last executing test programs:

2m16.484729608s ago: executing program 4 (id=3705):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)={0x20, r1, 0x333, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}]}, 0x20}}, 0x0)

2m15.201146872s ago: executing program 4 (id=3708):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
fsopen(&(0x7f0000000040)='ramfs\x00', 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
r0 = eventfd(0x0)
r1 = eventfd(0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000040)={r1, 0x0, 0x2, r0})
connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xa}, 0x20)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@ipv6_deladdr={0x18, 0x15, 0x1, 0x70bd2d, 0x25dfdbfb, {0xa, 0x20, 0x48, 0xfd}}, 0x18}, 0x1, 0x0, 0x0, 0x20040850}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

2m14.274070509s ago: executing program 4 (id=3712):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
pwritev2(r2, 0x0, 0x0, 0x1, 0x3, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106d049cc2000000000001090224000100000000090400000103000000092100000001"], 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$SG_IO(r4, 0x2285, 0x0)
fsopen(0x0, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x14d882, 0x0)
r6 = dup(r5)
sendfile(r5, r6, 0x0, 0x80006)

2m1.621825541s ago: executing program 4 (id=3731):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b70300"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000080)="01", 0x1, 0xffffffffffffffff)
r3 = add_key$user(&(0x7f0000000140), &(0x7f0000002840)={'syz', 0x0}, &(0x7f0000002880)="f40fc24077021c9b084c60ffc26f26db12b9e78d629870bb26edb4a5e1cc0942ed8c58ca4fe84b94a0e31ea64089ee9ca1efb52945ffebbfea11dd3d0df936a10285eccab940ab5c96cb5d81dac1ad2243d878dde6cfd6ea08d5abcb00bb35436929ddabce530b63fab525337057438cf64a506d54d5c83e3e593d1d53ad0e6a44168fe8cfc6ad98b653d80636e4ddc1f2ab58762b3494250b9557f5b606a43e50874c90143034142cd5f7bd9b4dd876b97b7feb75b9138dde818a3c6b96dd80", 0xc0, 0xfffffffffffffffb)
keyctl$dh_compute(0x17, &(0x7f0000001340)={r3, r3, r2}, &(0x7f0000003f00)=""/4101, 0x1005, 0x0)

1m58.92865313s ago: executing program 4 (id=3737):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b70300"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
getpid()
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000080)="01", 0x1, 0xffffffffffffffff)
r3 = add_key$user(&(0x7f0000000140), &(0x7f0000002840)={'syz', 0x0}, &(0x7f0000002880)="f40fc24077021c9b084c60ffc26f26db12b9e78d629870bb26edb4a5e1cc0942ed8c58ca4fe84b94a0e31ea64089ee9ca1efb52945ffebbfea11dd3d0df936a10285eccab940ab5c96cb5d81dac1ad2243d878dde6cfd6ea08d5abcb00bb35436929ddabce530b63fab525337057438cf64a506d54d5c83e3e593d1d53ad0e6a44168fe8cfc6ad98b653d80636e4ddc1f2ab58762b3494250b9557f5b606a43e50874c90143034142cd5f7bd9b4dd876b97b7feb75b9138dde818a3c6b96dd80", 0xc0, 0xfffffffffffffffb)
keyctl$dh_compute(0x17, &(0x7f0000001340)={r3, r3, r2}, &(0x7f0000003f00)=""/4101, 0x1005, 0x0)

1m53.854373401s ago: executing program 4 (id=3742):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
pwritev2(r2, 0x0, 0x0, 0x1, 0x3, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106d049cc2000000000001090224000100000000090400000103000000092100000001"], 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$SG_IO(r4, 0x2285, 0x0)
fsopen(0x0, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x14d882, 0x0)
r6 = dup(r5)
sendfile(r5, r6, 0x0, 0x80006)

1m37.286906788s ago: executing program 32 (id=3742):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
pwritev2(r2, 0x0, 0x0, 0x1, 0x3, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106d049cc2000000000001090224000100000000090400000103000000092100000001"], 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$SG_IO(r4, 0x2285, 0x0)
fsopen(0x0, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x14d882, 0x0)
r6 = dup(r5)
sendfile(r5, r6, 0x0, 0x80006)

28.205645927s ago: executing program 2 (id=3841):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x24040804}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, &(0x7f0000000000)=0x65d)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x20, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000007000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020737200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006", @ANYRES32=r1], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40a00}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)={0x64, 0x1, 0x9, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xf}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, 0x64}}, 0x8004)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0xc, &(0x7f0000001180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ea, &(0x7f00000003c0)="$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")
fadvise64(0xffffffffffffffff, 0xe0ffff, 0x4101, 0x3)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x13, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10)
syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)

22.713838267s ago: executing program 2 (id=3846):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000001c0), 0xfe, 0x25e, &(0x7f0000000280)="$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")
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
mknod$loop(&(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, 0x1)
link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000940)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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")
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a00010000000000000000000a000000000000000000000008001900", @ANYRES32, @ANYBLOB="5ff3764cdf3971bbd85e1c2d7bd122eaebf268773de3f6c80f925dcd8b0571d3c1514d4005eef727e3cc3262c7a74f038bb16e1e7408cafc3683108dc8cb5abf14f92b3e90bd40ce11ee663ee90518db8fed75b98b96fa77fada2e65cc46f6d6ad585e3895e02a2a1a38c10587ba6d1de13fea91c4a11b362e3a82a3aea7d3cc64417815dd277f180331b1b54febc078697c727b7fd77eeda90f4408"], 0x24}}, 0x24004016)

16.643909774s ago: executing program 2 (id=3849):
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
landlock_create_ruleset(0xfffffffffffffffe, 0x5c, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f00007fd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00008d7000/0x2000)=nil)
madvise(&(0x7f00003c1000/0x1000)=nil, 0xdfc3efff, 0x8)

12.306343377s ago: executing program 0 (id=3852):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500000000"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000001c0), 0xfe, 0x25e, &(0x7f0000000280)="$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")
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
mknod$loop(&(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, 0x1)
link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000940)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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")
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a00010000000000000000000a000000000000000000000008001900", @ANYRES32, @ANYBLOB="5ff3764cdf3971bbd85e1c2d7bd122eaebf268773de3f6c80f925dcd8b0571d3c1514d4005eef727e3cc3262c7a74f038bb16e1e7408cafc3683108dc8cb5abf14f92b3e90bd40ce11ee663ee90518db8fed75b98b96fa77fada2e65cc46f6d6ad585e3895e02a2a1a38c10587ba6d1de13fea91c4a11b362e3a82a3aea7d3cc64417815dd277f180331b1b54febc078697c727b7fd77eeda90f4408"], 0x24}}, 0x24004016)

12.284000307s ago: executing program 3 (id=3853):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_virt_wifi\x00', 0x2}, 0x18)
getsockopt$IP_VS_SO_GET_DAEMON(r5, 0x0, 0x487, &(0x7f00000000c0), &(0x7f0000000100)=0x30)
sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000003fc0)={0x0, 0x0, 0x0}, 0x0)
bpf$ENABLE_STATS(0x20, &(0x7f00000000c0), 0x4)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r6, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4)
syz_emit_ethernet(0xde, 0x0, 0x0)
syz_open_dev$vbi(0x0, 0x3, 0x2)
syz_open_procfs$namespace(r1, &(0x7f0000000100)='ns/pid\x00')
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000640)='asymmetric\x00', &(0x7f00000003c0)=@chain)
socket$inet6(0x10, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x803}, 0xe)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)

7.73590975s ago: executing program 0 (id=3854):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b2af0ff000000003609080000000000c39af0ffa0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

7.555182169s ago: executing program 3 (id=3856):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b0000000700000001000100"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10)
socket$netlink(0x10, 0x3, 0x0)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000440)={[{@iocharset={'iocharset', 0x3d, 'cp850'}}, {@namecase}, {@errors_remount}, {@errors_remount}, {@fmask={'fmask', 0x3d, 0x3}}, {}, {@gid}, {@umask={'umask', 0x3d, 0x3}}, {@errors_continue}, {}]}, 0x1, 0x1520, &(0x7f0000002280)="$eJzs3Au4TtXWOPAx5pxr23bS204umznnWLzJZdpJkkuSXJIkSZLcEpJ2ciQhscktaZOE5LJJLpuQ3GKn7X6/XxKSpJ0kIbkl8//s8Hc6db5zznf6ju/59vg9z3rM8a415hrrHet937XWg+86D6nRqGbVBkQE/xa8+EcyAMQCwAAAuA4AAgAoG182Pmt9TonJ/95O2J/rkbSrXQG7mrj/2Rv3P3vj/mdv3P/sjfufvXH/szfuf/bG/WcsO9s8rcD1vGTfhZ//Z2f8+/9/SGapMV+tLXVjF4CYfzaF+5+9cf//zwr+mY24/9kb9z+7ir3aBbD/Bfjznx3k+LtruP/ZG/efsezsaj9/vtoLRLL3e3C1zz/GGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY9nDGX+FAoDL46tdF2OMMcYYY4wxxv48PsfVroAxxhhjjDHGGGP/8xAESFAQQAzkgFjICXEgAOBayA3XQQSuh3i4AfLAjZAX8kF+KAAJUBAKgQYDFghCKAxFIAo3QVG4GYpBcSgBJcFBKUiEW6A03Apl4DYoC7dDObgDykMFqAiV4E6oDHdBFbgbqsI9UA2qQw2oCfdCLbgPasP9UAcegLrwINSDh6A+PAwN4BFoCI9CI3gMGsPj0ASaQjNoDi3+W/kvQXd4GXpAT0iGXtAbXoE+0Bf6QX8YAK/CQHgNBsHrkAKDYQi8AUPhTRgGb8FwGAEj4W0YBe/AaBgDY2EcpMJ4mADvwkR4DybBZJgCUyENpsF0eB9mwEyYBR/AbPgQ5sBcmAfzYQF8BAthEaTDx7AYPoEMWAJLYRkshxWwElbBalgDa2EdrIcNsBE2wWbYAlthG2yHHbATPoVd8Bnshj2wFz6HffDFv5h/+m/yuyAgoECBChXGYAzGYizGYRzmwlyYG3NjBCMYj/GYB/NgXsyL+TE/JmACFsJCaNAgIWFhLIxRjGJRLIrFsBiWwBLo0GEiJmJpvBXLYBksi2WxHJbD8lgBK2AlrISVsTJWwSpYFatiNayGNbAG3ov3Yi+sjbWxDtbBulj38uMpbIANsCE2xEbYCBtjY2yCTbAZNsMW2AJbYktsha2wDbbBttgW22E7TMIkbI/tsQN2wI7YETthJ+yMnbELdsWumS/lAHwZX8aeWE30wt7YG/tgSo5+2B/746s4EF/D1/B1TMHBOATfwDfwTRyGp3A4jsCROBIri3dwNI5BEuMwFVNxAk7AiTgRJ+FknIxTMQ2n4XScjjNwJs7ED3A2fogf4lyci/NxAS7AhbgI0zEdF+NpzMAluBSX4XJcgctxFa7GVbgW1+Fa3IAbcBNuwi24BbfhNtyBO/BTVAD4Ge7BPZiC+3Af7sf9eAAP4EE8iJmYiYfwEB7Gw3gEj+BRPIrH8DiewON4Ek/iKTyNZ/AMnsNzeB5fSPim4afF16SAyKKEEjEiRsSKWBEn4kQukUvkFrlFREREvIgXeUQekVfkFflFfpEgEkQhUUgYYQSJMAYARFRERVFRVBQTxQBECeGEE4kiUZQWpUUZUUaUFbeLcuIOUV5UEK1dJVFJVBZtXBVxt6gqqopqorqoIWqKmqKWqCVqi9qijqgj6oq6op54SNQXvbAfPiKyOtNIDMbGYgg2EU2FvPQN1lIMw1aitWgjnhIjcDi2Ey1dknhWtBejsYP4ixiDz4tOYhx2Fi+KLqKr6CZeEt1FK9dD9BSTsJfoLaZiH9FX9BP9xQysLj7A2TlriNdFihgshog3xHx8UwwTb4nhYoQYKd4Wo8Q7YrQYI8aKcSJVjBcTxLtionhPTBKTxRQxVaSJaWK6eF/MEDPFLPGBmC0+FHPEXDFPzBcLxEdioVgk0sXHYrH4RGSIJWKpWCaWixVipVglVos1Yq1YJ9aLDWKj2CQ2iy1iq9gmtosdYqf4VOwSn4ndYo/YKz4X+8QXYr/4UhwQX4mD4muRKb4Rh8S34rD4ThwR34uj4gdxTBwXJ8SP4qT4SZwSp8UZcVacEz+L8+IXcUF4ARKlkFIqGcgYmUPGypwyTl4jc8ng0rt7vYyXN8g88kaZV+aT+WUBmSALykJSSyOtJBnKwrKIjMqbZFF5sywmi8sSsqR0spRMlLfI0vJWWUbeJsvK22U5eYcsLyvIirKSvFNWlndJiFzcRzVZXdaQNeW9Mhnuk7Xl/bKOfEDWlQ/KevIhWV8+LBvIR2RD+ahsJB+TjeXjsolsKpvJ5rKFfEK2lE/KVrK1bCOfkm3l07KdfEYmyWdle+kvnSLPy07yBdlZvii7yK6ym/xFXpBe9pA9JfQC2Vu+IvvIvrKf7C8HyFflQPmaHCRflylysBwi35BD5ZtymHxLDpcj5Ej5thwl35Gj5Rg5Vo6TqXK8nCDflRPle3KSnCynyKkyTU6T/S7NNEvKf5j/7h/kD/p175vkZrlFbpXb5Ha5Q+6Un8pdcpfcLXfLvXKv3Cf3yf1yvzwgD8iD8qDMlJnykDwkD8vD8og8Io/Ko/KYPC7Pyh/lSfmTPCVPy9PyrDwnz8nzl94DUKiEkkqpQMWoHCpW5VRx6hqVS12rcqvrVERdr+LVDSqPulHlVflUflVAJaiCqpDSyiirSIWqsCqiouomvHTCqBKqpHKqlEpUt/wr+aqoulkVU8V/k3+5vuS/U18L1UK1VC1VK9VKtVFtVFvVVrVT7VSSSlLtVXvVQXVQHVVH1Ul1Up1VZ9VFdVHdVDfVXXVXPVQPlaySVW/1iuqj+qp+qr8aoF5VA9VANUgNUikqRQ1RQ9RQNVQNU8PUcDVcjVQj1Sg1So1Wo9VYNValqlQ1QU1QE9VENUlNUlPUFJWm0tR0NV3NUDPULDVLzVaz1Rw1R81T89QCtUAtVAtVukpXi9VilaGWqCVqmVqmVqgVapVapdaoNWqdWqc2qA0qQ21Wm9VWtVVtV9vVTrVT7VK71G61W+1Ve9U+tU/tV/vVAXVAHVQHVabKVIfUIXVYHVZH1BF1VB1Vx9QxdUKdUCfVSXVKnVJn1Bl1Tp1T59V5dUFdyLrsC0QgAhWoICaICWKD2CAuiAtyBbmC3EHuIBJEgvggPsgT3BjkDfIF+YMCQUJQMCgU6MAENhCXmh4NbgqKBjcHxYLiQYmgZOCCUkFicEtQOrg1KBPcFpQNbg/KBXcE5YMKQcWgUnBnUDm4K6gS3B1UDe4JqgXVgxpBzeDeoFZwX1A7uD+oEzwQ1A0eDOoFDwX1g4eDBsEjQcPg0aBR8FjQOHg8aBI0DZoFzYMWf+r83p/K96TroXvqZN1L99av6D66r+6n++sB+lU9UL+mB+nXdYoerIfoN/RQ/aYept/Sw/UIPVK/rUfpd/RoPUaP1eN0qh6vJ+h39UT9np6kJ+speqpO09P0dP2+nqFn6ln6Az1bf6jn6Ll6np6vF+iP9EK9SKfrj/Vi/YnO0Ev0Ur1ML9cr9Eq9Sq/Wa/RavU6v1xv0Rr1Jb9Zb9Fa9TW/XO/RO/anepT/Tu/UevVd/rvfpL/R+/aU+oL/SB/XXOlN/ow/pb/Vh/Z0+or/XR/UP+pg+rk/oH/VJ/ZM+pU/rM/qsPqd/1uf1L/qC9lkX91k/70YZZWJMjIk1sSbOxJlcJpfJbXKbiImYeBNv8pg8Jq/Ja/Kb/CbBJJhCppDJQoZMYVPYRE3UFDVFTTFTzJQwJYwzziSaRFPalDZlTBlT1pQ15Uw5U96UNxVNRXOnudPcZe4yd5u7zT3mHlPdVDc1TU1Ty9QytU1tU8fUMXVNXVPP1DP1TX3TwDQwDU1D08g0Mo1NY9PENDHNTDPTwrQwLU1L08q0Mm1MG9PWtDXtTDuTZJJMe9PedDAdTEfT0XQynUxn09l0MV1MN9PNdDfdTQ/TwySbZNPb9DZ9TB/Tz/QzA8wAM9AMNIPMIJNiUswQM8QMNUPNMDPMDDcjzMisC1XzjhltxpixZpxJNalmgplgJpqJZpKZZKaYKSbNpJnpZrqZYWaYWWaWmW1mmzlmjpln5pkFZoFZaBaadJNuFpvFJsNkmKVmqVlulpuVZqVZbVabtWatWQ/rzUaz0Ww2m81Ws9VsN9vNTrPT7DK7zG6z2+w1e80+s8/sN/vNAXPAHDQHTabJNIfMIXPYHDZHzBFz1Bw1x8wxc8KcMCfNSXPKnDJnzBlzzuS79HvpTazNaePsNTaXvdbmttfZv43z2wI2wRa0hay2eW2+38TGWlvMFrclbEnrbCmbaG/5XVzeVrAVbSV7p61s77JVfhfXsvfZ2vZ+W8c+YGvae38T17UP2nr2MVsfEcA2tQ1tc9vIPmYb28dtE9vUNrPNbVv7tG1nn7FJ9lnb3j73u3ihXWRX2zV2rV1nd9s99ow9aw/b7+w5+7PtYXvaAfZVO9C+ZgfZ122KHfy7eKR9246y79jRdowda8f9Lp5ip9o0O81Ot+/bGXbm7+IF9iM726bbOXaunWfn/xpn1ZRuP7aL7Sc2wwaw1C6zy+0Ku9Ku+v+1LrMb7Ea7ye6yn9mtdpvdbnfYnZcvhO0eu9d+bvfZL+wh+609YL+yB+0Rm2m/+TXOOr4j9nt71P5gj9nj9oT90Z60P6nL2VnH/qP9xV6w3gIhAUlSFFAM5aBYyklxdA3lomspN11HEbqe4ukGykM3Ul7KR/mpACVQQSpEmgxZIgqpMBWhKN1El8srQSXJUSlKpFuoNN1KZeg2Kku3Uzm6g8pTBapIlehOqkx3URW6m6rSPVSNqlMNqkn3Ui26j2rT/VSHHqC69CDVo4eoPj1MDegRakiPUiN6jBrT49SEmlIzak4t6AlqSU9SK2pNbegpaktPUzt6hpLoWWpPz1EH+gt1pOepE71AnelF6kJdqRu9RN3pZepBPSmZelFveoX6UF/qR/1pAL1KA+k1GkSvUwoNpiH0Bg2lN2kYvUXDaQSNpLdpFL1Do2kMjaVxlErjaQK9SxPpPZpEk2kKTaU0mkbT6X2aQTNpFn1As+lDmkNzaR7NpwX0ES2kRZROH9Ni+oQyaAktpWW0nFbQSlpFq2kNraV1tJ420EbaRJtpC22lbbSddtBO+pR20We0m/bQXvqc9tEXtJ++pAP0FR2krymTvqFD9C0dpu/oCH3ve9IPdIyO0wn6kU7ST3SKTtMZOkvn6Gc6T7/QBfIEIYYilKEKgzAmzBHGhjnDuPCaMFd4bZh1wkTC68P48IYwT3hjmDfMF+YPC4QJYcGwUKhDE9qQwjAsHBYJo+FNYdHw5rBYWDwsEZYMXVgqTAxvCUuHt4ZlwtvCsuHtYbnwjrB8WCF87IFK4Z1h5fCusEp4d1g1vCesFlYPa4Q1w3vDWuF9Ye3w/rBO+EBYJnwwrBc+FNYPHw4bhI+EDcNHw0bhY2Hj8PGwSdg0bBY2D1uET4QtwyfDVmHrsE34VNg2fDpsFz4TJoXPhu3D535d/+Civ78+OewV9g5fCV8Jvb9fzovOjy6IfhRdGF0UTY9+HF0c/SSaEV0SXRpdFl0eXRFdGV0VXR1dE10bXRddH90Q3RjdFPW+Zg5w6ISTTrnAxbgcLtbldHHuGpfLXetyu+tcxF3v4t0NLo+70eV1+Vx+V8AluIKukNPOOOvIha6wK+Ki7iZX1N3sirniroQr6Zwr5RJdc9fCtXAt3ZOulWvt2rin3FPuafe0e8Y945517d1zroP7i+vonned3AvuBfei6+K6um7uJdfdjc998TOZ7Hq73q6P6+P6uX5ugBvgBrqBbpAb5FJcihvihrihbqgb5oa54W64G+lGulFulBvtRruxbqxLdalugpvgJrqJbpKb5Ka4KS7Npbnpbrqb4Wa4yjMv7mWOm+PmuXlugVvgFrqsa8Z0t9gtdhkuwy11S91yt9ytdCvdarfarXVr3Xq33m10G91mt9ltdVvddrfd7XQ73S63y+32112c1O1z+91+d8AdcAfd1y7TfeMOuW/dYfedO+K+d0fdD+6YO+5OuB/dSfeTO+VOuzPurDvnfnbn3S/ugvMuNTI+MiHybmRi5L3IpMjkyJTI1EhaZFpkeuT9yIzIzMisyAeR2ZEPI3MicyPzIvMjCB9FFkYWRdIjH0cWRz6JZESWRJZGlkWWR1ZEvC+4NfSFfREf9Tf5ov5mX8wX9yV8Se98KZ/ob/Gl/a2+jL/Nl/W3+3L+Dl/eV/AV/eO+iW/qm/nmvoV/wrf0T/pWvrVv45/ybf3Tvp1/xif5Z317/5zv4P/iO/rnfSf/gu/sX/RdfFffzb/ku/uXfQ/f0yf7Xr63f8X38X19P9/fD/Cv+oH+NT/Iv+5T/GA/xL/hh/o3/TD/lh/uR/iRMW/7UZdvkWGcT/Xj/QT/rp/o3/OT/GQ/xU/1aX6an+7f9zP8TD/Lf+Bn+w/9HD/Xz/Pz/QL/kV/oF/l0/7Ff7D/xGX7J5YfKfqVf5Vf7NX6tX+fX+w1+o9/kN/stfqvf5rf7HX6n/9Tv8p/53X6P3+s/9/v8F36//9If8F/5g/5rn+m/8Yd+ffr3nT/iv/dH/Q/+mD/uT/gf/Un/kz/lT/sz/qw/53/25/0v/gL/mzXGGGOMsX/K+CtD8ds1Fx/n9/qDHPFXG/cGgGu3Fcj86/VZV5Tr814c9xUJbSMA8GzPzo9cXqpVS05OvrRthoSgyNysG8or+TFwJV4CbeBpSILWUPoP6+8rup6jfzB/9HaAuL/KiYUr8ZX5vwTA5D+Y/4mnRi4sF56J/y/mnwtQrMiVnJxwJV4CbX59vtIayvyd+vO1/Af15/wqFaDVX+XkgivxlfoT4Ul4DpJ+syVjjDHGGGOMMXZRX1Gx4+X7z8t/4/OP7s8T1JWcHHAl/kf354wxxhhjjDHGGLv6nu/a7ZknkpJad/zXB1X+W1n/9KAx/E/NzIM/HHgPcPkVBQD/5oQAWQP5nzyKLf+RfaVc+uj87arlZ30A/zta+WcMrvIXE2OMMcYYY+xPd+Wi/7evq6tVEGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxlg39J/47sat9jIwxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxtjV9v8CAAD//3K3/hI=")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x7, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x2000004c, &(0x7f0000002c00)=ANY=[], 0xfe, 0x152b, &(0x7f00000016c0)="$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")
chdir(0x0)
rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

