop0): Small segment_count (9 < 1 * 24)
[  388.163055][ T9105] erofs: (device loop4): mounted with root inode @ nid 36.
[  388.192154][ T9093] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  388.229614][ T9105] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  388.271601][ T9093] F2FS-fs (loop0): Found nat_bits in checkpoint
[  388.436386][ T5064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  388.465607][ T5064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  388.503276][ T8820] device veth0_macvtap entered promiscuous mode
[  388.544695][ T8820] device veth1_macvtap entered promiscuous mode
[  388.619536][ T9093] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  388.632371][ T9093] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  388.689951][ T8820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  389.041157][ T8820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  389.360957][ T8820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  389.373735][   T26] audit: type=1804 audit(1721962071.528:35): pid=9093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1407" name="/newroot/8/file2/file0" dev="loop0" ino=10 res=1 errno=0
[  389.427156][ T3654] Bluetooth: hci6: command tx timeout
[  389.436393][ T8820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  389.480253][ T9119] loop4: detected capacity change from 0 to 2048
[  389.516759][ T8820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  389.545884][ T8820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  389.565471][ T8820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  389.595708][ T8820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  389.615904][ T8820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  389.636778][ T8820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  389.658614][ T8820] batman_adv: batadv0: Interface activated: batadv_slave_0
[  389.698053][ T8687] syz-executor: attempt to access beyond end of device
[  389.698053][ T8687] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  389.758760][ T3632] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  389.759039][ T5064] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  389.776493][ T5064] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  389.800928][ T5064] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  389.818525][ T5064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  389.836051][ T8820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  389.892298][ T8820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  389.942022][ T8820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  390.006707][ T8820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  390.016560][ T8820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  390.067923][ T8820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  390.078177][ T8820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  390.090527][ T8820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  390.102296][ T8820] batman_adv: batadv0: Interface activated: batadv_slave_1
[  390.154872][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  390.190282][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  390.234973][ T8820] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  390.276912][ T8820] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  390.285626][ T8820] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  390.335992][ T8820] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  391.027430][ T9096] chnl_net:caif_netlink_parms(): no params data found
[  391.074841][ T5274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  391.109616][ T5274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  391.163121][ T9118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  391.218168][ T9118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  391.245502][ T5064] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  391.269971][ T9096] bridge0: port 1(bridge_slave_0) entered blocking state
[  391.286015][ T9096] bridge0: port 1(bridge_slave_0) entered disabled state
[  391.299271][ T9096] device bridge_slave_0 entered promiscuous mode
[  391.331451][ T9096] bridge0: port 2(bridge_slave_1) entered blocking state
[  391.369678][ T9096] bridge0: port 2(bridge_slave_1) entered disabled state
[  391.387882][ T9096] device bridge_slave_1 entered promiscuous mode
[  391.499448][ T3654] Bluetooth: hci6: command tx timeout
[  392.009269][ T5064] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  392.208362][ T9150] loop4: detected capacity change from 0 to 64
[  393.014605][ T9159] loop3: detected capacity change from 0 to 1024
[  393.021638][ T9159] EXT4-fs: Ignoring removed orlov option
[  393.028229][ T9159] EXT4-fs (loop3): Test dummy encryption mode enabled
[  393.036278][ T9159] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  393.047517][ T9159] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869)
[  393.063142][ T9159] EXT4-fs (loop3): invalid journal inode
[  393.068901][ T9159] EXT4-fs (loop3): can't get journal size
[  393.079569][   T67] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  393.095853][ T9159] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  393.127313][ T9096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  393.139533][ T9096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  393.182845][ T9096] team0: Port device team_slave_0 added
[  393.315613][   T67] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  393.420289][ T9096] team0: Port device team_slave_1 added
[  393.456325][ T8820] EXT4-fs (loop3): unmounting filesystem.
[  393.587230][ T3654] Bluetooth: hci6: command tx timeout
[  393.621122][   T67] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  393.639026][ T9096] batman_adv: batadv0: Adding interface: batadv_slave_0
[  393.646108][ T9096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  393.684795][ T9096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  393.703947][ T9096] batman_adv: batadv0: Adding interface: batadv_slave_1
[  393.723452][ T9096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  393.751890][ T9096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  393.808772][   T67] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  393.877067][ T5168] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  394.004651][ T9096] device hsr_slave_0 entered promiscuous mode
[  394.024047][ T9096] device hsr_slave_1 entered promiscuous mode
[  394.126814][ T5071] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  394.137016][ T5168] usb 3-1: Using ep0 maxpacket: 16
[  394.417173][ T5168] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  394.448028][ T5168] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  394.466327][ T5168] usb 3-1: Product: syz
[  394.480338][ T5168] usb 3-1: Manufacturer: syz
[  394.487657][ T5071] usb 5-1: Using ep0 maxpacket: 16
[  395.231763][ T5168] usb 3-1: SerialNumber: syz
[  395.287159][ T5168] r8152-cfgselector 3-1: config 0 descriptor??
[  395.328629][ T5071] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11
[  395.348917][ T5071] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  395.374453][ T5071] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  395.394389][ T5071] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  395.405475][ T5071] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  395.422152][ T5071] usb 5-1: config 1 interface 0 has no altsetting 0
[  395.430092][ T5071] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  395.440736][ T5071] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  395.572715][ T5071] ums-sddr09 5-1:1.0: USB Mass Storage device detected
[  395.666785][ T3654] Bluetooth: hci6: command tx timeout
[  395.796970][ T5168] r8152-cfgselector 3-1: Unknown version 0x3440
[  396.416825][ T5168] r8152-cfgselector 3-1: Unknown version 0x0000
[  396.454778][ T5168] r8152-cfgselector 3-1: USB disconnect, device number 18
[  396.919098][ T5071] ums-sddr09: probe of 5-1:1.0 failed with error -22
[  396.949902][ T5071] usb 5-1: USB disconnect, device number 19
[  397.551872][ T9096] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  397.699210][ T9096] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  397.718171][ T9096] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  397.804289][ T9096] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  398.277697][ T9096] 8021q: adding VLAN 0 to HW filter on device bond0
[  398.419850][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  398.437812][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  400.036404][ T9096] 8021q: adding VLAN 0 to HW filter on device team0
[  400.081610][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  400.121481][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  400.158553][ T3684] bridge0: port 1(bridge_slave_0) entered blocking state
[  400.165679][ T3684] bridge0: port 1(bridge_slave_0) entered forwarding state
[  400.197607][ T9264] loop2: detected capacity change from 0 to 164
[  400.288976][   T67] device hsr_slave_0 left promiscuous mode
[  400.310216][   T67] device hsr_slave_1 left promiscuous mode
[  400.405899][   T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  400.436325][   T67] batman_adv: batadv0: Removing interface: batadv_slave_0
[  400.478204][   T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  400.500242][   T67] batman_adv: batadv0: Removing interface: batadv_slave_1
[  400.563501][   T67] device bridge_slave_1 left promiscuous mode
[  400.593079][   T67] bridge0: port 2(bridge_slave_1) entered disabled state
[  400.627225][ T9275] netlink: 'syz.4.1457': attribute type 62 has an invalid length.
[  400.635552][   T67] device bridge_slave_0 left promiscuous mode
[  400.655809][   T67] bridge0: port 1(bridge_slave_0) entered disabled state
[  400.766535][   T67] device veth1_macvtap left promiscuous mode
[  400.794737][   T67] device veth0_macvtap left promiscuous mode
[  400.813192][   T67] device veth1_vlan left promiscuous mode
[  400.829407][   T67] device veth0_vlan left promiscuous mode
[  401.501371][ T9277] loop2: detected capacity change from 0 to 32768
[  401.542244][ T9277] 
[  401.542244][ T9277]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  401.542244][ T9277] 
[  401.957289][ T9287] 
[  401.957289][ T9287]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  401.957289][ T9287] 
[  401.975528][ T9287] 
[  401.975528][ T9287]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  401.975528][ T9287] 
[  402.746882][   T67] team0 (unregistering): Port device team_slave_1 removed
[  402.786724][ T5508] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  402.824269][   T67] team0 (unregistering): Port device team_slave_0 removed
[  402.890872][   T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  402.950258][   T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  403.046711][ T5508] usb 5-1: Using ep0 maxpacket: 16
[  403.166847][ T5508] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  403.184067][ T5508] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  403.204298][ T5508] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7
[  403.216575][ T5508] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 17488, setting to 1024
[  403.308846][ T5508] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  403.326919][ T5508] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  403.334921][ T5508] usb 5-1: Manufacturer: syz
[  403.371032][ T5508] usb 5-1: config 0 descriptor??
[  403.387256][ T9289] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  403.653072][ T5508] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  403.676487][ T5508] usb 5-1: USB disconnect, device number 20
[  403.975148][   T67] bond0 (unregistering): Released all slaves
[  404.101996][ T3650] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  404.112547][ T3650] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  404.121716][ T3650] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  404.130336][ T3650] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  404.167511][ T3650] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  404.174805][ T3650] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  404.854601][ T9096] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  404.865047][ T9096] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  404.898083][ T5063] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  404.915303][ T5063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  404.956581][ T5063] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  404.984034][ T5063] bridge0: port 2(bridge_slave_1) entered blocking state
[  404.991177][ T5063] bridge0: port 2(bridge_slave_1) entered forwarding state
[  405.013593][ T5063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  405.040495][ T5063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  405.054932][ T5063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  405.072823][ T5063] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  405.083565][ T5063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  405.097533][ T5063] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  405.113158][ T5063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  405.123068][ T5063] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  405.138445][ T5063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  405.152622][ T5063] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  405.195798][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  405.254712][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  405.566391][ T9310] netlink: 'syz.2.1468': attribute type 62 has an invalid length.
