last executing test programs:

6m17.270180907s ago: executing program 0 (id=105):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x10000)
recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)

6m16.624222754s ago: executing program 0 (id=109):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0)
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'})
syz_emit_ethernet(0x5e, &(0x7f0000001000)={@local, @dev, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "f15b88", 0x28, 0x6, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, {[], @payload_named={{{{{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3, 0x2, 0x2, 0x0, 0x2, 0x7, 0x2, 0x2, 0xa, 0x2, 0x1, 0x4e24, 0x4e24}, 0x3, 0x5}, 0x3, 0x2}}}}}}}}, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0xfffffffffffffffe, 0x0)
socket$packet(0x11, 0x2, 0x300)

6m13.590745896s ago: executing program 0 (id=112):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0xff, 0x4a1, &(0x7f00000004c0)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file2\x00', 0x100020, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x28042, 0x0)

6m11.016174993s ago: executing program 0 (id=114):
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000002900000000000014000000000000002900000034000000fdffffff00000000180000000000000029000000040000000400000000000000d80000000000000029000000360000005e17000000000000000100000100010800000000000000000728000000030800ff0f66090000000000000700000000000000010000000000000001000000000000000864c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d"], 0x188}}], 0x1, 0x810)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233d7610ce165a593e43cbaa4f52db28e5aead94767ad0d0ccf1cd422fcfd87e848c94a", 0x88}, {&(0x7f0000000580)}, {&(0x7f0000000700)="741f5b18fef5626f948b1919860417488e3e5141e17a3031271340b8ac67e4f5f7a2", 0x22}, {&(0x7f0000000a80)}, {&(0x7f0000000d00)="7cedc13b1cbf2308b2000d3d62b333c7c3b9f321ef7bd8e0e1e323da70d8d5", 0x1f}], 0x5, 0x4d9e, 0x8)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0xd4}}, 0x0)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed88", 0x3a}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

6m5.627465791s ago: executing program 0 (id=125):
set_mempolicy_home_node(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0)

6m4.659759081s ago: executing program 0 (id=127):
socket$inet6_tcp(0xa, 0x1, 0x0)
userfaultfd(0x80001)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0xffffffffffffff3c, &(0x7f0000000100)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)

5m48.975080638s ago: executing program 32 (id=127):
socket$inet6_tcp(0xa, 0x1, 0x0)
userfaultfd(0x80001)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0xffffffffffffff3c, &(0x7f0000000100)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)

3m48.414534891s ago: executing program 3 (id=367):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x20000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538)

3m47.301550893s ago: executing program 3 (id=370):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000b80)=@security={'security\x00', 0x64, 0x4, 0x2c8, 0x100000c, 0x0, 0xe0, 0x178, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x98, 0xe0, 0x0, {0x0, 0x1000000000000}, [@common=@inet=@dscp={{0x28}, {0x10, 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz1\x00', {0x2}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x42}}}, {{@ip={@multicast2, @private=0xa010101, 0xff000000, 0xff, 'veth0_macvtap\x00', 'vcan0\x00', {0xff}, {0xff}, 0x21}, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x2, 0x7}, {0x2, 0x0, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28)
connect$inet6(r0, 0x0, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000100)={0x3a}, 0x8)
r6 = fcntl$dupfd(r0, 0x406, r0)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
connect$unix(r6, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e)
syz_read_part_table(0x5d9, &(0x7f0000000000)="$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")

3m45.126185166s ago: executing program 3 (id=372):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000b80)=@security={'security\x00', 0x64, 0x4, 0x2c8, 0x100000c, 0x0, 0xe0, 0x178, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x98, 0xe0, 0x0, {0x0, 0x1000000000000}, [@common=@inet=@dscp={{0x28}, {0x10, 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz1\x00', {0x2}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x42}}}, {{@ip={@multicast2, @private=0xa010101, 0xff000000, 0xff, 'veth0_macvtap\x00', 'vcan0\x00', {0xff}, {0xff}, 0x21}, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x2, 0x7}, {0x2, 0x0, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28)
connect$inet6(r0, 0x0, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000100)={0x3a}, 0x8)
fcntl$dupfd(r0, 0x406, r0)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
syz_read_part_table(0x5d9, &(0x7f0000000000)="$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")

3m39.484851825s ago: executing program 3 (id=388):
prlimit64(0x0, 0xe, &(0x7f0000000300)={0x9, 0xfffffffffffffff2}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, 0x0)
setreuid(0xffffffffffffffff, 0xee01)
openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$unix(0x1, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x181)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r3, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3})

3m35.582323517s ago: executing program 3 (id=399):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0)
pipe2$9p(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x800)
write$P9_RVERSION(r1, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000e40), 0x0, &(0x7f0000000e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})
getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000003c0)=@random={'user.', '([\x00'}, 0x0, 0x0)

3m34.768414426s ago: executing program 3 (id=404):
socket$inet(0x2, 0x3, 0x4)
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
listen(r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x90)
r1 = inotify_init1(0x0)
inotify_add_watch(r1, &(0x7f00000001c0)='./file1\x00', 0xaf7)
acct(&(0x7f0000000100)='./file1\x00')
r2 = getpid()
sched_setscheduler(r2, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)

3m28.040266007s ago: executing program 2 (id=413):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0xfe33)
recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000001540)=""/4123, 0x101b}, {&(0x7f0000000540)=""/4075, 0xfeb}, {&(0x7f0000003840)=""/4160, 0x1040}, {&(0x7f00000000c0)=""/193, 0xc1}, {&(0x7f0000000300)=""/184, 0xb8}, {&(0x7f0000002580)=""/93, 0x5d}], 0x6}, 0x12100)

3m26.89584122s ago: executing program 2 (id=419):
userfaultfd(0x80001)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x3f, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r4, 0x9c3fa077fa966179, 0x12, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800)
r5 = socket$inet_icmp(0x2, 0x2, 0x1)
sendmmsg$inet(r5, 0x0, 0x0, 0x20000054)
munmap(&(0x7f0000c68000/0x2000)=nil, 0x2000)
r6 = memfd_create(&(0x7f00000002c0)='Foot\xc6\x8cT\xcb', 0x0)
fcntl$addseals(r6, 0x409, 0x1)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r6, 0x0)
r7 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000080))
ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1})
r8 = io_uring_setup(0x8c0, &(0x7f0000000380)={0x0, 0x0, 0x2, 0x2, 0x80fc})
io_uring_register$IORING_REGISTER_FILES(r8, 0x2, &(0x7f0000000100), 0x0)
ioctl$UFFDIO_ZEROPAGE(r7, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}})

3m24.696721523s ago: executing program 2 (id=422):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a000000000000", @ANYRES32=0x0, @ANYBLOB="0000ddffffffffffffff00"/20, @ANYRES32=0x0], 0x48)
r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x240b82, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = open(0x0, 0x0, 0x112)
getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f00000030c0), &(0x7f0000003100)=0x14)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000031c0)={0x1b, 0x0, 0x0, 0xc95a, 0x0, r1, 0xd, '\x00', 0x0, r3, 0x2, 0x3, 0x1}, 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000003240)={0x1b, 0x0, 0x0, 0x10, 0x0, r0, 0x101, '\x00', 0x0, r3, 0x5, 0x1, 0x2}, 0x50)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioprio_set$pid(0x2, 0x0, 0x4000)
syz_open_dev$tty1(0xc, 0x4, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

3m22.403629767s ago: executing program 2 (id=425):
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000240), 0x1, 0xb9f, &(0x7f0000000c00)="$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")
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xdc\xf2\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c)
r1 = socket$kcm(0x29, 0x7, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x2, 0x0, &(0x7f0000000000))
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000040)={r2})
mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0)

3m19.458157969s ago: executing program 33 (id=404):
socket$inet(0x2, 0x3, 0x4)
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
listen(r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x90)
r1 = inotify_init1(0x0)
inotify_add_watch(r1, &(0x7f00000001c0)='./file1\x00', 0xaf7)
acct(&(0x7f0000000100)='./file1\x00')
r2 = getpid()
sched_setscheduler(r2, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)

3m19.410565869s ago: executing program 2 (id=433):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000b80)=@security={'security\x00', 0x64, 0x4, 0x2c8, 0x100000c, 0x0, 0xe0, 0x178, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x98, 0xe0, 0x0, {0x0, 0x1000000000000}, [@common=@inet=@dscp={{0x28}, {0x10, 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz1\x00', {0x2}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x42}}}, {{@ip={@multicast2, @private=0xa010101, 0xff000000, 0xff, 'veth0_macvtap\x00', 'vcan0\x00', {0xff}, {0xff}, 0x21}, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x2, 0x7}, {0x2, 0x0, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28)
connect$inet6(r0, 0x0, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000100)={0x3a}, 0x8)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e)
syz_read_part_table(0x5d9, &(0x7f0000000000)="$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")

3m14.118257206s ago: executing program 2 (id=442):
r0 = socket(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x3d04b63e3ee3755, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$rds(r0, &(0x7f0000000840)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000480)=@filename='./file0\x00', 0x0, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000280)='cdg', 0x3)
sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

3m12.356057434s ago: executing program 34 (id=442):
r0 = socket(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x3d04b63e3ee3755, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$rds(r0, &(0x7f0000000840)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000480)=@filename='./file0\x00', 0x0, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000280)='cdg', 0x3)
sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

2m25.701184281s ago: executing program 1 (id=520):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000003c0)={[{@shortname_win95}, {@shortname_winnt}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@numtail}, {@shortname_lower}, {@utf8}, {@uni_xlate}, {@fat=@check_strict}, {@shortname_win95}, {@fat=@tz_utc}]}, 0x1, 0x370, &(0x7f0000002980)="$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")
socketpair$unix(0x1, 0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000001240)='./file0/file0\x00', 0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53048da)
mknod(&(0x7f0000000240)='./bus\x00', 0x400, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
socket$inet6(0xa, 0x3, 0x5)

2m21.849833111s ago: executing program 1 (id=530):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a000000000000", @ANYRES32=0x0, @ANYBLOB="0000ddffffffffffffff", @ANYRES32=0x0, @ANYRES32=0x0], 0x48)
r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x240b82, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = open(0x0, 0x0, 0x112)
getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f00000030c0), &(0x7f0000003100)=0x14)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000031c0)={0x1b, 0x0, 0x0, 0xc95a, 0x0, r1, 0xd, '\x00', 0x0, r3, 0x2, 0x3, 0x1}, 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000003240)={0x1b, 0x0, 0x0, 0x10, 0x0, r0, 0x101, '\x00', 0x0, r3, 0x5, 0x1, 0x2}, 0x50)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioprio_set$pid(0x2, 0x0, 0x4000)
syz_open_dev$tty1(0xc, 0x4, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

2m19.641757645s ago: executing program 1 (id=533):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='nv', 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x141000, 0x0)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendto$inet(r0, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)

2m17.35056s ago: executing program 1 (id=540):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_delvlan={0x24, 0x70, 0x1, 0x70bd29, 0x2, {0x7, 0x0, 0x0, r1}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x7a, 0x4}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040004}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@ipv6_deladdrlabel={0x60, 0x49, 0x20, 0x70bd2c, 0x25dfdbfc, {0xa, 0x0, 0x38, 0x0, r1, 0x80000001}, [@IFAL_ADDRESS={0x14, 0x1, @remote}, @IFAL_ADDRESS={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFAL_ADDRESS={0x14, 0x1, @remote}, @IFAL_LABEL={0x8, 0x2, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x841}, 0x8000)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={<r3=>0xffffffffffffffff}, 0x111, 0x3}}, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_io_uring_setup(0x117, 0x0, 0x0, &(0x7f0000000180), &(0x7f0000000000))
r7 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r7, &(0x7f0000000c80)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffffffff}, 0x1c, &(0x7f00000005c0)=[{&(0x7f00000003c0)='x', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e21, 0x1, @private1, 0x1}, 0x1c, &(0x7f0000000880)}}], 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x4)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0xd4, @empty, 0xa09c}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x3a}}, r3, 0x40099d}}, 0x48)

2m16.119164322s ago: executing program 6 (id=542):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x604ab000)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, 0x0, &(0x7f0000000000))
pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, 0x0)
ioctl$XFS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000))

2m15.168573093s ago: executing program 1 (id=544):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x604ab000)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, 0x0, &(0x7f0000000000))
pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0x0, 0x9}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x8, 0xb16, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffd, 0x0, 0xfffffff9, 0x0, 0x80000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xe], [0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xddc, 0x0, 0x0, 0xfffffffc, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffff, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x7, 0x4], [0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc045, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c)
ioctl$XFS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000))

2m13.885371236s ago: executing program 6 (id=547):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000))
prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000)

2m10.64997657s ago: executing program 1 (id=551):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000b80)=@security={'security\x00', 0x64, 0x4, 0x2c8, 0x100000c, 0x0, 0xe0, 0x178, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x98, 0xe0, 0x0, {0x0, 0x1000000000000}, [@common=@inet=@dscp={{0x28}, {0x10, 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz1\x00', {0x2}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x42}}}, {{@ip={@multicast2, @private=0xa010101, 0xff000000, 0xff, 'veth0_macvtap\x00', 'vcan0\x00', {0xff}, {0xff}, 0x21}, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x2, 0x7}, {0x2, 0x0, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28)
connect$inet6(r0, 0x0, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000100)={0x3a}, 0x8)
r6 = fcntl$dupfd(r0, 0x406, r0)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
connect$unix(r6, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e)
syz_read_part_table(0x5d9, &(0x7f0000000000)="$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")

2m8.162856557s ago: executing program 6 (id=553):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x3e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
r3 = socket(0xa, 0x3, 0x3a)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"})
ioctl$USBDEVFS_ALLOC_STREAMS(r4, 0x8008551c, &(0x7f0000000400)=ANY=[@ANYBLOB="4a9800000a00000081ec00000486060b830eeaa1144eb44e4c8ac08e6a6eac4a860fdc1851ddab64fe213700008c63f0c84444fdb3d33f1cee37d289ff436030da41bf010000005b3b3b"])
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000200)={0xfffffffc, 0x0, 0x6, 0x0, 0xff, "db8f2d2b3b7596160c6981acf8805944823a7f"})
getsockopt$inet_pktinfo(r5, 0x0, 0x8, 0x0, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYRES32, @ANYRESHEX, @ANYRESHEX=r3], 0x2e0}, 0x1, 0x0, 0x0, 0x4040}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c56096c590001040d007000fadb107c0844b9c9", @ANYRES32=0x0, @ANYBLOB="900100008ba5072f1c00128009000100626f6e64000000000c00028005001600000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1)
memfd_secret(0x0)
ppoll(0x0, 0x0, &(0x7f0000000280)={0x77359400}, 0x0, 0x0)
unshare(0x40020000)
socket$packet(0x11, 0x3, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xd, 0xffff}, {0x0, 0xffe0}}}, 0x24}}, 0x0)

2m0.990031824s ago: executing program 6 (id=558):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]})
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x11, r0)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
read(r1, &(0x7f0000000080)=""/1, 0x1)
r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0)
socket$unix(0x1, 0x2, 0x0)
setpriority(0x2, 0x0, 0x6)
r3 = fsmount(r2, 0x1, 0x0)
r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5)
socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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")
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x441, 0x2)
truncate(&(0x7f0000000900)='./file1\x00', 0x3000000)
write(r5, &(0x7f0000000180)="1f", 0x1)
fallocate(r5, 0x8, 0x4000, 0x4000)

1m57.834792297s ago: executing program 6 (id=564):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x604ab000)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, 0x0, &(0x7f0000000000))
pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0x0, 0x9}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x8, 0xb16, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffd, 0x0, 0xfffffff9, 0x0, 0x80000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xe], [0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xddc, 0x0, 0x0, 0xfffffffc, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffff, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x7, 0x4], [0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc045, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c)
ioctl$XFS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000))

1m54.996426877s ago: executing program 35 (id=551):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000b80)=@security={'security\x00', 0x64, 0x4, 0x2c8, 0x100000c, 0x0, 0xe0, 0x178, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x98, 0xe0, 0x0, {0x0, 0x1000000000000}, [@common=@inet=@dscp={{0x28}, {0x10, 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz1\x00', {0x2}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x42}}}, {{@ip={@multicast2, @private=0xa010101, 0xff000000, 0xff, 'veth0_macvtap\x00', 'vcan0\x00', {0xff}, {0xff}, 0x21}, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x2, 0x7}, {0x2, 0x0, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28)
connect$inet6(r0, 0x0, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000100)={0x3a}, 0x8)
r6 = fcntl$dupfd(r0, 0x406, r0)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
connect$unix(r6, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e)
syz_read_part_table(0x5d9, &(0x7f0000000000)="$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")

1m54.830829519s ago: executing program 6 (id=569):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000b80)=@security={'security\x00', 0x64, 0x4, 0x2c8, 0x100000c, 0x0, 0xe0, 0x178, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x98, 0xe0, 0x0, {0x0, 0x1000000000000}, [@common=@inet=@dscp={{0x28}, {0x10, 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz1\x00', {0x2}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x42}}}, {{@ip={@multicast2, @private=0xa010101, 0xff000000, 0xff, 'veth0_macvtap\x00', 'vcan0\x00', {0xff}, {0xff}, 0x21}, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x2, 0x7}, {0x2, 0x0, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28)
connect$inet6(r0, 0x0, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000100)={0x3a}, 0x8)
r5 = fcntl$dupfd(r0, 0x406, r0)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
connect$unix(r5, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e)
syz_read_part_table(0x5d9, &(0x7f0000000000)="$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")

1m38.848149479s ago: executing program 36 (id=569):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000b80)=@security={'security\x00', 0x64, 0x4, 0x2c8, 0x100000c, 0x0, 0xe0, 0x178, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x98, 0xe0, 0x0, {0x0, 0x1000000000000}, [@common=@inet=@dscp={{0x28}, {0x10, 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz1\x00', {0x2}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x42}}}, {{@ip={@multicast2, @private=0xa010101, 0xff000000, 0xff, 'veth0_macvtap\x00', 'vcan0\x00', {0xff}, {0xff}, 0x21}, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x2, 0x7}, {0x2, 0x0, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28)
connect$inet6(r0, 0x0, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000100)={0x3a}, 0x8)
r5 = fcntl$dupfd(r0, 0x406, r0)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
connect$unix(r5, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e)
syz_read_part_table(0x5d9, &(0x7f0000000000)="$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")

23.786732968s ago: executing program 5 (id=681):
renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x6)
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x4, &(0x7f0000000040)=ANY=[])
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
readv(r2, &(0x7f0000000080)=[{&(0x7f00000020c0)=""/4082, 0xff2}], 0x1)
fstat(0xffffffffffffffff, 0x0)
setuid(0x0)
getpid()
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]})
close_range(r3, 0xffffffffffffffff, 0x0)

19.078817017s ago: executing program 4 (id=687):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1010000, &(0x7f0000000080)={[{@rodir}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@utf8}, {@numtail}, {@utf8}, {@shortname_lower}, {@shortname_mixed}, {@shortname_lower}, {@numtail}, {@utf8}, {@fat=@quiet}, {@utf8no}, {@uni_xlate}, {@utf8no}, {@shortname_mixed}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}]}, 0x1, 0x379, &(0x7f0000000880)="$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")
socket(0x10, 0x803, 0x0)
mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4000, &(0x7f0000000180)=0x9, 0xa7, 0x2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x68042, 0xe)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)