7.233736778s ago: executing program 2 (id=3857):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000001c0), 0xfe, 0x25e, &(0x7f0000000280)="$eJzs3T9o3FYcB/Cf7k9d16a47VIo/QOllNZg3KFQ6NIuLRhKMaUU2oJLKZ2CHXBssvkyZcmQzEnwlMWEbHEyhiwmSyCrk3hwlgwxGWIyJMMFne7C+Xwmjs93CtbnA7L09J70nkDfZ3mQHEBhjUXEDxFRjojxiKhGRNLe4LNsGWsWl4fXZiLq9d8eJ412WTnTOm4kImoR8V1EpVW3uPrX5tP1n788s1D94tLqn8ODur52W5sbv2xf/PX01alvFkvNfaPNdft1HKaky75KEvF+Pzp7QySVvEfAfkyfvHI3zf0HEfF5I//VKDUje3b+rZvV+PrCXseee3Tno0GOFTh89Xo1/R1YqwOFU2o8AyeliYjItkuliYnsGf5eOYljc/Mnxv+fW5j9L++ZCjgESS37u3fjp+tD10Y68v+wnOV/X77t80iBvkjz//v0yv10e7uc92iAgfg4W6X5H/9n6auQfygc+Yfikn8oLvmHI+CA2ZV/KC75h+KSfzjCqq2NWtdq+Yfikn8oro785/I+LpCP9vwDAMVSH8r7DWQgL3nPPwAAAAAAAAAAAAAAAAAAwG7Lw2szrWVQfd46H7H1Y0RUdvY/1KgtN/4fccTbjZ/vPEnSZi8l2WE9+fvTHk/Qo8s5v3397oN8+7/9SX/Oe2pncc9v2y3NRtTSxpOVyu77P2nefwf33ivqq//22MFrSjrK3/8x2P47PV/Jt/+p9Ygb6fwz2W3+K8WHjXX3+We0/RPLB3T8WY8nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYGBeBAAA//9hymrI")
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
mknod$loop(&(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, 0x1)
creat(&(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a00010000000000000000000a000000000000000000000008001900", @ANYRES32, @ANYBLOB="5ff3764cdf3971bbd85e1c2d7bd122eaebf268773de3f6c80f925dcd8b0571d3c1514d4005eef727e3cc3262c7a74f038bb16e1e7408cafc3683108dc8cb5abf14f92b3e90bd40ce11ee663ee90518db8fed75b98b96fa77fada2e65cc46f6d6ad585e3895e02a2a1a38c10587ba6d1de13fea91c4a11b362e3a82a3aea7d3cc64417815dd277f180331b1b54febc078697c727b7fd77eeda90f4408"], 0x24}}, 0x24004016)

7.059800277s ago: executing program 1 (id=3858):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000001c0), 0xfe, 0x25e, &(0x7f0000000280)="$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")
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
mknod$loop(&(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, 0x1)
creat(&(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a00010000000000000000000a000000000000000000000008001900", @ANYRES32, @ANYBLOB="5ff3764cdf3971bbd85e1c2d7bd122eaebf268773de3f6c80f925dcd8b0571d3c1514d4005eef727e3cc3262c7a74f038bb16e1e7408cafc3683108dc8cb5abf14f92b3e90bd40ce11ee663ee90518db8fed75b98b96fa77fada2e65cc46f6d6ad585e3895e02a2a1a38c10587ba6d1de13fea91c4a11b362e3a82a3aea7d3cc64417815dd277f180331b1b54febc078697c727b7fd77eeda90f4408"], 0x24}}, 0x24004016)

5.877389783s ago: executing program 3 (id=3859):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000001c0), 0xfe, 0x25e, &(0x7f0000000280)="$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")
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
mknod$loop(&(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, 0x1)
creat(&(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a00010000000000000000000a000000000000000000000008001900", @ANYRES32, @ANYBLOB="5ff3764cdf3971bbd85e1c2d7bd122eaebf268773de3f6c80f925dcd8b0571d3c1514d4005eef727e3cc3262c7a74f038bb16e1e7408cafc3683108dc8cb5abf14f92b3e90bd40ce11ee663ee90518db8fed75b98b96fa77fada2e65cc46f6d6ad585e3895e02a2a1a38c10587ba6d1de13fea91c4a11b362e3a82a3aea7d3cc64417815dd277f180331b1b54febc078697c727b7fd77eeda90f4408"], 0x24}}, 0x24004016)

5.508790651s ago: executing program 0 (id=3860):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = gettid()
process_vm_writev(r4, 0x0, 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)

5.496719291s ago: executing program 2 (id=3861):
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = getpid()
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r1}, 0x18)
process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000013c0)=ANY=[@ANYBLOB="01000000000000e69d000040"])
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r2}, 0x10)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r6}, 0x18)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r7}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)

5.345821561s ago: executing program 1 (id=3862):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$rds(0x15, 0x5, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x0, 0x408d7d46, 0x0, 0x0, 0x9}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffffd, 0xa}, 0x0, 0x0)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40)

4.895310959s ago: executing program 1 (id=3863):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b2af0ff000000003609080000000000c39af0ffa0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

4.692581878s ago: executing program 3 (id=3864):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff)
r3 = openat$qrtrtun(0xffffff9c, &(0x7f0000000640), 0x101840)
read$qrtrtun(r3, 0x0, 0x0)
sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x400c090)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7})
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100))
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
r7 = dup3(r6, r5, 0x0)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0)
r9 = socket(0x21, 0x2, 0x2)
setsockopt$MRT6_DEL_MFC_PROXY(r9, 0x110, 0xd3, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_STATION(r9, &(0x7f0000000640)={&(0x7f0000000140), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002cbd7000fcdbdf2512000000"], 0x14}}, 0x40000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f00000005c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/174, 0xae, 0x0, 0x3c}, @fd={0x66642a85, 0x0, r8}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0})
prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000680)={0x8, 0x0, &(0x7f00000001c0)=[@decrefs={0x40046307, 0x1}], 0x1, 0x1000000000000, &(0x7f0000000340)="cb"})
ioctl$VIDIOC_G_ENC_INDEX(r7, 0x8818564c, &(0x7f0000000f00))

3.734963075s ago: executing program 0 (id=3865):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b80)=@delchain={0xe4, 0x65, 0x0, 0x70bd27, 0x0, {}, [@filter_kind_options=@f_flower={{0xb}, {0x30, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x9}, @TCA_FLOWER_KEY_IPV4_SRC_MASK={0x8, 0xb, 0xffffff00}, @TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x5}, @TCA_FLOWER_KEY_ARP_THA_MASK={0xa, 0x42, [0x0, 0xff, 0xff, 0xff, 0xff]}, @TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x900}]}}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0x60, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x44, 0x6, [@m_sample={0x40, 0x1c, 0x0, 0x0, {{0xb}, {0x4}, {0x11, 0x6, "7540328a81220054530cf364b2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}]}]}}]}, 0xe4}}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

3.231409413s ago: executing program 0 (id=3866):
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
landlock_create_ruleset(0xfffffffffffffffe, 0x5c, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f00007fd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00008d7000/0x2000)=nil)
madvise(&(0x7f00003c1000/0x1000)=nil, 0xdfc3efff, 0x8)

3.081027822s ago: executing program 1 (id=3867):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_virt_wifi\x00', 0x2}, 0x18)
getsockopt$IP_VS_SO_GET_DAEMON(r5, 0x0, 0x487, &(0x7f00000000c0), &(0x7f0000000100)=0x30)
sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000003fc0)={0x0, 0x0, 0x0}, 0x0)
bpf$ENABLE_STATS(0x20, &(0x7f00000000c0), 0x4)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r6, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4)
syz_emit_ethernet(0xde, 0x0, 0x0)
syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2)
syz_open_procfs$namespace(r1, &(0x7f0000000100)='ns/pid\x00')
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000640)='asymmetric\x00', &(0x7f00000003c0)=@chain)
socket$inet6(0x10, 0x2, 0x0)
connect$bt_l2cap(r0, 0x0, 0x0)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)

1.538952747s ago: executing program 2 (id=3868):
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = getpid()
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000013c0)=ANY=[@ANYBLOB="01000000000000e69d000040"])
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r1}, 0x10)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r5}, 0x18)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r6}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)

1.512598146s ago: executing program 3 (id=3869):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0)
r0 = open(&(0x7f0000000040)='./bus\x00', 0x14103e, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
ftruncate(r0, 0x20cf01)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x3, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f00000002c0)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
read$FUSE(r0, &(0x7f0000000f80)={0x2020}, 0xfffffe58)

1.258690426s ago: executing program 1 (id=3870):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000001c0), 0xfe, 0x25e, &(0x7f0000000280)="$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")
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
mknod$loop(&(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, 0x1)
creat(&(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a00010000000000000000000a000000000000000000000008001900", @ANYRES32, @ANYBLOB="5ff3764cdf3971bbd85e1c2d7bd122eaebf268773de3f6c80f925dcd8b0571d3c1514d4005eef727e3cc3262c7a74f038bb16e1e7408cafc3683108dc8cb5abf14f92b3e90bd40ce11ee663ee90518db8fed75b98b96fa77fada2e65cc46f6d6ad585e3895e02a2a1a38c10587ba6d1de13fea91c4a11b362e3a82a3aea7d3cc64417815dd277f180331b1b54febc078697c727b7fd77eeda90f4408"], 0x24}}, 0x24004016)