[  405.850730][ T9291] chnl_net:caif_netlink_parms(): no params data found
[  405.916447][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  405.932057][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  406.023031][ T9096] 8021q: adding VLAN 0 to HW filter on device batadv0
[  406.168464][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  406.187704][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  406.216781][ T3654] Bluetooth: hci5: command tx timeout
[  406.267940][ T9291] bridge0: port 1(bridge_slave_0) entered blocking state
[  406.280928][ T9291] bridge0: port 1(bridge_slave_0) entered disabled state
[  406.319643][ T9325] loop4: detected capacity change from 0 to 64
[  406.327157][ T9291] device bridge_slave_0 entered promiscuous mode
[  406.358540][ T9291] bridge0: port 2(bridge_slave_1) entered blocking state
[  406.379405][ T9291] bridge0: port 2(bridge_slave_1) entered disabled state
[  406.397812][ T9291] device bridge_slave_1 entered promiscuous mode
[  406.488568][ T3632] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  406.673065][ T5071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  406.701147][ T5071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  406.829164][ T5159] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  407.096946][ T5159] usb 4-1: Using ep0 maxpacket: 16
[  407.366951][ T5159] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  407.406762][ T5159] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  407.513736][ T5159] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7
[  407.566440][ T5159] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 17488, setting to 1024
[  407.606348][ T9291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  407.676923][ T5159] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  407.706357][ T5159] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  407.740450][ T5159] usb 4-1: Manufacturer: syz
[  407.753403][ T5159] usb 4-1: config 0 descriptor??
[  407.787109][ T9327] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  407.959143][ T9096] device veth0_vlan entered promiscuous mode
[  407.969059][ T3382] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  407.980648][ T3382] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  408.035982][ T9331] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1474'.
[  408.048938][ T5159] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  408.061444][ T9291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  408.103651][ T5159] usb 4-1: USB disconnect, device number 16
[  408.232508][ T9336] loop2: detected capacity change from 0 to 512
[  408.246180][ T9096] device veth1_vlan entered promiscuous mode
[  408.289990][ T9291] team0: Port device team_slave_0 added
[  408.296840][ T3654] Bluetooth: hci5: command tx timeout
[  408.363869][ T9336] EXT4-fs error (device loop2): ext4_do_update_inode:5210: inode #3: comm syz.2.1475: corrupted inode contents
[  408.380403][ T9291] team0: Port device team_slave_1 added
[  408.400670][ T9336] EXT4-fs error (device loop2): ext4_dirty_inode:6072: inode #3: comm syz.2.1475: mark_inode_dirty error
[  408.417303][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  408.427753][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  408.474818][ T9336] EXT4-fs error (device loop2): ext4_do_update_inode:5210: inode #3: comm syz.2.1475: corrupted inode contents
[  408.515632][ T9336] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #3: comm syz.2.1475: mark_inode_dirty error
[  408.552898][ T9096] device veth0_macvtap entered promiscuous mode
[  408.571179][ T9291] batman_adv: batadv0: Adding interface: batadv_slave_0
[  408.583359][ T9291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  408.617508][ T9336] Quota error (device loop2): write_blk: dquota write failed
[  408.625069][ T9336] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  408.692074][ T9291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  408.715020][ T9336] EXT4-fs error (device loop2): ext4_acquire_dquot:6777: comm syz.2.1475: Failed to acquire dquot type 0
[  408.738416][ T9291] batman_adv: batadv0: Adding interface: batadv_slave_1
[  408.745897][ T9291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  408.799194][ T9336] EXT4-fs error (device loop2): ext4_do_update_inode:5210: inode #16: comm syz.2.1475: corrupted inode contents
[  408.836885][ T9336] EXT4-fs error (device loop2): ext4_dirty_inode:6072: inode #16: comm syz.2.1475: mark_inode_dirty error
[  408.854179][ T9291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  408.869395][ T9096] device veth1_macvtap entered promiscuous mode
[  408.897124][ T9336] EXT4-fs error (device loop2): ext4_do_update_inode:5210: inode #16: comm syz.2.1475: corrupted inode contents
[  408.939142][ T9336] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.1475: mark_inode_dirty error
[  408.991695][ T9336] EXT4-fs error (device loop2): ext4_do_update_inode:5210: inode #16: comm syz.2.1475: corrupted inode contents
[  408.995018][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  409.055306][ T9336] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem
[  409.077201][ T9336] EXT4-fs error (device loop2): ext4_do_update_inode:5210: inode #16: comm syz.2.1475: corrupted inode contents
[  409.077685][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  409.110669][ T9336] EXT4-fs error (device loop2): ext4_truncate:4300: inode #16: comm syz.2.1475: mark_inode_dirty error
[  409.139791][ T9291] device hsr_slave_0 entered promiscuous mode
[  409.147462][ T9291] device hsr_slave_1 entered promiscuous mode
[  409.155644][ T9291] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  409.173830][ T9336] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem
[  409.176373][ T9351] loop3: detected capacity change from 0 to 512
[  409.189935][ T9291] Cannot create hsr debugfs directory
[  409.213848][ T9096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  409.223302][ T9336] EXT4-fs (loop2): 1 truncate cleaned up
[  409.253779][ T9096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  409.256686][ T9336] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  409.273236][ T9351] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities
[  409.282537][ T9096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  409.295090][ T9096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  409.305780][ T9096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  409.316656][ T9096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  409.327283][ T9336] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038 (0x7fffffff)
[  409.337532][ T9096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  409.368436][ T9096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  409.378854][ T9096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  409.389589][ T9096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  409.401644][ T9096] batman_adv: batadv0: Interface activated: batadv_slave_0
[  409.426284][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  409.466320][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  409.529904][ T9096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  409.545139][ T9345] loop4: detected capacity change from 0 to 32768
[  409.548943][ T9351] loop3: detected capacity change from 0 to 2048
[  409.563802][ T9096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  409.600947][ T9096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  409.625213][ T9345] XFS: ikeep mount option is deprecated.
[  409.631140][ T9096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  409.647126][ T9345] XFS: noikeep mount option is deprecated.
[  409.653904][ T9345] /dev/loop4: Can't open blockdev
[  409.654077][ T9351] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  409.667260][ T9096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  409.708983][ T9351] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  409.726729][ T9096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  409.756702][ T9096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  409.806709][ T9096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  409.829497][ T8484] EXT4-fs (loop2): unmounting filesystem.
[  409.846733][ T9096] batman_adv: batadv0: Interface activated: batadv_slave_1
[  409.877457][ T3382] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  409.886168][ T3382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  409.938237][ T9096] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  409.966720][ T9096] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  410.017696][ T9096] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  410.029554][ T9353] loop4: detected capacity change from 0 to 64
[  410.072331][ T9096] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  410.149701][ T3632] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  410.376753][ T3654] Bluetooth: hci5: command tx timeout
[  411.230241][ T9363] loop4: detected capacity change from 0 to 512
[  411.247405][ T9363] /dev/loop4: Can't open blockdev
[  411.261128][   T67] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  411.323434][ T5575] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  411.350235][ T5575] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  411.456098][   T67] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  411.558264][ T5159] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  411.586939][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  411.599993][ T5751] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  411.646149][ T5751] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  411.695836][   T67] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  412.311328][   T67] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  412.423945][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  412.449830][ T8820] UDF-fs: warning (device loop3): udf_evict_inode: Inode 1367 (mode 100000) has inode size 49530 different from extent length 53626. Filesystem need not be standards compliant.
[  412.456944][ T3654] Bluetooth: hci5: command tx timeout
[  412.802082][ T9373] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1489'.
[  412.848106][ T5159] usb 3-1: New USB device found, idVendor=5e5b, idProduct=9318, bcdDevice=bd.92
[  412.884731][ T5159] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  412.972807][ T5159] usb 3-1: Product: syz
[  412.997048][   T26] audit: type=1326 audit(1721962095.148:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9376 comm="syz.1.1402" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcee3977299 code=0x0
[  413.067587][ T5159] usb 3-1: Manufacturer: syz
[  413.120088][ T5159] usb 3-1: SerialNumber: syz
[  413.344727][ T5159] usb 3-1: config 0 descriptor??