18.402168215s ago: executing program 5 (id=689):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz0\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x3f, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x40, 0x4, 0x25cd, 0x1, 0xb4, 0xd49, 0x80a2b9, 0x6, 0xb, 0xe4, 0x6, 0xfc000000, 0x2, 0xbbf, 0x4a732f64, 0x1, 0x3, 0x5, 0xfffffffd, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x47, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x3, 0x4, 0x9, 0x1, 0x2, 0x7, 0xfffffff5, 0x404, 0xa7, 0x81, 0x9, 0x8001, 0x0, 0xff, 0x2, 0x4, 0x9, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0xb4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x497d, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x6, 0x8, 0x2, 0x4, 0x8, 0xffffff7f, 0x2, 0x8, 0x4c2336d3, 0x4, 0x0, 0xfffffff6, 0x401, 0x46, 0xf1, 0x4, 0xab000e0, 0x5, 0x6, 0x2, 0x1, 0x8003ff, 0x1ff, 0x1, 0x7fff, 0x6, 0x1cb, 0x0, 0x80000004, 0x8, 0x438, 0x2, 0xa, 0x95, 0x80000001, 0x4, 0xfffffff9, 0x1, 0x1000, 0x8, 0x5], [0x2, 0xfffffffe, 0xffff, 0xb, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x5, 0x8d3, 0x200003, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x8000, 0x2, 0x7fff, 0x3e55, 0x5, 0xd3, 0x5, 0x97f7, 0x3, 0xd, 0x6, 0x603, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xe, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x9, 0x10000, 0xfefffffd, 0x5, 0x72], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0x3, 0x1005, 0x1, 0x9, 0x1e, 0x9, 0x812, 0x3, 0x0, 0xd, 0xfffffff7, 0x6, 0x140f2, 0x5396, 0x0, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x98ce, 0x7fffffff, 0x100009, 0x7, 0xffffffff, 0x3, 0x201, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7ffc, 0x1, 0x6, 0xf, 0xe, 0x1, 0x269, 0x6, 0x1, 0xa82b, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304})
getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000003c0), &(0x7f0000000400)=0x4)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

16.285606927s ago: executing program 7 (id=690):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000580)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendmmsg$inet6(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000000180)="86", 0x1}, {&(0x7f00000001c0)=' ', 0x1}, {&(0x7f0000001540)="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", 0x2c6}], 0x3}}], 0x1, 0x4400c800)
sendto$inet6(r0, &(0x7f0000000300), 0x20, 0x3b00, 0x0, 0xfffffffffffffdfd)

16.284719258s ago: executing program 8 (id=699):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
r3 = socket(0xa, 0x3, 0x3a)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "4cf90fba85c830e42a3ca4b10f01bbcb15f3806c4853e7c44a6974759d9f643905a56baa4195fb396d9bfa306999f1586e5d1ca49add100a36b751a7d9fe0b182ebf2c8a0e66f72c1c08260030752f07cd4089473e52885a3c85bacf3ccfac5bb9435fe036dcfccd7254bbd8bce90e2284d29e1f17d6652270fd0abcb8729f16ff602b438bd122a9e09984e2799d0dbfef7533d1a930ea4f4b57605ace45f5815450693650ae122d34aa0c5ca5e793516d156e5a5b34d6c17c40d753426a3d8e15e726d0f2622e873e0cbe63751bb62c68594d4cb0a21b92ad2e80f24a9b290a87ee6779022a0b7f5223e4e8c9f53f501ec8c439724078fdc076a51d50760566"})
ioctl$USBDEVFS_ALLOC_STREAMS(r4, 0x8008551c, &(0x7f0000000400)=ANY=[@ANYBLOB="4a9800000a00000081ec00000486060b830eeaa1144eb44e4c8ac08e6a6eac4a860fdc1851ddab64fe213700008c63f0c84444fdb3d33f1cee37d289ff436030da41bf010000005b3b3b"])
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000200)={0xfffffffc, 0x0, 0x6, 0x0, 0xff, "db8f2d2b3b7596160c6981acf8805944823a7f"})
getsockopt$inet_pktinfo(r5, 0x0, 0x8, 0x0, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c56096c590001040d007000fadb107c0844b9c9", @ANYRES32=0x0, @ANYBLOB="900100008ba5072f1c00128009000100626f6e64000000000c00028005001600000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1)
memfd_secret(0x0)
ppoll(0x0, 0x0, &(0x7f0000000280)={0x77359400}, 0x0, 0x0)
unshare(0x40020000)
socket$packet(0x11, 0x3, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xd, 0xffff}, {0x0, 0xffe0}}}, 0x24}}, 0x0)

16.265033668s ago: executing program 4 (id=691):
socket$kcm(0x11, 0x200000000000002, 0x300)
socket$inet(0x2, 0x4000000000000001, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
connect$802154_dgram(0xffffffffffffffff, 0x0, 0x0)
shmget$private(0x0, 0x1000, 0x800, &(0x7f0000896000/0x1000)=nil)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42241, 0x0)
set_mempolicy_home_node(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0)

14.691473644s ago: executing program 7 (id=692):
r0 = socket$inet6(0xa, 0x5, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000040)={[{@delalloc}, {@errors_remount}, {@quota}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}, {@orlov}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=")
chdir(&(0x7f0000000000)='./file0\x00')
r1 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x80042, 0x0)
ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, &(0x7f00000001c0)={{0x7d3117e6, 0x1}, {0x3, 0x67fb}, 0x681})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x2, 0xa, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48)
renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x4)
r5 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x2)
ioctl$FE_SET_FRONTEND(r5, 0x40246f4c, &(0x7f0000000340)={0x30a32c0, 0x1, @ofdm={0x1, 0x13, 0x15, 0x4, 0x4, 0x2, 0x4}})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x8, 0x10002, 0x0, 0x1}, 0x48)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r6}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000000}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000009c0)={'ip6tnl0\x00', 0x0})

14.514887786s ago: executing program 5 (id=693):
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)=@arm64={0x9, 0x40, 0x3, '\x00', 0x7})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0)
pidfd_send_signal(0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x8, 0xffff}, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x3f, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x40, 0x4, 0x25cd, 0x1, 0xb4, 0xd49, 0x80a2b9, 0x6, 0xb, 0xe4, 0x6, 0xfc000000, 0x2, 0xbbf, 0x4a732f64, 0x1, 0x3, 0x5, 0xfffffffd, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x1000, 0x800, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x3, 0x4, 0x9, 0x1, 0x1, 0x80000003, 0xfffffff5, 0x404, 0xa7, 0x81, 0x9, 0x8001, 0x0, 0xff, 0x2, 0x4, 0x9, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0xb4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x497d, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0xffffffff, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x6, 0x8, 0x2, 0x4, 0x8, 0xffffff7f, 0x400, 0x8, 0x4c2336d3, 0x4, 0x0, 0xfffffff6, 0x401, 0x46, 0xf1, 0x4, 0xab000e0, 0x5, 0x6, 0x2, 0x1, 0x8003ff, 0x1ff, 0x1, 0x7fff, 0x6, 0x1cb, 0x1, 0x80000004, 0x8, 0x438, 0x2, 0xa, 0x95, 0x80000001, 0x4, 0xfffffff9, 0x1, 0x1000, 0x8, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x5, 0x8d3, 0x200003, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x10100a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x5, 0x97f7, 0x3, 0xd, 0x6, 0x603, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xe, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x9, 0x10000, 0xfefffffd, 0x5, 0x72], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0x3, 0x1005, 0x1, 0x9, 0x1e, 0x9, 0x812, 0x3, 0x0, 0xd, 0xfffffff7, 0x6, 0x140f2, 0x5396, 0x0, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x98ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x10003, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7ffc, 0x3, 0x6, 0xf, 0xe, 0x1, 0x269, 0x6, 0x1, 0xa82b, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
open(0x0, 0x14d77e, 0xc2)
link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_timeval(r3, 0x1, 0x2f, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r6 = dup(r5)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

14.332176168s ago: executing program 8 (id=694):
r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0))
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
shmget(0x0, 0x2000, 0x64, &(0x7f0000ffc000/0x2000)=nil)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_generic(0x10, 0x3, 0x10)
read$FUSE(0xffffffffffffffff, &(0x7f0000006140)={0x2020}, 0x2020)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x10, 0x4, 0x2}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r2, &(0x7f0000000780), 0x0}, 0x20)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000000)={0x1, 0x8})
chdir(&(0x7f00000003c0)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x40040, 0xc0)

13.642056046s ago: executing program 8 (id=695):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000001c0)='./file1\x00', 0x2048c5, &(0x7f0000000380)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c73686f72746e616d653d6c6f7765722c726f6469722c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c756e695f786c6174653d312c6e66733d6e6f7374616c655f726f2c73686f72746e616d653d6d697865642c64656275672c73686f72746e616d653d77696e39352c6e6f6e756d7461696c3d302c757466383d302c73686f72746e616d653d77696e6e742c00854edcfa2d618b2fde16b18f725f94cc09476d465b9a02c17b21f4c85ec059086da381e8a3f68091d93f8006b1180b9acbf5cea1b51fb4bb34babe28af478516fdbb5e1b891183e8"], 0x1, 0x2b4, &(0x7f0000000e40)="$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")
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000"], 0x1c}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
ptrace$getregset(0x4204, r1, 0x4, &(0x7f0000000580)={&(0x7f0000000480)=""/201, 0xc9})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
getsockname(r4, 0x0, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x24, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x24}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x24}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd2e}, 0x65)

12.472982218s ago: executing program 8 (id=696):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1010000, &(0x7f0000000080)={[{@rodir}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@utf8}, {@numtail}, {@utf8}, {@shortname_lower}, {@shortname_mixed}, {@shortname_lower}, {@numtail}, {@utf8}, {@fat=@quiet}, {@utf8no}, {@uni_xlate}, {@utf8no}, {@shortname_mixed}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}]}, 0x1, 0x379, &(0x7f0000000880)="$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")
socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x68042, 0xe)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)

12.29674079s ago: executing program 7 (id=697):
r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0))
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_generic(0x10, 0x3, 0x10)
read$FUSE(0xffffffffffffffff, &(0x7f0000006140)={0x2020}, 0x2020)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x10, 0x4, 0x2}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r4, &(0x7f0000000780), 0x0}, 0x20)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000000)={0x1, 0x8})
chdir(&(0x7f00000003c0)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x40040, 0xc0)

12.215436271s ago: executing program 4 (id=698):
socket$inet_udp(0x2, 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x14, r1, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4c040}, 0x40000)
r2 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r2, &(0x7f0000000140)={0x18, 0x2, {0xffff, @dev={0xac, 0x14, 0x14, 0x1c}}}, 0x1e)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0)
ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000180)={0xcf43, 0x4c9, 0x4, 0x9dff, 0xc, "ff0800fe00"})
socket$pptp(0x18, 0x1, 0x2)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x40, 0x3, 0x7, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"})
syz_open_pts(r3, 0x0)
r4 = dup(0xffffffffffffffff)
ioctl$KVM_CAP_MAX_VCPU_ID(r4, 0x4068aea3, &(0x7f0000000040)={0x80, 0x0, 0x1})
connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x4, @multicast1}}, 0x1e)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x202, 0x0)
ioctl$PPPIOCATTCHAN(r5, 0x40047438, 0x0)
write(r5, &(0x7f0000000300)="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", 0x299)

12.106085602s ago: executing program 5 (id=700):
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file1\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f00000017c0)="$eJzs3c9vFFUcAPDvzG5LKWgX40GMCTUeIDFsW0BB4gE8Gg8mkqAnXPuDNCxgaE0sIbHcTLyowZMnT2qiR6+GGPXkweiJ/8CQEFP4A2pmdras7W5LYcuQ9vNJZve9eSzvO02++9503nQC2LFGs5c0Yn9EfJ5EjBT704gYzEtDEYutf3dv6dpktiWxvPzOv0kkEXF36dpk+/9Kivc92Us1/2T89UvEM5W1/c4tXL3QaDanrxT1sfmLH47NLVw9PHuxcX76/PSlI6+OH5147diJV47d/9DQox3rwvH0sz/ffOO7G+e+/uPHEy98msSp2Fu0dR5Hv4zG6MrPpFM1It7rd2clqRTH0+04AQB48qQdc7j9MRKVvNQyEvXZUoMDAAAA+uKTiFgGAAAAtrnE+T8AAABsc+11AHeXrk22t3JXJACPy53TEVFr5X/7/v5WSzUW8/ehGIiI4XtJx51Brfu9a33ofzQifvjq+IFsiy26Dx/obvF6RDzXbfxP8vyvFX90Y3X+pxEx3of+R1fV5T88Pt3yv3VesHH+n+pD//IfAAAAAAAA+ufm6daF/LXX/9OV9T/R5fpfpcu1u4ex8fW/9HYfugG6uHM64vWOZ/vc68j/Qq1S1J7K1wMMJDOzzenxiHg6Ig7FwK6sPrFOH9/+dPLvXm2d6/+yLeu/vRawiON2ddf/PzPVmG88yjEDLXeuRzxf7Zb/ycr4n/RY//v2A/bx29mfZ3q1bZz/wFZZ/ibiYNfx//4T3ZL1n883ls8HxtqzgrXOvvjr9736l/9Qnmz8H14//2tJ5/M65zbfx/jw4fO92h52/j+YnMmfKjpY7Pu4MT9/ZSJiMHlr7f4jm48ZtqN2PrTzJcv/Qy91P/9fb/6fJdn7xbdEGhGN4j2rf7Cqz13nfv+iVzzGfyhPlv9Tmxr/N1/48t2lM736f7Dx/1g+ph8q9vj9H6zvQRO07DgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgSZJGxN5I0vpKOU3r9Yg9EfFsDKfNy3PzL89c/ujSVNYWUYuBdGa2OT0eESOtepLVJ/Ly/fqRVfWjEbEvIm6M7M7r9cnLzamyDx4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAVeyJibyRpPSLSvJym9Xqr7Z+RsqMDAAAA+qZWdgAAAADAlnP+DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAj2nfg5q0kIhZP7s63zGDRNlBqZMBWS8sOAChNpewAgNJUyw4AKI1zfCDZoH2oZ4sZBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBOcnD/zVtJRCye3J1vmcGibaDUyICtlpYdAFCaStkBAKWplh0AUBrn+ECyQftQzxYzCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICdZG7h6oVGszl9RWHdQjUinoAwFBQeU6HsbyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2s/8CAAD//yT3/f8=")
r0 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@map=r0, 0x1, 0x1, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
pwritev2(r0, &(0x7f0000000240)=[{}], 0x1, 0x5000, 0x0, 0x3)

10.615813978s ago: executing program 4 (id=701):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1010000, &(0x7f0000000080)={[{@rodir}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@utf8}, {@numtail}, {@utf8}, {@shortname_lower}, {@shortname_mixed}, {@shortname_lower}, {@numtail}, {@utf8}, {@fat=@quiet}, {@utf8no}, {@uni_xlate}, {@utf8no}, {@shortname_mixed}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}]}, 0x1, 0x379, &(0x7f0000000880)="$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")
r3 = socket(0x10, 0x803, 0x0)
mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4000, &(0x7f0000000180)=0x9, 0xa7, 0x2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x68042, 0xe)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)

9.41034522s ago: executing program 8 (id=702):
creat(&(0x7f0000000200)='./file0\x00', 0x1c4)
eventfd(0x8e)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f00000003c0)={0x2, {{0xa, 0x4e20, 0x6, @mcast2, 0x51}}, {{0xa, 0x4e23, 0x69, @ipv4={'\x00', '\xff\xff', @loopback}, 0x9}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x129143, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x401, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000040)={0x200000, 0xf000, 0x70, 0x3, 0x4})
ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r2, 0x4018aee3, &(0x7f0000000100)=@attr_pmu_irq={0x0, 0x1, 0x1, &(0x7f0000000080)=0x1})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0x8, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0xcb5e, 0x0, 0x5, 0x1], 0x0, 0x41981})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

7.273431063s ago: executing program 5 (id=703):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
r3 = socket(0xa, 0x3, 0x3a)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"})
ioctl$USBDEVFS_ALLOC_STREAMS(r4, 0x8008551c, &(0x7f0000000400)=ANY=[@ANYBLOB="4a9800000a00000081ec00000486060b830eeaa1144eb44e4c8ac08e6a6eac4a860fdc1851ddab64fe213700008c63f0c84444fdb3d33f1cee37d289ff436030da41bf010000005b3b3b"])
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000200)={0xfffffffc, 0x0, 0x6, 0x0, 0xff, "db8f2d2b3b7596160c6981acf8805944823a7f"})
getsockopt$inet_pktinfo(r5, 0x0, 0x8, 0x0, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYRESHEX, @ANYRESHEX=r3], 0x2e0}, 0x1, 0x0, 0x0, 0x4040}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c56096c590001040d007000fadb107c0844b9c9", @ANYRES32=0x0, @ANYBLOB="900100008ba5072f1c00128009000100626f6e64000000000c00028005001600000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1)
memfd_secret(0x0)
ppoll(0x0, 0x0, &(0x7f0000000280)={0x77359400}, 0x0, 0x0)
unshare(0x40020000)
socket$packet(0x11, 0x3, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xd, 0xffff}, {0x0, 0xffe0}}}, 0x24}}, 0x0)

6.408594363s ago: executing program 7 (id=704):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1010000, &(0x7f0000000080)={[{@rodir}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@utf8}, {@numtail}, {@utf8}, {@shortname_lower}, {@shortname_mixed}, {@shortname_lower}, {@numtail}, {@utf8}, {@fat=@quiet}, {@utf8no}, {@uni_xlate}, {@utf8no}, {@shortname_mixed}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}]}, 0x1, 0x379, &(0x7f0000000880)="$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")
socket(0x10, 0x803, 0x0)
mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4000, &(0x7f0000000180)=0x9, 0xa7, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x68042, 0xe)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)

3.446340064s ago: executing program 7 (id=705):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
r3 = socket(0xa, 0x3, 0x3a)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"})
ioctl$USBDEVFS_ALLOC_STREAMS(r4, 0x8008551c, &(0x7f0000000400)=ANY=[@ANYBLOB="4a9800000a00000081ec00000486060b830eeaa1144eb44e4c8ac08e6a6eac4a860fdc1851ddab64fe213700008c63f0c84444fdb3d33f1cee37d289ff436030da41bf010000005b3b3b"])
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000200)={0xfffffffc, 0x0, 0x6, 0x0, 0xff, "db8f2d2b3b7596160c6981acf8805944823a7f"})
getsockopt$inet_pktinfo(r5, 0x0, 0x8, 0x0, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c56096c590001040d007000fadb107c0844b9c9", @ANYRES32=0x0, @ANYBLOB="900100008ba5072f1c00128009000100626f6e64000000000c00028005001600000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1)
memfd_secret(0x0)
ppoll(0x0, 0x0, &(0x7f0000000280)={0x77359400}, 0x0, 0x0)
unshare(0x40020000)
socket$packet(0x11, 0x3, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xd, 0xffff}, {0x0, 0xffe0}}}, 0x24}}, 0x0)

1.489248355s ago: executing program 4 (id=706):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_delvlan={0x24, 0x70, 0x1, 0x70bd29, 0x2, {0x7, 0x0, 0x0, r1}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x7a, 0x4}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040004}, 0x0)
sendmsg$nl_route(r0, 0x0, 0x8000)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={<r3=>0xffffffffffffffff}, 0x111, 0x3}}, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_io_uring_setup(0x117, 0x0, 0x0, &(0x7f0000000180), &(0x7f0000000000))
r7 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r7, &(0x7f0000000c80)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffffffff}, 0x1c, &(0x7f00000005c0)=[{&(0x7f00000003c0)='x', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e21, 0x1, @private1, 0x1}, 0x1c, 0x0}}], 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x4)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0xd4, @empty, 0xa09c}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x3a}}, r3, 0x40099d}}, 0x48)