815.944794ms ago: executing program 0 (id=3871):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000001c0), 0xfe, 0x25e, &(0x7f0000000280)="$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")
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
mknod$loop(&(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, 0x1)
creat(&(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a00010000000000000000000a000000000000000000000008001900", @ANYRES32, @ANYBLOB="5ff3764cdf3971bbd85e1c2d7bd122eaebf268773de3f6c80f925dcd8b0571d3c1514d4005eef727e3cc3262c7a74f038bb16e1e7408cafc3683108dc8cb5abf14f92b3e90bd40ce11ee663ee90518db8fed75b98b96fa77fada2e65cc46f6d6ad585e3895e02a2a1a38c10587ba6d1de13fea91c4a11b362e3a82a3aea7d3cc64417815dd277f180331b1b54febc078697c727b7fd77eeda90f4408"], 0x24}}, 0x24004016)

68.813521ms ago: executing program 3 (id=3872):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x10, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp_prespec={0x44, 0x24, 0xbe, 0x3, 0x1, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x658}]}, @timestamp_prespec={0x44, 0x4, 0x0, 0x3, 0x8}, @noop, @noop, @noop]}}}}})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
r3 = dup(r1)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000})
ioctl$KVM_NMI(r4, 0xae9a)
syz_open_dev$usbmon(&(0x7f0000000000), 0x8, 0x8002)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

0s ago: executing program 1 (id=3873):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0)
r0 = open(&(0x7f0000000040)='./bus\x00', 0x14103e, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
ftruncate(r0, 0x20cf01)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x3, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f00000002c0)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
read$FUSE(r0, &(0x7f0000000f80)={0x2020}, 0xfffffe58)

kernel console output (not intermixed with test programs):