[  413.472232][ T5159] usb-storage 3-1:0.0: USB Mass Storage device detected
[  413.748140][ T5159] usb 3-1: USB disconnect, device number 19
[  415.145981][ T9404] loop2: detected capacity change from 0 to 64
[  415.208989][ T9404] hfs: get root inode failed
[  415.273549][ T9402] loop3: detected capacity change from 0 to 512
[  415.788106][ T9402] EXT4-fs error (device loop3): ext4_do_update_inode:5210: inode #3: comm syz.3.1491: corrupted inode contents
[  415.945099][ T9402] EXT4-fs error (device loop3): ext4_dirty_inode:6072: inode #3: comm syz.3.1491: mark_inode_dirty error
[  416.170996][ T9402] EXT4-fs error (device loop3): ext4_do_update_inode:5210: inode #3: comm syz.3.1491: corrupted inode contents
[  416.242080][ T9402] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #3: comm syz.3.1491: mark_inode_dirty error
[  416.260339][ T9402] Quota error (device loop3): write_blk: dquota write failed
[  416.276878][ T9402] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  416.294171][ T9291] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  416.306816][ T9402] EXT4-fs error (device loop3): ext4_acquire_dquot:6777: comm syz.3.1491: Failed to acquire dquot type 0
[  416.324979][ T9291] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  416.353325][ T9402] EXT4-fs error (device loop3): ext4_do_update_inode:5210: inode #16: comm syz.3.1491: corrupted inode contents
[  416.364462][ T9422] loop2: detected capacity change from 0 to 512
[  416.415429][ T9393] loop4: detected capacity change from 0 to 32768
[  416.445522][ T9422] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities
[  416.463751][ T9402] EXT4-fs error (device loop3): ext4_dirty_inode:6072: inode #16: comm syz.3.1491: mark_inode_dirty error
[  416.484277][ T9291] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  416.495628][ T9402] EXT4-fs error (device loop3): ext4_do_update_inode:5210: inode #16: comm syz.3.1491: corrupted inode contents
[  416.495752][ T9291] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  416.534117][ T9402] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.1491: mark_inode_dirty error
[  416.567587][ T4416] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  416.591204][ T3632] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  416.617393][ T9402] EXT4-fs error (device loop3): ext4_do_update_inode:5210: inode #16: comm syz.3.1491: corrupted inode contents
[  416.657149][ T9402] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem
[  416.692670][ T9402] EXT4-fs error (device loop3): ext4_do_update_inode:5210: inode #16: comm syz.3.1491: corrupted inode contents
[  416.716154][ T9422] loop2: detected capacity change from 0 to 2048
[  416.769311][ T9402] EXT4-fs error (device loop3): ext4_truncate:4300: inode #16: comm syz.3.1491: mark_inode_dirty error
[  416.792196][ T9422] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  416.814147][ T9422] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  416.827151][ T9402] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem
[  416.876029][ T9402] EXT4-fs (loop3): 1 truncate cleaned up
[  416.904929][ T9402] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  416.941919][ T9402] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038 (0x7fffffff)
[  417.194784][ T9291] 8021q: adding VLAN 0 to HW filter on device bond0
[  417.220190][ T9431] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1501'.
[  417.253808][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  417.267595][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  417.523316][   T26] audit: type=1326 audit(1721962099.678:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9440 comm="syz.1.1503" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcee3977299 code=0x0
[  417.544978][    C0] vkms_vblank_simulate: vblank timer overrun
[  417.579581][ T8820] EXT4-fs (loop3): unmounting filesystem.
[  417.803293][ T9291] 8021q: adding VLAN 0 to HW filter on device team0
[  417.889871][ T9450] loop3: detected capacity change from 0 to 2048
[  417.921360][ T5071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  417.932764][ T5071] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  417.967142][ T5071] bridge0: port 1(bridge_slave_0) entered blocking state
[  417.974322][ T5071] bridge0: port 1(bridge_slave_0) entered forwarding state
[  418.032607][ T9450] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  418.034839][ T5071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  418.050277][ T5071] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  418.058971][ T5071] bridge0: port 2(bridge_slave_1) entered blocking state
[  418.066097][ T5071] bridge0: port 2(bridge_slave_1) entered forwarding state
[  418.074380][ T5071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  418.083212][ T5071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  418.092096][ T5071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  418.101039][ T5071] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  418.112212][ T9450] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038 (0x7fffffff)
[  418.175485][   T26] audit: type=1800 audit(1721962100.328:38): pid=9450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1502" name="file0" dev="loop3" ino=13 res=0 errno=0
[  418.195824][    C0] vkms_vblank_simulate: vblank timer overrun
[  418.238148][ T5070] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  418.246165][ T5070] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  418.265274][ T5070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  418.267182][ T5163] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  418.280398][ T5070] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  418.292922][ T9450] syz.3.1502 (9450) used greatest stack depth: 19128 bytes left
[  418.293627][ T5070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  418.309938][ T5070] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  418.319099][ T5070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  418.328288][ T5070] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  418.338108][ T9291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  418.355023][ T8484] UDF-fs: warning (device loop2): udf_evict_inode: Inode 1367 (mode 100000) has inode size 49530 different from extent length 53626. Filesystem need not be standards compliant.
[  418.355395][ T8820] EXT4-fs (loop3): unmounting filesystem.
[  418.470348][   T67] device hsr_slave_0 left promiscuous mode
[  418.507323][   T67] device hsr_slave_1 left promiscuous mode
[  418.532228][   T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  418.560895][   T67] batman_adv: batadv0: Removing interface: batadv_slave_0
[  418.601397][   T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  418.625431][   T67] batman_adv: batadv0: Removing interface: batadv_slave_1
[  418.675459][   T67] device bridge_slave_1 left promiscuous mode
[  418.687431][   T67] bridge0: port 2(bridge_slave_1) entered disabled state
[  418.723442][   T67] device bridge_slave_0 left promiscuous mode
[  418.737054][   T67] bridge0: port 1(bridge_slave_0) entered disabled state
[  418.795609][   T67] device veth1_macvtap left promiscuous mode
[  418.805755][   T67] device veth0_macvtap left promiscuous mode
[  418.815924][   T67] device veth1_vlan left promiscuous mode
[  418.822222][   T67] device veth0_vlan left promiscuous mode
[  418.857084][ T5163] usb 5-1: New USB device found, idVendor=5e5b, idProduct=9318, bcdDevice=bd.92
[  418.873773][ T5163] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  418.898335][ T5163] usb 5-1: Product: syz
[  418.913429][ T5163] usb 5-1: Manufacturer: syz
[  418.926829][ T5163] usb 5-1: SerialNumber: syz
[  418.947605][ T5163] usb 5-1: config 0 descriptor??
[  418.988104][ T5163] usb-storage 5-1:0.0: USB Mass Storage device detected
[  419.225310][ T5064] usb 5-1: USB disconnect, device number 21
[  419.865217][   T67] team0 (unregistering): Port device team_slave_1 removed
[  419.955675][   T67] team0 (unregistering): Port device team_slave_0 removed
[  420.048383][   T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  420.113579][   T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  420.571907][ T9486] binder: 9485:9486 unknown command 1074553619
[  420.578264][ T9486] binder: 9485:9486 ioctl c0306201 20000540 returned -22
[  421.212297][ T9493] xt_connbytes: Forcing CT accounting to be enabled
[  421.219163][ T9493] No such timeout policy "syz0"
[  421.892377][   T67] bond0 (unregistering): Released all slaves
[  422.106032][ T9462] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  422.115498][ T9462] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  422.124424][ T9462] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  422.133215][ T9462] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  422.156031][ T9462] device vxlan0 entered promiscuous mode
[  423.382104][ T9291] 8021q: adding VLAN 0 to HW filter on device batadv0
[  423.414648][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  423.423100][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  423.458795][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  423.468196][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  423.526828][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  423.547620][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  423.573369][ T9291] device veth0_vlan entered promiscuous mode
[  423.605250][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  423.613719][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  423.639441][ T9291] device veth1_vlan entered promiscuous mode
[  423.645923][ T9518] loop3: detected capacity change from 0 to 2048
[  423.698479][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  423.719141][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  423.747528][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  423.762545][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  423.784171][ T9291] device veth0_macvtap entered promiscuous mode
[  423.814740][ T9518] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  423.824561][ T9291] device veth1_macvtap entered promiscuous mode
[  423.864114][ T9518] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038 (0x7fffffff)
[  423.958598][ T9291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  423.989759][   T26] audit: type=1800 audit(1721962106.148:39): pid=9518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1527" name="file0" dev="loop3" ino=13 res=0 errno=0
[  424.032502][ T9291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  424.063306][ T9291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  424.090664][   T26] audit: type=1326 audit(1721962106.158:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9526 comm="syz.4.1530" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0bda577299 code=0x0
[  424.104747][ T9291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  424.150038][ T9291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  424.180909][ T9291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  424.216787][ T9291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  424.266000][ T9291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  424.297063][ T9291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  424.344046][ T9291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  424.376436][ T8820] EXT4-fs (loop3): unmounting filesystem.