1.215454128s ago: executing program 8 (id=707):
r0 = socket$inet6(0xa, 0x5, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000040)={[{@delalloc}, {@errors_remount}, {@quota}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}, {@orlov}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
chdir(&(0x7f0000000000)='./file0\x00')
openat$ptp0(0xffffffffffffff9c, 0x0, 0x80042, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x2, 0xa, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
prctl$PR_GET_TAGGED_ADDR_CTRL(0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48)
renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x4)
r4 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x2)
ioctl$FE_SET_FRONTEND(r4, 0x40246f4c, &(0x7f0000000340)={0x30a32c0, 0x1, @ofdm={0x1, 0x13, 0x15, 0x4, 0x4, 0x2, 0x4}})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x8, 0x10002, 0x0, 0x1}, 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000000}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000009c0)={'ip6tnl0\x00', 0x0})

1.147753208s ago: executing program 5 (id=708):
r0 = socket$inet6(0xa, 0x5, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000040)={[{@delalloc}, {@errors_remount}, {@quota}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}, {@orlov}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
chdir(&(0x7f0000000000)='./file0\x00')
r1 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x80042, 0x0)
ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, &(0x7f00000001c0)={{0x7d3117e6, 0x1}, {0x3, 0x67fb}, 0x681})
socket$kcm(0x2, 0xa, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
prctl$PR_GET_TAGGED_ADDR_CTRL(0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b7000000f8180000bfa300000000000007030000f4ffffff620af0fff8ffffff71a4f0ff000000002d040200000000001d400200000000004604000001ed000062030000000000001d440000000000007a0a00fe00ffffffc3030000f1000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0465f2f994114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840b08000000f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e82623951743283070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00a5b4f7e9ad0500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48)
renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x4)
r5 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x2)
ioctl$FE_SET_FRONTEND(r5, 0x40246f4c, &(0x7f0000000340)={0x30a32c0, 0x1, @ofdm={0x1, 0x13, 0x15, 0x4, 0x4, 0x2, 0x4}})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x8, 0x10002, 0x0, 0x1}, 0x48)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r6}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000000}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000009c0)={'ip6tnl0\x00', 0x0})

16.216171ms ago: executing program 4 (id=709):
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)=@arm64={0x9, 0x40, 0x3, '\x00', 0x7})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0)
pidfd_send_signal(0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x8, 0xffff}, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x3f, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x40, 0x4, 0x25cd, 0x1, 0xb4, 0xd49, 0x80a2b9, 0x6, 0xb, 0xe4, 0x6, 0xfc000000, 0x2, 0xbbf, 0x4a732f64, 0x1, 0x3, 0x5, 0xfffffffd, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x1000, 0x800, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x3, 0x4, 0x9, 0x1, 0x1, 0x80000003, 0xfffffff5, 0x404, 0xa7, 0x81, 0x9, 0x8001, 0x0, 0xff, 0x2, 0x4, 0x9, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0xb4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x497d, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0xffffffff, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x6, 0x8, 0x2, 0x4, 0x8, 0xffffff7f, 0x400, 0x8, 0x4c2336d3, 0x4, 0x0, 0xfffffff6, 0x401, 0x46, 0xf1, 0x4, 0xab000e0, 0x5, 0x6, 0x2, 0x1, 0x8003ff, 0x1ff, 0x1, 0x7fff, 0x6, 0x1cb, 0x1, 0x80000004, 0x8, 0x438, 0x2, 0xa, 0x95, 0x80000001, 0x4, 0xfffffff9, 0x1, 0x1000, 0x8, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x5, 0x8d3, 0x200003, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x10100a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x5, 0x97f7, 0x3, 0xd, 0x6, 0x603, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xe, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x9, 0x10000, 0xfefffffd, 0x5, 0x72], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0x3, 0x1005, 0x1, 0x9, 0x1e, 0x9, 0x812, 0x3, 0x0, 0xd, 0xfffffff7, 0x6, 0x140f2, 0x5396, 0x0, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x98ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x10003, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7ffc, 0x3, 0x6, 0xf, 0xe, 0x1, 0x269, 0x6, 0x1, 0xa82b, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
open(0x0, 0x14d77e, 0xc2)
link(0x0, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_timeval(r3, 0x1, 0x2f, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r6 = dup(r5)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

0s ago: executing program 7 (id=710):
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)=@arm64={0x9, 0x40, 0x3, '\x00', 0x7})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0)
pidfd_send_signal(0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x8, 0xffff}, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x3f, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x40, 0x4, 0x25cd, 0x1, 0xb4, 0xd49, 0x80a2b9, 0x6, 0xb, 0xe4, 0x6, 0xfc000000, 0x2, 0xbbf, 0x4a732f64, 0x1, 0x3, 0x5, 0xfffffffd, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x1000, 0x800, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x3, 0x4, 0x9, 0x1, 0x1, 0x80000003, 0xfffffff5, 0x404, 0xa7, 0x81, 0x9, 0x8001, 0x0, 0xff, 0x2, 0x4, 0x9, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0xb4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x497d, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0xffffffff, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x6, 0x8, 0x2, 0x4, 0x8, 0xffffff7f, 0x400, 0x8, 0x4c2336d3, 0x4, 0x0, 0xfffffff6, 0x401, 0x46, 0xf1, 0x4, 0xab000e0, 0x5, 0x6, 0x2, 0x1, 0x8003ff, 0x1ff, 0x1, 0x7fff, 0x6, 0x1cb, 0x1, 0x80000004, 0x8, 0x438, 0x2, 0xa, 0x95, 0x80000001, 0x4, 0xfffffff9, 0x1, 0x1000, 0x8, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x5, 0x8d3, 0x200003, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x10100a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x5, 0x97f7, 0x3, 0xd, 0x6, 0x603, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xe, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x9, 0x10000, 0xfefffffd, 0x5, 0x72], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0x3, 0x1005, 0x1, 0x9, 0x1e, 0x9, 0x812, 0x3, 0x0, 0xd, 0xfffffff7, 0x6, 0x140f2, 0x5396, 0x0, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x98ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x10003, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7ffc, 0x3, 0x6, 0xf, 0xe, 0x1, 0x269, 0x6, 0x1, 0xa82b, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
open(0x0, 0x14d77e, 0xc2)
link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_timeval(r3, 0x1, 0x2f, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r6 = dup(r5)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

l be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  337.161510][ T6331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  337.175354][ T6331] batman_adv: batadv0: Adding interface: batadv_slave_1
[  337.182775][ T6331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  337.196075][ T6401] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  337.210654][ T6331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  337.429269][ T4269] EXT4-fs (loop1): unmounting filesystem.
[  337.472492][ T6331] device hsr_slave_0 entered promiscuous mode
[  337.490315][ T4283] Bluetooth: hci1: command 0x0419 tx timeout
[  337.504208][ T6331] device hsr_slave_1 entered promiscuous mode
[  337.742709][ T4283] Bluetooth: hci3: command 0x0409 tx timeout
[  337.830285][ T4472] device hsr_slave_0 left promiscuous mode
[  337.864204][ T4472] device hsr_slave_1 left promiscuous mode
[  337.902007][ T4472] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  337.917367][ T4472] batman_adv: batadv0: Removing interface: batadv_slave_0
[  337.947425][ T4472] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  337.975597][ T4472] batman_adv: batadv0: Removing interface: batadv_slave_1
[  338.027878][ T4472] device bridge_slave_1 left promiscuous mode
[  338.034381][ T4472] bridge0: port 2(bridge_slave_1) entered disabled state
[  338.133496][ T4472] device bridge_slave_0 left promiscuous mode
[  338.148356][ T4472] bridge0: port 1(bridge_slave_0) entered disabled state
[  338.240208][ T4472] device veth1_macvtap left promiscuous mode
[  338.246331][ T4472] device veth0_macvtap left promiscuous mode
[  338.259990][ T4472] device veth1_vlan left promiscuous mode
[  338.296339][ T4472] device veth0_vlan left promiscuous mode
[  338.590662][ T6428] xt_CONNSECMARK: invalid mode: 66
[  338.693072][ T6428] loop5: detected capacity change from 0 to 2048
[  339.319665][ T6428]  loop5: p3 < > p4 < >
[  339.324046][ T6428] loop5: partition table partially beyond EOD, truncated
[  339.331368][ T6428] loop5: p3 start 4284289 is beyond EOD, truncated
[  339.518466][ T4350] udevd[4350]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[  339.574225][ T6430] loop5: detected capacity change from 0 to 128
[  339.659442][ T6430] netlink: 8 bytes leftover after parsing attributes in process `syz.5.456'.
[  339.835375][ T4283] Bluetooth: hci3: command 0x041b tx timeout
[  340.123769][ T6336] Set syz1 is full, maxelem 65536 reached
[  340.169290][ T6432] xt_CONNSECMARK: invalid mode: 66
[  340.193174][ T6432] loop1: detected capacity change from 0 to 2048
[  340.236184][ T6432]  loop1: p3 < > p4 < >
[  340.241228][ T6432] loop1: partition table partially beyond EOD, truncated
[  340.248497][ T6432] loop1: p3 start 4284289 is beyond EOD, truncated
[  340.268229][ T3637]  loop1: p3 < > p4 < >
[  340.278939][ T3637] loop1: partition table partially beyond EOD, truncated
[  340.321137][ T3637] loop1: p3 start 4284289 is beyond EOD, truncated
[  340.423108][ T6336] Process accounting resumed
[  340.639247][ T6437] loop4: detected capacity change from 0 to 512
[  340.802617][ T6437] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.458: inode has both inline data and extents flags
[  340.856195][ T6437] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.458: couldn't read orphan inode 15 (err -117)
[  341.104716][ T6437] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  341.220382][ T6444] xt_CONNSECMARK: invalid mode: 66
[  341.244578][ T6444] loop5: detected capacity change from 0 to 2048
[  341.327637][ T6444]  loop5: p3 < > p4 < >
[  341.332178][ T6444] loop5: partition table partially beyond EOD, truncated
[  341.339476][ T6444] loop5: p3 start 4284289 is beyond EOD, truncated
[  341.402762][ T6446] xt_CONNSECMARK: invalid mode: 66
[  341.553995][ T6446] loop1: detected capacity change from 0 to 2048
[  342.204493][ T4280] Bluetooth: hci3: command 0x040f tx timeout
[  342.239215][ T6446]  loop1: p3 < > p4 < >
[  342.244763][ T6446] loop1: partition table partially beyond EOD, truncated
[  342.278878][ T6446] loop1: p3 start 4284289 is beyond EOD, truncated
[  342.345727][ T5197] udevd[5197]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[  342.397800][ T4284] EXT4-fs (loop4): unmounting filesystem.
[  342.516854][ T4350] udevd[4350]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  342.657370][ T6451] loop1: detected capacity change from 0 to 4096
[  342.729652][ T4472] team0 (unregistering): Port device team_slave_1 removed
[  342.738511][ T6451] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  342.819568][ T4472] team0 (unregistering): Port device team_slave_0 removed
[  342.852061][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  342.886676][ T4269] EXT4-fs (loop1): unmounting filesystem.
[  342.965701][ T4472] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  343.105002][ T4472] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  343.888389][ T4472] bond0 (unregistering): Released all slaves
[  343.926019][ T6466] loop4: detected capacity change from 0 to 128
[  343.973821][ T6466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.467'.
[  344.226451][ T6390] chnl_net:caif_netlink_parms(): no params data found
[  344.289876][ T4283] Bluetooth: hci3: command 0x0419 tx timeout
[  344.650323][ T6331] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  344.670314][ T6331] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  344.698656][ T6331] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  344.755523][ T6331] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  344.807685][ T6390] bridge0: port 1(bridge_slave_0) entered blocking state
[  344.820015][ T6390] bridge0: port 1(bridge_slave_0) entered disabled state
[  344.829164][ T6390] device bridge_slave_0 entered promiscuous mode
[  344.868263][ T6390] bridge0: port 2(bridge_slave_1) entered blocking state
[  344.902289][ T6390] bridge0: port 2(bridge_slave_1) entered disabled state
[  344.929883][ T6390] device bridge_slave_1 entered promiscuous mode
[  345.012044][ T6390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  345.058666][ T6390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  345.186329][ T6390] team0: Port device team_slave_0 added
[  345.220168][ T6331] 8021q: adding VLAN 0 to HW filter on device bond0
[  345.243402][ T6390] team0: Port device team_slave_1 added
[  345.297840][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  345.328480][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  345.397706][ T6331] 8021q: adding VLAN 0 to HW filter on device team0
[  345.440740][ T6390] batman_adv: batadv0: Adding interface: batadv_slave_0
[  345.447803][ T6390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  345.492888][ T6390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  345.530186][ T4813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  345.570369][ T4813] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  345.590052][ T4813] bridge0: port 1(bridge_slave_0) entered blocking state
[  345.597257][ T4813] bridge0: port 1(bridge_slave_0) entered forwarding state
[  345.650413][ T4813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  345.670444][ T4813] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  345.679127][ T4813] bridge0: port 2(bridge_slave_1) entered blocking state
[  345.686311][ T4813] bridge0: port 2(bridge_slave_1) entered forwarding state
[  345.728023][ T4813] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  345.871271][ T4472] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  345.953897][ T6390] batman_adv: batadv0: Adding interface: batadv_slave_1
[  345.969966][ T6390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  346.030322][ T6390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  346.082920][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  346.092736][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  346.114889][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  346.137162][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  346.199578][ T4472] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  346.279278][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  346.299121][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  346.321123][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  346.371011][ T4472] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  346.419377][ T6390] device hsr_slave_0 entered promiscuous mode
[  346.450319][ T6390] device hsr_slave_1 entered promiscuous mode
[  346.468400][ T6390] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  346.499968][ T6390] Cannot create hsr debugfs directory
[  346.509719][ T6331] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  346.547650][ T6491] loop4: detected capacity change from 0 to 2048
[  346.576563][ T6331] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  346.601606][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  346.632096][ T6491] Alternate GPT is invalid, using primary GPT.
[  346.638431][ T6491]  loop4: p1 p2 p3
[  346.643282][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  346.687209][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  346.710743][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  346.757331][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  346.875586][ T4472] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  347.700398][ T6390] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  347.712685][ T6390] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  347.732906][ T6390] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  347.782683][ T6390] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  347.919263][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  347.940199][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  347.985087][ T6331] 8021q: adding VLAN 0 to HW filter on device batadv0
[  348.298278][ T6390] 8021q: adding VLAN 0 to HW filter on device bond0
[  348.340418][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  348.362285][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  348.452782][ T6390] 8021q: adding VLAN 0 to HW filter on device team0
[  348.494721][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  348.521274][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  348.546652][ T4695] bridge0: port 1(bridge_slave_0) entered blocking state
[  348.553878][ T4695] bridge0: port 1(bridge_slave_0) entered forwarding state
[  348.590599][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  348.599542][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  348.647597][ T4695] bridge0: port 2(bridge_slave_1) entered blocking state
[  348.654835][ T4695] bridge0: port 2(bridge_slave_1) entered forwarding state
[  348.693609][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  348.741132][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  348.872591][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  348.881319][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  348.897112][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  348.911451][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  348.938229][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  348.949605][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  348.965403][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  348.976464][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  349.113186][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  349.144209][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  349.172144][ T6390] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  349.524823][ T4472] device hsr_slave_0 left promiscuous mode
[  349.542224][ T4472] device hsr_slave_1 left promiscuous mode
[  349.562168][ T4472] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  349.570560][ T4472] batman_adv: batadv0: Removing interface: batadv_slave_0
[  349.590842][ T4472] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  349.595988][ T6464] Set syz1 is full, maxelem 65536 reached
[  349.598382][ T4472] batman_adv: batadv0: Removing interface: batadv_slave_1
[  349.700360][ T4472] device bridge_slave_1 left promiscuous mode
[  349.706675][ T4472] bridge0: port 2(bridge_slave_1) entered disabled state
[  349.743087][ T4472] device bridge_slave_0 left promiscuous mode
[  349.749484][ T4472] bridge0: port 1(bridge_slave_0) entered disabled state
[  350.301444][ T6534] xt_CONNSECMARK: invalid mode: 66
[  350.308067][ T6535] loop4: detected capacity change from 0 to 2048
[  350.456747][ T6535]  loop4: p3 < > p4 < >
[  350.461310][ T6535] loop4: partition table partially beyond EOD, truncated
[  350.469427][ T6535] loop4: p3 start 4284289 is beyond EOD, truncated
[  350.993247][ T6539] loop5: detected capacity change from 0 to 512
[  351.029094][ T4472] device veth1_macvtap left promiscuous mode
[  351.035345][ T4472] device veth0_macvtap left promiscuous mode
[  351.060234][ T4472] device veth1_vlan left promiscuous mode
[  351.070657][ T4472] device veth0_vlan left promiscuous mode
[  351.221618][ T4350] udevd[4350]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  351.251944][ T6539] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #15: comm syz.5.471: inode has both inline data and extents flags
[  351.317053][ T6539] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.471: couldn't read orphan inode 15 (err -117)
[  351.353464][ T6539] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  351.586003][ T5012] EXT4-fs (loop5): unmounting filesystem.
[  351.727442][ T6550] loop5: detected capacity change from 0 to 256
[  351.813358][ T6550] FAT-fs (loop5): Directory bread(block 64) failed
[  351.865907][ T6550] FAT-fs (loop5): Directory bread(block 65) failed
[  351.908510][ T6550] FAT-fs (loop5): Directory bread(block 66) failed
[  351.938430][ T6550] FAT-fs (loop5): Directory bread(block 67) failed
[  351.957306][ T6550] FAT-fs (loop5): Directory bread(block 68) failed
[  351.992511][ T6550] FAT-fs (loop5): Directory bread(block 69) failed
[  352.005188][ T6550] FAT-fs (loop5): Directory bread(block 70) failed
[  352.012213][ T6550] FAT-fs (loop5): Directory bread(block 71) failed
[  352.018977][ T6550] FAT-fs (loop5): Directory bread(block 72) failed
[  352.032437][ T6550] FAT-fs (loop5): Directory bread(block 73) failed
[  353.380771][ T4472] team0 (unregistering): Port device team_slave_1 removed
[  353.525788][ T4472] team0 (unregistering): Port device team_slave_0 removed
[  353.668164][ T4472] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  353.771680][ T4472] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  354.443882][ T6476] Set syz1 is full, maxelem 65536 reached
[  354.496999][ T6476] Process accounting resumed
[  354.587187][ T6565] xt_CONNSECMARK: invalid mode: 66
[  354.694031][ T6565] loop5: detected capacity change from 0 to 2048
[  354.783157][ T6565]  loop5: p3 < > p4 < >
[  354.787536][ T6565] loop5: partition table partially beyond EOD, truncated
[  354.795722][ T6565] loop5: p3 start 4284289 is beyond EOD, truncated
[  355.466399][ T5012] __loop_clr_fd: partition scan of loop5 failed (rc=-16)
[  355.476931][ T4350] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  355.553824][ T4350] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  355.595381][ T4350] Buffer I/O error on dev loop5p4, logical block 0, async page read
[  355.649257][ T4350] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  355.693296][ T4350] Buffer I/O error on dev loop5p4, logical block 0, async page read
[  355.702890][ T4350] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  355.712660][ T4350] Buffer I/O error on dev loop5p4, logical block 0, async page read
[  355.721984][ T4350] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  355.731223][ T4350] Buffer I/O error on dev loop5p4, logical block 0, async page read
[  355.740486][ T4350] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  355.750451][ T4350] Buffer I/O error on dev loop5p4, logical block 0, async page read
[  355.869026][ T6571] overlayfs: missing 'lowerdir'
[  356.580743][ T4350] udevd[4350]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[  356.593990][ T4472] bond0 (unregistering): Released all slaves
[  356.669318][ T6574] Process accounting resumed
[  357.132779][ T6586] loop4: detected capacity change from 0 to 2048
[  357.992648][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  358.050860][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  358.115492][ T6331] device veth0_vlan entered promiscuous mode
[  358.154776][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  358.471895][ T6583] xt_CONNSECMARK: invalid mode: 66
[  358.545083][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  358.743574][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  358.974731][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  358.999048][ T6583] loop5: detected capacity change from 0 to 2048
[  359.039466][ T6331] device veth1_vlan entered promiscuous mode
[  359.134538][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  359.154826][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  359.181781][ T6331] device veth0_macvtap entered promiscuous mode
[  359.217978][ T6331] device veth1_macvtap entered promiscuous mode
[  359.239474][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  359.273775][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  359.291406][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  359.308340][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  359.338966][ T6390] 8021q: adding VLAN 0 to HW filter on device batadv0
[  359.358876][ T6331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  359.377334][ T6331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  359.408681][ T6331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  359.430167][ T6331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  359.453836][ T6331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  359.469628][ T6331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  359.487625][ T6331] batman_adv: batadv0: Interface activated: batadv_slave_0
[  359.509949][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  359.527522][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  359.557953][ T6331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  359.583656][ T6331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  359.627592][ T6331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  359.648660][ T6331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  359.669509][ T6331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  359.694562][ T6331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  359.715063][ T6331] batman_adv: batadv0: Interface activated: batadv_slave_1
[  359.746185][ T6331] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  359.818735][ T6331] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  359.858532][ T6331] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  359.868468][ T6331] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  359.909065][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  359.942030][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  360.945706][ T6608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.496'.
[  360.978177][ T6606] Process accounting resumed
[  361.560948][ T6618] loop1: detected capacity change from 0 to 2048
[  362.286579][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  362.349838][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  362.473655][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  362.705832][ T4397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  362.753256][ T4397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  362.763248][ T4799] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  365.017369][ T6649] loop4: detected capacity change from 0 to 4096
[  365.129470][ T6649] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  365.416462][ T6662] xt_CONNSECMARK: invalid mode: 66
[  365.508194][ T6662] loop5: detected capacity change from 0 to 2048
[  365.604644][ T6662]  loop5: p3 < > p4 < >
[  365.609067][ T6662] loop5: partition table partially beyond EOD, truncated
[  365.617407][ T6662] loop5: p3 start 4284289 is beyond EOD, truncated
[  366.959651][ T6664] loop6: detected capacity change from 0 to 2048
[  367.362382][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  367.411443][ T4284] EXT4-fs (loop4): unmounting filesystem.
[  367.421640][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  367.877978][ T5197] udevd[5197]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[  368.240412][ T6672] loop6: detected capacity change from 0 to 256
[  369.940678][ T6673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.502'.
[  370.023159][ T6672] FAT-fs (loop6): Directory bread(block 64) failed
[  370.064931][ T6672] FAT-fs (loop6): Directory bread(block 65) failed
[  370.093124][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  370.105451][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  370.119458][ T6390] device veth0_vlan entered promiscuous mode
[  370.131329][ T6672] FAT-fs (loop6): Directory bread(block 66) failed
[  370.138040][ T6672] FAT-fs (loop6): Directory bread(block 67) failed
[  370.160198][ T6672] FAT-fs (loop6): Directory bread(block 68) failed
[  370.166904][ T6672] FAT-fs (loop6): Directory bread(block 69) failed
[  370.174472][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  370.192710][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  370.270092][ T6672] FAT-fs (loop6): Directory bread(block 70) failed
[  370.276931][ T6672] FAT-fs (loop6): Directory bread(block 71) failed
[  370.377965][ T6390] device veth1_vlan entered promiscuous mode
[  370.404695][ T6672] FAT-fs (loop6): Directory bread(block 72) failed
[  370.420427][ T6672] FAT-fs (loop6): Directory bread(block 73) failed
[  370.519375][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  370.584289][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  370.615284][ T6689] loop1: detected capacity change from 0 to 128
[  370.703536][ T6390] device veth0_macvtap entered promiscuous mode
[  372.190655][ T6390] device veth1_macvtap entered promiscuous mode
[  373.849961][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  373.858276][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  374.006035][ T6390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  374.041008][ T6390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  374.059814][ T6390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  374.079841][ T6390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  374.089870][ T6390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  374.119854][ T6390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  374.145910][ T6390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  374.163078][ T6390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  374.220245][ T6390] batman_adv: batadv0: Interface activated: batadv_slave_0
[  374.330167][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  374.351085][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  374.395080][ T6390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  374.429922][ T6390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  374.449999][ T6390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  374.465715][ T6714] loop4: detected capacity change from 0 to 4096
[  374.474208][ T6390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  374.513518][ T6390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  374.538009][ T6714] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  374.587207][ T6390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  374.649067][ T6390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  374.729377][ T6390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  374.791433][ T4284] EXT4-fs (loop4): unmounting filesystem.
[  374.798752][ T6390] batman_adv: batadv0: Interface activated: batadv_slave_1
[  374.839732][ T6730] tipc: Started in network mode
[  374.848374][ T6730] tipc: Node identity a2c6e6f5007a, cluster identity 4711
[  374.926014][ T6730] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  374.940405][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  374.975223][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  375.029469][ T6715] tipc: Disabling bearer <eth:syzkaller0>
[  375.045327][   T27] audit: type=1326 audit(1778468322.207:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6735 comm="syz.1.513" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5a99cdd9 code=0x7ffc0000
[  375.091210][ T6390] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  375.107790][ T6390] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  375.119531][   T27] audit: type=1326 audit(1778468322.247:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6735 comm="syz.1.513" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fca5a99cdd9 code=0x7ffc0000
[  375.159886][ T6390] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  375.179351][ T6390] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  375.188307][   T27] audit: type=1326 audit(1778468322.337:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6735 comm="syz.1.513" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5a99cdd9 code=0x7ffc0000
[  375.219723][   T27] audit: type=1326 audit(1778468322.337:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6735 comm="syz.1.513" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5a99cdd9 code=0x7ffc0000
[  375.248187][   T27] audit: type=1326 audit(1778468322.377:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6740 comm="syz.1.513" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fca5a95d60e code=0x7ffc0000
[  375.305298][   T27] audit: type=1326 audit(1778468322.467:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6735 comm="syz.1.513" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fca5a99cdd9 code=0x7ffc0000
[  375.426907][   T27] audit: type=1326 audit(1778468322.467:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6735 comm="syz.1.513" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5a99cdd9 code=0x7ffc0000
[  375.502884][   T27] audit: type=1326 audit(1778468322.497:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6735 comm="syz.1.513" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5a99cdd9 code=0x7ffc0000
[  375.550702][ T4329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  375.571637][ T4329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  375.596823][ T6739] loop1: detected capacity change from 0 to 512
[  375.608338][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  375.653741][   T27] audit: type=1326 audit(1778468322.497:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6735 comm="syz.1.513" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fca5a99cdd9 code=0x7ffc0000
[  375.688529][   T27] audit: type=1326 audit(1778468322.497:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6735 comm="syz.1.513" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5a99cdd9 code=0x7ffc0000
[  375.731141][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  375.741882][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  375.764995][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  376.987536][ T6739] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  377.175210][ T6739] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  378.124472][ T6765] loop6: detected capacity change from 0 to 2048
[  378.161494][ T4269] EXT4-fs (loop1): unmounting filesystem.
[  378.182508][ T6765] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  378.459239][ T6771] loop7: detected capacity change from 0 to 4096
[  378.601788][ T6773] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  378.618846][ T6773] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28
[  378.631796][ T6773] EXT4-fs (loop6): This should not happen!! Data will be lost
[  378.631796][ T6773] 
[  378.651693][ T6773] EXT4-fs (loop6): Total free blocks count 0
[  378.657872][ T6773] EXT4-fs (loop6): Free/Dirty block details
[  378.664022][ T6773] EXT4-fs (loop6): free_blocks=2415919504
[  378.669975][ T6773] EXT4-fs (loop6): dirty_blocks=48
[  378.675240][ T6773] EXT4-fs (loop6): Block reservation details
[  378.681399][ T6773] EXT4-fs (loop6): i_reserved_data_blocks=3
[  378.710411][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  378.722299][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  378.993993][ T6771] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  379.196726][ T6331] EXT4-fs (loop6): unmounting filesystem.
[  379.261866][ T6780] loop1: detected capacity change from 0 to 256
[  379.472559][ T6390] EXT4-fs (loop7): unmounting filesystem.
[  379.733072][ T6780] FAT-fs (loop1): Directory bread(block 64) failed
[  379.930039][ T6791] loop6: detected capacity change from 0 to 2048
[  379.961856][ T6780] FAT-fs (loop1): Directory bread(block 65) failed
[  379.968635][ T6780] FAT-fs (loop1): Directory bread(block 66) failed
[  380.318666][ T6780] FAT-fs (loop1): Directory bread(block 67) failed
[  380.325721][ T6780] FAT-fs (loop1): Directory bread(block 68) failed
[  380.332463][ T6780] FAT-fs (loop1): Directory bread(block 69) failed
[  380.339733][ T6780] FAT-fs (loop1): Directory bread(block 70) failed
[  380.343791][ T6791] Alternate GPT is invalid, using primary GPT.
[  380.352819][ T6791]  loop6: p1 p2 p3
[  380.465755][ T6780] FAT-fs (loop1): Directory bread(block 71) failed
[  380.578329][ T6797] device syzkaller0 entered promiscuous mode
[  380.585598][ T6780] FAT-fs (loop1): Directory bread(block 72) failed
[  380.643965][ T6797] tipc: Started in network mode
[  380.663319][ T6797] tipc: Node identity 8e7fbe80f44f, cluster identity 4711
[  380.680607][ T6800] xt_CONNSECMARK: invalid mode: 66
[  380.684631][ T6797] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  380.699977][ T6780] FAT-fs (loop1): Directory bread(block 73) failed
[  380.731295][ T6796] tipc: Resetting bearer <eth:syzkaller0>
[  380.782894][ T6800] loop4: detected capacity change from 0 to 2048
[  380.871384][ T6800]  loop4: p3 < > p4 < >
[  380.880272][ T6800] loop4: partition table partially beyond EOD, truncated
[  380.896997][ T6796] tipc: Disabling bearer <eth:syzkaller0>
[  380.905065][ T6800] loop4: p3 start 4284289 is beyond EOD, truncated
[  380.962987][ T4367] udevd[4367]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  381.007319][ T4392] udevd[4392]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory
[  381.018426][ T5197] udevd[5197]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory
[  381.048639][ T6803] loop6: detected capacity change from 0 to 2048
[  381.320310][ T6803] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  382.101159][ T6814] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  382.116356][ T6814] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28
[  382.128753][ T6814] EXT4-fs (loop6): This should not happen!! Data will be lost
[  382.128753][ T6814] 
[  382.138543][ T6814] EXT4-fs (loop6): Total free blocks count 0
[  382.144836][ T6814] EXT4-fs (loop6): Free/Dirty block details
[  382.150940][ T6814] EXT4-fs (loop6): free_blocks=2415919504
[  382.156839][ T6814] EXT4-fs (loop6): dirty_blocks=48
[  382.162118][ T6814] EXT4-fs (loop6): Block reservation details
[  382.168250][ T6814] EXT4-fs (loop6): i_reserved_data_blocks=3
[  382.569621][ T6817] loop7: detected capacity change from 0 to 2048
[  382.628629][ T6331] EXT4-fs (loop6): unmounting filesystem.
[  382.890523][ T6817] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  384.228822][ T6832] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  384.244914][ T6832] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28
[  384.257887][ T6832] EXT4-fs (loop7): This should not happen!! Data will be lost
[  384.257887][ T6832] 
[  384.267876][ T6832] EXT4-fs (loop7): Total free blocks count 0
[  384.273960][ T6832] EXT4-fs (loop7): Free/Dirty block details
[  384.279963][ T6832] EXT4-fs (loop7): free_blocks=2415919504
[  384.285818][ T6832] EXT4-fs (loop7): dirty_blocks=48
[  384.291077][ T6832] EXT4-fs (loop7): Block reservation details
[  384.297097][ T6832] EXT4-fs (loop7): i_reserved_data_blocks=3
[  384.813775][ T6390] EXT4-fs (loop7): unmounting filesystem.
[  385.326374][ T6840] loop7: detected capacity change from 0 to 4096
[  385.407839][ T6840] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  385.483641][   T27] kauditd_printk_skb: 26 callbacks suppressed
[  385.483657][   T27] audit: type=1800 audit(1778468332.647:48): pid=6840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.534" name="file1" dev="loop7" ino=15 res=0 errno=0
[  386.166111][ T6390] EXT4-fs (loop7): unmounting filesystem.
[  386.676259][ T6868] loop4: detected capacity change from 0 to 2048
[  386.743437][ T6868] Alternate GPT is invalid, using primary GPT.
[  386.750025][ T6868]  loop4: p1 p2 p3
[  386.870656][ T6869] loop6: detected capacity change from 0 to 128
[  386.999499][ T6869] netlink: 8 bytes leftover after parsing attributes in process `syz.6.539'.
[  388.828694][ T6883] loop6: detected capacity change from 0 to 2048
[  389.040372][ T6883] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  389.089359][ T5197] udevd[5197]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  389.100629][ T4350] udevd[4350]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  389.116996][ T4367] udevd[4367]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  389.417290][ T6894] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  389.432178][ T6894] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28
[  389.444544][ T6894] EXT4-fs (loop6): This should not happen!! Data will be lost
[  389.444544][ T6894] 
[  389.454340][ T6894] EXT4-fs (loop6): Total free blocks count 0
[  389.460587][ T6894] EXT4-fs (loop6): Free/Dirty block details
[  389.477111][ T6894] EXT4-fs (loop6): free_blocks=2415919504
[  389.483138][ T6894] EXT4-fs (loop6): dirty_blocks=48
[  389.488368][ T6894] EXT4-fs (loop6): Block reservation details
[  389.494539][ T6894] EXT4-fs (loop6): i_reserved_data_blocks=3
[  389.850262][ T6905] loop7: detected capacity change from 0 to 256
[  390.041781][ T6905] FAT-fs (loop7): Directory bread(block 64) failed
[  390.048551][ T6905] FAT-fs (loop7): Directory bread(block 65) failed
[  390.055776][ T6905] FAT-fs (loop7): Directory bread(block 66) failed
[  390.062505][ T6905] FAT-fs (loop7): Directory bread(block 67) failed
[  390.069507][ T6905] FAT-fs (loop7): Directory bread(block 68) failed
[  390.076261][ T6905] FAT-fs (loop7): Directory bread(block 69) failed
[  390.083277][ T6905] FAT-fs (loop7): Directory bread(block 70) failed
[  390.091187][ T6905] FAT-fs (loop7): Directory bread(block 71) failed
[  390.098163][ T6905] FAT-fs (loop7): Directory bread(block 72) failed
[  390.105083][ T6905] FAT-fs (loop7): Directory bread(block 73) failed
[  390.202122][ T6892] loop1: detected capacity change from 0 to 2048
[  390.292600][ T6331] EXT4-fs (loop6): unmounting filesystem.
[  390.339607][ T6892] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  390.518179][ T6905] FAT-fs (loop7): Filesystem has been set read-only
[  390.533109][ T6905] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000616b)
[  390.578052][   T27] audit: type=1800 audit(1778468337.687:49): pid=6905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.545" name="memory.stat" dev="loop7" ino=1048615 res=0 errno=0
[  391.453888][ T6914] loop4: detected capacity change from 0 to 256
[  392.302802][ T6914] FAT-fs (loop4): Directory bread(block 64) failed
[  392.309599][ T6914] FAT-fs (loop4): Directory bread(block 65) failed
[  392.316750][ T6914] FAT-fs (loop4): Directory bread(block 66) failed
[  392.323459][ T6914] FAT-fs (loop4): Directory bread(block 67) failed
[  392.330478][ T6914] FAT-fs (loop4): Directory bread(block 68) failed
[  392.337178][ T6914] FAT-fs (loop4): Directory bread(block 69) failed
[  392.344966][ T6914] FAT-fs (loop4): Directory bread(block 70) failed
[  392.351682][ T6914] FAT-fs (loop4): Directory bread(block 71) failed
[  392.358707][ T6914] FAT-fs (loop4): Directory bread(block 72) failed
[  392.365409][ T6914] FAT-fs (loop4): Directory bread(block 73) failed
[  392.639191][ T6914] FAT-fs (loop4): Filesystem has been set read-only
[  392.649632][ T6914] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000616b)
[  392.673903][   T27] audit: type=1800 audit(1778468339.807:50): pid=6914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.548" name="memory.stat" dev="loop4" ino=1048617 res=0 errno=0
[  393.213695][ T4269] EXT4-fs (loop1): unmounting filesystem.
[  397.004788][ T6937] xt_CONNSECMARK: invalid mode: 66
[  397.316702][ T6937] loop5: detected capacity change from 0 to 2048
[  400.365249][ T6940] loop4: detected capacity change from 0 to 256
[  400.484639][ T6940] FAT-fs (loop4): Directory bread(block 64) failed
[  400.491363][ T6940] FAT-fs (loop4): Directory bread(block 65) failed
[  400.498004][ T6940] FAT-fs (loop4): Directory bread(block 66) failed
[  400.504660][ T6940] FAT-fs (loop4): Directory bread(block 67) failed
[  400.511396][ T6940] FAT-fs (loop4): Directory bread(block 68) failed
[  400.517978][ T6940] FAT-fs (loop4): Directory bread(block 69) failed
[  400.524665][ T6940] FAT-fs (loop4): Directory bread(block 70) failed
[  400.531932][ T6940] FAT-fs (loop4): Directory bread(block 71) failed
[  400.538584][ T6940] FAT-fs (loop4): Directory bread(block 72) failed
[  400.545182][ T6940] FAT-fs (loop4): Directory bread(block 73) failed
[  401.237252][ T6948] loop7: detected capacity change from 0 to 2048
[  401.251358][ T6947] loop5: detected capacity change from 0 to 2048
[  401.422915][ T6947] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  401.432601][ T6948] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  402.057148][ T6959] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  402.072951][ T6959] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28
[  402.085314][ T6959] EXT4-fs (loop7): This should not happen!! Data will be lost
[  402.085314][ T6959] 
[  402.095076][ T6959] EXT4-fs (loop7): Total free blocks count 0
[  402.101176][ T6959] EXT4-fs (loop7): Free/Dirty block details
[  402.107144][ T6959] EXT4-fs (loop7): free_blocks=2415919504
[  402.112959][ T6959] EXT4-fs (loop7): dirty_blocks=48
[  402.118109][ T6959] EXT4-fs (loop7): Block reservation details
[  402.124150][ T6959] EXT4-fs (loop7): i_reserved_data_blocks=3
[  402.405276][ T6961] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  402.421551][ T6961] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28
[  402.443922][ T6961] EXT4-fs (loop5): This should not happen!! Data will be lost
[  402.443922][ T6961] 
[  402.453985][ T6961] EXT4-fs (loop5): Total free blocks count 0
[  402.460414][ T6961] EXT4-fs (loop5): Free/Dirty block details
[  402.466924][ T6961] EXT4-fs (loop5): free_blocks=2415919504
[  402.473272][ T6961] EXT4-fs (loop5): dirty_blocks=48
[  402.478655][ T6961] EXT4-fs (loop5): Block reservation details
[  402.485064][ T6961] EXT4-fs (loop5): i_reserved_data_blocks=3
[  403.101542][ T6390] EXT4-fs (loop7): unmounting filesystem.
[  403.105143][ T5012] EXT4-fs (loop5): unmounting filesystem.
[  403.120053][   T27] audit: type=1326 audit(1778468350.277:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6964 comm="syz.6.558" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c8819cdd9 code=0x7ffc0000
[  403.259966][   T27] audit: type=1326 audit(1778468350.277:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6964 comm="syz.6.558" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c8819cdd9 code=0x7ffc0000
[  403.369900][   T27] audit: type=1326 audit(1778468350.317:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6964 comm="syz.6.558" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f7c8819cdd9 code=0x7ffc0000
[  403.492092][ T6971] loop6: detected capacity change from 0 to 512
[  403.558604][   T27] audit: type=1326 audit(1778468350.397:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6964 comm="syz.6.558" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c8819cdd9 code=0x7ffc0000
[  403.709039][ T6971] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  403.768453][ T6978] loop7: detected capacity change from 0 to 2048
[  403.821072][   T27] audit: type=1326 audit(1778468350.397:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6964 comm="syz.6.558" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c8819cdd9 code=0x7ffc0000
[  403.855065][ T6971] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  404.159861][ T6986] netlink: 8 bytes leftover after parsing attributes in process `syz.5.559'.
[  404.290525][ T6978] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  404.328906][   T27] audit: type=1326 audit(1778468350.477:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6970 comm="syz.6.558" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7c8815d60e code=0x7ffc0000
[  404.831299][   T27] audit: type=1326 audit(1778468350.627:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6970 comm="syz.6.558" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f7c8819cdd9 code=0x7ffc0000
[  404.855607][   T27] audit: type=1326 audit(1778468350.687:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6964 comm="syz.6.558" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7c8819cdd9 code=0x7ffc0000
[  405.059341][ T6985] loop4: detected capacity change from 0 to 2048
[  405.068007][   T27] audit: type=1326 audit(1778468350.687:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6964 comm="syz.6.558" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c8819cdd9 code=0x7ffc0000
[  405.092774][   T27] audit: type=1326 audit(1778468350.687:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6964 comm="syz.6.558" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c8819cdd9 code=0x7ffc0000
[  405.263524][ T6996] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  405.278742][ T6996] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28
[  405.291287][ T6996] EXT4-fs (loop7): This should not happen!! Data will be lost
[  405.291287][ T6996] 
[  405.301070][ T6996] EXT4-fs (loop7): Total free blocks count 0
[  405.316429][ T6996] EXT4-fs (loop7): Free/Dirty block details
[  405.322520][ T6996] EXT4-fs (loop7): free_blocks=2415919504
[  405.328400][ T6996] EXT4-fs (loop7): dirty_blocks=48
[  405.333705][ T6996] EXT4-fs (loop7): Block reservation details
[  405.339931][ T6996] EXT4-fs (loop7): i_reserved_data_blocks=3
[  405.551290][ T6967] xt_CONNSECMARK: invalid mode: 66
[  405.595711][ T6967] loop1: detected capacity change from 0 to 2048
[  405.666210][ T6985] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  405.815616][ T6390] EXT4-fs (loop7): unmounting filesystem.
[  405.991481][ T6967]  loop1: p3 < > p4 < >
[  405.995810][ T6967] loop1: partition table partially beyond EOD, truncated
[  406.004368][ T6967] loop1: p3 start 4284289 is beyond EOD, truncated
[  406.025094][ T6331] EXT4-fs (loop6): unmounting filesystem.
[  406.112894][ T7003] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  406.128184][ T7003] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28
[  406.140702][ T7003] EXT4-fs (loop4): This should not happen!! Data will be lost
[  406.140702][ T7003] 
[  406.150490][ T7003] EXT4-fs (loop4): Total free blocks count 0
[  406.166636][ T7003] EXT4-fs (loop4): Free/Dirty block details
[  406.172774][ T7003] EXT4-fs (loop4): free_blocks=2415919504
[  406.178654][ T7003] EXT4-fs (loop4): dirty_blocks=48
[  406.183971][ T7003] EXT4-fs (loop4): Block reservation details
[  406.190127][ T7003] EXT4-fs (loop4): i_reserved_data_blocks=3
[  406.655263][ T4284] EXT4-fs (loop4): unmounting filesystem.
[  406.816703][ T7000] loop5: detected capacity change from 0 to 512
[  407.728686][ T7017] loop4: detected capacity change from 0 to 128
[  407.738788][ T7000] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  407.784647][ T7017] netlink: 8 bytes leftover after parsing attributes in process `syz.4.565'.
[  407.827119][ T7009] loop6: detected capacity change from 0 to 2048
[  407.838515][ T7000] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  407.966530][ T7009] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  408.135461][   T27] kauditd_printk_skb: 71 callbacks suppressed
[  408.135481][   T27] audit: type=1326 audit(1778468355.277:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6998 comm="syz.5.562" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51eab9cdd9 code=0x7ffc0000
[  408.387998][   T27] audit: type=1326 audit(1778468355.277:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6998 comm="syz.5.562" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51eab9cdd9 code=0x7ffc0000
[  408.491349][ T7032] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  408.506595][ T7032] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28
[  408.519633][ T7032] EXT4-fs (loop6): This should not happen!! Data will be lost
[  408.519633][ T7032] 
[  408.529669][ T7032] EXT4-fs (loop6): Total free blocks count 0
[  408.545388][ T7032] EXT4-fs (loop6): Free/Dirty block details
[  408.551520][ T7032] EXT4-fs (loop6): free_blocks=2415919504
[  408.557466][ T7032] EXT4-fs (loop6): dirty_blocks=48
[  408.562773][ T7032] EXT4-fs (loop6): Block reservation details
[  408.569160][ T7032] EXT4-fs (loop6): i_reserved_data_blocks=3
[  408.950036][   T27] audit: type=1326 audit(1778468355.337:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6998 comm="syz.5.562" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7f51eab9cdd9 code=0x7ffc0000
[  409.012827][ T6331] EXT4-fs (loop6): unmounting filesystem.
[  409.074666][   T27] audit: type=1326 audit(1778468355.987:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6998 comm="syz.5.562" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51eab9cdd9 code=0x7ffc0000
[  409.124523][   T27] audit: type=1326 audit(1778468355.987:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6998 comm="syz.5.562" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51eab9cdd9 code=0x7ffc0000
[  409.265299][ T5012] EXT4-fs (loop5): unmounting filesystem.
[  410.527053][ T7044] loop4: detected capacity change from 0 to 4096
[  410.545107][   T27] audit: type=1326 audit(1778468357.707:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7047 comm="syz.5.570" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51eab9cdd9 code=0x7ffc0000
[  410.813626][   T27] audit: type=1326 audit(1778468357.707:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7047 comm="syz.5.570" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51eab9cdd9 code=0x7ffc0000
[  410.847044][ T7044] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  411.362624][   T27] audit: type=1326 audit(1778468357.707:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7047 comm="syz.5.570" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f51eab9cdd9 code=0x7ffc0000
[  411.665856][   T27] audit: type=1800 audit(1778468358.227:140): pid=7044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.571" name="file1" dev="loop4" ino=15 res=0 errno=0
[  411.719915][   T27] audit: type=1326 audit(1778468358.767:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7047 comm="syz.5.570" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51eab9cdd9 code=0x7ffc0000
[  411.768936][ T4284] EXT4-fs (loop4): unmounting filesystem.
[  411.848688][ T7059] xt_CONNSECMARK: invalid mode: 66
[  412.056075][ T4280] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  412.065577][ T4280] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  412.073886][ T4280] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  412.082765][ T4280] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  412.090739][ T4280] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  412.098072][ T4280] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  412.936174][ T7059] loop6: detected capacity change from 0 to 2048
[  413.031298][ T7048] loop5: detected capacity change from 0 to 512
[  413.199549][ T3637]  loop6: p3 < > p4 < >
[  413.206591][ T3637] loop6: partition table partially beyond EOD, truncated
[  413.224573][ T3637] loop6: p3 start 4284289 is beyond EOD, truncated
[  413.382136][ T7048] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  413.647488][ T7048] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  413.824177][ T5012] EXT4-fs (loop5): unmounting filesystem.
[  413.994105][ T7061] chnl_net:caif_netlink_parms(): no params data found
[  414.281073][ T7061] bridge0: port 1(bridge_slave_0) entered blocking state
[  414.288301][ T7061] bridge0: port 1(bridge_slave_0) entered disabled state
[  414.311157][ T7061] device bridge_slave_0 entered promiscuous mode
[  414.329404][ T7061] bridge0: port 2(bridge_slave_1) entered blocking state
[  414.376137][ T7061] bridge0: port 2(bridge_slave_1) entered disabled state
[  414.384913][ T7061] device bridge_slave_1 entered promiscuous mode
[  414.413810][ T7061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  414.426095][ T7061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  414.460050][ T7061] team0: Port device team_slave_0 added
[  414.468669][ T7061] team0: Port device team_slave_1 added
[  414.493606][ T7061] batman_adv: batadv0: Adding interface: batadv_slave_0
[  414.500987][ T4283] Bluetooth: hci2: command 0x0409 tx timeout
[  414.550527][ T7061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  414.634864][ T7061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  414.663075][ T7061] batman_adv: batadv0: Adding interface: batadv_slave_1
[  414.670146][ T7061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  414.697359][ T7061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  415.635279][ T7061] device hsr_slave_0 entered promiscuous mode
[  415.682136][ T7061] device hsr_slave_1 entered promiscuous mode
[  415.740532][ T7061] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  415.999825][ T7061] Cannot create hsr debugfs directory
[  416.539905][ T4280] Bluetooth: hci2: command 0x041b tx timeout
[  418.625129][ T4283] Bluetooth: hci2: command 0x040f tx timeout
[  419.485252][ T7119] infiniband syz2: set down
[  419.490180][ T7119] infiniband syz2: added ipvlan0
[  419.497152][ T7119] rdma_rxe: unable to create cq
[  419.502620][ T7119] infiniband syz2: Couldn't create ib_mad CQ
[  419.509060][ T7119] infiniband syz2: Couldn't open port 1
[  419.536847][ T7119] RDS/IB: syz2: added
[  419.541522][ T7119] smc: adding ib device syz2 with port count 1
[  419.547924][ T7119] smc:    ib device syz2 port 1 has pnetid 
[  420.651591][ T7121] loop4: detected capacity change from 0 to 2048
[  420.689820][ T4283] Bluetooth: hci2: command 0x0419 tx timeout
[  420.988978][ T7128] loop5: detected capacity change from 0 to 2048
[  421.117508][ T7061] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  421.186714][ T7061] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  421.219126][ T7061] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  421.320653][ T7061] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  422.106192][ T7136] xt_CONNSECMARK: invalid mode: 66
[  422.112940][ T7138] loop7: detected capacity change from 0 to 2048
[  422.233484][ T7138]  loop7: p3 < > p4 < >
[  422.237964][ T7138] loop7: partition table partially beyond EOD, truncated
[  422.251064][ T7138] loop7: p3 start 4284289 is beyond EOD, truncated
[  422.610618][ T7061] 8021q: adding VLAN 0 to HW filter on device bond0
[  422.731166][ T6390] __loop_clr_fd: partition scan of loop7 failed (rc=-16)
[  422.758920][ T4799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  422.760840][ T4350] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  422.772091][ T4799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  422.820138][ T4350] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  422.829347][ T4350] Buffer I/O error on dev loop7p4, logical block 0, async page read
[  422.867816][ T4350] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  422.887388][ T4350] Buffer I/O error on dev loop7p4, logical block 0, async page read
[  422.928888][ T4350] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  422.968525][ T4350] Buffer I/O error on dev loop7p4, logical block 0, async page read
[  423.018300][ T7061] 8021q: adding VLAN 0 to HW filter on device team0
[  423.027579][ T4350] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  423.077756][ T4350] Buffer I/O error on dev loop7p4, logical block 0, async page read
[  423.121432][ T7147] loop7: detected capacity change from 0 to 256
[  423.154653][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  423.256486][ T7147] FAT-fs (loop7): Directory bread(block 64) failed
[  423.263770][ T7147] FAT-fs (loop7): Directory bread(block 65) failed
[  423.270977][ T7147] FAT-fs (loop7): Directory bread(block 66) failed
[  423.277662][ T7147] FAT-fs (loop7): Directory bread(block 67) failed
[  423.284690][ T7147] FAT-fs (loop7): Directory bread(block 68) failed
[  423.291399][ T7147] FAT-fs (loop7): Directory bread(block 69) failed
[  423.298371][ T7147] FAT-fs (loop7): Directory bread(block 70) failed
[  423.305058][ T7147] FAT-fs (loop7): Directory bread(block 71) failed
[  423.312068][ T7147] FAT-fs (loop7): Directory bread(block 72) failed
[  423.318730][ T7147] FAT-fs (loop7): Directory bread(block 73) failed
[  423.727232][ T7148] FAT-fs (loop7): Filesystem has been set read-only
[  423.738050][ T7148] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000616b)
[  423.760270][   T27] kauditd_printk_skb: 55 callbacks suppressed
[  423.760308][   T27] audit: type=1800 audit(1778468370.897:197): pid=7148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.585" name="memory.stat" dev="loop7" ino=1048619 res=0 errno=0
[  423.793730][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  424.220559][ T4514] bridge0: port 1(bridge_slave_0) entered blocking state
[  424.227746][ T4514] bridge0: port 1(bridge_slave_0) entered forwarding state
[  424.302125][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  424.341072][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  424.386748][ T4514] bridge0: port 2(bridge_slave_1) entered blocking state
[  424.393988][ T4514] bridge0: port 2(bridge_slave_1) entered forwarding state
[  424.648340][ T7061] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  424.698670][ T7061] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  425.183595][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  425.210792][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  425.350945][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  425.402201][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  425.487267][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  425.548194][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  425.613731][ T4350] udevd[4350]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory
[  425.626372][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  425.660842][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  425.697052][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  425.712381][ T4350] udevd[4350]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory
[  425.732523][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  425.765124][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  425.870649][ T7157] loop7: detected capacity change from 0 to 256
[  425.942431][ T7157] FAT-fs (loop7): Directory bread(block 64) failed
[  425.949121][ T7157] FAT-fs (loop7): Directory bread(block 65) failed
[  425.956277][ T7157] FAT-fs (loop7): Directory bread(block 66) failed
[  425.962993][ T7157] FAT-fs (loop7): Directory bread(block 67) failed
[  425.969840][ T7157] FAT-fs (loop7): Directory bread(block 68) failed
[  425.976495][ T7157] FAT-fs (loop7): Directory bread(block 69) failed
[  425.983502][ T7157] FAT-fs (loop7): Directory bread(block 70) failed
[  425.990192][ T7157] FAT-fs (loop7): Directory bread(block 71) failed
[  425.997162][ T7157] FAT-fs (loop7): Directory bread(block 72) failed
[  426.003919][ T7157] FAT-fs (loop7): Directory bread(block 73) failed
[  426.313785][ T7157] FAT-fs (loop7): Filesystem has been set read-only
[  426.324203][ T7157] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000616b)
[  426.347351][   T27] audit: type=1800 audit(1778468373.487:198): pid=7157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.587" name="memory.stat" dev="loop7" ino=1048621 res=0 errno=0
[  426.414086][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  426.848113][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  427.668094][ T4280] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  427.698138][   T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  427.707002][ T4280] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  427.716216][   T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  427.724157][ T4280] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  427.732959][   T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  429.321571][ T6963] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  429.439533][ T7177] loop7: detected capacity change from 0 to 128
[  429.555052][ T7177] netlink: 8 bytes leftover after parsing attributes in process `syz.7.590'.
[  429.628257][ T6963] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  429.810235][ T4283] Bluetooth: hci0: command 0x0409 tx timeout
[  430.111573][ T6963] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  430.199915][ T4799] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  430.207506][ T4799] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  430.287197][ T6963] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  430.384288][ T7061] 8021q: adding VLAN 0 to HW filter on device batadv0
[  430.790110][ T6963] tipc: Left network mode
[  431.307286][ T7204] loop4: detected capacity change from 0 to 4096
[  431.406817][ T7204] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  431.477188][   T27] audit: type=1800 audit(1778468378.637:199): pid=7204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.594" name="file1" dev="loop4" ino=15 res=0 errno=0
[  431.633062][ T7162] chnl_net:caif_netlink_parms(): no params data found
[  431.662409][ T4284] EXT4-fs (loop4): unmounting filesystem.
[  431.890304][ T4283] Bluetooth: hci0: command 0x041b tx timeout
[  433.124898][ T7227] loop4: detected capacity change from 0 to 2048
[  433.274862][ T7227] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  433.284244][ T7240] loop5: detected capacity change from 0 to 128
[  433.294269][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  433.308174][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  433.449246][ T7162] bridge0: port 1(bridge_slave_0) entered blocking state
[  433.456733][ T7162] bridge0: port 1(bridge_slave_0) entered disabled state
[  433.467065][ T7240] netlink: 8 bytes leftover after parsing attributes in process `syz.5.600'.
[  433.488338][ T7162] device bridge_slave_0 entered promiscuous mode
[  433.510864][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  433.531157][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  433.587469][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  433.595814][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  433.645578][ T7227] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  433.660827][ T7227] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28
[  433.673421][ T7227] EXT4-fs (loop4): This should not happen!! Data will be lost
[  433.673421][ T7227] 
[  433.683131][ T7227] EXT4-fs (loop4): Total free blocks count 0
[  433.689156][ T7227] EXT4-fs (loop4): Free/Dirty block details
[  433.704492][ T7227] EXT4-fs (loop4): free_blocks=2415919504
[  433.711125][ T7227] EXT4-fs (loop4): dirty_blocks=48
[  433.716516][ T7227] EXT4-fs (loop4): Block reservation details
[  433.722618][ T7227] EXT4-fs (loop4): i_reserved_data_blocks=3
[  433.970185][ T4283] Bluetooth: hci0: command 0x040f tx timeout
[  434.030335][   T27] audit: type=1326 audit(1778468381.197:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7247 comm="syz.7.601" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2924d9cdd9 code=0x7ffc0000
[  434.069858][   T27] audit: type=1326 audit(1778468381.217:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7247 comm="syz.7.601" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2924d9cdd9 code=0x7ffc0000
[  434.124432][   T27] audit: type=1326 audit(1778468381.227:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7247 comm="syz.7.601" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f2924d9cdd9 code=0x7ffc0000
[  434.182332][ T7061] device veth0_vlan entered promiscuous mode
[  434.193811][   T27] audit: type=1326 audit(1778468381.317:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7247 comm="syz.7.601" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2924d9cdd9 code=0x7ffc0000
[  434.215292][ T7162] bridge0: port 2(bridge_slave_1) entered blocking state
[  434.239646][ T7162] bridge0: port 2(bridge_slave_1) entered disabled state
[  434.250103][ T7162] device bridge_slave_1 entered promiscuous mode
[  434.289446][   T27] audit: type=1326 audit(1778468381.317:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7247 comm="syz.7.601" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2924d9cdd9 code=0x7ffc0000
[  434.358590][ T7248] loop7: detected capacity change from 0 to 512
[  434.360052][   T27] audit: type=1326 audit(1778468381.317:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7250 comm="syz.7.601" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2924d5d60e code=0x7ffc0000
[  434.445008][   T27] audit: type=1326 audit(1778468381.407:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7247 comm="syz.7.601" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2924d9cdd9 code=0x7ffc0000
[  434.496600][ T4284] EXT4-fs (loop4): unmounting filesystem.
[  434.512471][   T27] audit: type=1326 audit(1778468381.407:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7247 comm="syz.7.601" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2924d9cdd9 code=0x7ffc0000
[  434.590617][ T7162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  434.622357][ T7061] device veth1_vlan entered promiscuous mode
[  434.641116][   T27] audit: type=1326 audit(1778468381.407:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7247 comm="syz.7.601" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2924d9cdd9 code=0x7ffc0000
[  434.673282][ T7162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  434.718840][ T7248] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  434.762118][ T7248] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  434.936475][ T5088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  434.985699][ T5088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  435.045993][ T7162] team0: Port device team_slave_0 added
[  435.084108][ T7061] device veth0_macvtap entered promiscuous mode
[  435.164532][ T7162] team0: Port device team_slave_1 added
[  435.234375][ T7061] device veth1_macvtap entered promiscuous mode
[  435.574478][ T7162] batman_adv: batadv0: Adding interface: batadv_slave_0
[  435.640022][ T7162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  435.666824][ T7265] loop5: detected capacity change from 0 to 4096
[  435.795468][ T6390] EXT4-fs (loop7): unmounting filesystem.
[  436.004544][ T7162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  436.091987][ T4283] Bluetooth: hci0: command 0x0419 tx timeout
[  436.731522][ T4799] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  436.755849][ T4799] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  436.768149][ T7265] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  436.800928][ T7266] netlink: 8 bytes leftover after parsing attributes in process `syz.4.603'.
[  436.849306][ T7162] batman_adv: batadv0: Adding interface: batadv_slave_1
[  436.869934][ T7162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  436.967896][ T7162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  437.002063][   T27] kauditd_printk_skb: 57 callbacks suppressed
[  437.002092][   T27] audit: type=1800 audit(1778468384.167:266): pid=7265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.604" name="file1" dev="loop5" ino=15 res=0 errno=0
[  437.033106][ T7061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  437.072090][ T7061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  437.104771][ T7061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  437.138652][ T7061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  437.198182][ T7061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  437.227045][ T7061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  437.257538][ T7061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  437.298590][ T7061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  437.308562][ T7061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  437.319297][ T7061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  437.330794][ T7061] batman_adv: batadv0: Interface activated: batadv_slave_0
[  437.345233][ T6963] device hsr_slave_0 left promiscuous mode
[  437.352295][ T6963] device hsr_slave_1 left promiscuous mode
[  437.358808][ T6963] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  437.366657][ T6963] batman_adv: batadv0: Removing interface: batadv_slave_0
[  437.384807][ T6963] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  437.392450][ T6963] batman_adv: batadv0: Removing interface: batadv_slave_1
[  437.409672][ T6963] device bridge_slave_1 left promiscuous mode
[  437.416608][ T6963] bridge0: port 2(bridge_slave_1) entered disabled state
[  437.429225][ T5012] EXT4-fs (loop5): unmounting filesystem.
[  437.436469][ T6963] device bridge_slave_0 left promiscuous mode
[  437.443150][ T6963] bridge0: port 1(bridge_slave_0) entered disabled state
[  437.513634][ T6963] device veth1_macvtap left promiscuous mode
[  437.539921][ T6963] device veth0_macvtap left promiscuous mode
[  437.546494][ T6963] device veth1_vlan left promiscuous mode
[  437.562078][ T6963] device veth0_vlan left promiscuous mode
[  438.474811][ T6963] team0 (unregistering): Port device team_slave_1 removed
[  438.525726][ T6963] team0 (unregistering): Port device team_slave_0 removed
[  438.568411][ T6963] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  438.613627][ T6963] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  438.924386][ T6963] bond0 (unregistering): Released all slaves
[  439.104653][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  439.120697][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  439.140173][ T7061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  439.159116][ T7061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  439.179611][ T7061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  439.202956][ T7061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  439.217155][ T7061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  439.227773][ T7061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  439.239534][ T7061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  439.252113][ T7061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  439.267386][ T7061] batman_adv: batadv0: Interface activated: batadv_slave_1
[  439.299272][ T7061] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  439.309219][ T7061] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  439.318230][ T7061] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  439.327811][ T7061] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  439.384310][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  439.409198][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  440.140779][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  440.147291][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  440.836444][ T7303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.608'.
[  440.984004][ T7162] device hsr_slave_0 entered promiscuous mode
[  441.032926][ T7300] loop7: detected capacity change from 0 to 2048
[  441.043823][ T7162] device hsr_slave_1 entered promiscuous mode
[  441.058918][ T7162] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  441.067198][ T7162] Cannot create hsr debugfs directory
[  441.082370][ T7300] Alternate GPT is invalid, using primary GPT.
[  441.088669][ T7300]  loop7: p1 p2 p3
[  441.311480][ T4652] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  441.319454][ T4652] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  441.394463][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  441.469885][ T4652] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  441.498148][ T4652] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  441.550315][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  441.638693][ T7317] loop5: detected capacity change from 0 to 128
[  441.666829][ T7162] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  441.703018][ T7162] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  441.725989][ T7162] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  441.812937][ T7162] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  441.837934][ T7317] netlink: 8 bytes leftover after parsing attributes in process `syz.5.612'.
[  442.750458][ T7162] 8021q: adding VLAN 0 to HW filter on device bond0
[  442.814467][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  442.826414][ T7329] loop4: detected capacity change from 0 to 2048
[  442.845071][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  442.891277][ T7162] 8021q: adding VLAN 0 to HW filter on device team0
[  442.918592][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  442.950864][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  442.970292][   T56] bridge0: port 1(bridge_slave_0) entered blocking state
[  442.977461][   T56] bridge0: port 1(bridge_slave_0) entered forwarding state
[  442.990951][ T7329] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  443.424491][ T7341] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  443.452781][ T7341] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28
[  443.465504][ T7341] EXT4-fs (loop4): This should not happen!! Data will be lost
[  443.465504][ T7341] 
[  443.475530][ T7341] EXT4-fs (loop4): Total free blocks count 0
[  443.481821][ T7341] EXT4-fs (loop4): Free/Dirty block details
[  443.488062][ T7341] EXT4-fs (loop4): free_blocks=2415919504
[  443.494170][ T7341] EXT4-fs (loop4): dirty_blocks=48
[  443.499503][ T7341] EXT4-fs (loop4): Block reservation details
[  443.505770][ T7341] EXT4-fs (loop4): i_reserved_data_blocks=3
[  444.514185][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  444.530872][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  444.570771][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  444.585106][ T4284] EXT4-fs (loop4): unmounting filesystem.
[  444.604974][   T56] bridge0: port 2(bridge_slave_1) entered blocking state
[  444.612185][   T56] bridge0: port 2(bridge_slave_1) entered forwarding state
[  444.641040][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  444.660697][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  444.688636][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  444.718948][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  444.756177][ T7162] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  444.817985][ T7162] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  444.852033][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  444.860649][ T7338] loop5: detected capacity change from 0 to 4096
[  444.883336][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  444.921206][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  445.000562][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  445.052227][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  445.083917][ T7338] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  445.131903][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  445.187531][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  445.212485][   T27] audit: type=1800 audit(1778468392.377:267): pid=7338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.614" name="file1" dev="loop5" ino=15 res=0 errno=0
[  445.229075][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  445.249938][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  445.417455][ T5012] EXT4-fs (loop5): unmounting filesystem.
[  445.742402][ T6963] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  445.933658][ T6963] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  446.338962][ T6963] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  447.784542][ T6963] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  448.111421][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  448.196155][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  448.519957][ T7384] netlink: 8 bytes leftover after parsing attributes in process `syz.7.618'.
[  450.603755][ T7162] 8021q: adding VLAN 0 to HW filter on device batadv0
[  451.062542][ T7396] xt_CONNSECMARK: invalid mode: 66
[  451.087324][ T7396] loop8: detected capacity change from 0 to 2048
[  451.133313][ T7396]  loop8: p3 < > p4 < >
[  451.137616][ T7396] loop8: partition table partially beyond EOD, truncated
[  451.147800][ T7396] loop8: p3 start 4284289 is beyond EOD, truncated
[  451.537677][ T6963] tipc: Left network mode
[  453.265330][ T7411] loop4: detected capacity change from 0 to 2048
[  453.872638][ T7416] rdma_rxe: rxe_register_device failed with error -23
[  453.881011][ T7416] rdma_rxe: failed to add ipvlan0
[  454.449960][ T7419] rdma_rxe: already configured on ipvlan0
[  456.414224][ T7422] device syzkaller0 entered promiscuous mode
[  456.752891][ T7429] loop4: detected capacity change from 0 to 256
[  457.989175][ T7429] FAT-fs (loop4): Directory bread(block 64) failed
[  457.996121][ T7429] FAT-fs (loop4): Directory bread(block 65) failed