T14542] Bluetooth: hci2: command 0x0406 tx timeout
[ 1371.197440][ T4256] sysv_free_block: trying to free block not in datazone
[ 1371.213397][ T4256] sysv_free_inode: inode 0,1,2 or nonexistent inode
[ 1371.229466][T14542] Bluetooth: hci3: command 0x0406 tx timeout
[ 1371.344660][ T4259] sysv_free_block: trying to free block not in datazone
[ 1371.389292][T14542] Bluetooth: hci4: command 0x0406 tx timeout
[ 1371.406570][ T4259] sysv_free_inode: inode 0,1,2 or nonexistent inode
[ 1371.524304][T16436] loop1: detected capacity change from 0 to 129
[ 1371.637434][T16436] VFS: Found a Xenix FS (block size = 512) on device loop1
[ 1372.453681][T16442] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1372.582875][T16442] Bluetooth: hci1: Opcode 0x0406 failed: -4
[ 1372.588847][T16442] Bluetooth: hci1: Suspend notifier action (1) failed: -4
[ 1372.688878][T16442] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1372.718253][T16442] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 1372.748558][T16442] Bluetooth: hci2: Suspend notifier action (1) failed: -4
[ 1372.768788][T16442] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1372.785734][T16442] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 1372.804901][T16442] Bluetooth: hci3: Suspend notifier action (1) failed: -4
[ 1372.818863][T16455] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2896'.
[ 1372.849857][T16442] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1372.876442][T16442] Bluetooth: hci4: Opcode 0x0406 failed: -4
[ 1372.900793][T16442] Bluetooth: hci4: Suspend notifier action (1) failed: -4
[ 1374.199256][T14542] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1375.512112][ T4265] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1375.518233][ T4265] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1375.536820][T14542] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1375.727759][T16471] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2902'.
[ 1375.788898][ T4249] sysv_free_block: trying to free block not in datazone
[ 1375.807722][ T4249] sysv_free_inode: inode 0,1,2 or nonexistent inode
[ 1375.971612][ T4265] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1375.982213][ T4265] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1376.003750][ T4265] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1376.013761][ T4265] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1376.021833][ T4265] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1376.029144][ T4265] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1376.405349][T14542] Bluetooth: hci1: command 0x0406 tx timeout
[ 1376.667582][T16480] netlink: 'syz.1.2901': attribute type 10 has an invalid length.
[ 1376.701960][T16476] syzkaller0 speed is unknown, defaulting to 1000
[ 1376.782350][T12902] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1377.815029][T14542] Bluetooth: hci4: command 0x0406 tx timeout
[ 1377.821138][T14542] Bluetooth: hci3: command 0x0406 tx timeout
[ 1378.110601][T12101] Bluetooth: hci2: command 0x0409 tx timeout
[ 1378.405162][T12902] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1378.701790][T12902] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1378.791213][T12902] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1379.508559][T16476] chnl_net:caif_netlink_parms(): no params data found
[ 1380.189548][T12101] Bluetooth: hci2: command 0x041b tx timeout
[ 1380.403691][T16524] binder: 16494:16524 ioctl 8818564c 20000f00 returned -22
[ 1380.515916][T16476] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1380.527269][T16476] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1380.608164][T16476] device bridge_slave_0 entered promiscuous mode
[ 1380.839132][T16476] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1380.891037][T16476] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1380.925625][T16538] loop0: detected capacity change from 0 to 128
[ 1380.973295][T16476] device bridge_slave_1 entered promiscuous mode
[ 1381.167854][T16538] VFS: Found a Xenix FS (block size = 512) on device loop0
[ 1381.182166][T16538] sysv_free_block: trying to free block not in datazone
[ 1381.194937][T16538] sysv_free_inode: inode 0,1,2 or nonexistent inode
[ 1381.278278][T16476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1381.418087][T16476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1381.934518][T16476] team0: Port device team_slave_0 added
[ 1382.269365][T12101] Bluetooth: hci2: command 0x040f tx timeout
[ 1382.406291][T12902] bond0: (slave wlan1): Releasing backup interface
[ 1382.582508][T16476] team0: Port device team_slave_1 added
[ 1382.730171][T16476] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1382.785142][T16476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1382.964583][T16476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1383.551637][T16476] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1383.565526][T16476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1383.682320][T16476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1383.955935][T16476] device hsr_slave_0 entered promiscuous mode
[ 1384.044983][T16476] device hsr_slave_1 entered promiscuous mode
[ 1384.066767][T16476] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1384.087041][T16476] Cannot create hsr debugfs directory
[ 1384.349801][T12101] Bluetooth: hci2: command 0x0419 tx timeout
[ 1384.379001][T12902] device hsr_slave_0 left promiscuous mode
[ 1384.400087][T12902] device hsr_slave_1 left promiscuous mode
[ 1384.416234][T12902] batman_adv: batadv0: Removing interface: team0
[ 1384.467524][T12902] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1384.480422][T12902] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1384.909775][T12902] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1384.961818][T12902] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1385.126126][T12902] device veth1_macvtap left promiscuous mode
[ 1385.568797][T12902] device veth0_macvtap left promiscuous mode
[ 1385.581817][T12902] device veth1_vlan left promiscuous mode
[ 1385.607276][T12902] device veth0_vlan left promiscuous mode
[ 1386.263673][T16585] binder: 16581:16585 ioctl 8818564c 20000f00 returned -22
[ 1388.223228][T12902] team0 (unregistering): Port device team_slave_1 removed
[ 1388.312060][T12902] team0 (unregistering): Port device team_slave_0 removed
[ 1388.427590][T12902] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1388.854789][T12902] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1389.360449][T12902] bond0 (unregistering): Released all slaves
[ 1389.412260][T16586] netlink: 'syz.0.2918': attribute type 10 has an invalid length.
[ 1389.449924][T16586] device team0 left promiscuous mode
[ 1389.455234][T16586] device team_slave_0 left promiscuous mode
[ 1389.461661][T16586] device team_slave_1 left promiscuous mode
[ 1389.488651][T16586] batman_adv: batadv0: Adding interface: team0
[ 1389.494935][T16586] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1389.520586][T16586] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[ 1389.761813][T16601] 9pnet_virtio: no channels available for device syz
[ 1391.486125][T16609] netlink: 'syz.0.2922': attribute type 10 has an invalid length.
[ 1392.536485][T16476] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1392.548047][T16476] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1392.567178][T16476] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1392.592050][T16476] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1393.613852][T16476] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1393.749866][T12902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1393.785191][T12902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1393.831045][T16476] 8021q: adding VLAN 0 to HW filter on device team0
[ 1394.481574][T16657] 9pnet_virtio: no channels available for device syz
[ 1396.727233][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1396.915058][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1397.028955][ T4359] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1397.036236][ T4359] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1397.055970][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1397.802893][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1397.862479][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1397.893803][ T4359] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1397.901029][ T4359] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1397.997342][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1398.007723][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1398.042477][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1398.056742][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1398.072189][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1398.115186][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1398.144367][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1398.175728][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1398.207085][T16476] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1398.225359][T16476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1398.235242][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1398.247505][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1398.258713][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1398.969233][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1398.977464][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1398.993310][T16476] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1399.085814][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1399.104678][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1399.397774][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1399.430025][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1399.543342][T16698] netlink: set zone limit has 8 unknown bytes
[ 1400.301639][T16476] device veth0_vlan entered promiscuous mode
[ 1400.336234][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1400.378504][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1400.492901][T16476] device veth1_vlan entered promiscuous mode
[ 1400.749724][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1400.758158][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1401.126940][T16709] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2938'.
[ 1401.862003][T16476] device veth0_macvtap entered promiscuous mode
[ 1401.877725][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1401.990387][T16476] device veth1_macvtap entered promiscuous mode
[ 1402.115731][T16476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1402.138064][T16476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1402.164340][T16476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1402.194048][T16476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1402.332616][T16717] binder: BINDER_SET_CONTEXT_MGR already set
[ 1402.360576][T16717] binder: 16711:16717 ioctl 4018620d 200002c0 returned -16
[ 1402.373098][T16476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1402.395020][T16476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1402.503975][T16476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1402.554795][T16476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1402.619746][T16476] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1402.642346][T11940] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1402.665477][T11940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1402.732458][T16476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1402.783168][T16476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1402.852322][T16476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1402.891707][T16476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1402.895071][T16727] loop0: detected capacity change from 0 to 132
[ 1402.956193][T16727] VFS: Found a Xenix FS (block size = 512) on device loop0
[ 1402.969750][T16727] sysv_free_block: trying to free block not in datazone
[ 1402.981992][T16727] sysv_free_inode: inode 0,1,2 or nonexistent inode
[ 1402.992607][T16476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1403.037916][T16476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1403.061489][T16476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1403.075977][T16476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1403.127361][T16476] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1403.165511][T11940] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1403.182936][T11940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1403.278672][T16476] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1403.316266][T16476] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1403.473898][T16476] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1403.495683][T16476] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1403.680463][T16735] loop1: detected capacity change from 0 to 135
[ 1403.754653][T16735] VFS: Found a Xenix FS (block size = 512) on device loop1
[ 1403.765418][T16735] sysv_free_block: trying to free block not in datazone
[ 1403.772696][ T4606] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1403.787868][ T4606] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1403.817453][T12902] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1403.829662][T16735] sysv_free_inode: inode 0,1,2 or nonexistent inode
[ 1403.970303][ T4606] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1404.034180][ T4606] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1404.082650][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1406.523139][T16772] loop0: detected capacity change from 0 to 128
[ 1406.644639][T16772] VFS: Found a Xenix FS (block size = 512) on device loop0
[ 1406.654528][T16772] sysv_free_block: trying to free block not in datazone
[ 1406.699999][T16772] sysv_free_inode: inode 0,1,2 or nonexistent inode
[ 1408.515020][T16799] netlink: set zone limit has 8 unknown bytes
[ 1409.599819][T16802] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2953'.
[ 1410.737902][T16796] netlink: 'syz.0.2951': attribute type 10 has an invalid length.
[ 1410.748059][T16796] netlink: 'syz.0.2951': attribute type 10 has an invalid length.
[ 1410.756257][T16796] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2951'.
[ 1410.765284][T16796] device team0 entered promiscuous mode
[ 1410.770863][T16796] device team_slave_0 entered promiscuous mode
[ 1410.777134][T16796] device team_slave_1 entered promiscuous mode
[ 1410.784266][T16796] 8021q: adding VLAN 0 to HW filter on device team0
[ 1410.791102][T16796] batman_adv: batadv0: Interface activated: team0
[ 1410.797617][T16796] batman_adv: batadv0: Interface deactivated: team0
[ 1410.804299][T16796] batman_adv: batadv0: Removing interface: team0
[ 1412.050184][T16838] binder: BINDER_SET_CONTEXT_MGR already set
[ 1412.056419][T16838] binder: 16815:16838 ioctl 4018620d 20000100 returned -16
[ 1412.209573][T16846] netlink: 'syz.2.2959': attribute type 10 has an invalid length.
[ 1413.372999][T16838] binder: BINDER_SET_CONTEXT_MGR already set
[ 1413.409388][T16838] binder: 16815:16838 ioctl 4018620d 200002c0 returned -16
[ 1413.462681][T16851] binder: 16815:16851 ioctl 8818564c 0 returned -22
[ 1413.789670][T16862] 9pnet_virtio: no channels available for device syz
[ 1416.425197][T16873] netlink: 'syz.2.2964': attribute type 10 has an invalid length.
[ 1416.434983][T16873] netlink: 'syz.2.2964': attribute type 10 has an invalid length.
[ 1416.442861][T16873] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2964'.
[ 1416.452329][T16873] device team0 entered promiscuous mode
[ 1416.457891][T16873] device team_slave_0 entered promiscuous mode
[ 1416.464186][T16873] device team_slave_1 entered promiscuous mode
[ 1416.471337][T16873] 8021q: adding VLAN 0 to HW filter on device team0
[ 1416.478112][T16873] batman_adv: batadv0: Interface activated: team0
[ 1416.484636][T16873] batman_adv: batadv0: Interface deactivated: team0
[ 1416.491341][T16873] batman_adv: batadv0: Removing interface: team0
[ 1418.415564][T16921] netlink: set zone limit has 8 unknown bytes
[ 1421.231675][T14542] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1421.241593][T14542] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1421.250035][T14542] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1421.259393][T14542] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1421.267087][T14542] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 1421.274480][T14542] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1421.520811][T16943] syzkaller0 speed is unknown, defaulting to 1000
[ 1422.788559][T16950] loop3: detected capacity change from 0 to 133
[ 1422.822407][T11940] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1422.824356][T16950] VFS: Found a Xenix FS (block size = 512) on device loop3
[ 1422.844519][T16950] sysv_free_block: trying to free block not in datazone
[ 1422.864549][T16950] sysv_free_inode: inode 0,1,2 or nonexistent inode
[ 1423.027933][T11940] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1423.070930][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[ 1423.077431][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[ 1423.239759][T11940] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1423.348166][T11940] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1423.389267][T12101] Bluetooth: hci5: command 0x0409 tx timeout
[ 1424.189492][T16943] chnl_net:caif_netlink_parms(): no params data found
[ 1424.309238][T16974] binder: BINDER_SET_CONTEXT_MGR already set
[ 1424.327710][T16974] binder: 16969:16974 ioctl 4018620d 20000100 returned -16
[ 1424.387475][T16974] binder: BINDER_SET_CONTEXT_MGR already set
[ 1424.394407][T16974] binder: 16969:16974 ioctl 4018620d 200002c0 returned -16
[ 1425.203152][T16943] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1425.231871][T16943] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1425.259065][T16943] device bridge_slave_0 entered promiscuous mode
[ 1425.424420][T16980] netlink: 'syz.0.2988': attribute type 10 has an invalid length.
[ 1425.433034][T16980] device team0 left promiscuous mode
[ 1425.438409][T16980] device team_slave_0 left promiscuous mode
[ 1425.444588][T16980] device team_slave_1 left promiscuous mode
[ 1425.454209][T16980] batman_adv: batadv0: Adding interface: team0
[ 1425.461732][T16980] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1425.487009][T16980] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[ 1425.497735][T12101] Bluetooth: hci5: command 0x041b tx timeout
[ 1425.497815][T16943] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1425.536236][T16943] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1425.613771][T16943] device bridge_slave_1 entered promiscuous mode
[ 1425.712224][T16984] netlink: 'syz.0.2988': attribute type 10 has an invalid length.
[ 1425.843129][T16984] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2988'.
[ 1425.944885][T17001] loop3: detected capacity change from 0 to 135
[ 1426.000215][T17001] VFS: Found a Xenix FS (block size = 512) on device loop3
[ 1426.015004][T17001] sysv_free_block: trying to free block not in datazone
[ 1426.024869][T17001] sysv_free_inode: inode 0,1,2 or nonexistent inode
[ 1426.222814][T16984] device team0 entered promiscuous mode
[ 1426.240800][T16984] device team_slave_0 entered promiscuous mode
[ 1426.247793][T16984] device team_slave_1 entered promiscuous mode
[ 1426.279688][T16984] 8021q: adding VLAN 0 to HW filter on device team0
[ 1426.286987][T16984] batman_adv: batadv0: Interface activated: team0
[ 1426.293834][T16984] batman_adv: batadv0: Interface deactivated: team0
[ 1426.409389][T16984] batman_adv: batadv0: Removing interface: team0
[ 1426.585905][T16943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1426.793030][T16943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1427.123201][T16943] team0: Port device team_slave_0 added
[ 1427.559322][T12101] Bluetooth: hci5: command 0x040f tx timeout
[ 1427.582836][T16943] team0: Port device team_slave_1 added
[ 1427.734251][T17019] loop4: detected capacity change from 0 to 128
[ 1427.786753][T17019] VFS: Found a Xenix FS (block size = 512) on device loop4
[ 1427.801240][T17019] sysv_free_block: trying to free block not in datazone
[ 1427.811504][T17019] sysv_free_inode: inode 0,1,2 or nonexistent inode
[ 1428.208821][T16943] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1428.228356][T16943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1428.499860][T16943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1428.775460][T16943] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1428.828094][T16943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1428.987590][T17029] loop0: detected capacity change from 0 to 143
[ 1429.014275][T17029] VFS: Found a Xenix FS (block size = 512) on device loop0
[ 1429.027705][T17029] sysv_free_block: trying to free block not in datazone
[ 1429.054955][T17029] sysv_free_inode: inode 0,1,2 or nonexistent inode
[ 1429.193770][T16943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1429.249508][T17040] netlink: 'syz.1.2996': attribute type 10 has an invalid length.
[ 1429.372525][T17046] netlink: 'syz.1.2996': attribute type 10 has an invalid length.
[ 1429.389560][T17046] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2996'.
[ 1429.398728][T17046] device team0 entered promiscuous mode
[ 1429.406077][T17046] device team_slave_0 entered promiscuous mode
[ 1429.629308][T12101] Bluetooth: hci5: command 0x0419 tx timeout
[ 1429.729504][T17046] device team_slave_1 entered promiscuous mode
[ 1429.951556][T17046] 8021q: adding VLAN 0 to HW filter on device team0
[ 1429.979970][T17046] batman_adv: batadv0: Interface activated: team0
[ 1429.986666][T17046] batman_adv: batadv0: Interface deactivated: team0
[ 1429.993748][T17046] batman_adv: batadv0: Removing interface: team0
[ 1430.066620][T17046] bridge0: port 3(team0) entered blocking state
[ 1430.077018][T17046] bridge0: port 3(team0) entered disabled state
[ 1430.104518][T17046] bridge0: port 3(team0) entered blocking state
[ 1430.110856][T17046] bridge0: port 3(team0) entered forwarding state
[ 1430.212083][T11940] device hsr_slave_0 left promiscuous mode
[ 1430.247471][T11940] device hsr_slave_1 left promiscuous mode
[ 1430.262498][T11940] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1430.283005][T11940] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1430.303337][T11940] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1430.314171][T11940] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1430.375953][T17055] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2999'.
[ 1430.405326][T11940] device veth1_macvtap left promiscuous mode
[ 1430.417821][T11940] device veth0_macvtap left promiscuous mode
[ 1430.426571][T11940] device veth1_vlan left promiscuous mode
[ 1430.436652][T11940] device veth0_vlan left promiscuous mode
[ 1432.884582][T17073] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3004'.
[ 1432.926613][T17075] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3005'.
[ 1433.051958][T17078] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3006'.
[ 1433.244066][T11940] device team_slave_1 left promiscuous mode
[ 1433.256381][T11940] team0 (unregistering): Port device team_slave_1 removed
[ 1433.332847][T11940] device team_slave_0 left promiscuous mode
[ 1433.379109][T11940] team0 (unregistering): Port device team_slave_0 removed
[ 1433.676458][T11940] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1433.938262][T11940] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1436.248541][T11940] bond0 (unregistering): Released all slaves
[ 1436.366027][T17091] netlink: 'syz.3.3007': attribute type 10 has an invalid length.
[ 1436.379429][T17091] batman_adv: batadv0: Adding interface: team0
[ 1436.385632][T17091] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1436.410781][T17091] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[ 1436.421476][T17096] netlink: 'syz.3.3007': attribute type 10 has an invalid length.
[ 1436.459433][T17096] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3007'.
[ 1436.468445][T17096] device team0 entered promiscuous mode
[ 1436.516876][T17096] device team_slave_0 entered promiscuous mode
[ 1436.536437][T17096] device team_slave_1 entered promiscuous mode
[ 1436.603328][T17096] 8021q: adding VLAN 0 to HW filter on device team0
[ 1436.630744][T17096] batman_adv: batadv0: Interface activated: team0
[ 1436.654197][T17096] batman_adv: batadv0: Interface deactivated: team0
[ 1436.669467][T17096] batman_adv: batadv0: Removing interface: team0
[ 1436.691669][T17096] bridge0: port 3(team0) entered blocking state
[ 1436.738471][T17096] bridge0: port 3(team0) entered disabled state
[ 1436.802910][T17096] bridge0: port 3(team0) entered blocking state
[ 1436.809281][T17096] bridge0: port 3(team0) entered forwarding state
[ 1436.922424][T16943] device hsr_slave_0 entered promiscuous mode
[ 1436.942149][T17109] loop4: detected capacity change from 0 to 138
[ 1437.081418][T16943] device hsr_slave_1 entered promiscuous mode
[ 1437.109981][T16943] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1437.117545][T16943] Cannot create hsr debugfs directory
[ 1437.179423][T17109] VFS: Found a Xenix FS (block size = 512) on device loop4
[ 1437.188041][T17109] sysv_free_block: trying to free block not in datazone