[  424.387523][ T9291] batman_adv: batadv0: Interface activated: batadv_slave_0
[  424.420632][ T5064] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  424.436939][ T5064] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  424.462610][ T5064] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  424.484886][ T5064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  424.507185][ T9291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  424.536165][ T9291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  424.563953][ T9291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  424.623515][ T9291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  424.657208][ T9291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  424.686360][ T9291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  424.708551][ T9291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  424.731698][ T9291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  424.780483][ T9291] batman_adv: batadv0: Interface activated: batadv_slave_1
[  425.493676][ T5063] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  425.512832][ T5063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  425.599548][ T9291] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  425.620014][ T9291] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  425.638733][ T9291] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  425.665006][ T9551] loop4: detected capacity change from 0 to 256
[  425.681630][ T9291] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  425.813153][   T26] audit: type=1326 audit(1721962107.968:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9552 comm="syz.2.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e9377299 code=0x7ffc0000
[  425.899873][   T26] audit: type=1326 audit(1721962107.968:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9552 comm="syz.2.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e9377299 code=0x7ffc0000
[  426.029489][   T26] audit: type=1326 audit(1721962107.968:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9552 comm="syz.2.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f20e9377299 code=0x7ffc0000
[  426.132246][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  426.144258][   T26] audit: type=1326 audit(1721962107.968:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9552 comm="syz.2.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e9377299 code=0x7ffc0000
[  426.182051][   T26] audit: type=1326 audit(1721962107.968:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9552 comm="syz.2.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e9377299 code=0x7ffc0000
[  426.214685][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  426.948204][   T26] audit: type=1326 audit(1721962107.968:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9552 comm="syz.2.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f20e9377299 code=0x7ffc0000
[  426.991882][   T26] audit: type=1326 audit(1721962107.968:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9552 comm="syz.2.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f20e93772d3 code=0x7ffc0000
[  427.418555][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  427.432590][ T9553] loop2: detected capacity change from 0 to 8192
[  427.441586][ T9566] netlink: 'syz.4.1541': attribute type 2 has an invalid length.
[  427.485598][   T26] audit: type=1326 audit(1721962108.088:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9552 comm="syz.2.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f20e9375e1f code=0x7ffc0000
[  427.517508][ T5574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  427.536391][ T5574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  427.568330][ T9553] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[  427.592597][ T9553] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  427.601264][ T9553]  loop2: p2 p3 p4
[  427.607570][ T9553] loop2: partition table partially beyond EOD, truncated
[  427.619688][ T9553] loop2: p2 start 452985600 is beyond EOD, truncated
[  427.626550][ T9553] loop2: p3 size 33554432 extends beyond EOD, truncated
[  427.652862][ T9553] loop2: p4 start 8388607 is beyond EOD, truncated
[  427.695729][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  428.050511][ T9582] binder: BC_ACQUIRE_RESULT not supported
[  428.065579][ T9582] binder: 9581:9582 ioctl c0306201 200001c0 returned -22
[  428.401932][ T9593] loop3: detected capacity change from 0 to 256
[  429.606807][ T9593] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  429.760333][ T9602] loop2: detected capacity change from 0 to 256
[  429.837001][ T9602] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  430.375012][ T9623] binder: BC_ACQUIRE_RESULT not supported
[  430.403708][ T9621] loop3: detected capacity change from 0 to 4096
[  430.413950][ T9623] binder: 9619:9623 ioctl c0306201 200001c0 returned -22
[  430.443695][ T9621] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512)
[  430.502804][ T9626] input: syz1 as /devices/virtual/input/input35
[  430.530458][ T9621] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  430.747072][ T9630] loop2: detected capacity change from 0 to 256
[  430.768819][ T9621] loop3: detected capacity change from 4096 to 0
[  430.829175][ T9630] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  430.874510][   T26] kauditd_printk_skb: 18 callbacks suppressed
[  430.874523][   T26] audit: type=1326 audit(1721962113.028:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9635 comm="syz.4.1567" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0bda577299 code=0x0
[  431.524132][ T8820] ntfs3: loop3: ino=5, "/" directory corrupted
[  431.575835][ T8820] ntfs3: loop3: ino=5, "/" directory corrupted
[  431.739914][ T5574] ntfs3: loop3: ino=5, directory corrupted
[  431.812296][ T8820] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22.
[  431.933951][ T9649] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1572'.
[  432.028058][ T9651] loop4: detected capacity change from 0 to 1764
[  432.158097][ T9649] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1572'.
[  432.178811][ T5163] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  432.265951][ T9657] binder: BC_ACQUIRE_RESULT not supported
[  432.318230][ T9657] binder: 9656:9657 ioctl c0306201 200001c0 returned -22
[  432.456884][ T5163] usb 2-1: Using ep0 maxpacket: 32
[  432.576880][ T5163] usb 2-1: config 1 interface 0 altsetting 87 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  432.606770][ T5163] usb 2-1: config 1 interface 0 altsetting 87 endpoint 0x81 has invalid wMaxPacketSize 0
[  432.647138][ T5163] usb 2-1: config 1 interface 0 altsetting 87 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  432.686733][ T5163] usb 2-1: config 1 interface 0 has no altsetting 0
[  432.856828][ T5163] usb 2-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.40
[  432.865905][ T5163] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  432.912630][ T5163] usb 2-1: Product: syz
[  432.916946][   T26] audit: type=1326 audit(1721962115.068:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9673 comm="syz.2.1584" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f20e9377299 code=0x0
[  432.934784][ T9676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  432.946667][ T5163] usb 2-1: Manufacturer: syz
[  432.953829][ T5163] usb 2-1: SerialNumber: syz
[  432.990878][ T3650] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  433.001862][ T3650] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  433.001885][ T9676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  433.010417][ T3650] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  433.033429][ T3650] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  433.041084][ T3650] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  433.056733][ T9676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  433.067332][ T3650] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  433.116149][ T9676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  433.164990][ T9676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  433.195380][ T9676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  433.224625][ T9676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  433.246871][ T5159] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  433.255500][ T9676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  433.266932][ T5163] usbhid 2-1:1.0: can't add hid device: -22
[  433.272934][ T5163] usbhid: probe of 2-1:1.0 failed with error -22
[  433.297341][ T9676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  433.299425][ T5163] usb 2-1: USB disconnect, device number 13
[  433.327778][ T9676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  433.623031][ T5159] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  433.646358][ T5159] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  433.690504][ T5159] usb 5-1: config 0 descriptor??
[  434.046866][ T9677] chnl_net:caif_netlink_parms(): no params data found
[  434.782531][ T9692] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1583'.
[  434.816975][ T9696] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1589'.
[  434.882963][ T9696] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1589'.
[  435.046569][ T9677] bridge0: port 1(bridge_slave_0) entered blocking state
[  435.067034][ T9677] bridge0: port 1(bridge_slave_0) entered disabled state
[  435.075164][ T9677] device bridge_slave_0 entered promiscuous mode
[  435.096848][ T3650] Bluetooth: hci3: command tx timeout
[  435.112523][ T9677] bridge0: port 2(bridge_slave_1) entered blocking state
[  435.119783][ T9677] bridge0: port 2(bridge_slave_1) entered disabled state
[  435.128193][ T9677] device bridge_slave_1 entered promiscuous mode
[  435.140364][ T9672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  435.185645][ T9672] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  435.257875][ T9677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  435.356710][ T9715] netlink: 121244 bytes leftover after parsing attributes in process `syz.2.1596'.
[  435.379340][ T9677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  435.450063][ T5159] usb 5-1: Cannot set MAC address
[  435.455220][ T5159] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -71
[  435.498857][ T5159] usb 5-1: USB disconnect, device number 22
[  435.586723][ T9677] team0: Port device team_slave_0 added
[  435.626306][ T9677] team0: Port device team_slave_1 added
[  435.744282][ T9677] batman_adv: batadv0: Adding interface: batadv_slave_0
[  435.785672][ T9677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  435.916661][ T9677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  435.977161][ T9677] batman_adv: batadv0: Adding interface: batadv_slave_1
[  436.005024][ T9677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  436.116748][ T9677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  436.137363][ T9729] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1602'.
[  436.161127][ T9729] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1602'.
[  436.309897][ T9677] device hsr_slave_0 entered promiscuous mode
[  436.362234][ T9677] device hsr_slave_1 entered promiscuous mode
[  436.376065][ T9677] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  436.410442][ T9677] Cannot create hsr debugfs directory
[  436.552061][ T9717] loop2: detected capacity change from 0 to 40427
[  436.643499][ T9717] F2FS-fs (loop2): Found nat_bits in checkpoint
[  436.684585][ T9742] netlink: 121244 bytes leftover after parsing attributes in process `syz.4.1607'.
[  436.839736][ T9717] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  436.995081][ T9755] loop4: detected capacity change from 0 to 512
[  436.995918][ T9677] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  437.081309][ T3632] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  437.094951][ T9756] loop0: detected capacity change from 0 to 2048
[  437.186733][ T3650] Bluetooth: hci3: command tx timeout
[  437.311881][ T9756] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  437.563675][ T9757] syz.2.1598: attempt to access beyond end of device
[  437.563675][ T9757] loop2: rw=2049, sector=53248, nr_sectors = 3320 limit=40427
[  437.633585][ T9677] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  438.087392][ T8484] syz-executor: attempt to access beyond end of device
[  438.087392][ T8484] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  438.155172][ T9677] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  438.213749][ T9291] EXT4-fs (loop0): unmounting filesystem.
[  438.469570][ T9677] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  438.649530][ T9776] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1617'.
[  438.721137][ T9777] tmpfs: Unknown parameter 'usrquota'
[  438.917305][ T9775] loop0: detected capacity change from 0 to 136
[  439.256763][ T3650] Bluetooth: hci3: command tx timeout
[  439.267173][ T5159] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  439.332087][ T9779] loop4: detected capacity change from 0 to 256
[  439.334528][ T9769] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  439.339376][ T9779] /dev/loop4: Can't open blockdev
[  439.392615][ T3632] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  439.399567][ T9775] iso9660: Corrupted directory entry in block 1 of inode 1536
[  439.564552][ T9677] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  439.592760][ T9677] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  439.657415][ T5159] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  439.663166][ T9677] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  439.676979][ T5159] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  439.693156][ T9677] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  439.706781][ T5508] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  439.723959][ T5159] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  439.738614][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[  439.744968][ T1268] ieee802154 phy1 wpan1: encryption failed: -22
[  439.755151][ T5159] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  439.782528][ T5159] usb 2-1: config 0 descriptor??