[  458.003314][ T7429] FAT-fs (loop4): Directory bread(block 66) failed
[  458.010030][ T7429] FAT-fs (loop4): Directory bread(block 67) failed
[  458.018046][ T7429] FAT-fs (loop4): Directory bread(block 68) failed
[  458.025144][ T7429] FAT-fs (loop4): Directory bread(block 69) failed
[  458.032430][ T7429] FAT-fs (loop4): Directory bread(block 70) failed
[  458.039125][ T7429] FAT-fs (loop4): Directory bread(block 71) failed
[  458.046411][ T7429] FAT-fs (loop4): Directory bread(block 72) failed
[  458.054235][ T7429] FAT-fs (loop4): Directory bread(block 73) failed
[  458.260806][ T7429] FAT-fs (loop4): Filesystem has been set read-only
[  458.270655][ T7429] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000616b)
[  458.293890][   T27] audit: type=1800 audit(1778468405.427:268): pid=7429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.629" name="memory.stat" dev="loop4" ino=1048626 res=0 errno=0
[  458.729509][ T7431] loop7: detected capacity change from 0 to 2048
[  459.523698][ T7439] loop5: detected capacity change from 0 to 256
[  460.096223][ T7439] FAT-fs (loop5): Directory bread(block 64) failed
[  460.103215][ T7439] FAT-fs (loop5): Directory bread(block 65) failed
[  460.110350][ T7439] FAT-fs (loop5): Directory bread(block 66) failed
[  460.117043][ T7439] FAT-fs (loop5): Directory bread(block 67) failed
[  460.124162][ T7439] FAT-fs (loop5): Directory bread(block 68) failed
[  460.131517][ T7439] FAT-fs (loop5): Directory bread(block 69) failed
[  460.138696][ T7439] FAT-fs (loop5): Directory bread(block 70) failed
[  460.145377][ T7439] FAT-fs (loop5): Directory bread(block 71) failed
[  460.152398][ T7439] FAT-fs (loop5): Directory bread(block 72) failed
[  460.159092][ T7439] FAT-fs (loop5): Directory bread(block 73) failed
[  460.426787][ T7440] FAT-fs (loop5): Filesystem has been set read-only
[  460.437350][ T7440] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000616b)
[  460.459622][   T27] audit: type=1800 audit(1778468407.597:269): pid=7440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.631" name="memory.stat" dev="loop5" ino=1048628 res=0 errno=0
[  460.538444][ T5197] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  461.197915][ T7432] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[  461.504355][ T7446] loop4: detected capacity change from 0 to 256
[  462.222615][ T7446] FAT-fs (loop4): Directory bread(block 64) failed
[  462.229412][ T7446] FAT-fs (loop4): Directory bread(block 65) failed
[  462.236538][ T7446] FAT-fs (loop4): Directory bread(block 66) failed
[  462.243284][ T7446] FAT-fs (loop4): Directory bread(block 67) failed
[  462.250356][ T7446] FAT-fs (loop4): Directory bread(block 68) failed
[  462.257028][ T7446] FAT-fs (loop4): Directory bread(block 69) failed
[  462.264132][ T7446] FAT-fs (loop4): Directory bread(block 70) failed
[  462.270797][ T7446] FAT-fs (loop4): Directory bread(block 71) failed
[  462.278289][ T7446] FAT-fs (loop4): Directory bread(block 72) failed
[  462.285220][ T7446] FAT-fs (loop4): Directory bread(block 73) failed
[  462.598599][ T7447] FAT-fs (loop4): Filesystem has been set read-only
[  462.609959][ T7447] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000616b)
[  462.634011][   T27] audit: type=1800 audit(1778468409.767:270): pid=7447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.633" name="memory.stat" dev="loop4" ino=1048630 res=0 errno=0
[  463.028234][ T4280] Bluetooth: hci3: command 0x0406 tx timeout
[  464.566006][ T7453] rdma_rxe: rxe_register_device failed with error -23
[  464.574025][ T7453] rdma_rxe: failed to add ipvlan0
[  464.867667][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  464.885480][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  466.322231][ T7162] device veth0_vlan entered promiscuous mode
[  466.883976][ T7484] loop8: detected capacity change from 0 to 256
[  467.210053][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  467.218919][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  467.898221][ T7484] FAT-fs (loop8): Directory bread(block 64) failed
[  467.905052][ T7484] FAT-fs (loop8): Directory bread(block 65) failed
[  467.912808][ T7484] FAT-fs (loop8): Directory bread(block 66) failed
[  467.919506][ T7484] FAT-fs (loop8): Directory bread(block 67) failed
[  467.926558][ T7484] FAT-fs (loop8): Directory bread(block 68) failed
[  467.933277][ T7484] FAT-fs (loop8): Directory bread(block 69) failed
[  467.940312][ T7484] FAT-fs (loop8): Directory bread(block 70) failed
[  467.946988][ T7484] FAT-fs (loop8): Directory bread(block 71) failed
[  467.953957][ T7484] FAT-fs (loop8): Directory bread(block 72) failed
[  467.960651][ T7484] FAT-fs (loop8): Directory bread(block 73) failed
[  468.198918][ T7484] FAT-fs (loop8): Filesystem has been set read-only
[  468.206391][ T7484] FAT-fs (loop8): error, invalid access to FAT (entry 0x0000616b)
[  468.217553][   T27] audit: type=1800 audit(1778468415.367:271): pid=7484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.640" name="memory.stat" dev="loop8" ino=1048632 res=0 errno=0
[  468.993967][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  469.030608][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  469.046840][ T7162] device veth1_vlan entered promiscuous mode
[  469.420533][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  469.511085][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  469.625329][ T7162] device veth0_macvtap entered promiscuous mode
[  469.705567][ T7498] loop7: detected capacity change from 0 to 2048
[  469.786826][ T7501] loop8: detected capacity change from 0 to 256
[  469.883068][ T7501] FAT-fs (loop8): Directory bread(block 64) failed
[  469.889998][ T7501] FAT-fs (loop8): Directory bread(block 65) failed
[  469.897057][ T7501] FAT-fs (loop8): Directory bread(block 66) failed
[  469.903947][ T7501] FAT-fs (loop8): Directory bread(block 67) failed
[  469.911256][ T7501] FAT-fs (loop8): Directory bread(block 68) failed
[  469.917946][ T7501] FAT-fs (loop8): Directory bread(block 69) failed
[  469.925255][ T7501] FAT-fs (loop8): Directory bread(block 70) failed
[  469.931972][ T7501] FAT-fs (loop8): Directory bread(block 71) failed
[  469.938710][ T7501] FAT-fs (loop8): Directory bread(block 72) failed
[  469.945409][ T7501] FAT-fs (loop8): Directory bread(block 73) failed
[  470.246169][ T7502] FAT-fs (loop8): Filesystem has been set read-only
[  470.255907][ T7502] FAT-fs (loop8): error, invalid access to FAT (entry 0x0000616b)
[  470.278109][   T27] audit: type=1800 audit(1778468417.417:272): pid=7502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.642" name="memory.stat" dev="loop8" ino=1048634 res=0 errno=0
[  471.552736][ T7162] device veth1_macvtap entered promiscuous mode
[  471.669655][ T7162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  471.737834][ T7162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  471.825327][ T7162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  471.880210][ T7162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  471.944422][ T7162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  472.007332][ T7162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  472.064292][ T7162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  472.133031][ T7162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  472.152579][ T7162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  472.171952][ T7162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  472.194144][ T7162] batman_adv: batadv0: Interface activated: batadv_slave_0
[  472.207594][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  472.250770][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  472.259076][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  472.281010][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  472.414876][ T7162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  472.429776][ T7162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  472.479780][ T7162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  472.529803][ T7162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  472.560391][ T7162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  472.609775][ T7162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  472.659794][ T7162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  472.690714][ T7162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  472.735236][ T7162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  472.765557][ T7162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  472.796510][ T7162] batman_adv: batadv0: Interface activated: batadv_slave_1
[  472.817945][ T4717] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  472.868226][ T4717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  472.910872][ T7162] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  472.919654][ T7162] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  473.003951][ T7162] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  473.033211][ T7162] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  473.289798][ T7529] loop8: detected capacity change from 0 to 256
[  473.408592][ T7529] FAT-fs (loop8): Directory bread(block 64) failed
[  473.415867][ T7529] FAT-fs (loop8): Directory bread(block 65) failed
[  473.423159][ T7529] FAT-fs (loop8): Directory bread(block 66) failed
[  473.429895][ T7529] FAT-fs (loop8): Directory bread(block 67) failed
[  473.436944][ T7529] FAT-fs (loop8): Directory bread(block 68) failed
[  473.443668][ T7529] FAT-fs (loop8): Directory bread(block 69) failed
[  473.450748][ T7529] FAT-fs (loop8): Directory bread(block 70) failed
[  473.457427][ T7529] FAT-fs (loop8): Directory bread(block 71) failed
[  473.464502][ T7529] FAT-fs (loop8): Directory bread(block 72) failed
[  473.471199][ T7529] FAT-fs (loop8): Directory bread(block 73) failed
[  473.805223][ T7530] FAT-fs (loop8): Filesystem has been set read-only
[  473.814869][ T7530] FAT-fs (loop8): error, invalid access to FAT (entry 0x0000616b)
[  473.890726][   T27] audit: type=1800 audit(1778468420.977:273): pid=7530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.646" name="memory.stat" dev="loop8" ino=1048636 res=0 errno=0
[  474.452455][ T4509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  474.473322][ T4509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  474.629386][ T4509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  474.651531][ T4509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  475.197659][ T6963] device hsr_slave_0 left promiscuous mode
[  475.338947][ T6963] device hsr_slave_1 left promiscuous mode
[  475.357251][ T6963] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  475.375462][ T6963] batman_adv: batadv0: Removing interface: batadv_slave_0
[  475.470960][ T6963] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  475.547731][ T6963] batman_adv: batadv0: Removing interface: batadv_slave_1
[  475.728178][ T6963] device bridge_slave_1 left promiscuous mode
[  475.742218][ T6963] bridge0: port 2(bridge_slave_1) entered disabled state
[  475.787953][ T7536] rdma_rxe: rxe_register_device failed with error -23
[  475.795759][ T7536] rdma_rxe: failed to add ipvlan0
[  475.952169][ T6963] device bridge_slave_0 left promiscuous mode
[  475.958419][ T6963] bridge0: port 1(bridge_slave_0) entered disabled state
[  476.099283][ T6963] device veth1_macvtap left promiscuous mode
[  476.119000][ T6963] device veth0_macvtap left promiscuous mode
[  476.139322][ T6963] device veth1_vlan left promiscuous mode
[  476.166353][ T6963] device veth0_vlan left promiscuous mode
[  476.486933][ T7538] rdma_rxe: rxe_register_device failed with error -23
[  476.493940][ T7538] rdma_rxe: failed to add ipvlan0
[  476.638065][ T7554] xt_CONNSECMARK: invalid mode: 66
[  476.739264][ T7554] loop5: detected capacity change from 0 to 2048
[  476.804180][ T7554]  loop5: p3 < > p4 < >
[  476.808572][ T7554] loop5: partition table partially beyond EOD, truncated
[  476.816938][ T7554] loop5: p3 start 4284289 is beyond EOD, truncated
[  477.506612][ T4350] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  477.512165][ T5012] __loop_clr_fd: partition scan of loop5 failed (rc=-16)
[  477.516802][ T4350] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  477.543004][ T4350] Buffer I/O error on dev loop5p4, logical block 0, async page read
[  477.564374][ T4350] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  477.594855][ T4350] Buffer I/O error on dev loop5p4, logical block 0, async page read
[  477.618978][ T4350] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  477.659810][ T4350] Buffer I/O error on dev loop5p4, logical block 0, async page read
[  477.721391][ T4350] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  477.743442][ T4350] Buffer I/O error on dev loop5p4, logical block 0, async page read
[  477.767735][ T4350] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  477.797517][ T4350] Buffer I/O error on dev loop5p4, logical block 0, async page read
[  477.825418][ T7560] loop4: detected capacity change from 0 to 2048
[  477.883230][ T4350] udevd[4350]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[  477.970718][ T7560] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  478.028027][ T4350] udevd[4350]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[  478.380538][ T7569] xt_CONNSECMARK: invalid mode: 66
[  478.486772][ T7569] loop5: detected capacity change from 0 to 2048
[  478.658591][ T7569]  loop5: p3 < > p4 < >
[  478.663614][ T7569] loop5: partition table partially beyond EOD, truncated
[  478.672335][ T7569] loop5: p3 start 4284289 is beyond EOD, truncated
[  479.408572][ T4350] udevd[4350]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[  479.899988][ T7579] xt_CONNSECMARK: invalid mode: 66
[  480.559295][ T7579] loop8: detected capacity change from 0 to 2048
[  480.629965][ T7581] xt_CONNSECMARK: invalid mode: 66
[  480.736965][ T7581] loop7: detected capacity change from 0 to 2048
[  481.661871][ T4284] EXT4-fs (loop4): unmounting filesystem.
[  481.773200][ T7585] loop8: detected capacity change from 0 to 1024
[  481.789908][ T7585] EXT4-fs: Ignoring removed nomblk_io_submit option
[  481.910818][ T7585] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  481.932464][ T7589] xt_CONNSECMARK: invalid mode: 66
[  482.034424][ T7589] loop5: detected capacity change from 0 to 2048
[  482.952443][ T7592] loop7: detected capacity change from 0 to 2048
[  482.973940][ T7594] loop4: detected capacity change from 0 to 1024
[  483.259629][ T7594] EXT4-fs: Ignoring removed nomblk_io_submit option
[  483.396481][ T7594] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  483.594582][ T7592] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  483.723939][ T7061] EXT4-fs (loop8): unmounting filesystem.
[  484.367991][ T4284] EXT4-fs (loop4): unmounting filesystem.
[  484.501432][ T7607] xt_CONNSECMARK: invalid mode: 66
[  484.525527][ T7607] loop5: detected capacity change from 0 to 2048
[  484.790406][ T7610] loop4: detected capacity change from 0 to 4096
[  484.839424][ T7607]  loop5: p3 < > p4 < >
[  484.843732][ T7607] loop5: partition table partially beyond EOD, truncated
[  484.852251][ T7607] loop5: p3 start 4284289 is beyond EOD, truncated
[  484.904514][ T7610] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  484.942921][   T27] audit: type=1800 audit(1778468432.107:274): pid=7610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.662" name="file1" dev="loop4" ino=15 res=0 errno=0
[  485.036831][ T4284] EXT4-fs (loop4): unmounting filesystem.
[  485.318379][ T7613] xt_CONNSECMARK: invalid mode: 66
[  485.345597][ T7613] loop8: detected capacity change from 0 to 2048
[  485.423234][ T7613]  loop8: p3 < > p4 < >
[  485.427495][ T7613] loop8: partition table partially beyond EOD, truncated
[  485.435599][ T7613] loop8: p3 start 4284289 is beyond EOD, truncated
[  485.517470][ T6963] team0 (unregistering): Port device team_slave_1 removed
[  485.642476][ T6963] team0 (unregistering): Port device team_slave_0 removed
[  485.766696][ T6963] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  485.904373][ T4283] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  485.915011][ T4283] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  485.940713][ T4283] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  485.948691][ T4283] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  485.958570][ T4283] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  485.969072][ T4283] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  485.990782][ T6963] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  486.169043][ T7622] loop5: detected capacity change from 0 to 256
[  486.368015][ T7622] FAT-fs (loop5): Directory bread(block 64) failed
[  486.374829][ T7622] FAT-fs (loop5): Directory bread(block 65) failed
[  486.381966][ T7622] FAT-fs (loop5): Directory bread(block 66) failed
[  486.388633][ T7622] FAT-fs (loop5): Directory bread(block 67) failed
[  486.395666][ T7622] FAT-fs (loop5): Directory bread(block 68) failed
[  486.402569][ T7622] FAT-fs (loop5): Directory bread(block 69) failed
[  486.409557][ T7622] FAT-fs (loop5): Directory bread(block 70) failed
[  486.416411][ T7622] FAT-fs (loop5): Directory bread(block 71) failed
[  486.423464][ T7622] FAT-fs (loop5): Directory bread(block 72) failed
[  486.430186][ T7622] FAT-fs (loop5): Directory bread(block 73) failed
[  486.801485][ T7624] FAT-fs (loop5): Filesystem has been set read-only
[  486.811479][ T7624] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000616b)
[  486.889982][   T27] audit: type=1800 audit(1778468433.967:275): pid=7624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.664" name="memory.stat" dev="loop5" ino=1048638 res=0 errno=0
[  487.879334][ T6390] EXT4-fs (loop7): unmounting filesystem.
[  488.151366][   T48] Bluetooth: hci1: command 0x0409 tx timeout
[  488.290271][ T7628] xt_CONNSECMARK: invalid mode: 66
[  488.405158][ T7628] loop4: detected capacity change from 0 to 2048
[  489.457295][ T6963] bond0 (unregistering): Released all slaves
[  489.508352][ T7636] loop7: detected capacity change from 0 to 256
[  489.694665][ T7636] FAT-fs (loop7): Directory bread(block 64) failed
[  489.701660][ T7636] FAT-fs (loop7): Directory bread(block 65) failed
[  489.708659][ T7636] FAT-fs (loop7): Directory bread(block 66) failed
[  489.715408][ T7636] FAT-fs (loop7): Directory bread(block 67) failed
[  489.723135][ T7636] FAT-fs (loop7): Directory bread(block 68) failed
[  489.730049][ T7636] FAT-fs (loop7): Directory bread(block 69) failed
[  489.737072][ T7636] FAT-fs (loop7): Directory bread(block 70) failed
[  489.743867][ T7636] FAT-fs (loop7): Directory bread(block 71) failed
[  489.750956][ T7636] FAT-fs (loop7): Directory bread(block 72) failed
[  489.757720][ T7636] FAT-fs (loop7): Directory bread(block 73) failed
[  490.049973][ T7636] FAT-fs (loop7): Filesystem has been set read-only
[  490.059705][ T7636] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000616b)
[  490.082318][   T27] audit: type=1800 audit(1778468437.217:276): pid=7636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.665" name="memory.stat" dev="loop7" ino=1048640 res=0 errno=0
[  490.509082][   T48] Bluetooth: hci1: command 0x041b tx timeout
[  490.562918][ T7641] loop4: detected capacity change from 0 to 128
[  490.688723][ T7641] netlink: 8 bytes leftover after parsing attributes in process `syz.4.668'.
[  491.941314][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  491.956663][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  491.967123][ T7655] loop4: detected capacity change from 0 to 1024
[  491.997828][ T7655] EXT4-fs: Ignoring removed orlov option
[  492.138703][ T7658] xt_CONNSECMARK: invalid mode: 66
[  492.253799][ T7658] loop7: detected capacity change from 0 to 2048
[  492.874127][   T48] Bluetooth: hci1: command 0x040f tx timeout
[  492.934595][ T7655] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  493.271624][ T7664] capability: warning: `syz.4.669' uses deprecated v2 capabilities in a way that may be insecure
[  494.112139][ T7668] loop5: detected capacity change from 0 to 256
[  494.135499][ T7666] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4)
[  494.155582][ T7664] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2800: Unable to expand inode 12. Delete some EAs or run e2fsck.
[  494.169174][ T7664] EXT4-fs error (device loop4): ext4_find_dest_de:2115: inode #12: block 7: comm syz.4.669: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0
[  494.311432][ T7668] FAT-fs (loop5): Directory bread(block 64) failed
[  494.318184][ T7668] FAT-fs (loop5): Directory bread(block 65) failed
[  494.325329][ T7668] FAT-fs (loop5): Directory bread(block 66) failed
[  494.332579][ T7668] FAT-fs (loop5): Directory bread(block 67) failed
[  494.340026][ T7668] FAT-fs (loop5): Directory bread(block 68) failed
[  494.346697][ T7668] FAT-fs (loop5): Directory bread(block 69) failed
[  494.353818][ T7668] FAT-fs (loop5): Directory bread(block 70) failed
[  494.360492][ T7668] FAT-fs (loop5): Directory bread(block 71) failed
[  494.367601][ T7668] FAT-fs (loop5): Directory bread(block 72) failed
[  494.374366][ T7668] FAT-fs (loop5): Directory bread(block 73) failed
[  494.562055][ T7670] FAT-fs (loop5): Filesystem has been set read-only
[  494.571884][ T7670] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000616b)
[  494.601663][ T7664] EXT4-fs (loop4): Remounting filesystem read-only
[  494.889777][   T27] audit: type=1800 audit(1778468441.737:277): pid=7670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.671" name="memory.stat" dev="loop5" ino=1048641 res=0 errno=0
[  494.952564][ T4284] EXT4-fs (loop4): unmounting filesystem.
[  495.201963][   T48] Bluetooth: hci1: command 0x0419 tx timeout
[  496.598732][ T7686] loop8: detected capacity change from 0 to 2048
[  496.620751][ T7617] chnl_net:caif_netlink_parms(): no params data found
[  497.035615][ T7617] bridge0: port 1(bridge_slave_0) entered blocking state
[  497.064151][ T7617] bridge0: port 1(bridge_slave_0) entered disabled state
[  497.105946][ T7617] device bridge_slave_0 entered promiscuous mode
[  497.117599][ T7617] bridge0: port 2(bridge_slave_1) entered blocking state
[  497.132228][ T7617] bridge0: port 2(bridge_slave_1) entered disabled state
[  497.145936][ T7617] device bridge_slave_1 entered promiscuous mode
[  497.461429][ T7617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  497.974046][ T7617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  498.265219][ T7617] team0: Port device team_slave_0 added
[  498.273658][ T7617] team0: Port device team_slave_1 added
[  498.297682][ T7617] batman_adv: batadv0: Adding interface: batadv_slave_0
[  498.305228][ T7617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  498.350082][ T7617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  498.422445][ T7617] batman_adv: batadv0: Adding interface: batadv_slave_1
[  498.478650][ T7617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  498.560003][ T7617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  498.661221][ T7714] loop5: detected capacity change from 0 to 1024
[  498.668726][ T7714] EXT4-fs: Ignoring removed orlov option
[  498.747040][ T6963] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  498.827745][ T7714] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  498.867591][ T7617] device hsr_slave_0 entered promiscuous mode
[  498.910363][ T7617] device hsr_slave_1 entered promiscuous mode
[  499.003324][ T6963] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  499.998711][ T6963] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  500.096129][ T5012] EXT4-fs (loop5): unmounting filesystem.
[  500.142778][ T6963] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  500.451253][ T7736] loop7: detected capacity change from 0 to 1024
[  500.466759][ T7736] EXT4-fs: Ignoring removed orlov option
[  500.632726][ T7736] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  500.869859][ T4739] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  501.108333][ T7749] EXT4-fs error (device loop7): ext4_find_dest_de:2115: inode #12: block 7: comm syz.7.682: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0
[  501.128906][ T7749] EXT4-fs (loop7): Remounting filesystem read-only
[  501.171346][ T7750] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size
[  501.269923][ T4739] usb 6-1: Using ep0 maxpacket: 32
[  501.283068][ T4739] usb 6-1: config index 0 descriptor too short (expected 29220, got 36)
[  501.412039][ T4739] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  501.421328][ T4739] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81
[  501.432002][ T4739] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  501.442255][ T4739] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  502.142983][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  502.149358][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  502.276547][ T4739] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  502.289884][ T4739] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  502.299195][ T4739] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  502.313794][ T4739] usb 6-1: config 0 descriptor??
[  502.462381][ T6390] EXT4-fs (loop7): unmounting filesystem.
[  502.564917][ T4739] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  502.649443][ T7765] loop4: detected capacity change from 0 to 2048
[  502.739694][ T7767] loop8: detected capacity change from 0 to 256
[  502.852862][ T7767] FAT-fs (loop8): Directory bread(block 64) failed
[  502.859683][ T7767] FAT-fs (loop8): Directory bread(block 65) failed
[  502.866888][ T7767] FAT-fs (loop8): Directory bread(block 66) failed
[  502.873928][ T7767] FAT-fs (loop8): Directory bread(block 67) failed
[  502.881067][ T7767] FAT-fs (loop8): Directory bread(block 68) failed
[  502.888021][ T7767] FAT-fs (loop8): Directory bread(block 69) failed
[  502.895135][ T7767] FAT-fs (loop8): Directory bread(block 70) failed
[  502.901928][ T7767] FAT-fs (loop8): Directory bread(block 71) failed
[  502.909003][ T7767] FAT-fs (loop8): Directory bread(block 72) failed
[  502.915801][ T7767] FAT-fs (loop8): Directory bread(block 73) failed
[  503.171850][ T7768] FAT-fs (loop8): Filesystem has been set read-only
[  503.179302][ T7768] FAT-fs (loop8): error, invalid access to FAT (entry 0x0000616b)
[  503.189682][   T27] audit: type=1800 audit(1778468450.337:278): pid=7768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.685" name="memory.stat" dev="loop8" ino=1048642 res=0 errno=0
[  504.201772][ T4739] usb 6-1: USB disconnect, device number 2
[  504.207048][ T5197] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  504.527707][ T4739] usblp0: removed
[  505.026758][ T7617] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  505.129043][ T7617] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  505.221333][ T7781] loop4: detected capacity change from 0 to 256
[  505.304387][ T7781] FAT-fs (loop4): Directory bread(block 64) failed
[  505.311245][ T7781] FAT-fs (loop4): Directory bread(block 65) failed
[  505.318215][ T7781] FAT-fs (loop4): Directory bread(block 66) failed
[  505.324944][ T7781] FAT-fs (loop4): Directory bread(block 67) failed
[  505.331969][ T7781] FAT-fs (loop4): Directory bread(block 68) failed
[  505.338615][ T7781] FAT-fs (loop4): Directory bread(block 69) failed
[  505.345783][ T7781] FAT-fs (loop4): Directory bread(block 70) failed
[  505.352572][ T7781] FAT-fs (loop4): Directory bread(block 71) failed
[  505.359554][ T7781] FAT-fs (loop4): Directory bread(block 72) failed
[  505.366282][ T7781] FAT-fs (loop4): Directory bread(block 73) failed
[  505.700860][ T7781] FAT-fs (loop4): Filesystem has been set read-only
[  505.710740][ T7781] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000616b)
[  505.740566][   T27] audit: type=1800 audit(1778468452.867:279): pid=7781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.687" name="memory.stat" dev="loop4" ino=1048644 res=0 errno=0
[  506.234156][ T7777] loop7: detected capacity change from 0 to 2048
[  506.251192][ T7617] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  506.370480][ T7617] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  506.717632][ T7777] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  507.264425][ T7777] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  507.279404][ T7777] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28
[  507.291763][ T7777] EXT4-fs (loop7): This should not happen!! Data will be lost
[  507.291763][ T7777] 
[  507.301685][ T7777] EXT4-fs (loop7): Total free blocks count 0
[  507.307717][ T7777] EXT4-fs (loop7): Free/Dirty block details
[  507.313755][ T7777] EXT4-fs (loop7): free_blocks=2415919504
[  507.319533][ T7777] EXT4-fs (loop7): dirty_blocks=48
[  507.324875][ T7777] EXT4-fs (loop7): Block reservation details
[  507.331643][ T7777] EXT4-fs (loop7): i_reserved_data_blocks=3
[  507.491598][ T6390] EXT4-fs (loop7): unmounting filesystem.
[  507.592996][ T7617] 8021q: adding VLAN 0 to HW filter on device bond0
[  507.646953][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  507.681429][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  507.754964][ T7617] 8021q: adding VLAN 0 to HW filter on device team0
[  508.931414][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  508.948117][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  508.956781][ T4582] bridge0: port 1(bridge_slave_0) entered blocking state
[  508.963994][ T4582] bridge0: port 1(bridge_slave_0) entered forwarding state
[  508.984544][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  509.001003][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  509.010135][ T4582] bridge0: port 2(bridge_slave_1) entered blocking state
[  509.017285][ T4582] bridge0: port 2(bridge_slave_1) entered forwarding state
[  509.043667][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  509.070341][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  509.098684][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  509.121153][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  509.140858][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  509.170206][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  509.208151][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  509.234493][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  509.260609][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  509.286915][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  509.381289][ T7617] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  509.413187][ T7617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  509.647040][ T7819] loop8: detected capacity change from 0 to 1024
[  509.669381][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  509.681695][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  509.705635][ T7819] EXT4-fs: Ignoring removed nomblk_io_submit option
[  509.790944][ T7816] loop7: detected capacity change from 0 to 1024
[  509.802524][ T7819] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  509.946889][ T7816] EXT4-fs: Ignoring removed orlov option
[  510.197449][ T7061] EXT4-fs (loop8): unmounting filesystem.
[  510.213246][ T7816] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  510.438382][ T7837] loop8: detected capacity change from 0 to 128
[  510.487031][ T7837] netlink: 8 bytes leftover after parsing attributes in process `syz.8.695'.
[  510.918871][ T7841] EXT4-fs error (device loop7): ext4_find_dest_de:2115: inode #12: block 7: comm syz.7.692: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0
[  510.959267][ T7841] EXT4-fs (loop7): Remounting filesystem read-only
[  511.405402][ T7842] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4)
[  511.719595][ T6390] EXT4-fs (loop7): unmounting filesystem.
[  511.741345][ T6963] device hsr_slave_0 left promiscuous mode
[  511.847702][ T7850] loop8: detected capacity change from 0 to 256
[  511.908305][ T7850] FAT-fs (loop8): Directory bread(block 64) failed
[  511.915223][ T7850] FAT-fs (loop8): Directory bread(block 65) failed
[  511.922378][ T7850] FAT-fs (loop8): Directory bread(block 66) failed
[  511.929046][ T7850] FAT-fs (loop8): Directory bread(block 67) failed
[  511.936165][ T7850] FAT-fs (loop8): Directory bread(block 68) failed
[  511.943351][ T7850] FAT-fs (loop8): Directory bread(block 69) failed
[  511.950559][ T7850] FAT-fs (loop8): Directory bread(block 70) failed
[  511.957243][ T7850] FAT-fs (loop8): Directory bread(block 71) failed
[  511.964405][ T7850] FAT-fs (loop8): Directory bread(block 72) failed
[  511.971115][ T7850] FAT-fs (loop8): Directory bread(block 73) failed
[  512.273589][ T7850] FAT-fs (loop8): Filesystem has been set read-only
[  512.284580][ T7850] FAT-fs (loop8): error, invalid access to FAT (entry 0x0000616b)
[  512.360771][   T27] audit: type=1800 audit(1778468459.447:280): pid=7850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.696" name="memory.stat" dev="loop8" ino=1048646 res=0 errno=0
[  512.416595][ T6963] device hsr_slave_1 left promiscuous mode
[  512.483841][ T6963] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  512.731202][ T6963] batman_adv: batadv0: Removing interface: batadv_slave_0
[  512.886169][ T6963] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  512.954294][ T6963] batman_adv: batadv0: Removing interface: batadv_slave_1
[  513.122564][ T6963] device bridge_slave_1 left promiscuous mode
[  513.253322][ T6963] bridge0: port 2(bridge_slave_1) entered disabled state
[  513.295874][ T6963] device bridge_slave_0 left promiscuous mode
[  513.335526][ T6963] bridge0: port 1(bridge_slave_0) entered disabled state
[  513.703742][ T7857] loop4: detected capacity change from 0 to 256
[  514.413490][ T7857] FAT-fs (loop4): Directory bread(block 64) failed
[  514.420323][ T7857] FAT-fs (loop4): Directory bread(block 65) failed
[  514.427327][ T7857] FAT-fs (loop4): Directory bread(block 66) failed
[  514.434093][ T7857] FAT-fs (loop4): Directory bread(block 67) failed
[  514.441222][ T7857] FAT-fs (loop4): Directory bread(block 68) failed
[  514.447895][ T7857] FAT-fs (loop4): Directory bread(block 69) failed
[  514.455378][ T7857] FAT-fs (loop4): Directory bread(block 70) failed
[  514.462117][ T7857] FAT-fs (loop4): Directory bread(block 71) failed
[  514.469027][ T7857] FAT-fs (loop4): Directory bread(block 72) failed
[  514.475752][ T7857] FAT-fs (loop4): Directory bread(block 73) failed
[  514.816812][ T7858] FAT-fs (loop4): Filesystem has been set read-only
[  514.826603][ T7858] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000616b)
[  514.848568][   T27] audit: type=1800 audit(1778468461.987:281): pid=7858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.701" name="memory.stat" dev="loop4" ino=1048648 res=0 errno=0
[  515.381664][ T6963] device veth1_macvtap left promiscuous mode
[  515.387790][ T6963] device veth0_macvtap left promiscuous mode
[  515.431323][ T6963] device veth1_vlan left promiscuous mode
[  515.488199][ T6963] device veth0_vlan left promiscuous mode
[  515.884759][ T7868] loop7: detected capacity change from 0 to 1024
[  516.062823][ T7868] EXT4-fs: Ignoring removed nomblk_io_submit option
[  516.156697][ T7864] loop5: detected capacity change from 0 to 4096
[  516.412383][ T7868] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  516.480635][ T7864] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  516.508368][   T27] audit: type=1800 audit(1778468463.667:282): pid=7864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.700" name="file1" dev="loop5" ino=15 res=0 errno=0
[  516.559650][ T5012] EXT4-fs (loop5): unmounting filesystem.
[  517.521499][ T6390] EXT4-fs (loop7): unmounting filesystem.
[  518.480710][ T7891] loop7: detected capacity change from 0 to 256
[  518.563015][ T7891] FAT-fs (loop7): Directory bread(block 64) failed
[  518.570007][ T7891] FAT-fs (loop7): Directory bread(block 65) failed
[  518.577020][ T7891] FAT-fs (loop7): Directory bread(block 66) failed
[  518.583766][ T7891] FAT-fs (loop7): Directory bread(block 67) failed
[  518.590851][ T7891] FAT-fs (loop7): Directory bread(block 68) failed
[  518.598009][ T7891] FAT-fs (loop7): Directory bread(block 69) failed
[  518.605219][ T7891] FAT-fs (loop7): Directory bread(block 70) failed
[  518.611937][ T7891] FAT-fs (loop7): Directory bread(block 71) failed
[  518.619029][ T7891] FAT-fs (loop7): Directory bread(block 72) failed
[  518.625805][ T7891] FAT-fs (loop7): Directory bread(block 73) failed
[  518.973043][ T7891] FAT-fs (loop7): Filesystem has been set read-only
[  518.983050][ T7891] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000616b)
[  519.005132][   T27] audit: type=1800 audit(1778468466.147:283): pid=7891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.704" name="memory.stat" dev="loop7" ino=1048650 res=0 errno=0
[  521.660504][ T6963] team0 (unregistering): Port device team_slave_1 removed
[  521.704781][ T6963] team0 (unregistering): Port device team_slave_0 removed
[  521.748333][ T6963] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  521.797975][ T6963] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  522.098811][ T6963] bond0 (unregistering): Released all slaves
[  522.201122][ T7617] 8021q: adding VLAN 0 to HW filter on device batadv0
[  522.209463][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  522.217707][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  522.871275][ T7906] loop5: detected capacity change from 0 to 1024
[  522.878633][ T7906] EXT4-fs: Ignoring removed orlov option
[  523.617246][ T7906] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  523.646645][ T7913] loop8: detected capacity change from 0 to 1024
[  523.681578][ T7913] EXT4-fs: Ignoring removed orlov option
[  523.830360][ T7913] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  524.220102][ T7927] EXT4-fs error (device loop8): ext4_find_dest_de:2115: inode #12: block 7: comm syz.8.707: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0
[  524.241919][ T7927] EXT4-fs (loop8): Remounting filesystem read-only
[  524.257802][ T7928] ==================================================================
[  524.265926][ T7928] BUG: KASAN: use-after-free in dvb_device_open+0xc6/0x370
[  524.273222][ T7928] Read of size 8 at addr ffff888028fe6c18 by task syz.8.707/7928
[  524.280979][ T7928] 
[  524.283353][ T7928] CPU: 0 PID: 7928 Comm: syz.8.707 Not tainted syzkaller #0
[  524.290765][ T7928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  524.300870][ T7928] Call Trace:
[  524.304247][ T7928]  <TASK>
[  524.307216][ T7928]  dump_stack_lvl+0x188/0x24e
[  524.311948][ T7928]  ? read_lock_is_recursive+0x10/0x10
[  524.317461][ T7928]  ? show_regs_print_info+0x12/0x12
[  524.322714][ T7928]  ? load_image+0x400/0x400
[  524.327270][ T7928]  ? _raw_spin_lock_irqsave+0xbc/0x100
[  524.332775][ T7928]  ? __virt_addr_valid+0x188/0x540
[  524.338025][ T7928]  ? __virt_addr_valid+0x465/0x540
[  524.343273][ T7928]  ? dvb_device_open+0xc6/0x370
[  524.348178][ T7928]  print_report+0xa8/0x210
[  524.352640][ T7928]  kasan_report+0x10b/0x140
[  524.357191][ T7928]  ? dvb_device_open+0xc6/0x370
[  524.362096][ T7928]  dvb_device_open+0xc6/0x370
[  524.366824][ T7928]  ? do_raw_spin_unlock+0x11d/0x230
[  524.372068][ T7928]  chrdev_open+0x5c5/0x6a0
[  524.376544][ T7928]  ? cd_forget+0x160/0x160
[  524.381020][ T7928]  ? fsnotify_perm+0x39b/0x550
[  524.385840][ T7928]  ? cd_forget+0x160/0x160
[  524.390326][ T7928]  do_dentry_open+0x7e9/0x10d0
[  524.395149][ T7928]  path_openat+0x2635/0x2ee0
[  524.399788][ T7928]  ? verify_lock_unused+0x140/0x140
[  524.405044][ T7928]  ? do_syscall_64+0x4c/0xa0
[  524.409684][ T7928]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  524.415811][ T7928]  ? do_filp_open+0x430/0x430
[  524.420541][ T7928]  do_filp_open+0x1f1/0x430
[  524.425088][ T7928]  ? vfs_tmpfile+0x480/0x480
[  524.429723][ T7928]  ? _raw_spin_unlock+0x24/0x40
[  524.434615][ T7928]  ? alloc_fd+0x58f/0x630
[  524.439038][ T7928]  do_sys_openat2+0x150/0x4b0
[  524.443761][ T7928]  ? lockdep_hardirqs_on+0x94/0x140
[  524.449001][ T7928]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  524.454940][ T7928]  ? do_sys_open+0xe0/0xe0
[  524.459403][ T7928]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  524.465433][ T7928]  ? lock_chain_count+0x20/0x20
[  524.470345][ T7928]  __x64_sys_openat+0x135/0x160
[  524.475272][ T7928]  do_syscall_64+0x4c/0xa0
[  524.479742][ T7928]  ? clear_bhb_loop+0x60/0xb0
[  524.484471][ T7928]  ? clear_bhb_loop+0x60/0xb0
[  524.489200][ T7928]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  524.495136][ T7928] RIP: 0033:0x7fa2bb55d60e
[  524.499596][ T7928] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  524.519248][ T7928] RSP: 002b:00007fa2b93f3b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  524.527703][ T7928] RAX: ffffffffffffffda RBX: 00007fa2b93f46c0 RCX: 00007fa2bb55d60e
[  524.535711][ T7928] RDX: 0000000000000002 RSI: 00007fa2b93f3c00 RDI: ffffffffffffff9c
[  524.543724][ T7928] RBP: 00007fa2b93f3c00 R08: 0000000000000000 R09: 0000000000000000
[  524.551735][ T7928] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  524.559742][ T7928] R13: 00007fa2bb816308 R14: 00007fa2bb816270 R15: 00007fff279523f8
[  524.567758][ T7928]  </TASK>
[  524.570805][ T7928] 
[  524.573173][ T7928] Allocated by task 1:
[  524.577267][ T7928]  kasan_set_track+0x4b/0x70
[  524.581900][ T7928]  __kasan_kmalloc+0x8e/0xa0
[  524.586721][ T7928]  dvb_register_device+0x311/0x2150
[  524.591984][ T7928]  dvb_register_frontend+0x645/0x920
[  524.597351][ T7928]  vidtv_bridge_probe+0x9a1/0xf70
[  524.602427][ T7928]  platform_probe+0x137/0x1c0
[  524.607233][ T7928]  really_probe+0x2aa/0xc70
[  524.611788][ T7928]  __driver_probe_device+0x18c/0x330
[  524.617134][ T7928]  driver_probe_device+0x4f/0x420
[  524.622225][ T7928]  __driver_attach+0x44a/0x6e0
[  524.627045][ T7928]  bus_for_each_dev+0x182/0x1f0
[  524.631941][ T7928]  bus_add_driver+0x30a/0x5a0
[  524.636656][ T7928]  driver_register+0x32d/0x430
[  524.641468][ T7928]  vidtv_bridge_init+0x39/0x67
[  524.646288][ T7928]  do_one_initcall+0x26a/0x840
[  524.651092][ T7928]  do_initcall_level+0x137/0x1e4
[  524.656067][ T7928]  do_initcalls+0x4b/0x8a
[  524.660443][ T7928]  kernel_init_freeable+0x415/0x5be
[  524.665681][ T7928]  kernel_init+0x19/0x1b0
[  524.670048][ T7928]  ret_from_fork+0x1f/0x30
[  524.674508][ T7928] 
[  524.676860][ T7928] Freed by task 7842:
[  524.680864][ T7928]  kasan_set_track+0x4b/0x70
[  524.685499][ T7928]  kasan_save_free_info+0x2d/0x50
[  524.690557][ T7928]  ____kasan_slab_free+0x126/0x1e0
[  524.695712][ T7928]  slab_free_freelist_hook+0x131/0x1a0
[  524.701259][ T7928]  __kmem_cache_free+0xb6/0x1f0
[  524.706151][ T7928]  dvb_device_open+0x2e7/0x370
[  524.710969][ T7928]  chrdev_open+0x5c5/0x6a0
[  524.715432][ T7928]  do_dentry_open+0x7e9/0x10d0
[  524.720245][ T7928]  path_openat+0x2635/0x2ee0
[  524.724962][ T7928]  do_filp_open+0x1f1/0x430
[  524.729503][ T7928]  do_sys_openat2+0x150/0x4b0
[  524.734228][ T7928]  __x64_sys_openat+0x135/0x160
[  524.739133][ T7928]  do_syscall_64+0x4c/0xa0
[  524.743612][ T7928]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  524.749562][ T7928] 
[  524.751912][ T7928] The buggy address belongs to the object at ffff888028fe6c00
[  524.751912][ T7928]  which belongs to the cache kmalloc-256 of size 256
[  524.765998][ T7928] The buggy address is located 24 bytes inside of
[  524.765998][ T7928]  256-byte region [ffff888028fe6c00, ffff888028fe6d00)
[  524.779227][ T7928] 
[  524.781578][ T7928] The buggy address belongs to the physical page:
[  524.788028][ T7928] page:ffffea0000a3f980 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28fe6
[  524.798218][ T7928] head:ffffea0000a3f980 order:1 compound_mapcount:0 compound_pincount:0
[  524.806580][ T7928] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  524.814629][ T7928] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888017441b40
[  524.823255][ T7928] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[  524.831864][ T7928] page dumped because: kasan: bad access detected
[  524.838312][ T7928] page_owner tracks the page as allocated
[  524.844063][ T7928] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 19574984762, free_ts 0
[  524.863902][ T7928]  post_alloc_hook+0x173/0x1a0
[  524.868719][ T7928]  get_page_from_freelist+0x1a1e/0x1ab0
[  524.874338][ T7928]  __alloc_pages+0x1ec/0x4f0
[  524.878969][ T7928]  alloc_page_interleave+0x24/0x1e0
[  524.884215][ T7928]  alloc_slab_page+0x5d/0x160
[  524.888932][ T7928]  new_slab+0x87/0x2c0
[  524.893044][ T7928]  ___slab_alloc+0xbc6/0x1240
[  524.897846][ T7928]  __kmem_cache_alloc_node+0x1a0/0x260
[  524.903348][ T7928]  kmalloc_trace+0x26/0xe0
[  524.907809][ T7928]  bus_add_driver+0xda/0x5a0
[  524.912442][ T7928]  driver_register+0x32d/0x430
[  524.917252][ T7928]  usb_register_driver+0x202/0x3d0
[  524.922406][ T7928]  do_one_initcall+0x26a/0x840
[  524.927217][ T7928]  do_initcall_level+0x137/0x1e4
[  524.932197][ T7928]  do_initcalls+0x4b/0x8a
[  524.936566][ T7928]  kernel_init_freeable+0x415/0x5be
[  524.941801][ T7928] page_owner free stack trace missing
[  524.947186][ T7928] 
[  524.949514][ T7928] Memory state around the buggy address:
[  524.955143][ T7928]  ffff888028fe6b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  524.963228][ T7928]  ffff888028fe6b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  524.971337][ T7928] >ffff888028fe6c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  524.979427][ T7928]                             ^
[  524.984338][ T7928]  ffff888028fe6c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  524.992429][ T7928]  ffff888028fe6d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  525.000508][ T7928] ==================================================================
[  525.010084][ T7928] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  525.017338][ T7928] CPU: 0 PID: 7928 Comm: syz.8.707 Not tainted syzkaller #0
[  525.024751][ T7928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  525.034853][ T7928] Call Trace:
[  525.038174][ T7928]  <TASK>
[  525.041153][ T7928]  dump_stack_lvl+0x188/0x24e
[  525.045889][ T7928]  ? memcpy+0x3c/0x60
[  525.049914][ T7928]  ? show_regs_print_info+0x12/0x12
[  525.055178][ T7928]  ? load_image+0x400/0x400
[  525.059738][ T7928]  panic+0x2e5/0x730
[  525.063682][ T7928]  ? bpf_jit_dump+0xd0/0xd0
[  525.068324][ T7928]  ? _raw_spin_unlock_irqrestore+0xbc/0x120
[  525.074262][ T7928]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  525.080201][ T7928]  ? _raw_spin_unlock+0x40/0x40
[  525.085098][ T7928]  check_panic_on_warn+0x80/0xa0
[  525.090094][ T7928]  ? dvb_device_open+0xc6/0x370
[  525.095004][ T7928]  end_report+0x66/0x110
[  525.099304][ T7928]  kasan_report+0x118/0x140
[  525.103867][ T7928]  ? dvb_device_open+0xc6/0x370
[  525.108861][ T7928]  dvb_device_open+0xc6/0x370
[  525.109143][ T7931] EXT4-fs error (device loop5): ext4_find_dest_de:2115: inode #12: block 7: comm syz.5.708: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0
[  525.133055][ T7928]  ? do_raw_spin_unlock+0x11d/0x230
[  525.138322][ T7928]  chrdev_open+0x5c5/0x6a0
[  525.142798][ T7928]  ? cd_forget+0x160/0x160
[  525.147268][ T7928]  ? fsnotify_perm+0x39b/0x550
[  525.152097][ T7928]  ? cd_forget+0x160/0x160
[  525.156566][ T7928]  do_dentry_open+0x7e9/0x10d0
[  525.161393][ T7928]  path_openat+0x2635/0x2ee0
[  525.166138][ T7928]  ? verify_lock_unused+0x140/0x140
[  525.171390][ T7928]  ? do_syscall_64+0x4c/0xa0
[  525.176028][ T7928]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  525.182138][ T7928]  ? do_filp_open+0x430/0x430
[  525.186850][ T7928]  do_filp_open+0x1f1/0x430
[  525.191390][ T7928]  ? vfs_tmpfile+0x480/0x480
[  525.196017][ T7928]  ? _raw_spin_unlock+0x24/0x40
[  525.200901][ T7928]  ? alloc_fd+0x58f/0x630
[  525.205278][ T7928]  do_sys_openat2+0x150/0x4b0
[  525.210000][ T7928]  ? lockdep_hardirqs_on+0x94/0x140
[  525.215246][ T7928]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  525.221186][ T7928]  ? do_sys_open+0xe0/0xe0
[  525.225654][ T7928]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  525.231695][ T7928]  ? lock_chain_count+0x20/0x20
[  525.236593][ T7928]  __x64_sys_openat+0x135/0x160
[  525.241490][ T7928]  do_syscall_64+0x4c/0xa0
[  525.245951][ T7928]  ? clear_bhb_loop+0x60/0xb0
[  525.250665][ T7928]  ? clear_bhb_loop+0x60/0xb0
[  525.255381][ T7928]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  525.261310][ T7928] RIP: 0033:0x7fa2bb55d60e
[  525.265763][ T7928] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  525.285397][ T7928] RSP: 002b:00007fa2b93f3b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  525.293839][ T7928] RAX: ffffffffffffffda RBX: 00007fa2b93f46c0 RCX: 00007fa2bb55d60e
[  525.301840][ T7928] RDX: 0000000000000002 RSI: 00007fa2b93f3c00 RDI: ffffffffffffff9c
[  525.309843][ T7928] RBP: 00007fa2b93f3c00 R08: 0000000000000000 R09: 0000000000000000
[  525.317846][ T7928] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  525.325847][ T7928] R13: 00007fa2bb816308 R14: 00007fa2bb816270 R15: 00007fff279523f8
[  525.333859][ T7928]  </TASK>
[  525.337509][ T7928] Kernel Offset: disabled
[  525.341842][ T7928] Rebooting in 86400 seconds..