[ 1437.199233][T17109] sysv_free_inode: inode 0,1,2 or nonexistent inode
[ 1437.421980][T17112] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3013'.
[ 1438.932385][T16943] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1439.012304][T16943] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1439.039862][T17140] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3017'.
[ 1439.058198][T16943] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1439.112361][T16943] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1439.516912][T16943] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1439.628210][ T9988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1439.644129][ T9988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1439.731111][T16943] 8021q: adding VLAN 0 to HW filter on device team0
[ 1439.774802][T17150] loop1: detected capacity change from 0 to 147
[ 1439.832827][T17150] VFS: Found a Xenix FS (block size = 512) on device loop1
[ 1439.842448][T17150] sysv_free_block: trying to free block not in datazone
[ 1439.900471][T17150] sysv_free_inode: inode 0,1,2 or nonexistent inode
[ 1439.913605][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1439.942750][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1440.189865][   T56] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1440.196970][   T56] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1440.275450][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1440.438284][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1440.454054][T17154] loop0: detected capacity change from 0 to 142
[ 1440.470830][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1440.524435][T17154] VFS: Found a Xenix FS (block size = 512) on device loop0
[ 1440.546179][ T4331] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1440.553330][ T4331] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1440.638389][T17154] sysv_free_block: trying to free block not in datazone
[ 1440.638860][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1440.650234][T17154] sysv_free_inode: inode 0,1,2 or nonexistent inode
[ 1440.747246][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1440.770202][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1440.852274][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1440.891430][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1440.935447][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1440.978371][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1441.017663][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1441.044047][T17167] binder: BINDER_SET_CONTEXT_MGR already set
[ 1441.073619][T16943] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1441.133568][T17167] binder: 17159:17167 ioctl 4018620d 20000100 returned -16
[ 1441.135409][T17158] syz.3.3020 (17158): drop_caches: 2
[ 1441.184578][T16943] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1441.193980][T17167] binder: 17159:17167 ioctl c0306201 0 returned -14
[ 1441.217490][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1441.240878][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1441.308714][T17167] binder: BINDER_SET_CONTEXT_MGR already set
[ 1441.315197][T17167] binder: 17159:17167 ioctl 4018620d 200002c0 returned -16
[ 1441.342725][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1441.407869][T17169] binder: 17159:17169 ioctl 8818564c 20000f00 returned -22
[ 1441.988521][T11940] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1441.996894][T11940] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1442.030847][T16943] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1442.375248][T16983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1442.443528][T16983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1442.534332][ T9988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1442.553804][ T9988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1442.623681][T16943] device veth0_vlan entered promiscuous mode
[ 1442.676388][ T9988] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1442.690086][ T9988] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1442.746207][T16943] device veth1_vlan entered promiscuous mode
[ 1442.904805][ T9988] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1442.935400][ T9988] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1442.995461][ T9988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1443.186320][ T9988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1443.194913][T17201] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3027'.
[ 1444.071222][T16943] device veth0_macvtap entered promiscuous mode
[ 1444.116121][T16943] device veth1_macvtap entered promiscuous mode
[ 1444.186391][T16943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1444.208950][T16943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1444.257162][T16943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1444.307301][T16943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1444.372509][T16943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1444.463612][T16943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1444.508264][T16943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1444.528867][T16943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1444.540982][T16943] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1444.550216][T11940] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1444.626512][T11940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1444.682618][T16943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1444.711231][T16943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1444.722165][T16943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1444.733029][T16943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1444.748144][T16943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1444.762517][T16943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1444.786478][T17219] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3029'.
[ 1444.800465][T16943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1444.817063][T16943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1444.911845][T16943] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1444.952796][ T9988] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1444.990451][ T9988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1445.020502][T16943] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1445.044220][T16943] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1445.079454][T16943] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1445.238926][T16943] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1445.396303][T17230] loop0: detected capacity change from 0 to 145
[ 1445.535203][T16983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1445.545909][ T4606] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1445.554251][ T4606] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1445.562262][T17230] VFS: Found a Xenix FS (block size = 512) on device loop0
[ 1445.574443][T17230] sysv_free_block: trying to free block not in datazone
[ 1445.603994][ T9988] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1445.635767][T17230] sysv_free_inode: inode 0,1,2 or nonexistent inode
[ 1445.646992][T16983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1445.769644][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1447.597622][T14542] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1447.609484][T14542] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1447.617152][T14542] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1447.648535][T14542] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1447.666244][T14542] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1447.673562][T14542] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1448.032905][T17263] syzkaller0 speed is unknown, defaulting to 1000
[ 1448.217289][T16983] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1448.346458][T17279] Bluetooth: MGMT ver 1.22
[ 1448.404113][T16983] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1448.810912][T16983] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1448.934391][T16983] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1449.597875][T17263] chnl_net:caif_netlink_parms(): no params data found
[ 1449.717724][T14542] Bluetooth: hci0: command 0x0409 tx timeout
[ 1450.158582][T17263] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1450.167272][T17263] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1450.184621][T17263] device bridge_slave_0 entered promiscuous mode
[ 1450.244597][T17263] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1450.259435][T17263] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1450.327421][T17263] device bridge_slave_1 entered promiscuous mode
[ 1450.681276][T17263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1450.700907][T17263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1450.827388][T17263] team0: Port device team_slave_0 added
[ 1450.918879][T17263] team0: Port device team_slave_1 added
[ 1451.032580][T17263] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1451.060974][T17263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1451.188237][T17263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1451.461757][T17263] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1451.490393][T17263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1451.584805][T17263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1451.789425][T14542] Bluetooth: hci0: command 0x041b tx timeout
[ 1451.853267][T17339] loop3: detected capacity change from 0 to 139
[ 1452.003495][T17339] VFS: Found a Xenix FS (block size = 512) on device loop3
[ 1452.018140][T17339] sysv_free_block: trying to free block not in datazone
[ 1452.027672][T17339] sysv_free_inode: inode 0,1,2 or nonexistent inode
[ 1452.063127][T17263] device hsr_slave_0 entered promiscuous mode
[ 1452.094146][T17263] device hsr_slave_1 entered promiscuous mode
[ 1452.139519][T17263] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1452.211996][T17263] Cannot create hsr debugfs directory
[ 1452.280069][T17345] loop0: detected capacity change from 0 to 133
[ 1452.409292][T17345] VFS: Found a Xenix FS (block size = 512) on device loop0
[ 1452.466037][T17345] sysv_free_block: trying to free block not in datazone
[ 1452.476876][T16983] device hsr_slave_0 left promiscuous mode
[ 1452.494496][T16983] device hsr_slave_1 left promiscuous mode
[ 1452.521977][T17345] sysv_free_inode: inode 0,1,2 or nonexistent inode
[ 1452.535178][T16983] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1452.574084][T16983] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1452.627897][T16983] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1452.667177][T16983] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1452.679067][T16983] bridge0: port 3(team0) entered disabled state
[ 1452.697547][T16983] device bridge_slave_1 left promiscuous mode
[ 1452.706194][T16983] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1452.724620][T16983] device bridge_slave_0 left promiscuous mode
[ 1452.735699][T16983] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1452.845136][T17351] loop4: detected capacity change from 0 to 128
[ 1452.892101][T17351] VFS: Found a Xenix FS (block size = 512) on device loop4
[ 1452.950495][T16983] device veth1_macvtap left promiscuous mode
[ 1452.959666][T17351] sysv_free_block: trying to free block not in datazone
[ 1452.979060][T17351] sysv_free_inode: inode 0,1,2 or nonexistent inode
[ 1452.987517][T16983] device veth0_macvtap left promiscuous mode
[ 1453.017382][T16983] device veth1_vlan left promiscuous mode
[ 1453.061698][T16983] device veth0_vlan left promiscuous mode
[ 1453.879461][T14542] Bluetooth: hci0: command 0x040f tx timeout
[ 1454.642178][T16983] device team_slave_1 left promiscuous mode
[ 1454.656108][T16983] team0 (unregistering): Port device team_slave_1 removed
[ 1454.728784][T16983] device team_slave_0 left promiscuous mode
[ 1454.748576][T16983] team0 (unregistering): Port device team_slave_0 removed
[ 1454.806018][T16983] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1454.858511][T16983] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1455.461138][T16983] bond0 (unregistering): Released all slaves
[ 1455.949252][T14542] Bluetooth: hci0: command 0x0419 tx timeout
[ 1456.040490][T17373] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3051'.
[ 1456.067785][T17368] loop2: detected capacity change from 0 to 135
[ 1456.203468][T17368] VFS: Found a Xenix FS (block size = 512) on device loop2
[ 1456.214571][T17368] sysv_free_block: trying to free block not in datazone
[ 1456.225318][T17368] sysv_free_inode: inode 0,1,2 or nonexistent inode
[ 1456.997753][T17263] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1457.028514][T17263] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1457.053933][T17263] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1457.081552][T17263] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1457.578297][T17263] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1457.618644][T11940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1457.642185][T11940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1457.699388][T17263] 8021q: adding VLAN 0 to HW filter on device team0
[ 1457.768766][T11940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1457.998078][T11940] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1458.005274][T17393] loop0: detected capacity change from 0 to 152
[ 1458.029230][T14542] Bluetooth: hci0: command 0x0c20 tx timeout
[ 1458.056189][T11940] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1458.063373][T11940] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1458.088039][T11940] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1458.130408][ T9988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1458.172160][ T9988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1458.214220][T17393] VFS: Found a Xenix FS (block size = 512) on device loop0
[ 1458.230095][ T9988] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1458.239221][ T9988] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1458.274241][T17393] sysv_free_block: trying to free block not in datazone
[ 1458.308789][ T9988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1458.338116][T17393] sysv_free_inode: inode 0,1,2 or nonexistent inode
[ 1458.349813][ T9988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1458.506592][T17263] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1458.678906][T17263] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1458.781114][ T9988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1458.803635][ T9988] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1458.833568][ T9988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1458.899959][ T9988] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1458.965060][ T9988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1458.974603][ T9988] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1458.983695][ T9988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1458.993581][ T9988] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1459.011119][ T9988] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1459.022847][ T9988] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1460.030153][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1460.048052][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1460.090586][T17263] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1460.132298][ T9988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1460.159832][ T9988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1460.180625][T17423] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3057'.
[ 1460.251286][ T9988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1460.289857][ T9988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1460.328115][T17263] device veth0_vlan entered promiscuous mode
[ 1460.405674][ T9988] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1460.439890][ T9988] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1460.474931][T17263] device veth1_vlan entered promiscuous mode
[ 1460.613199][T11940] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1460.630345][T11940] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1460.708478][T11940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1460.724254][T11940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1460.766526][T17263] device veth0_macvtap entered promiscuous mode
[ 1460.806098][T17263] device veth1_macvtap entered promiscuous mode
[ 1460.933843][T17263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1461.014284][T17263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1461.066709][T17263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1461.238763][T17263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1461.456525][T17263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1461.591507][T17263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1461.601756][T17263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1461.613124][T17263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1461.625205][T17263] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1461.634976][T11940] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1461.644755][T11940] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1461.653110][T11940] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1461.662742][T11940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1461.691433][T17263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1461.711460][T17445] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3061'.
[ 1461.729295][T17263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1462.044710][T17263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1462.085267][T17263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1462.126000][T17263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1462.211380][T17263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1462.223134][T17263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1462.233824][T17263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1462.248578][T17263] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1462.299036][T11940] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1462.320888][T11940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1462.443139][T17263] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1462.533978][T17263] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1462.699303][T17263] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1462.708234][T17263] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1463.009083][T17462] netlink: set zone limit has 8 unknown bytes
[ 1463.687083][   T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1463.716308][   T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1463.766380][ T4331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1463.783333][T17465] loop3: detected capacity change from 0 to 129
[ 1463.824392][ T4331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1463.845717][ T9988] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1463.885488][T17465] VFS: Found a Xenix FS (block size = 512) on device loop3
[ 1463.902140][ T9988] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1463.941964][T17465] sysv_free_block: trying to free block not in datazone
[ 1463.962419][T17465] sysv_free_inode: inode 0,1,2 or nonexistent inode
[ 1464.261517][T17476] binder: 17472:17476 ioctl c0306201 0 returned -14
[ 1464.411811][T17478] binder: 17472:17478 ioctl 8818564c 20000f00 returned -22
[ 1464.636147][T17482] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3065'.
[ 1465.967712][T12101] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1465.977544][T12101] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1465.985453][T12101] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1465.994947][T12101] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1466.004550][T12101] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1466.012805][T12101] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1466.147944][T17493] syzkaller0 speed is unknown, defaulting to 1000
[ 1466.227958][T17500] loop1: detected capacity change from 0 to 128
[ 1466.241753][T17499] loop4: detected capacity change from 0 to 128
[ 1466.304297][T17500] VFS: Found a Xenix FS (block size = 512) on device loop1
[ 1466.389611][T17499] VFS: Found a Xenix FS (block size = 512) on device loop4
[ 1466.413914][T17500] sysv_free_block: trying to free block not in datazone
[ 1466.454069][T17499] sysv_free_block: trying to free block not in datazone
[ 1466.466319][T17500] sysv_free_inode: inode 0,1,2 or nonexistent inode
[ 1466.500022][T17499] sysv_free_inode: inode 0,1,2 or nonexistent inode
[ 1466.974288][ T4606] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1467.086191][ T4606] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1467.183994][ T4606] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1467.294413][ T4606] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1467.405444][T17493] chnl_net:caif_netlink_parms(): no params data found
[ 1467.829003][T17493] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1467.866515][T17493] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1467.958893][T17493] device bridge_slave_0 entered promiscuous mode
[ 1468.109293][T12101] Bluetooth: hci4: command 0x0409 tx timeout
[ 1468.351055][T17493] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1468.358275][T17493] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1468.392518][T17493] device bridge_slave_1 entered promiscuous mode
[ 1468.401898][T17517] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3071'.
[ 1468.535197][T17522] loop1: detected capacity change from 0 to 128
[ 1468.569066][T17493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1468.617601][T17522] VFS: Found a Xenix FS (block size = 512) on device loop1
[ 1468.701368][T17522] sysv_free_block: trying to free block not in datazone
[ 1468.715736][T17522] sysv_free_inode: inode 0,1,2 or nonexistent inode
[ 1468.841245][T17493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1469.152791][T17493] team0: Port device team_slave_0 added
[ 1469.405144][T17493] team0: Port device team_slave_1 added
[ 1469.738919][T17493] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1469.763253][T17493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1470.025241][T17493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1470.189335][T12101] Bluetooth: hci4: command 0x041b tx timeout
[ 1470.436029][T17493] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1470.470574][T17493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1470.651396][T17493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1470.981208][T17548] loop1: detected capacity change from 0 to 136
[ 1471.057386][T17548] VFS: Found a Xenix FS (block size = 512) on device loop1
[ 1471.076624][T17548] sysv_free_block: trying to free block not in datazone
[ 1471.087519][T17548] sysv_free_inode: inode 0,1,2 or nonexistent inode
[ 1471.266007][T17493] device hsr_slave_0 entered promiscuous mode
[ 1471.296921][T17493] device hsr_slave_1 entered promiscuous mode
[ 1472.270364][T12101] Bluetooth: hci4: command 0x040f tx timeout
[ 1472.306140][T17552] loop3: detected capacity change from 0 to 131
[ 1472.547941][T17552] VFS: Found a Xenix FS (block size = 512) on device loop3
[ 1472.587185][T17552] sysv_free_block: trying to free block not in datazone
[ 1472.612451][T17552] sysv_free_inode: inode 0,1,2 or nonexistent inode
[ 1472.715309][T17556] loop2: detected capacity change from 0 to 128
[ 1472.905915][T17556] VFS: Found a Xenix FS (block size = 512) on device loop2
[ 1472.919004][T17556] sysv_free_block: trying to free block not in datazone
[ 1472.937765][T17556] sysv_free_inode: inode 0,1,2 or nonexistent inode
[ 1473.025427][ T9886] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1473.216273][ T4606] device hsr_slave_0 left promiscuous mode
[ 1473.216731][ T4606] device hsr_slave_1 left promiscuous mode
[ 1473.217225][ T4606] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1473.217412][ T4606] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1473.223603][ T4606] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1473.223629][ T4606] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1473.312975][ T4606] device veth1_macvtap left promiscuous mode
[ 1473.313064][ T4606] device veth0_macvtap left promiscuous mode
[ 1473.313115][ T4606] device veth1_vlan left promiscuous mode
[ 1473.313187][ T4606] device veth0_vlan left promiscuous mode
[ 1474.317141][T17580] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3081'.
[ 1474.359266][T12101] Bluetooth: hci4: command 0x0419 tx timeout
[ 1474.535025][T17584] loop4: detected capacity change from 0 to 129
[ 1474.629798][T17584] VFS: Found a Xenix FS (block size = 512) on device loop4
[ 1474.741885][T17584] sysv_free_block: trying to free block not in datazone
[ 1474.803564][T17584] sysv_free_inode: inode 0,1,2 or nonexistent inode
[ 1475.694835][ T4606] device team_slave_1 left promiscuous mode
[ 1475.740502][ T4606] team0 (unregistering): Port device team_slave_1 removed
[ 1475.893786][ T4606] device team_slave_0 left promiscuous mode
[ 1475.944604][ T4606] team0 (unregistering): Port device team_slave_0 removed