[  439.838838][ T5159] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  440.086915][ T5508] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  440.108282][ T5508] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  440.145923][ T9795] loop4: detected capacity change from 0 to 512
[  440.176171][ T5508] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  441.351843][ T3650] Bluetooth: hci3: command tx timeout
[  441.798485][ T5508] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  441.808640][ T5508] usb 1-1: config 0 descriptor??
[  441.820573][ T5163] usb 2-1: USB disconnect, device number 14
[  441.826850][ T5508] usb 1-1: can't set config #0, error -71
[  441.846891][ T5508] usb 1-1: USB disconnect, device number 15
[  442.029870][ T9677] 8021q: adding VLAN 0 to HW filter on device bond0
[  442.180081][ T9810] loop4: detected capacity change from 0 to 512
[  442.210841][ T9808] loop0: detected capacity change from 0 to 2048
[  442.222135][ T9810] /dev/loop4: Can't open blockdev
[  442.266345][ T9677] 8021q: adding VLAN 0 to HW filter on device team0
[  442.290357][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  442.307476][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  442.368168][ T9808] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  442.449589][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  442.477403][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  442.503798][ T5508] bridge0: port 1(bridge_slave_0) entered blocking state
[  442.509426][ T9800] loop2: detected capacity change from 0 to 40427
[  442.510973][ T5508] bridge0: port 1(bridge_slave_0) entered forwarding state
[  442.575493][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  442.585815][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  442.597406][ T9800] F2FS-fs (loop2): Found nat_bits in checkpoint
[  442.602271][ T5508] bridge0: port 2(bridge_slave_1) entered blocking state
[  442.610833][ T5508] bridge0: port 2(bridge_slave_1) entered forwarding state
[  442.625746][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  442.710022][ T9800] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  442.723164][ T9291] EXT4-fs (loop0): unmounting filesystem.
[  442.805095][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  442.828155][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  442.852998][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  442.892458][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  442.923098][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  442.933232][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  442.990570][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  443.014036][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  443.032548][ T9826] syz.2.1624: attempt to access beyond end of device
[  443.032548][ T9826] loop2: rw=2049, sector=53248, nr_sectors = 3352 limit=40427
[  443.060108][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  443.204172][ T9800] syz.2.1624: attempt to access beyond end of device
[  443.204172][ T9800] loop2: rw=2049, sector=56600, nr_sectors = 744 limit=40427
[  443.259957][ T9677] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  443.281830][ T9826] syz.2.1624: attempt to access beyond end of device
[  443.281830][ T9826] loop2: rw=2049, sector=49152, nr_sectors = 584 limit=40427
[  443.300666][ T9677] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  443.311265][ T5064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  443.343978][ T5064] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  443.371968][ T8484] syz-executor: attempt to access beyond end of device
[  443.371968][ T8484] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  443.457001][ T5163] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  443.488771][   T26] audit: type=1326 audit(1721962125.648:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9838 comm="syz.1.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcee3977299 code=0x7ffc0000
[  443.555124][   T26] audit: type=1326 audit(1721962125.668:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9838 comm="syz.1.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcee3977299 code=0x7ffc0000
[  443.707062][   T26] audit: type=1326 audit(1721962125.668:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9838 comm="syz.1.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcee3977299 code=0x7ffc0000
[  443.819035][   T26] audit: type=1326 audit(1721962125.668:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9838 comm="syz.1.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcee3977299 code=0x7ffc0000
[  443.833638][ T5163] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  443.871261][ T5163] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  443.904046][ T5163] usb 1-1: config 0 descriptor??
[  444.068157][   T26] audit: type=1326 audit(1721962125.668:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9838 comm="syz.1.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcee3977299 code=0x7ffc0000
[  444.075157][ T9853] loop4: detected capacity change from 0 to 2048
[  444.090331][    C0] vkms_vblank_simulate: vblank timer overrun
[  444.159919][ T9855] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1639'.
[  444.234420][ T9856] tmpfs: Unknown parameter 'usrquota'
[  444.872952][   T26] audit: type=1326 audit(1721962125.668:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9838 comm="syz.1.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fcee3977299 code=0x7ffc0000
[  445.016805][    T9] device hsr_slave_0 left promiscuous mode
[  445.037446][   T26] audit: type=1326 audit(1721962125.668:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9838 comm="syz.1.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcee39772d3 code=0x7ffc0000
[  445.055811][ T9853] /dev/loop4: Can't open blockdev
[  445.084904][    T9] device hsr_slave_1 left promiscuous mode
[  445.107562][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  445.125846][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  445.133649][ T4416] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  445.158767][   T26] audit: type=1326 audit(1721962125.848:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9838 comm="syz.1.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcee3975e1f code=0x7ffc0000
[  445.158806][   T26] audit: type=1326 audit(1721962126.158:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9838 comm="syz.1.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fcee3977327 code=0x7ffc0000
[  445.158839][   T26] audit: type=1326 audit(1721962126.158:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9838 comm="syz.1.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcee3975cd0 code=0x7ffc0000
[  445.163549][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  445.163578][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  445.164089][    T9] device bridge_slave_1 left promiscuous mode
[  445.164208][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  445.165943][    T9] device bridge_slave_0 left promiscuous mode
[  445.166096][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  445.343947][ T9862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1642'.
[  445.343991][ T9862] netlink: 'syz.2.1642': attribute type 2 has an invalid length.
[  445.344111][ T9862] netlink: 'syz.2.1642': attribute type 1 has an invalid length.
[  445.367115][    T9] device veth1_macvtap left promiscuous mode
[  445.367207][    T9] device veth0_macvtap left promiscuous mode
[  445.367316][    T9] device veth1_vlan left promiscuous mode
[  445.367424][    T9] device veth0_vlan left promiscuous mode
[  445.655517][ T9857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  445.655727][ T9857] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  445.774742][ T9871] loop4: detected capacity change from 0 to 1024
[  445.850502][ T4416] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  446.584382][    T9] team0 (unregistering): Port device team_slave_1 removed
[  446.689679][    T9] team0 (unregistering): Port device team_slave_0 removed
[  446.801941][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  446.872635][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  447.669102][    T9] bond0 (unregistering): Released all slaves
[  447.795475][ T9835] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1635'.
[  447.866400][ T9677] 8021q: adding VLAN 0 to HW filter on device batadv0
[  447.890908][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  447.899530][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  447.954173][ T9886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1653'.
[  447.966123][ T9886] netlink: 'syz.2.1653': attribute type 2 has an invalid length.
[  447.978225][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  447.987844][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  448.019457][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  448.024755][ T9886] netlink: 'syz.2.1653': attribute type 1 has an invalid length.
[  448.037670][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  448.066792][ T5163] usb 1-1: Cannot set MAC address
[  448.071947][ T5163] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -71
[  448.108001][ T9677] device veth0_vlan entered promiscuous mode
[  448.125650][ T9677] device veth1_vlan entered promiscuous mode
[  448.140737][ T5163] usb 1-1: USB disconnect, device number 16
[  448.173158][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  448.187433][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  448.216424][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  448.291889][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  448.322246][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  448.336598][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  448.348289][ T9677] device veth0_macvtap entered promiscuous mode
[  448.370493][ T9677] device veth1_macvtap entered promiscuous mode
[  448.401520][ T9677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  448.425250][ T9677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  448.447536][ T9677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  448.495277][ T9677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  448.512809][ T9677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  448.533558][ T9677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  448.554085][ T9677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  448.574400][ T9677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  448.597648][ T9677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  448.620830][ T9677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  448.638234][ T9677] batman_adv: batadv0: Interface activated: batadv_slave_0
[  448.648018][ T5508] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  448.655508][ T9677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  448.686340][ T9677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  448.706277][ T9677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  448.730717][ T9677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  448.746666][ T9677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  448.766644][ T9677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  448.791635][ T9677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  448.809031][ T9677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  448.825040][ T9677] batman_adv: batadv0: Interface activated: batadv_slave_1
[  448.841238][ T5063] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  448.849191][ T9906] loop0: detected capacity change from 0 to 136
[  448.877380][ T5063] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  448.887494][ T5063] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  448.907802][ T5063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  448.938364][ T9906] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  448.942261][ T5063] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  448.985206][ T5063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  449.018137][ T9677] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  449.018657][ T5508] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  449.041605][ T9677] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  449.052557][ T9906] iso9660: Corrupted directory entry in block 1 of inode 1536
[  449.086201][ T9677] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  449.093908][ T5508] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  449.109878][ T9677] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  449.113996][ T5508] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  449.145351][ T5508] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  449.171934][ T5508] usb 5-1: config 0 descriptor??
[  449.294802][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  449.321595][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  449.358301][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  449.381637][ T3861] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  449.394136][ T3861] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  449.410564][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  449.476810][ T5166] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  449.661958][ T9897] binder: 9896:9897 ioctl c0306201 20000580 returned -14
[  449.836799][ T5166] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  449.866776][ T5166] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  449.900279][ T5166] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  449.941591][ T5166] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  449.971966][ T5166] usb 1-1: config 0 descriptor??
[  450.214566][ T9913] loop3: detected capacity change from 0 to 32768
[  450.259996][ T9913] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1577 (9913)
[  450.306764][ T9913] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  450.326883][ T9913] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  450.345819][ T9913] BTRFS info (device loop3): using free space tree
[  450.457189][ T5062] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  450.468830][ T5166] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x3
[  450.476247][ T5166] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x3
[  450.497301][ T5166] plantronics 0003:047F:FFFF.0011: item fetching failed at offset 13/15
[  450.517082][ T5166] plantronics 0003:047F:FFFF.0011: parse failed
[  450.524257][ T5166] plantronics: probe of 0003:047F:FFFF.0011 failed with error -22
[  450.592983][ T9913] BTRFS info (device loop3): enabling ssd optimizations
[  450.710995][ T5063] usb 1-1: USB disconnect, device number 17
[  450.758511][ T9913] syz.3.1577 (9913) used greatest stack depth: 19040 bytes left
[  450.836905][ T5508] uclogic 0003:256C:006D.0010: failed retrieving Huion firmware version: -71
[  450.836941][ T5062] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  450.855945][ T5508] uclogic 0003:256C:006D.0010: failed probing parameters: -71
[  450.876902][ T9677] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  450.885393][ T5062] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  450.896344][ T5508] uclogic: probe of 0003:256C:006D.0010 failed with error -71
[  450.905287][ T5062] usb 3-1: config 0 descriptor??
[  450.926342][ T5508] usb 5-1: USB disconnect, device number 23
[  451.523773][ T9917] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1664'.
[  451.921040][ T9917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  451.943550][ T9917] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  452.073091][ T9967] loop4: detected capacity change from 0 to 2048
[  452.087462][ T5062] usb 3-1: Cannot set MAC address
[  452.092609][ T5062] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -71
[  452.137707][ T5062] usb 3-1: USB disconnect, device number 20
[  452.150769][ T9969] loop3: detected capacity change from 0 to 2048
[  452.187582][ T9967] /dev/loop4: Can't open blockdev
[  452.279184][ T9970] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  452.769004][ T9976] tap0: tun_chr_ioctl cmd 1074025677
[  452.774555][ T9976] tap0: linktype set to 774
[  452.866713][ T5168] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  453.136796][ T5168] usb 5-1: Using ep0 maxpacket: 8
[  453.321764][ T9995] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1685'.
[  453.341552][ T9995] tmpfs: Unknown parameter 'usrquota'
[  453.928387][ T5168] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  454.022908][ T5168] usb 5-1: config 0 has no interface number 0
[  454.029153][ T5168] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0
[  454.039211][ T5168] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  454.048968][ T5168] usb 5-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b
[  454.058113][ T5168] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  454.083977][ T5168] usb 5-1: config 0 descriptor??
[  454.129197][ T5168] hso 5-1:0.1: Failed to find BULK IN ep
[  454.136325][T10000] loop0: detected capacity change from 0 to 2048
[  454.164343][   T26] kauditd_printk_skb: 18 callbacks suppressed
[  454.164358][   T26] audit: type=1326 audit(1721962136.318:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10001 comm="syz.2.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e9377299 code=0x7ffc0000
[  454.193712][ T9991] loop3: detected capacity change from 0 to 1024
[  454.242015][T10003] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  454.274164][ T9991] EXT4-fs: Ignoring removed orlov option
[  454.297678][   T26] audit: type=1326 audit(1721962136.318:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10001 comm="syz.2.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e9377299 code=0x7ffc0000
[  454.326872][ T9991] EXT4-fs (loop3): Test dummy encryption mode enabled
[  454.347141][ T5160] usb 5-1: USB disconnect, device number 24
[  454.390820][ T9991] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  454.400031][   T26] audit: type=1326 audit(1721962136.358:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10001 comm="syz.2.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f20e9377299 code=0x7ffc0000
[  454.400067][   T26] audit: type=1326 audit(1721962136.358:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10001 comm="syz.2.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e9377299 code=0x7ffc0000
[  454.445209][T10002] loop2: detected capacity change from 0 to 8192
[  454.453482][   T26] audit: type=1326 audit(1721962136.358:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10001 comm="syz.2.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e9377299 code=0x7ffc0000
[  454.478939][   T26] audit: type=1326 audit(1721962136.358:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10001 comm="syz.2.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f20e9377299 code=0x7ffc0000
[  454.504315][   T26] audit: type=1326 audit(1721962136.368:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10001 comm="syz.2.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f20e93772d3 code=0x7ffc0000
[  454.536782][   T26] audit: type=1326 audit(1721962136.488:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10001 comm="syz.2.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f20e9375e1f code=0x7ffc0000
[  454.658748][   T26] audit: type=1326 audit(1721962136.598:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10001 comm="syz.2.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f20e9377327 code=0x7ffc0000
[  454.697049][   T26] audit: type=1326 audit(1721962136.598:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10001 comm="syz.2.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f20e9375cd0 code=0x7ffc0000
[  454.873209][T10002] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[  454.875087][T10002] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  454.878512][T10002]  loop2: p2 p3 p4
[  454.882805][T10002] loop2: partition table partially beyond EOD, truncated
[  454.893556][T10002] loop2: p2 start 452985600 is beyond EOD, truncated
[  454.897918][T10002] loop2: p3 size 33554432 extends beyond EOD, truncated
[  455.111672][ T5168] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  455.175167][T10002] loop2: p4 start 8388607 is beyond EOD, truncated
[  455.266153][ T9677] EXT4-fs (loop3): unmounting filesystem.
[  455.486993][ T5168] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  455.487023][ T5168] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  455.488715][ T5168] usb 2-1: config 0 descriptor??
[  455.649064][ T3091] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[  455.668186][ T3091] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  455.686764][ T3091]  loop2: p2 p3 p4
[  455.690586][ T3091] loop2: partition table partially beyond EOD, truncated
[  455.772207][ T3091] loop2: p2 start 452985600 is beyond EOD, truncated
[  455.793781][ T3091] loop2: p3 size 33554432 extends beyond EOD, truncated
[  455.808888][ T3091] loop2: p4 start 8388607 is beyond EOD, truncated
[  455.877358][T10025] tap0: tun_chr_ioctl cmd 1074025677
[  455.882786][T10025] tap0: linktype set to 774
[  456.130476][ T4416] udevd[4416]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  456.231911][T10043] loop2: detected capacity change from 0 to 256
[  456.274444][T10006] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1691'.
[  456.319269][T10043] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  456.570195][T10050] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  456.570195][T10050] The task syz.2.1702 (10050) triggered the difference, watch for misbehavior.
[  456.674238][T10006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  456.693513][T10006] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  456.826904][ T5168] usb 2-1: Cannot set MAC address
[  456.846301][ T5168] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -71
[  456.886795][ T5168] usb 2-1: USB disconnect, device number 15
[  456.935150][T10055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1702'.
[  457.008116][T10057] loop0: detected capacity change from 0 to 1024
[  457.034731][T10057] EXT4-fs: Ignoring removed orlov option
[  457.048380][T10057] EXT4-fs: Ignoring removed nomblk_io_submit option
[  457.116118][T10057] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  457.253064][T10057] EXT4-fs error (device loop0): __ext4_get_inode_loc:4495: comm syz.0.1707: Invalid inode table block 14347193575207366659 in block_group 0
[  457.386774][T10057] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5868: Corrupt filesystem
[  457.407794][T10057] EXT4-fs error (device loop0): __ext4_unlink:3281: inode #2: comm syz.0.1707: mark_inode_dirty error
[  457.587375][ T9291] EXT4-fs error (device loop0): __ext4_get_inode_loc:4495: comm syz-executor: Invalid inode table block 14347193575207366659 in block_group 0
[  457.665354][ T9291] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5868: Corrupt filesystem
[  457.709215][ T9291] EXT4-fs error (device loop0): ext4_dirty_inode:6072: inode #2: comm syz-executor: mark_inode_dirty error
[  457.735338][ T9291] EXT4-fs error (device loop0): __ext4_get_inode_loc:4495: comm syz-executor: Invalid inode table block 14347193575207366659 in block_group 0
[  457.766467][ T9291] EXT4-fs error (device loop0): __ext4_get_inode_loc:4495: comm syz-executor: Invalid inode table block 14347193575207366659 in block_group 0
[  457.931368][T10063] loop4: detected capacity change from 0 to 8192
[  458.043040][T10063] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[  458.054671][T10063] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  458.066641][T10063]  loop4: p2 p3 p4
[  458.073435][T10063] loop4: partition table partially beyond EOD, truncated
[  458.086075][T10063] loop4: p2 start 452985600 is beyond EOD, truncated
[  458.092981][T10063] loop4: p3 size 33554432 extends beyond EOD, truncated
[  458.240411][T10063] loop4: p4 start 8388607 is beyond EOD, truncated
[  458.516827][ T5722] EXT4-fs error (device loop0): __ext4_get_inode_loc:4495: comm kworker/u4:15: Invalid inode table block 14347193575207366659 in block_group 0
[  458.534592][ T5722] EXT4-fs error (device loop0): __ext4_get_inode_loc:4495: comm kworker/u4:15: Invalid inode table block 14347193575207366659 in block_group 0
[  458.668782][ T9291] EXT4-fs (loop0): unmounting filesystem.
[  458.923646][ T9118] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  459.740576][   T26] kauditd_printk_skb: 47 callbacks suppressed
[  459.740591][   T26] audit: type=1326 audit(1721962141.898:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10061 comm="syz.4.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bda577299 code=0x7ffc0000
[  459.740628][   T26] audit: type=1326 audit(1721962141.898:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10061 comm="syz.4.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bda577299 code=0x7ffc0000
[  459.908306][ T9118] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  460.100389][T10079] loop3: detected capacity change from 0 to 1024
[  460.112229][ T9118] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  460.125145][T10079] EXT4-fs: Ignoring removed orlov option
[  460.178056][T10079] EXT4-fs: Ignoring removed nomblk_io_submit option
[  460.248886][T10079] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  460.344882][ T9118] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  460.410126][T10079] EXT4-fs error (device loop3): __ext4_get_inode_loc:4495: comm syz.3.1720: Invalid inode table block 14347193575207366659 in block_group 0
[  460.460499][T10079] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5868: Corrupt filesystem
[  460.496931][ T3654] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  460.508421][ T3654] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  460.519354][ T3654] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  460.525246][T10079] EXT4-fs error (device loop3): __ext4_unlink:3281: inode #2: comm syz.3.1720: mark_inode_dirty error
[  460.539281][ T3648] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  460.556848][ T3654] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  460.564765][ T3654] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  460.584593][T10089] loop4: detected capacity change from 0 to 2048
[  460.698685][T10089]  loop4: p2 < >
[  460.719682][ T9677] EXT4-fs error (device loop3): __ext4_get_inode_loc:4495: comm syz-executor: Invalid inode table block 14347193575207366659 in block_group 0
[  460.785701][ T3091]  loop4: p2 < >
[  460.872664][ T9677] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5868: Corrupt filesystem
[  460.933822][T10091] netlink: 'syz.1.1722': attribute type 11 has an invalid length.
[  460.986883][ T9677] EXT4-fs error (device loop3): ext4_dirty_inode:6072: inode #2: comm syz-executor: mark_inode_dirty error
[  461.027390][ T3650] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  461.039127][ T3650] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  461.048833][ T3650] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  461.056550][ T3650] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  461.064417][ T3650] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  461.073041][ T3650] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  461.143645][T10099] loop4: detected capacity change from 0 to 1024
[  461.150402][ T9677] EXT4-fs error (device loop3): __ext4_get_inode_loc:4495: comm syz-executor: Invalid inode table block 14347193575207366659 in block_group 0
[  461.187478][ T9677] EXT4-fs error (device loop3): __ext4_get_inode_loc:4495: comm syz-executor: Invalid inode table block 14347193575207366659 in block_group 0
[  461.238807][ T3632] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  461.409062][T10086] chnl_net:caif_netlink_parms(): no params data found
[  461.629680][ T5575] EXT4-fs error (device loop3): __ext4_get_inode_loc:4495: comm kworker/u4:14: Invalid inode table block 14347193575207366659 in block_group 0
[  461.655051][ T5575] EXT4-fs error (device loop3): __ext4_get_inode_loc:4495: comm kworker/u4:14: Invalid inode table block 14347193575207366659 in block_group 0
[  461.744630][ T9677] EXT4-fs (loop3): unmounting filesystem.
[  461.921736][T10109] loop4: detected capacity change from 0 to 1024
[  461.941609][T10109] EXT4-fs: Ignoring removed orlov option
[  461.947536][T10109] /dev/loop4: Can't open blockdev
[  462.037739][ T3632] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  462.137101][   T28] INFO: task kworker/u4:9:4030 blocked for more than 144 seconds.
[  462.144936][   T28]       Not tainted 6.1.101-syzkaller #0
[  462.167986][T10086] bridge0: port 1(bridge_slave_0) entered blocking state
[  462.177879][T10086] bridge0: port 1(bridge_slave_0) entered disabled state
[  462.201091][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  462.202221][T10086] device bridge_slave_0 entered promiscuous mode
[  462.241179][T10086] bridge0: port 2(bridge_slave_1) entered blocking state
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  462.281772][T10086] bridge0: port 2(bridge_slave_1) entered disabled state
[  462.286780][   T28] task:kworker/u4:9    state:D stack:24384 pid:4030  ppid:2      flags:0x00004000
[  462.321033][T10086] device bridge_slave_1 entered promiscuous mode
[  462.359776][   T28] Workqueue: writeback wb_workfn (flush-7:1)
[  462.365813][   T28] Call Trace:
[  462.446742][   T28]  <TASK>
[  462.449713][   T28]  __schedule+0x143f/0x4570
[  462.454270][   T28]  ? release_firmware_map_entry+0x186/0x186
[  462.499677][   T28]  ? __mutex_trylock_common+0x8d/0x2e0
[  462.515851][   T28]  ? blk_check_plugged+0x250/0x250
[  462.531161][   T28]  ? wq_worker_sleeping+0x5f/0x270
[  462.536317][   T28]  schedule+0xbf/0x180
[  462.543474][   T28]  schedule_preempt_disabled+0xf/0x20
[  462.552795][   T28]  __mutex_lock+0x6b9/0xd80
[  462.569185][   T28]  ? __mutex_lock+0x53c/0xd80
[  462.573872][   T28]  ? exfat_write_inode+0x65/0x110
[  462.594372][   T28]  ? mutex_lock_nested+0x10/0x10
[  462.601737][   T28]  ? do_raw_spin_unlock+0x137/0x8a0
[  462.616397][   T28]  exfat_write_inode+0x65/0x110
[  462.621466][ T3654] Bluetooth: hci1: command tx timeout
[  462.646678][   T28]  __writeback_single_inode+0x67d/0x11e0
[  462.652355][   T28]  writeback_sb_inodes+0xc2b/0x1b20
[  462.666678][   T28]  ? print_unlock_imbalance_bug+0x2c0/0x2c0
[  462.672617][   T28]  ? queue_io+0x630/0x630
[  462.686684][   T28]  ? __writeback_inodes_wb+0x400/0x400
[  462.692190][   T28]  __writeback_inodes_wb+0x114/0x400
[  462.701550][   T28]  wb_writeback+0x4b1/0xe10
[  462.706099][   T28]  ? percpu_ref_tryget+0x260/0x260
[  462.712522][   T28]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  462.718838][   T28]  ? _find_next_bit+0x11b/0x120
[  462.723725][   T28]  wb_workfn+0xbec/0x1020
[  462.733482][   T28]  ? inode_wait_for_writeback+0x280/0x280
[  462.740647][   T28]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  462.746893][   T28]  ? print_irqtrace_events+0x210/0x210
[  462.752377][   T28]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  462.758614][   T28]  ? do_raw_spin_unlock+0x137/0x8a0
[  462.763834][   T28]  ? process_one_work+0x7a9/0x11d0
[  462.769263][   T28]  process_one_work+0x8a9/0x11d0
[  462.774247][   T28]  ? worker_detach_from_pool+0x260/0x260
[  462.785297][   T28]  ? _raw_spin_lock_irqsave+0x120/0x120
[  462.793025][   T28]  ? kthread_data+0x4e/0xc0
[  462.801044][   T28]  ? wq_worker_running+0x97/0x190
[  462.806113][   T28]  worker_thread+0xa47/0x1200
[  462.821704][   T28]  kthread+0x28d/0x320
[  462.825801][   T28]  ? worker_clr_flags+0x190/0x190
[  462.833149][   T28]  ? kthread_blkcg+0xd0/0xd0
[  462.846302][   T28]  ret_from_fork+0x1f/0x30
[  462.866725][   T28]  </TASK>
[  462.888820][   T28] 
[  462.888820][   T28] Showing all locks held in the system:
[  462.900237][   T28] 1 lock held by rcu_tasks_kthre/12:
[  462.905536][   T28]  #0: ffffffff8d32af10 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30
[  462.957918][   T28] 1 lock held by rcu_tasks_trace/13:
[  462.963230][   T28]  #0: ffffffff8d32b710 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30
[  462.976839][   T28] 1 lock held by rcu_preempt/16:
[  462.981795][   T28]  #0: ffff8880b983aa18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xa8/0x140
[  463.026681][   T28] 1 lock held by khungtaskd/28:
[  463.039812][   T28]  #0: ffffffff8d32ad40 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290
[  463.056674][   T28] 2 locks held by getty/3400:
[  463.082179][   T28]  #0: ffff88814c068098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70
[  463.092257][   T28]  #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0
[  463.106768][ T3650] Bluetooth: hci4: command tx timeout
[  463.114475][   T28] 2 locks held by kworker/u4:7/3834:
[  463.136723][   T28] 4 locks held by kworker/u4:9/4030:
[  463.142028][   T28]  #0: ffff888142667138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  463.156664][   T28]  #1: ffffc9000579fd20 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  463.177939][   T28]  #2: ffff88807c4320e0 (&type->s_umount_key#50){++++}-{3:3}, at: trylock_super+0x1b/0xf0
[  463.188456][   T28]  #3: ffff88807c4300e0 (&sbi->s_lock#2){+.+.}-{3:3}, at: exfat_write_inode+0x65/0x110
[  463.220860][   T28] 3 locks held by syz-executor/4809:
[  463.226200][   T28] 2 locks held by kworker/1:15/5063:
[  463.243692][   T28]  #0: ffff888012872138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  463.283631][   T28]  #1: ffffc9000369fd20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  463.305787][   T28] 3 locks held by kworker/1:16/5064:
[  463.311489][   T28]  #0: ffff888012870938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  463.322139][   T28]  #1: ffffc9000383fd20 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  463.333497][   T28]  #2: ffffffff8e4f7628 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50
[  463.342811][   T28] 3 locks held by kworker/0:17/5508:
[  463.348308][   T28]  #0: ffff888012870938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  463.358927][   T28]  #1: ffffc9000d1ffd20 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  463.368878][   T28]  #2: ffffffff8d330338 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x930
[  463.380033][   T28] 5 locks held by kworker/u4:17/9118:
[  463.385407][   T28]  #0: ffff888012a1e938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  463.396067][   T28]  #1: ffffc900031cfd20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  463.407524][   T28]  #2: ffffffff8e4eb2d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf1/0xb60
[  463.418242][   T28]  #3: ffffffff8e4f7628 (rtnl_mutex){+.+.}-{3:3}, at: xfrmi_exit_batch_net+0xb0/0x350
[  463.428812][   T28]  #4: ffffffff8d330338 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x4f0/0x930
[  463.439977][   T28] 1 lock held by syz.4.1725/10104:
[  463.445095][   T28]  #0: ffffffff8d330200 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x48/0x5f0
[  463.455620][   T28] 3 locks held by syz.1.1726/10110:
[  463.461145][   T28]  #0: ffff888050f810b8 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x1ff/0x500
[  463.471357][   T28]  #1: ffff888050f80078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x48d/0x1020
[  463.481271][   T28]  #2: ffffffff8e64e788 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xb8/0x2a0
[  463.491596][   T28] 
[  463.494024][   T28] =============================================
[  463.494024][   T28] 
[  463.514789][   T28] NMI backtrace for cpu 0
[  463.519150][   T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.101-syzkaller #0
[  463.527050][   T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  463.537112][   T28] Call Trace:
[  463.540403][   T28]  <TASK>
[  463.543334][   T28]  dump_stack_lvl+0x1e3/0x2cb
[  463.548041][   T28]  ? nf_tcp_handle_invalid+0x642/0x642
[  463.553523][   T28]  ? panic+0x764/0x764
[  463.557599][   T28]  ? vprintk_emit+0x622/0x740
[  463.562291][   T28]  ? printk_sprint+0x490/0x490
[  463.567087][   T28]  ? nmi_cpu_backtrace+0x252/0x560
[  463.572219][   T28]  nmi_cpu_backtrace+0x4e1/0x560
[  463.577178][   T28]  ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0
[  463.583346][   T28]  ? _printk+0xd1/0x111
[  463.587507][   T28]  ? panic+0x764/0x764
[  463.591581][   T28]  ? __wake_up_klogd+0xcc/0x100
[  463.596433][   T28]  ? panic+0x764/0x764
[  463.600507][   T28]  ? nmi_trigger_cpumask_backtrace+0xe2/0x3f0
[  463.606596][   T28]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  463.612695][   T28]  nmi_trigger_cpumask_backtrace+0x1b0/0x3f0
[  463.618702][   T28]  watchdog+0xf88/0xfd0
[  463.622873][   T28]  ? watchdog+0x1f8/0xfd0
[  463.627205][   T28]  kthread+0x28d/0x320
[  463.631267][   T28]  ? hungtask_pm_notify+0x50/0x50
[  463.636290][   T28]  ? kthread_blkcg+0xd0/0xd0
[  463.640876][   T28]  ret_from_fork+0x1f/0x30
[  463.645300][   T28]  </TASK>
[  463.649096][   T28] Sending NMI from CPU 0 to CPUs 1:
[  463.654331][    C1] NMI backtrace for cpu 1
[  463.654341][    C1] CPU: 1 PID: 3834 Comm: kworker/u4:7 Not tainted 6.1.101-syzkaller #0
[  463.654357][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  463.654367][    C1] Workqueue: bat_events batadv_nc_worker
[  463.654391][    C1] RIP: 0010:__rcu_read_lock+0x4c/0xb0
[  463.654410][    C1] Code: 48 c1 eb 03 42 0f b6 04 33 84 c0 75 2f 41 8b 2f ff c5 42 0f b6 04 33 84 c0 75 38 41 89 2f 42 0f b6 04 33 84 c0 75 43 41 8b 07 <3d> 00 00 00 40 7d 07 5b 41 5e 41 5f 5d c3 0f 0b eb f5 44 89 f9 80
[  463.654422][    C1] RSP: 0018:ffffc90004817bd0 EFLAGS: 00000246
[  463.654434][    C1] RAX: 0000000000000001 RBX: 1ffff11002cf27f7 RCX: ffff888016793b80
[  463.654445][    C1] RDX: 0000000000000000 RSI: ffffffff8b0c13c0 RDI: ffffffff8b5d5b60
[  463.654456][    C1] RBP: 0000000000000001 R08: dffffc0000000000 R09: fffffbfff1d3379e
[  463.654466][    C1] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88807d140c80
[  463.654477][    C1] R13: 0000000000000382 R14: dffffc0000000000 R15: ffff888016793fbc
[  463.654488][    C1] FS:  0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
[  463.654501][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  463.654511][    C1] CR2: 00005579cf9e7950 CR3: 000000000d08e000 CR4: 00000000003526e0
[  463.654525][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  463.654533][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  463.654543][    C1] Call Trace:
[  463.654547][    C1]  <NMI>
[  463.654553][    C1]  ? nmi_cpu_backtrace+0x3de/0x560
[  463.654575][    C1]  ? read_lock_is_recursive+0x10/0x10
[  463.654598][    C1]  ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0
[  463.654620][    C1]  ? nmi_handle+0x25/0x440
[  463.654650][    C1]  ? nmi_cpu_backtrace_handler+0x8/0x10
[  463.654672][    C1]  ? nmi_handle+0x12e/0x440
[  463.654694][    C1]  ? nmi_handle+0x25/0x440
[  463.654717][    C1]  ? __rcu_read_lock+0x4c/0xb0
[  463.654733][    C1]  ? default_do_nmi+0x62/0x150
[  463.654756][    C1]  ? exc_nmi+0xa8/0x100
[  463.654777][    C1]  ? end_repeat_nmi+0x16/0x31
[  463.654802][    C1]  ? __rcu_read_lock+0x4c/0xb0
[  463.654819][    C1]  ? __rcu_read_lock+0x4c/0xb0
[  463.654836][    C1]  ? __rcu_read_lock+0x4c/0xb0
[  463.654853][    C1]  </NMI>
[  463.654857][    C1]  <TASK>
[  463.654863][    C1]  batadv_nc_worker+0xc0/0x610
[  463.654882][    C1]  ? batadv_nc_worker+0xc7/0x610
[  463.654902][    C1]  ? process_one_work+0x7a9/0x11d0
[  463.654920][    C1]  process_one_work+0x8a9/0x11d0
[  463.654945][    C1]  ? worker_detach_from_pool+0x260/0x260
[  463.654965][    C1]  ? _raw_spin_lock_irqsave+0x120/0x120
[  463.654981][    C1]  ? kthread_data+0x4e/0xc0
[  463.655005][    C1]  ? wq_worker_running+0x97/0x190
[  463.655030][    C1]  worker_thread+0xa47/0x1200
[  463.655059][    C1]  kthread+0x28d/0x320
[  463.655072][    C1]  ? worker_clr_flags+0x190/0x190
[  463.655088][    C1]  ? kthread_blkcg+0xd0/0xd0
[  463.655102][    C1]  ret_from_fork+0x1f/0x30
[  463.655130][    C1]  </TASK>
[  463.998159][   T28] Kernel panic - not syncing: hung_task: blocked tasks
[  464.005041][   T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.101-syzkaller #0
[  464.012941][   T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  464.022996][   T28] Call Trace:
[  464.026265][   T28]  <TASK>
[  464.029226][   T28]  dump_stack_lvl+0x1e3/0x2cb
[  464.033907][   T28]  ? nf_tcp_handle_invalid+0x642/0x642
[  464.039367][   T28]  ? panic+0x764/0x764
[  464.043427][   T28]  ? llist_add_batch+0x160/0x1d0
[  464.048415][   T28]  ? vscnprintf+0x59/0x80
[  464.052739][   T28]  panic+0x318/0x764
[  464.056662][   T28]  ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0
[  464.062830][   T28]  ? memcpy_page_flushcache+0xfc/0xfc
[  464.068206][   T28]  ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0
[  464.074356][   T28]  ? nmi_trigger_cpumask_backtrace+0x33a/0x3f0
[  464.080510][   T28]  ? nmi_trigger_cpumask_backtrace+0x33f/0x3f0
[  464.086662][   T28]  watchdog+0xfc7/0xfd0
[  464.090819][   T28]  ? watchdog+0x1f8/0xfd0
[  464.095164][   T28]  kthread+0x28d/0x320
[  464.099224][   T28]  ? hungtask_pm_notify+0x50/0x50
[  464.104239][   T28]  ? kthread_blkcg+0xd0/0xd0
[  464.108819][   T28]  ret_from_fork+0x1f/0x30
[  464.113239][   T28]  </TASK>
[  464.116620][   T28] Kernel Offset: disabled
[  464.120947][   T28] Rebooting in 86400 seconds..