[ 1476.248261][ T4606] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1476.252556][T17593] loop4: detected capacity change from 0 to 142
[ 1476.316836][T17593] VFS: Found a Xenix FS (block size = 512) on device loop4
[ 1476.327362][T17593] sysv_free_block: trying to free block not in datazone
[ 1476.353936][T17593] sysv_free_inode: inode 0,1,2 or nonexistent inode
[ 1476.587944][ T4606] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1477.140148][T17595] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3085'.
[ 1477.591799][ T4606] bond0 (unregistering): Released all slaves
[ 1478.137881][T17604] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3088'.
[ 1478.411166][T17493] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1478.539394][T17493] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1478.678267][T17493] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1478.746096][T17493] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1479.122826][T17493] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1479.194906][T10755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1479.214166][T10755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1479.277933][T17493] 8021q: adding VLAN 0 to HW filter on device team0
[ 1479.305013][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1479.320038][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1479.348867][ T4331] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1479.356104][ T4331] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1479.405886][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1479.427859][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1479.455617][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1479.498922][ T4331] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1479.506126][ T4331] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1479.606964][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1479.666798][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1479.697889][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1479.731545][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1479.755022][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1479.781160][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1479.789913][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1479.812050][T17493] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1479.869288][T17493] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1479.935640][T16983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1479.976292][T16983] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1480.031616][T16983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1480.041155][T16983] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1480.050206][T16983] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1480.780964][ T9988] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1480.827030][ T9988] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1480.919003][T17493] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1481.053641][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1481.088406][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1481.294236][T10755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1481.313709][T10755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1481.347843][T10755] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1481.373544][T10755] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1481.444437][T17493] device veth0_vlan entered promiscuous mode
[ 1481.513737][T17493] device veth1_vlan entered promiscuous mode
[ 1481.658064][T10755] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1481.676953][T10755] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1481.685496][T10755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1481.740186][T10755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1481.778525][T17493] device veth0_macvtap entered promiscuous mode
[ 1481.798636][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1481.813947][T17673] loop2: detected capacity change from 0 to 136
[ 1481.832915][T17493] device veth1_macvtap entered promiscuous mode
[ 1481.892294][T17493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1481.944669][T17673] VFS: Found a Xenix FS (block size = 512) on device loop2
[ 1481.984943][T17493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1481.993834][T17673] sysv_free_block: trying to free block not in datazone
[ 1481.995413][T17493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1482.010243][T17673] sysv_free_inode: inode 0,1,2 or nonexistent inode
[ 1482.026167][T17493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1482.047202][T17493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1482.168397][T17493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1482.208056][T17493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1482.286323][T17493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1482.324076][T17493] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1482.339879][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1482.416618][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1482.482594][T17493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1482.511860][T17493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1482.545474][T17493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1482.707414][T17685] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3101'.
[ 1482.804304][T17493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1482.960896][T17493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1483.140450][T17493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1483.229522][T17493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1483.335366][T17493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1483.387131][T17493] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1483.427701][T10755] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1483.450167][T10755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1483.488319][T17493] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1483.566150][T17493] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1483.639747][T17493] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1483.648508][T17493] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1483.984146][T10755] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1484.077664][T10755] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1484.170915][ T9988] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1484.179065][ T9988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1484.233585][T16983] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1484.282367][T16983] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1484.511347][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[ 1484.517721][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[ 1484.760712][T17718] loop0: detected capacity change from 0 to 137
[ 1484.866623][T17718] VFS: Found a Xenix FS (block size = 512) on device loop0
[ 1484.882606][T17718] sysv_free_block: trying to free block not in datazone
[ 1484.917962][T17718] sysv_free_inode: inode 0,1,2 or nonexistent inode
[ 1486.185923][T17723] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3109'.
[ 1486.314685][T17726] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3108'.
[ 1487.147034][T16983] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1487.421477][T16983] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1487.445692][T14542] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1487.456603][T14542] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1487.465369][T14542] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1487.476339][T14542] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1487.488821][T16983] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1487.503813][T14542] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1487.513057][T14542] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1487.526242][T16983] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1487.570980][T17738] syzkaller0 speed is unknown, defaulting to 1000
[ 1488.064337][T17745] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3112'.
[ 1489.549365][T14542] Bluetooth: hci1: command 0x0409 tx timeout
[ 1489.718260][T17738] chnl_net:caif_netlink_parms(): no params data found
[ 1490.117903][T17738] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1490.141182][T17738] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1490.158498][T17738] device bridge_slave_0 entered promiscuous mode
[ 1490.185005][T16983] infiniband syz1: set down
[ 1490.326137][T16983] bond0: (slave wlan1): Releasing backup interface
[ 1490.593638][T11940] smc: removing ib device syz1
[ 1490.631334][T17738] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1490.659339][T17738] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1490.746393][T17738] device bridge_slave_1 entered promiscuous mode
[ 1490.823713][T12884] syzkaller0 speed is unknown, defaulting to 1000
[ 1490.981501][T17738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1491.323270][T17792] netlink: set zone limit has 8 unknown bytes
[ 1491.411320][T17738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1491.631086][T14542] Bluetooth: hci1: command 0x041b tx timeout
[ 1492.153600][T17738] team0: Port device team_slave_0 added
[ 1492.227928][T17738] team0: Port device team_slave_1 added
[ 1492.379335][T15111] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[ 1492.434465][T17738] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1492.486483][T17738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1492.581582][T15111] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1492.614326][T15111] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1492.644826][T17738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1492.688314][T15111] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[ 1492.702758][T15111] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1492.709833][T17738] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1492.732892][T17738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1492.767021][T15111] usb 3-1: config 0 descriptor??
[ 1492.879217][T17738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1493.148467][T17738] device hsr_slave_0 entered promiscuous mode
[ 1493.183514][T15111] usbhid 3-1:0.0: can't add hid device: -71
[ 1493.201129][T15111] usbhid: probe of 3-1:0.0 failed with error -71
[ 1493.226723][T17738] device hsr_slave_1 entered promiscuous mode
[ 1493.260966][T17738] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1493.304534][T15111] usb 3-1: USB disconnect, device number 5
[ 1493.339472][T17738] Cannot create hsr debugfs directory
[ 1493.619915][T17816] loop3: detected capacity change from 0 to 130
[ 1493.668791][T17816] VFS: Found a Xenix FS (block size = 512) on device loop3
[ 1493.677551][T17816] sysv_free_block: trying to free block not in datazone
[ 1493.687769][T17816] sysv_free_inode: inode 0,1,2 or nonexistent inode
[ 1493.709292][T14542] Bluetooth: hci1: command 0x040f tx timeout
[ 1495.259499][T16983] device hsr_slave_0 left promiscuous mode
[ 1495.284800][T16983] device hsr_slave_1 left promiscuous mode
[ 1495.298577][T17828] loop2: detected capacity change from 0 to 139
[ 1495.350039][T16983] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1495.363431][T17828] VFS: Found a Xenix FS (block size = 512) on device loop2
[ 1495.371880][T17828] sysv_free_block: trying to free block not in datazone
[ 1495.379844][T17828] sysv_free_inode: inode 0,1,2 or nonexistent inode
[ 1495.447107][T16983] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1495.517224][T16983] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1495.569351][T16983] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1495.706639][T16983] device veth1_macvtap left promiscuous mode
[ 1495.726085][T16983] device veth0_macvtap left promiscuous mode
[ 1495.742714][T16983] device veth1_vlan left promiscuous mode
[ 1495.755240][T16983] device veth0_vlan left promiscuous mode
[ 1495.789381][T14542] Bluetooth: hci1: command 0x0419 tx timeout
[ 1496.831506][T17846] loop1: detected capacity change from 0 to 131
[ 1496.893478][T17846] VFS: Found a Xenix FS (block size = 512) on device loop1
[ 1496.902764][T17846] sysv_free_block: trying to free block not in datazone
[ 1496.938214][T17846] sysv_free_inode: inode 0,1,2 or nonexistent inode
[ 1498.564117][T16983] device team_slave_1 left promiscuous mode
[ 1498.584184][T16983] team0 (unregistering): Port device team_slave_1 removed
[ 1498.655784][T16983] device team_slave_0 left promiscuous mode
[ 1498.675850][T16983] team0 (unregistering): Port device team_slave_0 removed
[ 1498.785491][T16983] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1498.885741][T16983] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1499.851512][T16983] bond0 (unregistering): Released all slaves
[ 1500.744252][T17738] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1500.852983][T17738] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1501.014248][T17738] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1501.097258][T17738] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1501.712403][T17738] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1501.819346][T16983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1501.949439][T14542] Bluetooth: hci2: command 0x0406 tx timeout
[ 1502.004242][T16983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1502.058856][T17738] 8021q: adding VLAN 0 to HW filter on device team0
[ 1502.186215][T10755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1502.195476][T10755] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1502.205043][T10755] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1502.212205][T10755] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1502.221043][T10755] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1502.233310][T10755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1502.265203][T10755] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1502.307571][T10755] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1502.314812][T10755] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1502.373986][T10755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1502.384472][T10755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1502.409924][T10755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1502.552596][T10755] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1502.581804][T10755] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1502.630705][T16983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1502.662791][T16983] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1502.759724][T17738] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1502.803060][T17738] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1502.853797][T11940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1502.874897][T11940] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1502.906577][T11940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1502.974328][T11940] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1503.044390][T11940] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1503.765178][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1503.779422][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1503.811303][T17738] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1505.111441][T17929] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3140'.
[ 1505.454178][T11940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1505.464700][T11940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1505.592092][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1505.650114][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1505.707877][T17738] device veth0_vlan entered promiscuous mode
[ 1505.755302][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1505.783471][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1505.816660][T17738] device veth1_vlan entered promiscuous mode
[ 1505.920636][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1506.035242][T17941] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3142'.
[ 1506.050399][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1506.059740][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1506.069372][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1506.081092][T17738] device veth0_macvtap entered promiscuous mode
[ 1506.148542][T17738] device veth1_macvtap entered promiscuous mode
[ 1506.230414][T17738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1506.259303][T17738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1506.277224][T17738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1506.295537][T17738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1506.305507][T17738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1506.319650][T17738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1506.332917][T17738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1506.344461][T17738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1506.364269][T17738] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1506.389250][ T4754] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[ 1506.396140][T17738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1506.438054][T17738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1506.534079][T17738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1506.559479][T17738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1506.635481][ T4754] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1506.656140][T17738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1506.692590][T17738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1506.707251][ T4754] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1506.755672][T17738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1506.819505][T17738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1506.850122][ T4754] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[ 1506.867829][T17738] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1506.902343][T10755] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1506.914331][ T4754] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1506.930001][T10755] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1506.987006][T10755] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1507.003754][ T4754] usb 4-1: config 0 descriptor??
[ 1507.035698][T10755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1507.061684][T10755] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1507.140587][T10755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1507.223681][T17738] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1507.270978][T17738] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1507.346889][T17738] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1507.428888][T17738] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1507.642531][ T4754] usbhid 4-1:0.0: can't add hid device: -32
[ 1507.655848][ T4754] usbhid: probe of 4-1:0.0 failed with error -32
[ 1507.687344][ T4606] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1507.741160][ T4754] usb 4-1: USB disconnect, device number 13
[ 1507.748399][ T4606] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1507.843814][T11940] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1507.946675][ T4606] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1507.998905][ T4606] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1508.066654][T11940] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1508.788957][T17985] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3148'.
[ 1510.289536][T18015] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3152'.
[ 1516.355144][T18094] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3166'.
[ 1519.310967][T18118] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3172'.
[ 1529.740727][T18200] netlink: set zone limit has 8 unknown bytes
[ 1534.559858][T18243] netlink: set zone limit has 8 unknown bytes
[ 1539.367706][T18289] netlink: set zone limit has 8 unknown bytes
[ 1546.049595][T18341] netlink: set zone limit has 8 unknown bytes
[ 1546.350304][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[ 1546.363745][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[ 1548.359277][T12101] Bluetooth: hci5: command 0x0406 tx timeout
[ 1551.389003][T18378] process 'syz.1.3236' launched '/dev/fd/9' with NULL argv: empty string added
[ 1551.809280][T15111] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[ 1552.012662][T15111] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1552.061423][T15111] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1552.138519][T15111] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1552.209176][T15111] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1552.264777][T15111] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1552.350235][T15111] usb 3-1: config 0 descriptor??
[ 1552.791644][T15111] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[ 1552.916641][T15111] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[ 1552.924478][T15111] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[ 1552.932104][T15111] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[ 1552.940041][T15111] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[ 1552.949006][T15111] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving
[ 1553.109189][T18393] netlink: set zone limit has 8 unknown bytes
[ 1553.195194][T15111] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[ 1553.453974][T15111] usb 3-1: USB disconnect, device number 6
[ 1556.545387][T18418] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1567.855737][T18554] kvm: emulating exchange as write
[ 1569.461824][T18578] binder: transaction release 405 bad handle 1, ret = -22
[ 1569.475902][T18578] binder: 18575:18578 ioctl 8818564c 20000f00 returned -22
[ 1571.924675][T18607] netlink: set zone limit has 8 unknown bytes
[ 1573.516798][T18623] tipc: Started in network mode
[ 1573.535453][T18623] tipc: Node identity 7, cluster identity 4711
[ 1573.557572][T18623] tipc: Node number set to 7
[ 1573.629244][T12101] Bluetooth: hci0: command 0x0406 tx timeout
[ 1574.660817][T18647] binder: transaction release 411 bad handle 1, ret = -22
[ 1574.678513][T18647] binder: 18643:18647 ioctl 8818564c 20000f00 returned -22
[ 1577.417000][T18691] binder: transaction release 417 bad handle 1, ret = -22
[ 1577.437241][T18691] binder: 18685:18691 ioctl 8818564c 20000f00 returned -22
[ 1581.443409][T18728] netlink: set zone limit has 8 unknown bytes
[ 1582.199411][T18732] tipc: Started in network mode
[ 1582.204332][T18732] tipc: Node identity 7, cluster identity 4711
[ 1582.248378][T18732] tipc: Node number set to 7
[ 1582.374024][T18737] binder: transaction release 423 bad handle 1, ret = -22
[ 1582.402353][T18737] binder: 18734:18737 ioctl 8818564c 20000f00 returned -22
[ 1584.300935][T18756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1584.875601][T18771] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3352'.
[ 1584.915664][T18771] netlink: set zone limit has 8 unknown bytes
[ 1588.394066][T18806] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1588.989299][T12101] Bluetooth: hci4: command 0x0406 tx timeout
[ 1600.911233][T18953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1607.391321][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[ 1607.397738][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[ 1609.478099][T19075] binder: transaction release 429 bad handle 1, ret = -22
[ 1609.489678][T19075] binder: 19073:19075 ioctl 8818564c 20000f00 returned -22
[ 1612.682482][T19118] binder: transaction release 435 bad handle 1, ret = -22
[ 1612.715461][T19118] binder: 19116:19118 ioctl 8818564c 20000f00 returned -22
[ 1614.167789][T19143] netlink: set zone limit has 8 unknown bytes
[ 1614.589213][T12101] Bluetooth: hci1: command 0x0406 tx timeout
[ 1616.124451][T19163] binder: transaction release 441 bad handle 1, ret = -22
[ 1616.133107][T19163] binder: 19160:19163 ioctl 8818564c 20000f00 returned -22
[ 1617.558305][T19186] netlink: set zone limit has 8 unknown bytes
[ 1620.313594][T19214] binder: transaction release 447 bad handle 1, ret = -22
[ 1620.323329][T19214] binder: 19211:19214 ioctl 8818564c 20000f00 returned -22
[ 1621.420406][T19229] netlink: set zone limit has 8 unknown bytes
[ 1625.207664][T19277] binder: BINDER_SET_CONTEXT_MGR already set
[ 1625.218919][T19277] binder: 19271:19277 ioctl 4018620d 200002c0 returned -16
[ 1625.332391][T19281] binder: 19271:19281 ioctl 8818564c 20000f00 returned -22
[ 1628.252071][T19327] binder: transaction release 456 bad handle 1, ret = -22
[ 1628.343740][T19327] binder: 19321:19327 ioctl 8818564c 20000f00 returned -22
[ 1628.931739][T19339] 9pnet_fd: Insufficient options for proto=fd
[ 1628.950877][T19339] lo speed is unknown, defaulting to 1000
[ 1628.956983][T19339] lo speed is unknown, defaulting to 1000
[ 1628.970971][T19339] lo speed is unknown, defaulting to 1000
[ 1628.994594][T19339] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[ 1629.031153][T19339] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[ 1629.101171][T19339] lo speed is unknown, defaulting to 1000
[ 1629.112589][T19339] lo speed is unknown, defaulting to 1000
[ 1629.123627][T19339] lo speed is unknown, defaulting to 1000
[ 1629.134314][T19339] lo speed is unknown, defaulting to 1000
[ 1629.144454][T19339] lo speed is unknown, defaulting to 1000
[ 1630.083742][T19355] siw: device registration error -23
[ 1631.159293][T15111] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[ 1631.339407][T15111] usb 4-1: Using ep0 maxpacket: 16
[ 1631.402640][T15111] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1631.439335][T15111] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[ 1632.382227][T15111] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1632.397956][T15111] usb 4-1: config 0 descriptor??
[ 1632.427891][T15111] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[ 1634.209701][T19385] binder: transaction release 462 bad handle 1, ret = -22
[ 1634.837781][T19392] 9pnet_fd: Insufficient options for proto=fd
[ 1634.845770][T19392] siw: device registration error -23
[ 1636.008621][T19385] binder: 19381:19385 ioctl 8818564c 20000f00 returned -22
[ 1636.846031][T19401] 9pnet_fd: Insufficient options for proto=fd
[ 1640.272768][T12884] usb 4-1: USB disconnect, device number 14
[ 1642.458437][T19445] binder: transaction release 468 bad handle 1, ret = -22
[ 1642.497814][T19445] binder: 19440:19445 ioctl 8818564c 20000f00 returned -22
[ 1643.089475][T19452] 9pnet_fd: Insufficient options for proto=fd
[ 1643.189274][T19452] siw: device registration error -23
[ 1643.994780][T19453] 9pnet_fd: Insufficient options for proto=fd
[ 1646.619227][T18342] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[ 1646.887805][T19480] netlink: set zone limit has 8 unknown bytes
[ 1646.969376][T18342] usb 4-1: Using ep0 maxpacket: 16
[ 1647.541512][T18342] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1647.619474][T18342] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[ 1647.641010][T18342] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1647.689756][T18342] usb 4-1: config 0 descriptor??
[ 1647.856414][T18342] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[ 1651.086563][T19502] siw: device registration error -23
[ 1653.526673][T18342] usb 4-1: USB disconnect, device number 15
[ 1656.239172][T12887] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[ 1656.569115][T12887] usb 3-1: Using ep0 maxpacket: 32
[ 1656.576474][T12887] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[ 1656.613893][T12887] usb 3-1: config 0 has no interface number 0
[ 1656.637258][T12887] usb 3-1: config 0 interface 184 has no altsetting 0
[ 1657.057345][T12887] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 1657.361918][T12887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1657.372365][T12887] usb 3-1: Product: syz
[ 1657.376565][T12887] usb 3-1: Manufacturer: syz
[ 1657.381749][T12887] usb 3-1: SerialNumber: syz
[ 1657.535212][T12887] usb 3-1: config 0 descriptor??
[ 1657.583065][T12887] smsc75xx v1.0.0
[ 1658.109753][T18342] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[ 1658.565741][T12887] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[ 1658.582412][T12887] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61
[ 1658.594611][T12887] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[ 1658.606146][T12887] smsc75xx: probe of 3-1:0.184 failed with error -61
[ 1658.819149][T18342] usb 1-1: Using ep0 maxpacket: 16
[ 1658.840485][T18342] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1659.012808][T18342] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[ 1659.063325][T18342] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1659.120270][T18342] usb 1-1: config 0 descriptor??
[ 1659.151909][T18342] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 1659.888337][T12456] usb 3-1: USB disconnect, device number 7
[ 1660.275386][T19588] siw: device registration error -23
[ 1660.499277][T12456] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[ 1660.732366][T12456] usb 3-1: Using ep0 maxpacket: 32
[ 1660.739541][T12456] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[ 1660.795267][T12456] usb 3-1: config 0 has no interface number 0
[ 1660.859268][T12456] usb 3-1: config 0 interface 184 has no altsetting 0
[ 1660.911553][T12456] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 1660.968790][T12456] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1660.990150][T12456] usb 3-1: Product: syz
[ 1660.994352][T12456] usb 3-1: Manufacturer: syz
[ 1660.998952][T12456] usb 3-1: SerialNumber: syz
[ 1661.183162][T12456] usb 3-1: config 0 descriptor??
[ 1661.192651][T12456] smsc75xx v1.0.0
[ 1662.246463][T12456] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[ 1662.277778][T12456] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61
[ 1662.290950][T12456] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[ 1662.301569][T12456] smsc75xx: probe of 3-1:0.184 failed with error -61
[ 1662.802139][T12887] usb 1-1: USB disconnect, device number 11
[ 1663.977813][ T2116] usb 3-1: USB disconnect, device number 8
[ 1664.559286][T18342] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[ 1665.499249][T18342] usb 1-1: Using ep0 maxpacket: 16
[ 1665.510071][T18342] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1665.655345][T18342] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[ 1665.675566][T18342] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1665.713511][T18342] usb 1-1: config 0 descriptor??
[ 1665.725409][T18342] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 1668.619763][T18342] usb 1-1: USB disconnect, device number 12
[ 1668.841145][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[ 1668.847546][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[ 1673.288025][T19673] 9pnet_fd: Insufficient options for proto=fd
[ 1673.300253][T19673] siw: device registration error -23
[ 1675.459237][T18342] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[ 1675.759147][T18342] usb 3-1: Using ep0 maxpacket: 16
[ 1675.774339][T18342] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1675.803691][T19695] 9pnet_fd: Insufficient options for proto=fd
[ 1675.825525][T18342] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[ 1675.836409][T19695] siw: device registration error -23
[ 1675.876975][T18342] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1675.948315][T18342] usb 3-1: config 0 descriptor??
[ 1676.107682][T18342] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[ 1678.986994][T18976] usb 3-1: USB disconnect, device number 9
[ 1688.929209][T19795] netlink: set zone limit has 8 unknown bytes
[ 1692.388845][T19830] siw: device registration error -23
[ 1692.775766][T19835] netlink: set zone limit has 8 unknown bytes
[ 1694.948112][T19845] binder: transaction release 474 bad handle 1, ret = -22
[ 1695.889411][T19845] binder: 19838:19845 ioctl 8818564c 20000f00 returned -22
[ 1702.043382][T19881] device syzkaller1 entered promiscuous mode
[ 1702.317419][T19886] netlink: set zone limit has 8 unknown bytes
[ 1703.013682][T18342] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[ 1703.209274][T18342] usb 1-1: Using ep0 maxpacket: 32
[ 1703.221169][T18342] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1703.269147][ T2116] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[ 1703.364102][T18342] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1703.591781][T18342] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1703.601076][T18342] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1703.625890][T18342] usb 1-1: config 0 descriptor??
[ 1703.645499][T18342] hub 1-1:0.0: USB hub found
[ 1703.691984][ T2116] usb 5-1: Using ep0 maxpacket: 32
[ 1703.706940][ T2116] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1703.747465][ T2116] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1703.763237][ T2116] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1703.774041][ T2116] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1703.816647][ T2116] usb 5-1: config 0 descriptor??
[ 1703.844186][T18342] hub 1-1:0.0: 1 port detected
[ 1703.973335][ T2116] hub 5-1:0.0: USB hub found
[ 1704.187833][ T2116] hub 5-1:0.0: 1 port detected
[ 1705.127976][T10874] usb 5-1: USB disconnect, device number 16
[ 1705.213353][ T2116] hub 5-1:0.0: hub_ext_port_status failed (err = -71)
[ 1705.551430][T15111] hub 1-1:0.0: hub_ext_port_status failed (err = -32)
[ 1705.938742][T15111] usb 1-1: USB disconnect, device number 13
[ 1714.501350][T19956] siw: device registration error -23
[ 1714.669342][T15111] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[ 1714.899248][T15111] usb 3-1: Using ep0 maxpacket: 32
[ 1714.911775][T15111] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1715.267888][T15111] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1715.279929][T15111] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1715.289178][T15111] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1715.300740][T15111] usb 3-1: config 0 descriptor??
[ 1715.308838][T15111] hub 3-1:0.0: USB hub found
[ 1715.581067][T15111] hub 3-1:0.0: config failed, can't read hub descriptor (err -22)
[ 1715.826853][T15111] usbhid 3-1:0.0: can't add hid device: -71
[ 1715.832989][T15111] usbhid: probe of 3-1:0.0 failed with error -71
[ 1715.889881][T15111] usb 3-1: USB disconnect, device number 10
[ 1722.415091][T20001] 9pnet_fd: Insufficient options for proto=fd
[ 1722.422494][T20001] siw: device registration error -23
[ 1727.959278][T15116] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[ 1727.978207][    C1] raw-gadget.1 gadget.4: ignoring, device is not running
[ 1728.269566][T15116] usb 5-1: device descriptor read/64, error -32
[ 1729.319131][T15116] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[ 1729.519295][T15116] usb 5-1: Using ep0 maxpacket: 16
[ 1730.271912][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[ 1730.278319][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[ 1732.420879][T20077] 9pnet_fd: Insufficient options for proto=fd
[ 1732.428129][T20077] siw: device registration error -23
[ 1735.048508][T15116] usb 5-1: device descriptor read/all, error -110
[ 1735.060348][T15116] usb usb5-port1: attempt power cycle
[ 1736.539148][T15116] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[ 1736.639884][T15116] usb 5-1: device descriptor read/8, error -32
[ 1737.146049][T15116] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[ 1738.729371][T15116] usb 5-1: device descriptor read/8, error -71
[ 1738.849331][T15116] usb usb5-port1: unable to enumerate USB device
[ 1746.794478][T20157] loop2: detected capacity change from 0 to 512
[ 1746.985763][T20157] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[ 1747.104728][T15111] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[ 1747.910439][T20157] EXT4-fs (loop2): 1 truncate cleaned up
[ 1747.916153][T20157] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[ 1748.059162][T15111] usb 5-1: Using ep0 maxpacket: 16
[ 1748.222351][T15111] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1748.901417][T15111] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1748.919288][T15111] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[ 1748.933840][T15111] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1748.944542][T16943] EXT4-fs (loop2): unmounting filesystem.
[ 1748.952483][T15111] usb 5-1: config 0 descriptor??
[ 1749.041161][T15111] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 1749.078385][T20173] lo speed is unknown, defaulting to 1000
[ 1749.701370][T20181] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3747'.
[ 1752.687922][T20188] loop3: detected capacity change from 0 to 512
[ 1752.779278][T20188] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[ 1752.865583][T20188] EXT4-fs (loop3): 1 truncate cleaned up
[ 1752.874409][T20188] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[ 1753.873902][T16476] EXT4-fs (loop3): unmounting filesystem.
[ 1760.925586][T20209] lo speed is unknown, defaulting to 1000
[ 1763.267710][T20235] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3764'.
[ 1763.296647][T20234] random: crng reseeded on system resumption
[ 1765.264137][T20256] netlink: set zone limit has 8 unknown bytes
[ 1765.981606][T14542] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1765.991901][T14542] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1766.010639][T14542] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1766.018950][T14542] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1766.034811][T14542] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1766.045453][T14542] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1766.884172][T20262] loop3: detected capacity change from 0 to 512
[ 1766.946451][T20262] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[ 1766.950639][T20266] loop1: detected capacity change from 0 to 512
[ 1767.014785][T20266] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[ 1767.034105][T20262] EXT4-fs (loop3): 1 truncate cleaned up
[ 1767.047471][T20262] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[ 1767.074823][T20257] lo speed is unknown, defaulting to 1000
[ 1767.090860][T20184] usb 5-1: USB disconnect, device number 21
[ 1767.128619][T20266] EXT4-fs (loop1): 1 truncate cleaned up
[ 1767.169401][T20266] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[ 1767.853400][T16476] EXT4-fs (loop3): unmounting filesystem.
[ 1767.999729][T17263] EXT4-fs (loop1): unmounting filesystem.
[ 1768.193115][T20257] chnl_net:caif_netlink_parms(): no params data found
[ 1768.207866][ T4265] Bluetooth: hci3: command 0x0409 tx timeout
[ 1770.085554][T20295] loop0: detected capacity change from 0 to 512
[ 1770.094678][T20295] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[ 1770.159248][T20257] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1770.166416][T20257] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1770.175290][T20257] device bridge_slave_0 entered promiscuous mode
[ 1770.181706][T20295] EXT4-fs (loop0): 1 truncate cleaned up
[ 1770.181737][T20295] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[ 1770.190770][T20257] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1770.203847][T20257] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1770.218476][T20257] device bridge_slave_1 entered promiscuous mode
[ 1770.309155][ T4265] Bluetooth: hci3: command 0x041b tx timeout
[ 1770.519068][T20257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1770.554820][T20257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1771.483752][T17493] EXT4-fs (loop0): unmounting filesystem.
[ 1771.498683][T20304] random: crng reseeded on system resumption
[ 1771.754316][T20310] loop3: detected capacity change from 0 to 128
[ 1772.427478][T12101] Bluetooth: hci3: command 0x040f tx timeout
[ 1773.648613][T20310] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[ 1773.667343][T20310] ext4 filesystem being mounted at /175/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1773.709593][   T56] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1774.436634][T20320] loop1: detected capacity change from 0 to 128
[ 1776.756963][T12101] Bluetooth: hci3: command 0x0419 tx timeout
[ 1777.783997][T20320] EXT4-fs: failed to create workqueue
[ 1777.789948][T20320] EXT4-fs (loop1): mount failed
[ 1778.465260][T16476] EXT4-fs (loop3): unmounting filesystem.
[ 1778.651555][   T56] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1779.017299][T20257] team0: Port device team_slave_0 added
[ 1779.136629][T20257] team0: Port device team_slave_1 added
[ 1780.058763][   T56] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1780.363045][   T56] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1780.390247][T20257] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1780.397499][T20257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1780.430944][T20257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1780.463925][T20257] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1780.476481][T20257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1780.512645][T20257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1780.615342][T20257] device hsr_slave_0 entered promiscuous mode
[ 1780.630490][T20257] device hsr_slave_1 entered promiscuous mode
[ 1780.641708][T20257] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1780.650276][T20257] Cannot create hsr debugfs directory
[ 1780.825642][   T56] tipc: Left network mode
[ 1781.253662][T20364] loop1: detected capacity change from 0 to 512
[ 1782.487339][T20364] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.3792: casefold flag without casefold feature
[ 1782.644061][T20364] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.3792: couldn't read orphan inode 15 (err -117)
[ 1782.657965][T20364] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[ 1782.768304][T20364] overlayfs: failed to resolve './file2': -2
[ 1784.065997][T20379] loop3: detected capacity change from 0 to 128
[ 1784.196727][T20379] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[ 1784.212408][T20379] ext4 filesystem being mounted at /178/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1784.314574][T17263] EXT4-fs (loop1): unmounting filesystem.
[ 1786.324526][T20395] loop2: detected capacity change from 0 to 128
[ 1786.473870][T16476] EXT4-fs (loop3): unmounting filesystem.
[ 1786.533688][T20395] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 1786.546191][T20395] ext4 filesystem being mounted at /165/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1786.644669][T20395] EXT4-fs error (device loop2): dx_make_map:1328: inode #2: block 18: comm syz.2.3797: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1
[ 1786.669757][T20395] EXT4-fs error (device loop2) in do_split:2095: Corrupt filesystem
[ 1787.591082][T20257] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1787.673943][T20257] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1787.840198][T20257] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1787.898593][T20257] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1788.575319][T16943] EXT4-fs (loop2): unmounting filesystem.
[ 1789.151565][T20430] loop1: detected capacity change from 0 to 128
[ 1789.569287][T20430] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[ 1789.580948][T20430] ext4 filesystem being mounted at /150/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1789.681012][T20430] EXT4-fs error (device loop1): dx_make_map:1328: inode #2: block 18: comm syz.1.3802: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1
[ 1789.705510][T20430] EXT4-fs error (device loop1) in do_split:2095: Corrupt filesystem
[ 1791.075985][T20257] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1791.650391][T20445] loop0: detected capacity change from 0 to 128
[ 1792.000326][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[ 1792.007064][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[ 1792.141345][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1792.154207][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1792.179842][T20257] 8021q: adding VLAN 0 to HW filter on device team0
[ 1792.219942][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1792.234251][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1792.245106][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1792.252363][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1792.368860][T20445] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[ 1792.379730][T20445] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1792.538739][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1792.979983][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1793.040538][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1793.095382][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1793.102729][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1793.111479][T20451] random: crng reseeded on system resumption
[ 1793.424805][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1793.459995][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1794.206078][T17263] EXT4-fs (loop1): unmounting filesystem.
[ 1794.526302][T17493] EXT4-fs (loop0): unmounting filesystem.
[ 1794.710047][T20257] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1794.784314][T20257] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1794.847521][T20460] loop1: detected capacity change from 0 to 512
[ 1794.865284][T20460] EXT4-fs: Ignoring removed i_version option
[ 1794.881517][T20460] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1794.915753][T20460] ext4: Unknown parameter 'seclabel'
[ 1795.102113][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1795.198074][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1795.224199][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1795.240452][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1795.483704][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1795.527952][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1795.590941][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1795.623259][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1795.796272][   T56] device hsr_slave_0 left promiscuous mode
[ 1795.914328][   T56] device hsr_slave_1 left promiscuous mode
[ 1796.006859][   T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1796.019402][   T56] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1796.056932][   T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1796.116875][   T56] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1796.223228][T20475] loop0: detected capacity change from 0 to 128
[ 1796.310013][T20475] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[ 1796.327402][T20475] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1797.296911][   T56] device bridge_slave_1 left promiscuous mode
[ 1797.343452][   T56] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1797.393188][   T56] device bridge_slave_0 left promiscuous mode
[ 1797.427402][   T56] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1797.733739][   T56] device veth1_macvtap left promiscuous mode
[ 1797.763836][   T56] device veth0_macvtap left promiscuous mode
[ 1797.805913][   T56] device veth1_vlan left promiscuous mode
[ 1797.875208][   T56] device veth0_vlan left promiscuous mode
[ 1799.735404][T17493] EXT4-fs (loop0): unmounting filesystem.
[ 1800.235775][T20491] syz.0.3815[20491] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1800.235898][T20491] syz.0.3815[20491] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1802.966471][T20501] loop1: detected capacity change from 0 to 128
[ 1803.520429][T20501] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[ 1806.500141][T20501] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1807.487735][T17263] EXT4-fs (loop1): unmounting filesystem.
[ 1809.101938][T20520] loop2: detected capacity change from 0 to 128
[ 1809.792871][T20520] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 1809.811635][T20520] ext4 filesystem being mounted at /173/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1811.783295][T20532] loop0: detected capacity change from 0 to 128
[ 1812.700453][T16943] EXT4-fs (loop2): unmounting filesystem.
[ 1814.464061][T20532] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[ 1814.465287][   T56] team0 (unregistering): Port device team_slave_1 removed
[ 1814.475431][T20532] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1815.407128][T17493] EXT4-fs (loop0): unmounting filesystem.
[ 1815.611420][   T56] team0 (unregistering): Port device team_slave_0 removed
[ 1815.762097][T20549] loop0: detected capacity change from 0 to 128
[ 1817.917719][   T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1818.175176][T20549] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[ 1818.186741][T20549] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1818.286995][T20549] EXT4-fs error (device loop0): dx_make_map:1328: inode #2: block 18: comm syz.0.3828: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1
[ 1818.309839][T20549] EXT4-fs error (device loop0) in do_split:2095: Corrupt filesystem
[ 1819.290164][T17493] EXT4-fs (loop0): unmounting filesystem.
[ 1819.396304][   T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1819.793713][T20563] loop0: detected capacity change from 0 to 128
[ 1820.090302][T20563] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[ 1820.259541][T20563] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1822.935190][T17493] EXT4-fs (loop0): unmounting filesystem.
[ 1823.807554][T20583] loop0: detected capacity change from 0 to 512
[ 1823.986149][T20583] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[ 1824.163314][T20583] EXT4-fs (loop0): orphan cleanup on readonly fs
[ 1824.170999][T20583] EXT4-fs error (device loop0): ext4_quota_enable:6981: comm syz.0.3834: Bad quota inum: 64, type: 0
[ 1824.189128][T20583] EXT4-fs (loop0): Remounting filesystem read-only
[ 1824.197242][T20583] EXT4-fs warning (device loop0): ext4_enable_quotas:7029: Failed to enable quota tracking (type=0, err=-117, ino=64). Please run e2fsck to fix.
[ 1824.214716][T20583] EXT4-fs (loop0): Cannot turn on quotas: error -117
[ 1824.223585][T20583] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[ 1826.303013][T20593] loop3: detected capacity change from 0 to 128
[ 1826.480558][T20593] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[ 1826.496496][T20593] ext4 filesystem being mounted at /189/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1826.583258][T20593] EXT4-fs error (device loop3): dx_make_map:1328: inode #2: block 18: comm syz.3.3837: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1
[ 1826.632960][T20593] EXT4-fs error (device loop3) in do_split:2095: Corrupt filesystem
[ 1827.140847][T17493] EXT4-fs (loop0): unmounting filesystem.
[ 1828.636605][T20602] loop0: detected capacity change from 0 to 128
[ 1828.886127][T12101] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1828.962155][T20602] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[ 1828.982371][T12101] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1830.481491][T12101] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1830.494539][T16476] EXT4-fs (loop3): unmounting filesystem.
[ 1830.639562][T20602] ext4 filesystem being mounted at /155/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1832.126039][T12101] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1832.145355][T20610] EXT4-fs error (device loop0): dx_make_map:1328: inode #2: block 18: comm syz.0.3838: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1
[ 1832.170645][T12101] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1832.181216][T20610] EXT4-fs error (device loop0) in do_split:2095: Corrupt filesystem
[ 1832.325044][T12101] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1832.335206][T20607] loop1: detected capacity change from 0 to 512
[ 1832.355465][T20607] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1832.432486][T17493] EXT4-fs (loop0): unmounting filesystem.
[ 1832.452992][T20607] EXT4-fs (loop1): orphan cleanup on readonly fs
[ 1832.507445][T20607] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.3839: bg 0: block 248: padding at end of block bitmap is not set
[ 1832.533205][T20607] Quota error (device loop1): write_blk: dquota write failed
[ 1832.545202][T20607] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[ 1832.557816][T20607] EXT4-fs error (device loop1): ext4_acquire_dquot:6794: comm syz.1.3839: Failed to acquire dquot type 1
[ 1832.600473][T20607] EXT4-fs (loop1): 1 truncate cleaned up
[ 1832.617656][T20607] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[ 1834.507142][T20622] loop2: detected capacity change from 0 to 16
[ 1834.529414][T20622] erofs: (device loop2): mounted with root inode @ nid 36.
[ 1834.545202][T20622] syz.2.3841: attempt to access beyond end of device
[ 1834.545202][T20622] loop2: rw=0, sector=8, nr_sectors = 16 limit=16
[ 1834.567214][T20622] syz.2.3841: attempt to access beyond end of device
[ 1834.567214][T20622] loop2: rw=0, sector=8, nr_sectors = 16 limit=16
[ 1834.583962][T20622] syz.2.3841: attempt to access beyond end of device
[ 1834.583962][T20622] loop2: rw=0, sector=8, nr_sectors = 16 limit=16
[ 1834.966151][ T4265] Bluetooth: hci1: command 0x0409 tx timeout
[ 1835.003722][T17263] EXT4-fs (loop1): unmounting filesystem.
[ 1835.538931][   T56] bond0 (unregistering): Released all slaves
[ 1835.758916][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1835.789278][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1835.821861][T20184] lo speed is unknown, defaulting to 1000
[ 1836.282600][T20641] loop3: detected capacity change from 0 to 512
[ 1836.989913][ T4265] Bluetooth: hci1: command 0x041b tx timeout
[ 1837.046386][T20641] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.3845: casefold flag without casefold feature
[ 1837.070887][T20641] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.3845: couldn't read orphan inode 15 (err -117)
[ 1837.086923][T20641] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[ 1838.984322][T20600] chnl_net:caif_netlink_parms(): no params data found
[ 1839.043856][T20653] loop0: detected capacity change from 0 to 128
[ 1839.069215][ T4265] Bluetooth: hci1: command 0x040f tx timeout
[ 1840.132795][T16476] EXT4-fs (loop3): unmounting filesystem.
[ 1841.599689][T20653] EXT4-fs: error -4 creating inode table initialization thread
[ 1841.608873][T20653] EXT4-fs (loop0): mount failed
[ 1841.885147][ T4265] Bluetooth: hci1: command 0x0419 tx timeout
[ 1841.893043][T20658] loop2: detected capacity change from 0 to 128
[ 1842.109065][T20658] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 1842.120554][T20658] ext4 filesystem being mounted at /177/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1843.978840][T20666] binder: 20664:20666 ioctl 4018620d 0 returned -22
[ 1844.013304][T16943] EXT4-fs (loop2): unmounting filesystem.
[ 1844.149379][T20674] loop0: detected capacity change from 0 to 128
[ 1845.467235][T20669] binder: 20664:20669 ioctl 8818564c 20000f00 returned -22
[ 1847.509670][T20674] EXT4-fs: error -4 creating inode table initialization thread
[ 1847.518592][T20674] EXT4-fs (loop0): mount failed
[ 1849.268405][T20693] loop0: detected capacity change from 0 to 128
[ 1851.480367][T20600] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1851.498814][T20600] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1852.062310][T20693] EXT4-fs: error -4 creating inode table initialization thread
[ 1852.072150][T20693] EXT4-fs (loop0): mount failed
[ 1852.492183][T20600] device bridge_slave_0 entered promiscuous mode
[ 1852.900331][T20600] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1852.972849][T20600] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1853.037350][T20703] loop3: detected capacity change from 0 to 256
[ 1853.045741][T20600] device bridge_slave_1 entered promiscuous mode
[ 1853.100033][T20703] exfat: Deprecated parameter 'namecase'
[ 1853.139393][T20703] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xc2dc8e67, utbl_chksum : 0xe619d30d)
[ 1853.164281][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[ 1853.173121][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[ 1853.443296][T20600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1853.519768][T20713] loop2: detected capacity change from 0 to 128
[ 1853.532320][T20600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1854.406660][T20720] loop1: detected capacity change from 0 to 128
[ 1854.425417][T20713] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 1854.534268][T20713] ext4 filesystem being mounted at /179/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1854.562481][T20720] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[ 1854.625282][T20713] EXT4-fs error (device loop2): dx_make_map:1328: inode #2: block 18: comm syz.2.3857: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1
[ 1854.660126][T20720] ext4 filesystem being mounted at /162/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1854.699200][T20713] EXT4-fs error (device loop2) in do_split:2095: Corrupt filesystem
[ 1854.790671][T20720] EXT4-fs error (device loop1): dx_make_map:1328: inode #2: block 18: comm syz.1.3858: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1
[ 1854.836470][T20720] EXT4-fs error (device loop1) in do_split:2095: Corrupt filesystem
[ 1854.864342][T20600] team0: Port device team_slave_0 added
[ 1854.883003][T20728] loop3: detected capacity change from 0 to 128
[ 1854.941127][T16943] EXT4-fs (loop2): unmounting filesystem.
[ 1854.962809][T20728] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[ 1854.973512][T20728] ext4 filesystem being mounted at /196/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1855.017894][T20728] EXT4-fs error (device loop3): dx_make_map:1328: inode #2: block 18: comm syz.3.3859: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1
[ 1855.055409][T20728] EXT4-fs error (device loop3) in do_split:2095: Corrupt filesystem
[ 1855.097691][T17263] EXT4-fs (loop1): unmounting filesystem.
[ 1855.278316][T20600] team0: Port device team_slave_1 added
[ 1855.510272][T20600] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1855.548591][T20600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1855.636845][T20600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1856.570797][T16476] EXT4-fs (loop3): unmounting filesystem.
[ 1856.711491][T20600] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1856.719134][T20600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1856.839149][T20600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1857.086956][T20762] binder: 20756:20762 ioctl 4018620d 0 returned -22
[ 1857.171562][T20600] device hsr_slave_0 entered promiscuous mode
[ 1857.191727][T20763] binder: 20756:20763 ioctl 8818564c 20000f00 returned -22
[ 1857.249515][T20600] device hsr_slave_1 entered promiscuous mode
[ 1857.287511][T20600] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1857.334763][T20600] Cannot create hsr debugfs directory
[ 1859.617843][T20787] loop1: detected capacity change from 0 to 128
[ 1859.661434][T20787] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[ 1859.670953][T20787] ext4 filesystem being mounted at /166/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1859.695149][T20787] EXT4-fs error (device loop1): dx_make_map:1328: inode #2: block 18: comm syz.1.3870: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1
[ 1859.718601][T20787] EXT4-fs error (device loop1) in do_split:2095: Corrupt filesystem
[ 1859.863072][T20792] loop0: detected capacity change from 0 to 128
[ 1859.942795][T20792] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[ 1859.960500][T20792] ext4 filesystem being mounted at /164/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1860.102689][T20792] EXT4-fs error (device loop0): dx_make_map:1328: inode #2: block 18: comm syz.0.3871: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1
[ 1860.277020][T20792] EXT4-fs error (device loop0) in do_split:2095: Corrupt filesystem
[ 1860.419726][T17263] EXT4-fs (loop1): unmounting filesystem.
[ 1860.648324][T20801] 
[ 1860.651236][T20801] ======================================================
[ 1860.660026][T20801] WARNING: possible circular locking dependency detected
[ 1860.667697][T20801] 6.1.121-syzkaller #0 Tainted: G        W         
[ 1860.675541][T20801] ------------------------------------------------------
[ 1860.682787][T20801] syz.3.3872/20801 is trying to acquire lock:
[ 1860.688871][T20801] ffff888073c96a58 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock_killable+0x1d/0x60
[ 1860.699731][T20801] 
[ 1860.699731][T20801] but task is already holding lock:
[ 1860.707811][T20801] ffff8880779e7430 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x310
[ 1860.719094][T20801] 
[ 1860.719094][T20801] which lock already depends on the new lock.
[ 1860.719094][T20801] 
[ 1860.729883][T20801] 
[ 1860.729883][T20801] the existing dependency chain (in reverse order) is:
[ 1860.740594][T20801] 
[ 1860.740594][T20801] -> #1 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}:
[ 1860.750713][T20801]        lock_acquire+0x1f8/0x5a0
[ 1860.756120][T20801]        down_write+0x36/0x60
[ 1860.761612][T20801]        process_measurement+0x446/0x21b0
[ 1860.767648][T20801]        ima_file_mmap+0x121/0x1c0
[ 1860.773145][T20801]        __se_sys_remap_file_pages+0x67a/0x8b0
[ 1860.779536][T20801]        do_syscall_64+0x3b/0xb0
[ 1860.784641][T20801]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1860.791457][T20801] 
[ 1860.791457][T20801] -> #0 (&mm->mmap_lock){++++}-{3:3}:
[ 1860.799227][T20801]        validate_chain+0x1661/0x5950
[ 1860.805600][T20801]        __lock_acquire+0x125b/0x1f80
[ 1860.811854][T20801]        lock_acquire+0x1f8/0x5a0
[ 1860.817881][T20801]        down_read_killable+0xc6/0xd10
[ 1860.823593][T20801]        mmap_read_lock_killable+0x1d/0x60
[ 1860.829658][T20801]        lock_mm_and_find_vma+0x2a7/0x2e0
[ 1860.835517][T20801]        exc_page_fault+0x169/0x620
[ 1860.841300][T20801]        asm_exc_page_fault+0x22/0x30
[ 1860.846710][T20801]        fault_in_readable+0x1c8/0x340
[ 1860.853096][T20801]        fault_in_iov_iter_readable+0xdb/0x270
[ 1860.860919][T20801]        generic_perform_write+0x207/0x5e0
[ 1860.867477][T20801]        __generic_file_write_iter+0x176/0x400
[ 1860.873746][T20801]        generic_file_write_iter+0xab/0x310
[ 1860.879829][T20801]        vfs_write+0x857/0xbc0
[ 1860.884979][T20801]        ksys_write+0x19c/0x2c0
[ 1860.890772][T20801]        do_syscall_64+0x3b/0xb0
[ 1860.896126][T20801]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1860.902896][T20801] 
[ 1860.902896][T20801] other info that might help us debug this:
[ 1860.902896][T20801] 
[ 1860.914139][T20801]  Possible unsafe locking scenario:
[ 1860.914139][T20801] 
[ 1860.922563][T20801]        CPU0                    CPU1
[ 1860.927941][T20801]        ----                    ----
[ 1860.933823][T20801]   lock(&sb->s_type->i_mutex_key#12);
[ 1860.939399][T20801]                                lock(&mm->mmap_lock);
[ 1860.946817][T20801]                                lock(&sb->s_type->i_mutex_key#12);
[ 1860.955996][T20801]   lock(&mm->mmap_lock);
[ 1860.961681][T20801] 
[ 1860.961681][T20801]  *** DEADLOCK ***
[ 1860.961681][T20801] 
[ 1860.971691][T20801] 3 locks held by syz.3.3872/20801:
[ 1860.977852][T20801]  #0: ffff888078de0d68 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ba/0x360
[ 1860.988793][T20801]  #1: ffff88801ff48460 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x269/0xbc0
[ 1860.998854][T20801]  #2: ffff8880779e7430 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x310
[ 1861.011126][T20801] 
[ 1861.011126][T20801] stack backtrace:
[ 1861.017671][T20801] CPU: 0 PID: 20801 Comm: syz.3.3872 Tainted: G        W          6.1.121-syzkaller #0
[ 1861.028498][T20801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1861.039555][T20801] Call Trace:
[ 1861.043236][T20801]  <TASK>
[ 1861.046242][T20801]  dump_stack_lvl+0x1e3/0x2cb
[ 1861.051232][T20801]  ? nf_tcp_handle_invalid+0x642/0x642
[ 1861.057801][T20801]  ? print_circular_bug+0x12b/0x1a0
[ 1861.064547][T20801]  check_noncircular+0x2fa/0x3b0
[ 1861.070303][T20801]  ? mark_lock+0x9a/0x340
[ 1861.074868][T20801]  ? add_chain_block+0x850/0x850
[ 1861.081084][T20801]  ? lockdep_lock+0x11f/0x2a0
[ 1861.086180][T20801]  ? reacquire_held_locks+0x660/0x660
[ 1861.093503][T20801]  ? _find_first_zero_bit+0xd0/0x100
[ 1861.100434][T20801]  validate_chain+0x1661/0x5950
[ 1861.105497][T20801]  ? reacquire_held_locks+0x660/0x660
[ 1861.111435][T20801]  ? reacquire_held_locks+0x660/0x660
[ 1861.117021][T20801]  ? mark_lock+0x9a/0x340
[ 1861.121409][T20801]  ? reacquire_held_locks+0x660/0x660
[ 1861.127073][T20801]  ? mark_lock+0x9a/0x340
[ 1861.131448][T20801]  ? reacquire_held_locks+0x660/0x660
[ 1861.137146][T20801]  ? __lock_acquire+0x125b/0x1f80
[ 1861.142652][T20801]  ? mark_lock+0x9a/0x340
[ 1861.147231][T20801]  __lock_acquire+0x125b/0x1f80
[ 1861.152311][T20801]  lock_acquire+0x1f8/0x5a0
[ 1861.157024][T20801]  ? mmap_read_lock_killable+0x1d/0x60
[ 1861.162836][T20801]  ? read_lock_is_recursive+0x10/0x10
[ 1861.168429][T20801]  ? __might_sleep+0xb0/0xb0
[ 1861.174804][T20801]  down_read_killable+0xc6/0xd10
[ 1861.180142][T20801]  ? mmap_read_lock_killable+0x1d/0x60
[ 1861.186076][T20801]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[ 1861.193224][T20801]  ? cmp_ex_search+0x70/0x90
[ 1861.197904][T20801]  ? mmap_read_lock_killable+0x1d/0x60
[ 1861.203872][T20801]  ? bsearch+0x8e/0xb0
[ 1861.208238][T20801]  ? down_read_interruptible+0xc40/0xc40
[ 1861.213908][T20801]  ? search_extable+0xaf/0xf0
[ 1861.219219][T20801]  ? trim_init_extable+0x3c0/0x3c0
[ 1861.224561][T20801]  ? fault_in_readable+0x1c8/0x340
[ 1861.229994][T20801]  ? __init_rwsem+0x160/0x160
[ 1861.235395][T20801]  ? print_irqtrace_events+0x210/0x210
[ 1861.241846][T20801]  mmap_read_lock_killable+0x1d/0x60
[ 1861.248143][T20801]  lock_mm_and_find_vma+0x2a7/0x2e0
[ 1861.253938][T20801]  exc_page_fault+0x169/0x620
[ 1861.259439][T20801]  asm_exc_page_fault+0x22/0x30
[ 1861.265244][T20801] RIP: 0010:fault_in_readable+0x1c8/0x340
[ 1861.271937][T20801] Code: 24 08 4c 8d b0 ff 0f 00 00 48 89 c3 4d 01 e6 49 81 e6 00 f0 ff ff 49 39 c6 72 70 e8 a2 b0 bf ff 4c 39 f3 74 73 4c 89 64 24 10 <44> 8a 23 43 0f b6 04 2f 84 c0 75 18 44 88 64 24 40 48 81 c3 00 10
[ 1861.294798][T20801] RSP: 0018:ffffc90003b579e0 EFLAGS: 00050287
[ 1861.302138][T20801] RAX: ffffffff81caebce RBX: 0000000020190000 RCX: 0000000000080000
[ 1861.311087][T20801] RDX: ffffc9001cdd3000 RSI: 0000000000028749 RDI: 000000000002874a
[ 1861.321453][T20801] RBP: ffffc90003b57a98 R08: ffffffff81caeb66 R09: ffffffff84421285
[ 1861.331186][T20801] R10: 0000000000000002 R11: ffff888064475940 R12: 0000000000001000
[ 1861.340201][T20801] R13: dffffc0000000000 R14: 0000000020191000 R15: 1ffff9200076af44
[ 1861.350040][T20801]  ? fault_in_iov_iter_readable+0x45/0x270
[ 1861.360520][T20801]  ? fault_in_readable+0x156/0x340
[ 1861.369484][T20801]  ? fault_in_readable+0x1be/0x340
[ 1861.376311][T20801]  ? fault_in_safe_writeable+0x250/0x250
[ 1861.382224][T20801]  ? inode_to_bdi+0x65/0xd0
[ 1861.388347][T20801]  fault_in_iov_iter_readable+0xdb/0x270
[ 1861.396391][T20801]  generic_perform_write+0x207/0x5e0
[ 1861.402836][T20801]  ? generic_file_direct_write+0x460/0x460
[ 1861.410676][T20801]  ? __file_remove_privs+0x640/0x640
[ 1861.416363][T20801]  ? generic_write_checks+0x15c/0x1c0
[ 1861.423520][T20801]  ? clear_nonspinnable+0x60/0x60
[ 1861.429302][T20801]  __generic_file_write_iter+0x176/0x400
[ 1861.436006][T20801]  generic_file_write_iter+0xab/0x310
[ 1861.444818][T20801]  vfs_write+0x857/0xbc0
[ 1861.449323][T20801]  ? file_end_write+0x250/0x250
[ 1861.455821][T20801]  ? __fget_files+0x28/0x4a0
[ 1861.461966][T20801]  ? __fget_files+0x435/0x4a0
[ 1861.467161][T20801]  ? __fdget_pos+0x2ba/0x360
[ 1861.474223][T20801]  ? ksys_write+0x77/0x2c0
[ 1861.479899][T20801]  ksys_write+0x19c/0x2c0
[ 1861.484935][T20801]  ? print_irqtrace_events+0x210/0x210
[ 1861.492039][T20801]  ? __ia32_sys_read+0x80/0x80
[ 1861.497841][T20801]  ? syscall_enter_from_user_mode+0x2e/0x230
[ 1861.504593][T20801]  ? lockdep_hardirqs_on+0x94/0x130
[ 1861.511497][T20801]  ? syscall_enter_from_user_mode+0x2e/0x230
[ 1861.517962][T20801]  do_syscall_64+0x3b/0xb0
[ 1861.523223][T20801]  ? clear_bhb_loop+0x45/0xa0
[ 1861.528490][T20801]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1861.534966][T20801] RIP: 0033:0x7f4c41385d29
[ 1861.542646][T20801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1861.564918][T20801] RSP: 002b:00007f4c4229f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1861.574679][T20801] RAX: ffffffffffffffda RBX: 00007f4c41575fa0 RCX: 00007f4c41385d29
[ 1861.584465][T20801] RDX: 000000000208e24b RSI: 0000000020000240 RDI: 0000000000000005
[ 1861.595268][T20801] RBP: 00007f4c41401aa8 R08: 0000000000000000 R09: 0000000000000000
[ 1861.605204][T20801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1861.615298][T20801] R13: 0000000000000000 R14: 00007f4c41575fa0 R15: 00007ffffd59df88
[ 1861.623529][T20801]  </TASK>
[ 1861.753783][T17493] EXT4-fs (loop0): unmounting filesystem.
[ 1861.860046][T20600] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1861.919199][T20600] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1861.956360][   T56] device hsr_slave_0 left promiscuous mode
[ 1861.974110][   T56] device hsr_slave_1 left promiscuous mode
[ 1861.983022][   T56] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1862.039648][   T56] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1862.051869][   T56] device bridge_slave_1 left promiscuous mode
[ 1862.058217][   T56] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1862.103518][   T56] device bridge_slave_0 left promiscuous mode
[ 1862.123347][   T56] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1862.454813][   T56] team0 (unregistering): Port device team_slave_1 removed
[ 1862.468560][   T56] team0 (unregistering): Port device team_slave_0 removed
[ 1862.511098][   T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1862.558649][   T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1862.645832][   T56] bond0 (unregistering): Released all slaves
[ 1862.703051][T20600] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1862.719412][T20600] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1862.801028][T20600] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1862.814613][T11940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1862.824751][T11940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1862.836672][T20600] 8021q: adding VLAN 0 to HW filter on device team0
[ 1862.852613][T16983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1862.865463][T16983] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1862.875964][T16983] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1862.883345][T16983] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1862.905950][T16983] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1862.916271][T16983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1862.925270][T16983] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1862.934644][T16983] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1862.942083][T16983] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1862.951192][T16983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1862.963041][T16983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1862.986153][T16983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1862.997682][T16983] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1863.039824][T16983] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1863.052112][T16983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1863.062644][T16983] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1863.078344][T16983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1863.088435][T16983] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1863.098176][T16983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1863.107257][T16983] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1863.118194][T20600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1863.308070][T16983] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1863.317274][T16983] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1863.334171][T20600] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1863.574852][T16983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1863.586586][T16983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1863.616187][T20600] device veth0_vlan entered promiscuous mode
[ 1863.624705][T16983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1863.635958][T16983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1863.649620][T20600] device veth1_vlan entered promiscuous mode
[ 1863.657131][T16983] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1863.666116][T16983] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1863.675499][T16983] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1863.704016][T16983] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1863.717205][T16983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1863.727837][T16983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1863.739369][T20600] device veth0_macvtap entered promiscuous mode
[ 1863.752784][T20600] device veth1_macvtap entered promiscuous mode
[ 1863.772749][T20600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1863.783848][T20600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1863.796378][T20600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1863.807216][T20600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1863.818111][T20600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1863.828978][T20600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1863.839013][T20600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1863.849626][T20600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1863.862589][T20600] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1863.872914][T20600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1863.885377][T20600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1863.895865][T20600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1863.906352][T20600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1863.917437][T20600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1863.928305][T20600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1863.939279][T20600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1863.951954][T20600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1863.965494][T20600] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1863.978405][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1863.988493][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1863.998245][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1864.008811][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1864.022488][T20600] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1864.032644][T20600] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1864.042042][T20600] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1864.051316][T20600] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1864.097302][T20600] ieee80211 phy23: Selected rate control algorithm 'minstrel_ht'
[ 1864.120931][ T4554] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1864.128843][ T4554] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1864.130651][T20600] ieee80211 phy24: Selected rate control algorithm 'minstrel_ht'
[ 1864.147466][T16983] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1864.196950][T16983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1864.207760][T16983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1864.220880][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready