last executing test programs:

5m24.626951346s ago: executing program 32 (id=181):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)={0x20, r1, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x44}, 0x0)

5m19.346004244s ago: executing program 33 (id=202):
sched_setaffinity(0x0, 0x0, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
ftruncate(0xffffffffffffffff, 0x2007ffb)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r2 = eventfd(0xffffffff)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000340)=r2)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000010001"], 0x50)

3m46.040202096s ago: executing program 3 (id=428):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x120e, &(0x7f00000015c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='blkio.bfq.dequeue\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
r1 = epoll_create(0x8000)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x0, &(0x7f0000000040)})
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cc, 0x301)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1c42, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=@setlink={0x28, 0x13, 0xbaa23f3d13f2d1f5, 0x0, 0x800000, {0x0, 0x0, 0x0, r5}, [@IFLA_MTU={0x8, 0x4, 0x7f}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x40)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

3m44.755976221s ago: executing program 1 (id=431):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x41, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3m44.672733436s ago: executing program 3 (id=433):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x30, 0x20, 0x1, 0x70bd27, 0x0, {0xa, 0x80, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x10001}, [@FRA_DST={0x14, 0x1, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000)

3m44.356367139s ago: executing program 3 (id=437):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r3 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1)
sendto$inet6(r3, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff", 0xf, 0x8000, 0x0, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40d80, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r4, 0x400455c8, 0x4)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000300)=0x33)
recvmmsg(r3, &(0x7f0000002480), 0x0, 0x40002003, 0x0)
syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRESHEX=r2, @ANYRES32=r3, @ANYRES64=r1, @ANYRES64=r3, @ANYRESDEC=0x0], 0x1, 0x194, &(0x7f0000000640)="$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")
read(0xffffffffffffffff, &(0x7f0000000200)=""/189, 0xbd)

3m44.287812336s ago: executing program 1 (id=438):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@local, @in=@rand_addr=0xffffffff, 0x0, 0xfffd, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x671, 0x0, 0x0, 0xffffffffffffffff}, {0x800, 0x800, 0x4, 0x8}, 0x0, 0x0, 0x2}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in=@empty, 0x0, 0x3, 0x3, 0x0, 0x0, 0x5}}, 0xe8)

3m43.778917934s ago: executing program 1 (id=439):
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14, 0x3ec, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x3fb, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0x200000e5}, 0x10)
open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0)
fallocate(r0, 0x0, 0x0, 0x1000f4)
io_setup(0x7d, &(0x7f0000000600)=<r5=>0x0)
io_submit(r5, 0x0, 0x0)

3m41.135975922s ago: executing program 1 (id=441):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
close(r0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{@grpjquota}]}, 0x3, 0x5ee, &(0x7f0000000280)="$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")
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
write$binfmt_register(r3, &(0x7f0000000880)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=\xb9\xc4\xd7A%S\n\x10i\xcf\x84\x93v\x02\xe4y}\xcbV\xbb\xc1\xd5\x06\v\xdc\xd8\\\xc5\xb3\ag\xa6u\xbe\xf4)\xae\xb6\xfe*\x9d?\xb2C\xf0<\xc9\x820M\x92Tzs\xba\xca\x9d\xad\x17\x1b\x84\xbc\xb3\xd8\xad\f\x17\xbe\x17\xb5}.H\x90\xc7\x0e\xb3y\xd0\xc3\xf0c\x04\xe6\fzZ\x02\xfd_W\x9a\xa7\x81\xfcr\xe9B\x95\x13\x9f\x10\'5\xc0\xf9\xb5\xe1\x15Y\x9b$\xa43\xe7F>\xb7\xa1\xb7zw\xac\xc8\x12\x94\xa7\xe5\xcb\xc0g\x865\\\x9e\xca\x8e\xe2\t\xb7\b\x00\x00\x00\x00\x00\x00\x00i7b\xad\x14oVT\xcb\xea\xd3\xad\xa9\x16\xd5\xb2\xa0 \x13^\xf6>\xd4\x8bZzl\x88\xddn\xab\xd6\x12\x1f\x06', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xdc\xf2\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x113)
r4 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
r5 = io_uring_setup(0x138a, &(0x7f00000006c0)={0x0, 0x40cf, 0x1, 0x40000007, 0x15f})
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1/../file0\x00', 0x4000, 0x100, &(0x7f0000000540))
io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x6, &(0x7f0000000040)={0x25, 0x0, 0x0}, 0x0)
io_uring_register$IORING_UNREGISTER_FILES(r5, 0x3, 0x0, 0x0)
r6 = syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xcfca, 0x1042, 0x4, 0x354}, &(0x7f0000000100), &(0x7f0000000300))
io_uring_register$IORING_REGISTER_ENABLE_RINGS(r6, 0xc, 0x0, 0x0)

3m39.770650583s ago: executing program 1 (id=445):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x400, 0x25dfdbfe, {{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}}, [@tmpl={0x144, 0x5, [{{@in=@local, 0x4d5, 0x32}, 0x0, @in6=@local, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {{@in=@broadcast, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x3}, {{@in6=@local, 0x0, 0x33}, 0x0, @in6=@private2, 0x0, 0x0, 0x0, 0xfd, 0x204}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7}, {{@in=@loopback, 0x0, 0x32}, 0xa, @in6=@private1, 0x0, 0x1, 0x0, 0x0, 0x8000, 0x0, 0xffffffff}]}]}, 0x1fc}}, 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000080)={{0x0, 0x3, 0x8000, 0x0, 0x4}})
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$packet(0x11, 0x3, 0x300)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
close(r3)
syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @random, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x28, 0x60, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x2, 0x0, 0xe7}}}}}}, 0x0)

3m39.36863319s ago: executing program 1 (id=447):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0x4, 0x278adc49d2848c2a}, 0x6)

3m39.156656921s ago: executing program 34 (id=447):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0x4, 0x278adc49d2848c2a}, 0x6)

3m35.136772778s ago: executing program 4 (id=461):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x200000, &(0x7f0000000a00), 0x1, 0x784, &(0x7f0000000b00)="$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")
chdir(&(0x7f0000000200)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe4000, 0x1b8)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})

3m34.202436588s ago: executing program 4 (id=463):
socket$packet(0x11, 0x2, 0x300)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@bridge_delneigh={0x30, 0x1d, 0x311, 0x70bd25, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x4, 0x95}, [@NDA_NH_ID={0x8, 0xd, 0x1}, @NDA_DST_MAC={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, 0x30}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffff90acedc6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1})
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000000)={0x6000, 0x2000, 0x1})
ioctl$KVM_RUN(r5, 0xae80, 0x0)

3m33.781646521s ago: executing program 4 (id=464):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e26}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r4=>0x0})
bind$can_raw(r3, &(0x7f0000000180)={0x1d, r4}, 0x10)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f0000000040)=0x1, 0x4)
sendmsg$can_raw(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{0x2, 0x0, 0x1}, 0x8, 0x1, 0x0, 0x0, "00000300"}, 0x10}, 0x1, 0x0, 0x0, 0x20048010}, 0xd209f6d814827b13)
prctl$PR_SCHED_CORE(0x3e, 0x2, r0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
nanosleep(&(0x7f00000025c0)={0xffffffffefff8002}, 0x0)
unshare(0x22020600)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x0, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="662468738dde8594843b41a7ec2a2b3b1cfacc74fcd5b13d2a7713d2b6a8a7a2b1914e7eb32f6980e4c5e78ea87b6b19cb2e8baefdc5e59c29567bcbe409726fc991dafee9f8448d2164f88b6ae004c0ace3b19742404062e37f6eb0d3f2dd2c0724c77bbd6c9a57f722600335e05563f01363fe368bf75aab4cba15f71e80ea45419d8bc1c03cd6dfb523776c3832118ebe2e33e2cea0862d15fcb1945266f2442c311211ce9acd888651a158d943c8620002edb5ea9edbc9a10e16b6784b25f7fa5058f3535c80f70cee2b1c4f3977904a9d198ae5b9bd7b", @ANYRES16, @ANYBLOB="21032bbd7000fedbdf250100000004000180100002800c0001800800010007000000"], 0x28}, 0x1, 0x0, 0x0, 0x4044094}, 0x4)
r5 = socket$netlink(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000280)={'vlan1\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x6, 0x1, 0x80, 0xff, 0x3f, 0x0, 0x7, [0x20, 0x0, 0x10, 0xc, 0x5, 0x0, 0x0, 0x8], [0x8f1, 0x401]}})
chdir(&(0x7f00000004c0)='./file0\x00')

3m33.729881292s ago: executing program 3 (id=465):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000380)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=")
syz_mount_image$fuse(0x0, &(0x7f0000000300)='./bus\x00', 0x3000001, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x100, 0x0)
lseek(r0, 0xd488, 0x1)
getdents64(r0, 0x0, 0x22)

3m32.595581985s ago: executing program 3 (id=466):
open(0x0, 0x20480, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
inotify_init()
sched_setscheduler(r0, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1c, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf]}, &(0x7f0000000300)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x1}, 0x94)
mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xf0, 0x300}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xab}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

3m31.679671468s ago: executing program 4 (id=470):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280), 0xff, 0x25e, &(0x7f0000000e80)="$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")
open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x9, 0x3, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c67808cf335263bd9bffbcc2542ded71038259ca171ce1a311ef07ec3ad71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x9]})
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20)

3m30.424715269s ago: executing program 4 (id=473):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "112000"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000180)={0x20, 0xe, 0x2, {0x2, 0xf}}, 0x0, &(0x7f0000000300)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000194c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000019380)={0x20, 0x1, 0x2, "a79c"}, 0x0})
ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0)

3m29.028692115s ago: executing program 3 (id=476):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f00000006c0)="0f01c8676536f3c015040000000ae800500f01390f350f18c677140f20e06635000002000f22e0050d00260f7e710e", 0x2f}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000280)={0x1e0000, 0x0, {[0x4, 0x6, 0x5, 0x17, 0x10001, 0x3c9, 0x9, 0x1f98]}})
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3m28.571475611s ago: executing program 35 (id=476):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f00000006c0)="0f01c8676536f3c015040000000ae800500f01390f350f18c677140f20e06635000002000f22e0050d00260f7e710e", 0x2f}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000280)={0x1e0000, 0x0, {[0x4, 0x6, 0x5, 0x17, 0x10001, 0x3c9, 0x9, 0x1f98]}})
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3m23.469773641s ago: executing program 4 (id=487):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000180)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@orlov}, {@noload}, {@delalloc}, {@mblk_io_submit}, {@commit}, {@noblock_validity}, {@nogrpid}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x477, &(0x7f0000001380)="$eJzs3M9vFFUcAPDvTH/w21bEHyBIFY3EHy0tP+TgRaMJB01M9IDxVNtCKgs1tCZCiFYPeDQk3o3/hfGkF6NeNPGqd0NCDBdQL2tmZwaWZbfd0m0X2M8nme57M6/73ndm3u6bebsbQM8ayf4kEVsj4o+IGMqztxYYyR+uX70w9c/VC1NJVKtv/53Uyl27emGqLFr+35Y8U60W+Q1N6r34XsRkpTJztsiPLZz+cGz+3PkXZ09Pnpw5OXNm4ujRQwf3DB6ZONyROLO4ru36ZG73zmPvXnpz6vil939O0sjjjoY4OmUk37tNPdPpyrpsW1066a/fsvfXm+lmZwLd1BcR2eEaqPX/oeiLTTe2DcXrn3e1ccCaqlar1SVelRerwH0siW63AOiO8o0+u/4tl3UaetwVrrySXwBlcV8vlnxLf6R5Yu9Aw/Xt1g7WPxIRxxf//TpbYo3uQwAA1Ps+G/+80Gz8l8YjeWIw+/NAMYcyHBEPRsT2iHgoInZExMMRtbKPRsRjK6y/cYbk9vFPevmOg2tDNv57uZjbunX8l5ZFhvuK3LZa/APJidnKzIFin+yPgQ0nZpOZ8SXq+OG1379sta1+/JctWf3lWLBox+X+hht005MLk6uJud6VzyJ29TeLP4lyGieJiJ0RsesO65h9rr/ltuXjX0Lrp21b9ZuIZ/PjvxgN8ZeSlvOT4y8dmTg8tjEqMwfGyrPidr/8dvGtVvWvKv4OyI7/5qbn/434h5ONEfPnzp+qzdfOr+jps64TF//8ouU1TRF/1r3aOf+PbSvO/8HkndqKwWLDx5MLC2fHIwaTN25fP3Hz2cp8WT6Lf/++5v1/e9zcE49HxO6I2BMRT2QXhUXbn4yIpyJi3xI74adXn/5gmfibHP/1mSvN4p9e7vhH/fFfeaLv1I/fLR//xohodfwP1VL7izXtvP6128DV7DsAAAC4V+SfgU/S0RvpNB0dzT/DvyM2p5W5+YXnT8x9dGY6n/cejoG0vNM1VHc/dLy4N1zmJxryB4v7xl/1barlR6fmKtPdDh563JYW/T/zV1+3WwesuQ7MowH3KP0fepf+D70p0f+hp+n/0Lua9f9PW5Ye/XZNGwOsK+//0Lva6P+L+UPrUQFwb/L+D71L/4ee1PK78emqvvK/7on/it8zvFvac/8nIr0rmnH/J/rb/jGLFSSqQ3n/z9ZsaFqm269MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnfF/AAAA//8Qi+Nc")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, 0x0)

3m23.090461412s ago: executing program 36 (id=487):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000180)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@orlov}, {@noload}, {@delalloc}, {@mblk_io_submit}, {@commit}, {@noblock_validity}, {@nogrpid}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x477, &(0x7f0000001380)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, 0x0)

2m41.103359129s ago: executing program 8 (id=478):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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")
chdir(0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prlimit64(0x0, 0x5, &(0x7f0000000140)={0x8, 0x87}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
r1 = socket$unix(0x1, 0x3, 0x0)
getpeername$unix(r1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$getregset(0x4204, r4, 0x2, 0x0)
syz_emit_ethernet(0x3a, 0x0, 0x0)
socket$inet(0xa, 0x1, 0x0)
mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil)
syz_clone3(0x0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', &(0x7f0000000200), 0x6000)

2m37.264584689s ago: executing program 8 (id=582):
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e26}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r4=>0x0})
bind$can_raw(r3, &(0x7f0000000180)={0x1d, r4}, 0x10)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f0000000040)=0x1, 0x4)
sendmsg$can_raw(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{0x2, 0x0, 0x1}, 0x8, 0x1, 0x0, 0x0, "00000300"}, 0x10}, 0x1, 0x0, 0x0, 0x20048010}, 0xd209f6d814827b13)
prctl$PR_SCHED_CORE(0x3e, 0x2, r0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
nanosleep(&(0x7f00000025c0)={0xffffffffefff8002}, 0x0)
unshare(0x22020600)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x0, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="662468738dde8594843b41a7ec2a2b3b1cfacc74fcd5b13d2a7713d2b6a8a7a2b1914e7eb32f6980e4c5e78ea87b6b19cb2e8baefdc5e59c29567bcbe409726fc991dafee9f8448d2164f88b6ae004c0ace3b19742404062e37f6eb0d3f2dd2c0724c77bbd6c9a57f722600335e05563f01363fe368bf75aab4cba15f71e80ea45419d8bc1c03cd6dfb523776c3832118ebe2e33e2cea0862d15fcb1945266f2442c311211ce9acd888651a158d943c8620002edb5ea9edbc9a10e16b6784b25f7fa5058f3535c80f70cee2b1c4f3977904a9d198ae5b9bd7b", @ANYRES16, @ANYBLOB="21032bbd7000fedbdf250100000004000180100002800c0001800800010007000000"], 0x28}, 0x1, 0x0, 0x0, 0x4044094}, 0x4)
r5 = socket$netlink(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000280)={'vlan1\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x6, 0x1, 0x80, 0xff, 0x3f, 0x0, 0x7, [0x20, 0x0, 0x10, 0xc, 0x5, 0x0, 0x0, 0x8], [0x8f1, 0x401]}})
chdir(&(0x7f00000004c0)='./file0\x00')

2m34.424636331s ago: executing program 8 (id=587):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f00000000c0), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000001c0)={'vcan0\x00', <r5=>0x0})
sendmsg$can_bcm(r4, &(0x7f00000004c0)={&(0x7f0000000100)={0x1d, r5}, 0x10, &(0x7f0000000280)={&(0x7f0000000540)={0x1, 0x8d, 0x5, {}, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x8, 0x1, 0x0, 0x0, "c75c85e8b0e3eb49"}}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000800)
sendfile(0xffffffffffffffff, r3, 0x0, 0x20000023896)
socket$inet(0x2, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f00000023c0), 0x80, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x801, 0x2000004, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42005}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0)

2m32.867001727s ago: executing program 37 (id=587):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f00000000c0), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000001c0)={'vcan0\x00', <r5=>0x0})
sendmsg$can_bcm(r4, &(0x7f00000004c0)={&(0x7f0000000100)={0x1d, r5}, 0x10, &(0x7f0000000280)={&(0x7f0000000540)={0x1, 0x8d, 0x5, {}, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x8, 0x1, 0x0, 0x0, "c75c85e8b0e3eb49"}}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000800)
sendfile(0xffffffffffffffff, r3, 0x0, 0x20000023896)
socket$inet(0x2, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f00000023c0), 0x80, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x801, 0x2000004, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42005}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0)

2m22.939553838s ago: executing program 9 (id=608):
open(0x0, 0x20480, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
inotify_init()
sched_setscheduler(r0, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1c, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf]}, &(0x7f0000000300)='GPL\x00', 0x5, 0xffd, &(0x7f00000014c0)=""/4093, 0x0, 0x1}, 0x24)
mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xf0, 0x300}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xab}, [], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)

2m21.68517207s ago: executing program 9 (id=609):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002040)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_POLICE={0x40, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x20000000, 0x4, 0x2, 0xfffffffe, {0x2, 0x1, 0x49, 0x7, 0x5, 0x3}, {0x10, 0x0, 0x4, 0x7, 0xb0a, 0x900}, 0xffffffff, 0x4, 0x5}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x40004}, 0x4000804)

2m20.291855626s ago: executing program 9 (id=611):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0)

2m20.291511796s ago: executing program 9 (id=612):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8931, &(0x7f0000000c80)={'ip6_vti0\x00', 0x0})
r1 = eventfd(0x28c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, 0x0, 0x0)
syz_mount_image$exfat(&(0x7f0000000540), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB='utf8,utf8,iocharset=cp862,iocharset=cp864,discard,errors=remount-ro,fmask=00000000000000000007777,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c757466382c616c6c6f775f7574696d653d3030303030303030303030303030303030312c616c6c6f775f7574696d653d30303030303030303030303030303030303030333737372c0002e5cc2c3640db32594e71db"], 0x1, 0x1526, &(0x7f0000000780)="$eJzs3AuYjdXbMPD7Xms9DEk7yWFYa90POw2WSZIcEnJIkiRJckpImiRJSAw5JY1JQo6T5DAkTQ7TmDTO5/MxafJKkiQkJFnfNR3+3t6+Pv/3/fd93u+d+3ddz+x1z7Pve6+173n2fvZzzcw3vZLrt2xQpzkRwb9C/HabCAAxADAcAK4BgAAAKheqXAgQIJ/ExH/pQdjf7MHUKz0DdiVx/3M37n/uxv3P3bj/uRv3P3fj/udu3P/cjfvPWG62dU7xa3nLvds3vZLrL/unrv/b//Nu/PWGr///d5LvMvv5/f9/rH/qSOP+527c/9yN+5+7cf9zN+5/7sb9z924/7kb95+x3OxKX3/+/2D7/am60vO4zBb8l/Ku7E8fY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjLHc4py/RAHA7+MrPS/GGGOMMcYYY4z9fXzeKz0DxhhjjDHGGGOM/d+HAEqCggDyQF6IgXyQH66CAnA1FIRrIALXQiG4DgrD9VAEikIxKA6xUAJKggYDFghCKAWlIQreA9wIcVAWykF5cFAB4uEmqAg3QyW4BSpDWgbAbVAVqkF1qAG3Q024A2pBbagDd0JdqAf1oQHcBQ3hbmgE90BjuBeawH3QFO6HZvAANIcHoQU8BC3hYWgFj0BraANtoR20/y/lvwD94EXoDwMgEQbCIHgJBsMQGArDYDi8DCPgFRgJr0ISjIJkeA1Gw+swBt6AsTAOxsObMAEmwiSYDFNgKqTAWzAN3obp8A7MgJkwC2ZDKsyBufAuzIP3YD68D2kIsAAWwiJYDOnwIWTAEsiEj2ApfAxZsAyWwwpYCatgNayBtbAO1sMG2AibYDNsga2wDbbDDtgJu2A37Km9Fz6BffAp7IfPIBs+/0/mn4U/5vdGQECBAhUqzIN5MAZjMD/mxwJYAAtiQYxgBAthISyMhbEIFsFiWAxjMRZLYkk0aJCQsBSWwihGsQyWwTiMw3JYDh06jMd4rIg3YyWshJWxMlbBKlgVq2E1rIE1sCbWxFpYC+vcthAA62J9rI934V14NzbCRtgYG2MTbIJNsSk2w2bYHJtjC2yBLbEltsJW2BpbY1tsi+2xPXbADtgRO2Jn7IxdsAt2xa6YgAnYDbthd+yOPbAH9sSe2At7YW/sg33wBXwBX8QXcQDWFQNxEA7CwTgYh+IwHIYv4wh8BV/BVzEJR2Eyvoav4es4Bs/gWByH43E81hQTcRJORhJTMQVTcBpOw+k4HWfgTJyJszEV5+BcnIvz8D3MOcLS8AP8ABfiQlyM6ZiOGbgEMzETl+JZzMJluBxX4EpchStxDa7FNbgeN+B63ISbcAtuwW24DXfgDtyFu3AP7sFP8BP8FD/FJMzGbDyAB/AgHsRDeAgP42E8gke2XQWAx/AYHsfjeAJP4ik8iafxNJ7Bs3gOz+F5PI8X8LnYr1rsKbsuCUQOJZTII/KIGBEj8ov8ooAoIAqKgiIiIqKQKCQKi8KiiCgiioliIlbEipKipDDCCBKhKCVKiaiIijKijIgTcaKcKCeccCJexIuKoqKoJCqJyuJWUUXcJqqKaqKTqyFqiJqis6slaos6oo6oK+qJ+qKBaCAaioaikWgkGovGooloIpqK+0UzMRCH4oMipzMtxShsJZKxtWgj2op24nV8VHQQY7Cj6CQ6i8fFOByLXUUHlyCeEt3EJOwunon5/YWul3he9BZ9RF/xgugnOrr+YoCYgQPFIDEbB4shYqgYJuZhPfE+pmF98apIEqNEsnhNLMbXxRjxhhgrxonx4k0xQUwUk8RkMUVMFSniLTFNvC2mi3fEDDFTzBKzRaqYI+aKd8U88Z6YL94XaeIDsUAsFIvEYpEuPhQZYonIFB+JpeJjkSWWieVihVgpVonVYo1YK9aJ9WKD2Cg2ic1ii9gqtontYofYKXaJ3WKP2Cs+EfvEp2K/+Exki89Fzuv3QfGFOCS+FIfFV+KI+FocFd+IY+JbcVwMECfESXFKfC9Oix/EGXF24DnxozgvfhIXxM/iovACJEohpVQykHlkXhkj88n88ipZQF4tC8prZEReKwvJ62Rheb0sIovKYrK4jJUlZEmppZFWkgxlKVlaRuUNsoy8UcbJsrKcLC+drCDj5U2yorxZVpK3yMryVllF3iarymqyuqwhb5c15R2ylqwt68g7ZV1ZT9aXDeRdsqG8WzaS98jG8l7ZRN4nm8r7ZTP5gGwuH5Qt5EOypXxYtpKPyNayjWwr28n28lHZQT4mO8pOsrN8XHaRT8iu8kmZIJ+S3eTTsrt8RvaQz8qe8jnZSz4ve8s+sq/8WV6UXvaXA2SiHCgHyZfkYDlEDpXD5HD5shwhX5Ej5asySY6SyfI1OVq+LsfIN+RYOU6Ol2/KCXKinCQnyylyqkyRb8lp8m05Xb4jZ8iZcpbMC6lyjhz6W6X5/0T+23/Iny1z8kf+8uhb5Fa5TW6XO+ROuUvulnvkXrlX7pP75H65X2bLbHlAHpAH5UF5SB6Sh+VheUQekUflUXlMHpPH5XF5Qp6UP8rv5Wn5gzwjz8qz8kd5Xp6XF357DkChEkoqpQKVR+VVMSqfyq+uUgXU1aqgukZF1LWqkLpOFVbXqyKqqCqmiqtYVUKVVFoZZRWpUJVSpVVU3aDKqBtVnCqryqnyyqkKKl7dpCIK4V/J/4v5rZj16zGt2qv2qoPqoDqqjqqz6qy6qC6qq+qqElSC6qa6qe6qu+qheqieqqfqpXqp3qq36qv6qn6qn+qPoBJVohqkXlKD1RA1VA1Tw9XLKqfwSDVSJakklayS1Wg1Wo1RY9RYNVbl7JygJqhJapKaoqaoFJWipqlparqarmaoGWqWmqVSVaqaq+aqeWqemq/mqzSVphaoBWqRWqTSVbrKUBkqU2WqpWqpylLL1DK1Qq1Qq9QqtUatUevUOrVBbVCb1CaVpbaqrWq72q52qp1qt9qt9qq9ap/ap/ar/SpbZasD6oA6qA6qQ+qQOqwOqyPqiDqqjqpj6pg6ro6rE+qEOqVOqdPqtDqjzqhz6pw6r86rC+qCuqgu5pz2BSIQgQpUkCfIE8QEMUH+IH9QICgQFAwKBpEgEhQKCgWFg+uDIkHRoFhQPIgNSgQlAx2YwAYUhEGpoHQQDW4IygQ3BnFB2aBcUD5wQYUgPrgpqBjcHFQKbgkqB7cGVYLbgqpBtaB6UCO4PagZ3BHUCmoHdYI7g7pBvaB+0CC4K2gY3B00Cu4JGgf3Bk2C+4Kmwf1Bs+CBoHnwYNAieChoGTwctAoeCVoHbYK2Qbug/d9a3/szRR9z/fUAnRcG6kH6JT1YD9FD9TA9XL+sR+hX9Ej9qk7So3Syfk2P1q/rMfoNPVaP0+P1m3qCnqgn6cl6ip6qU/Rbepp+W0/X7+gZeqaepWfrVD1Hz9Xv6nn6PT1fv6/T9Ad6gV6oF+nFOl1/qDP0Ep2pP9JL9cc6Sy/Ty/UKvVKv0qv1Gr1Wr9Pr9Qa9UW/Sm/UWvVVv09v1Dr1T79K79R69V3+i9+lP9X79mc7Wn+sD+ve3vS/1Yf2VPqK/1kf1N/qY/lYf19/pE/qkPqW/16f1D/qMPqvP6R/1ef2TvqB/1he1zzm5z3l7N8ook8fkMTEmxuQ3+U0BU8AUNAVNxFz8rX5hU8QUMcVMMRNrYk1JU9LkIEOmlClloiZqypgyJs7EmXKmnHHGmXgTbyqaiqaSqWQqm8qmiqliqpqqprqpbm43t5s7zB2mtqlt7jR3mnqmnmlgGpiGpqFpZBqZxqaxaWKamKamqWlmmpnmprlpYVqYlqalaWVamdamtWlr2pr2pr3pYDqYjqaj6Ww6my6mi+lqupoEk2C6mW6mu+luepgepqfpaXqZXqa36W36mr6mn+ln+pv+JtEkmkFmkBlsBpuhZqgZboabEWaEGWlGmiSTZJJNshltRpsxZowZa8aZ8eZNM8FMNJPMZDPFTDUpJsVMM9PMdDPdzDAzzCwzy6SaVDPXzDXzzDwz38w3aSbNLDALzCKzyKSbdJNhMkymyTRLzVKTZbLMcrPcrDQrzWqz2qw1a816s95sNBvNZrPZbDVbzXaz3ew0O81us9vsNXvNPrPP7Df7TbbJNgfMAXPQHDSHzCFz2Bw2R8wRc9QcNcfMMXPcHDcnzAlzypwyp81pc8acMefMOXPe/GQumJ/NReNNjM1n89urbAF7tS1or7H/MS5mi9tYW8KWtNoWsUX/EBtrbZwta8vZ8tbZCjbe3vSnuKqtZqvbGvZ2W9PeYWv9FgP8Hjdcu/PXX0S399oG9i7b0N5tG9l7bGN7r21i77NN7cO2mX3ENrdtbAvbzra0D9tW9hHb2raxbW0728U+YbvaJ22Cfcp2s0//Kc6wS+xau86utxvsPvupPWd/tEftN/a8/cn2twPscPuyHWFfsSPtqzbJjvpTPN6+aSfYiXaSnWyn2Kl/imfZ2TbVzrFz7bt2nn3vT3G6/dCm2Uy7wC60i+ziX+KcOWXaj+xS+7HNssvscrvCrrSr7Gq75h9zXWE32c12i91rP7Hb7Q670+6yu+2eX+Kcdey3n9ls+7k9Yr+2B+0X9pA9Zg/br36Jc9Z3zH5rj9vv7Al70p6y39vT9gd7xp79Zf05a//e/mwvWm+BkARJUhRQHspLMZSP8tNVVICupoJ0DUXoWipE11Fhup6KUFEqRsUplkpQSdJkyBJRSKWoNEXpBipDN1IclaVyVJ4cVaB4uokq0s1UiXLOXm+lKnQbVaVqVJ1q0O1Uk+6gWlSb6tCdVJfqUX1qQHdRQ7qbGtE91JjupSZ0HzWl+6kZPUDN6UFqQQ9RS3qYWtEj1JraUFtqR+3pUepAj1FH6kSd6XHqQk9QV3qSEugp6kZPU3d6hnrQs9STnqNe9Dz1pj7Ul16gfvQi9acBlEgDaRC9RINpCA2lYTScXqYR9AqNpFcpiUZRMr1Go+l1GkNv0FgaR+PpTZpAE2kSTaYpNJVS6C2aRm/TdHqHZtBMmkWzKZXm0Fx6l+bRezSf3qc0+oAW0EJaRIspnT6kDFpCmfQRLaWPKYuW0XJaQStpFa2mNbSW1tF62kAbaRNtpi20lbbRdtpBSLtoN+2hvfQJ7aNPaT99Rtn0OR2gf6OD9AUdoi/pMH1FR+hrOkrf0DH6lo7Td3SCTtIp+p5O0w90hs7SOfqRztNPdIF+povkCUIMRShDFQZhnjBvGBPmC/OHV4UFwqvDguE1YSS8NiwUXhcWDq8Pi4RFw2Jh8TA2LBGWDHVoQhtSGIalwtJhNLwhLBPeGMaFZcNyYfnQhRXC+PCmsGJ4c1gpvCWsHN4aVglvC6uG1cKH760R3h7WDO8Ia4W1wzrhnWHdsF5YP2wQ3hU2DO8OG4X3hI3De8NK4X1h0/D+sFn4QNgcHgxbhA+FLcOHw1bhI2HrsE3YNmwXtg8fDTuEj4Udw05h5/DxsEv4RNg1fDJMCJ8Ku4VPX3Z/YjgwHBS+FL4Uen+PXBRdHE2PfhjNiC6JZkY/ii6NfhzNii6LLo+uiK6Mroqujq6Jro2ui66PbohujG6Kbo5uiXrfIC84dMJJp1zg8ri8Lsblc/ndVa6Au9oVdNe4iLvWFXLXucLuelfEFXXFXHEX60q4kk4746wjF7pSrrSLuhtcGXeji3NlXTlX3jlXwcW7dq69a+86uMdcR9fJdXaPu8fdE+4J96R70j3lurmnXXf3jOvhnnU93XPuOfe86+36uL7uBdfPvej6uwEu0SW6QW6QG+wGu6FuqBvuhrsRboQb6Ua6JJfkkl2yG+1GuzFujBvrxrrxbryb4Ca4SW6Sm+KmuBSX4qa5aW66m+5muBlulpvlUl2qm+vmunlunpvv5ru0uDS3wC1wi9wil+7SXYbLcJku0y11S12Wy3LL3XK30q10q91qt9atdevderfRbXSb3Wa31W112912t9PtdLvdbrfX7XX73D633+132S7bHXAHznl30B1yX7rD7it3xH3tjrpv3DH3rTvuvnMn3El3yn3vTrsf3Bl31p1zP7rz7id3wf3sLjrvUiJvRaZF3o5Mj7wTmRGZGZkVmR1JjcyJzI28G5kXeS8yP/J+JC3yQWRBZGFkUWRxJD3yYSQjsiSSGfkosjTycSQrsiyyPLIisjKyKuJ9ie2hL+VL+6i/wZfxN/o4X9aX8+W98xV8vL/JV/Q3+0r+Fl/Z3+qr+Nt8VV/NV/eP+Na+jW/r2/n2/lHfwT/mO/pOvrN/3HfxT/iu/kmf4J/y3fzTvrt/xvfwz/qe/jnfyz/ve/s+vq9/wffzL/r+XvpEP9AP8i/5wX6IH+qH+eH+ZT/Cv+JH+ld9kh/lk/1rfrR/3Y/xb/ixfpwf79/0E/xEP8lP9lP8VJ/i3/LT/Nt+un/Hz/Az/Sw/26f6OX6uf9fP8+/5+f59n+Y/8Av8Qr/IL/bp/kOf4Zf4TP+RX+o/9ll+mV/uV3iIWeVX+zV+rV/n1/sNfqPf5Df7LX6r3+a3+x1+p9/ld/s9fq//xO/zn/r9/jOf7T/3B/y/+YP+C3/If+kP+6/8Ef+1P+q/8cf8t/64/86f8Cf9Kf+9P+1/8Gf8WX/O/+jP+5/8Bf+zv8h/s8YYY4wx9k+Rl9k/8A+R+MdX8dt3BgHA1TuKH/6PNTcW+XU8RMR2iQDAUwN6Pfj7VrduYmLib/fNkhCUXggAkUv5eeBSvAw6wxOQAJ2g4v92fkNEn/N0mfrRWwHy/7ucGLgUX6p/81/Un5h22foLAeJKX8rJB5fiS/Ur/al28Ev9oh0uUz/fFykAHf9dXgG4FF+qHw+PwdOQ8Id7MsYYY4wxxhhjvxoiqve43OfbnM/nsepSTl64FF/u8zljjDHGGGOMMcauvGf79H3y0YSETj3+YlD7r3fxILcM8vz3mMaVGFz2APnPDACu9HL+MUCAXy7x/fV9rvQrE2OMMcYYY+zvdumk/0rPhDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYy73+X/zLsSu9RsYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY+xK+18BAAD//y7MKDo=")
mount(0x0, 0x0, 0x0, 0x10, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4b2dfe21750f744b, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000)=0x1c, 0x4)
socket$inet(0x2, 0x1, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f00000005c0)='net/ip6_tables_names\x00')
lseek(r6, 0x2000, 0x0)
bind$tipc(0xffffffffffffffff, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10)
r7 = syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00')
read$FUSE(r7, &(0x7f00000083c0)={0x2020}, 0x1497)
ppoll(&(0x7f0000000280)=[{r1, 0x11c0}, {0xffffffffffffffff, 0x1000}], 0x2, 0x0, 0x0, 0x0)

2m19.252690696s ago: executing program 9 (id=615):
syz_read_part_table(0x104e, &(0x7f0000000000)="$eJzsz0EOwUAYBeA3WtpauVJt2Vo5jrOQcDGnkEqpRQ8gIvm+zcz872WSP/xUmY4q6ZIhl/UsrJp5vcpYSrJ7dNPo1C+SNin1NNi+njmO933JtV+lbJZN+07v5+HzWZ3D7YurAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDfeAYAAP//ebgKhA==")
r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc)
fallocate(r0, 0x0, 0x20, 0x8800000)
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, 0x0)

2m18.056683888s ago: executing program 9 (id=617):
syz_read_part_table(0x5f2, &(0x7f0000000000)="$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")
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r2, &(0x7f0000000000), 0x8)
listen(r2, 0x3)
write(0xffffffffffffffff, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff8070000001800000004", 0x19)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
unshare(0x64000600)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)

2m2.942149813s ago: executing program 38 (id=617):
syz_read_part_table(0x5f2, &(0x7f0000000000)="$eJzs20Fok2cYB/AntVk2ZXjx5Ek9yBi7KB4NQyWJikKJ9jJkWFBEzCmCEFmgQw8ahmIO4m5enJCLemuaQ08tLfS0Qyk9dBR66GWjvRR6WUbSt2zt2KCQDYTfj8CT9/2e7/t/T3ivCT5qQ/Fbt9vNRET354gD+7x7tFUoXjo2cq58PSITNyLi2x+/+Kl3JZM6urnteiKtl9P6zeuDnacbF7OtpWubJ29ON4Z2Hjne/8Sht+3RAYzHf+xdfubwo8fV0rNa/u5iqb76ZGH+6vv1Qrl9pdH8cDl74Vbqm011ONX7UYuHcS/GYji+j9tR3f3YT3a+/LDP/FetlVPZo6XWxJ2zW8XO86nT/a4/z3V2ADPvze8f2Ijo5T84/uKbZv38Z3Hk5Zna5Fx5LUVXcrtu+zRibMBvAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAIGRj5vCjx9XSs1r+7mKpvvpkYf7q+/VCuX2l0fxwOXvhVuqbTXU41ftRi4dxL8aiEpW4HdV/TPj8r4vc3qvv8rvzX7VWTv1+tNSauHN2q9h5PnU69Y0MaN5/ye/28h8cf/F1s37+q9yRl2dqk3PltQPbfZW/vXn0fz0AAAAAAAAAAAAAAAAAAAAYhELx0rGRc+XrEZm4ERFf/vrdUG+/m/7vnkl9J1JdTvtvXh/sPN24mG0tXds8eXO68UvaH49MjEfEobft0f99GPbtjwAAAP//O3uREg==")
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r2, &(0x7f0000000000), 0x8)
listen(r2, 0x3)
write(0xffffffffffffffff, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff8070000001800000004", 0x19)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
unshare(0x64000600)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)

48.344498482s ago: executing program 7 (id=867):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1)
sendto$inet6(r3, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff", 0xf, 0x8000, 0x0, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40d80, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r4, 0x400455c8, 0x4)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000300)=0x33)
recvmmsg(r3, &(0x7f0000002480), 0x0, 0x40002003, 0x0)
syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRESHEX=r2, @ANYRES32=r3, @ANYRES64=r1, @ANYRES64=r3, @ANYRESDEC=0x0], 0x1, 0x194, &(0x7f0000000640)="$eJzsmD9P+kAYx7/X8if88ktw1UUTScDB0hY1MjgwO2ii0bhJpBK0iIEOwGZ8Ec6+AmfiwvvQQZ0cxM3Joebawx4oYuI/jM9neO57dw/Hc0+Tb5OCIIg/y831w9VZMhHj+j8SiIr1WzXIUaT8Vvxx5qK0cn6i31+22svZ/vMYANd9//+HALRzKhwxd93eXyfEuA6lq8Py/iYYNKG3oWBDaAsMW0LvSbrC8zVtt2Rb2k7FLnCh82DwYPKQ6a+vc8RQkOpj0n6t0dzP27ZV/UIxrH+dnIIlqT75eXV7owf9gwEFhtAZMKwJvYhotzd+S6T7T4SC89Vvvv/vFuPxITlhjEqpJD5BMHBxFwNGo56fEoE/uacMScmfQpJ/pJ3yYbrWaM6WyvmiVbQOTDOzoM/p+ryZ9ozIj2/4X8zzp3/S+eEBuREWQT3vOFXDj89zsx6FUzVfc9yI538KUtN+1UysyXjvgzE2xYeUChwPrJYgCIIgCIIgCIIgCIIgCOIjTIJ5X0F7yL5YMle97KcAAAD//5Z1cak=")
read(0xffffffffffffffff, &(0x7f0000000200)=""/189, 0xbd)

36.266781445s ago: executing program 7 (id=893):
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x40000021, 0x0, 0x1af}]})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

35.668527105s ago: executing program 7 (id=896):
r0 = syz_usb_connect(0x0, 0x36, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x132, 0xffffffffffffffff, 0xffffd000)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r2 = eventfd(0x0)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001cc0))
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000340)=0x1)
ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000540)=0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0})
userfaultfd(0x80800)

31.454526792s ago: executing program 7 (id=902):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0x32, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', <r1=>0x0})
sendmmsg$inet(r0, &(0x7f0000002240)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @local, @loopback}}}], 0x20}}], 0x1, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
close(0x3)
socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, 0x0, 0x0)
ioctl$VIDIOC_G_MODULATOR(0xffffffffffffffff, 0xc0445636, 0x0)
r3 = socket(0x29, 0x6, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = gettid()
readahead(r4, 0x1, 0x8000)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
fcntl$lock(r6, 0x6, &(0x7f0000002000)={0x1, 0x0, 0x1})
fcntl$lock(r6, 0x26, &(0x7f00000031c0)={0x1})
r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0)
setsockopt(r7, 0x84, 0x80, &(0x7f0000000000)="1400", 0x2)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, 0x0, 0xc000)

29.197761429s ago: executing program 7 (id=908):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x2, 0x8, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4)

28.980363858s ago: executing program 7 (id=911):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e21, @multicast1}, 0x10)
accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000040)=0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000001e40)='./file1\x00', 0x1000c01, &(0x7f0000000000)=ANY=[], 0x2, 0x231, &(0x7f0000000240)="$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")
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r4, 0x0, 0x0}, 0x20)
mount(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00')
r6 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, 0x0, 0x0)
preadv(r5, &(0x7f0000000080)=[{&(0x7f0000000580)=""/118, 0x76}, {&(0x7f0000000d00)=""/93, 0x5d}], 0x2, 0x9, 0x100)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x288, 0x288, 0x440, 0x1b8, 0x358, 0x440, 0x440, 0x440, 0x440, 0x440, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @empty, [0xffffffff, 0xff000000, 0xffffff00, 0xff000000], [0xffffff00, 0xff, 0xff, 0x7fffffff], 'hsr0\x00', 'xfrm0\x00', {0xff}, {0xff}, 0x29, 0x7, 0x2, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x12}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570)

27.351159909s ago: executing program 6 (id=917):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xbc}, 0x1, 0x0, 0x0, 0xd9}, 0x0)

26.549147622s ago: executing program 6 (id=918):
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e26, @broadcast}, {0x2, 0x4e21, @local}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5, 0x6})
r0 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100})
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1})

26.47970032s ago: executing program 6 (id=920):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x80a, &(0x7f0000000000)={[{@debug}, {@lazytime}, {@inode_readahead_blks}, {@delalloc}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0xb}}, {@errors_remount}]}, 0x1, 0x7b5, &(0x7f0000000540)="$eJzs3c9rHNcdAPDvrH7ZslurUKjdi3VqDcYr21XtFgqV6aEUajC059pitRaqVlqjXRlL6BATAoEQkpgcEpJLzvnh3HINyTl/Qy4hBBsnkU0ccggbZn9IK620+mHtyrY+HxjpvZk3+953Z+fN253HbgAH1nD6JxNxIiJeTyKO1dcnEdFXTfVGjNXKPV5eyqVLEpXKf75LqmUeLS/lommf1JF65nhEfPZSxOlMa72lhcXp8UIhP1fPj5RnboyUFhbPTM2MT+Yn87MXzo2Onr/454sX9i7WH75YPHr/jX/+8aOxn1783d1XP09iLI7WtzXHsVeGY7j+nPSlT+Ea/9jryvZZst8NYFfSU7OndpbHiTgWPdUUAPA8S6//FQDggElc/wHggGl8DvBoeSnXWPb3E4nuenApIklq8Tfub9a29Nbv2R2q3gcdfJREb/2OaOzh/a7hiHj3k/99kC7RofuQABt54XZEXBsabu3/k5Y5Czt1dhtlhtfl9X/QPZ9eioi/bDT+y6yMf2Jl/LNqYINzdzeGI/qb863nf+behjv+fQ8qr4///lab25YG2jT+W5m0NtRTz/0qzZyMiKlCPu3bfh0Rp6Jv4PpUIX+uTR2nHv78cLNtzeO/7+/8//20/vT/aonMvd6BtftMjJfHnyTmZg9uR/y+d3Vu3+OW/v9Qday7/vin6660e+CTq8l//fXldzYrlsafxttYWuPvrMp7EX+IjeNvSNrOTxxJD//Z2t+N6/j4q7cGN6u/+finS1p/471AN6THf7B9/ENJ83zN0t7Wv3X8G7/++5P/VtONzuPWeLk8dy6iP/l36/rzq/s28o3yafy1SNfHn2n7+k/fCV7bZoy997/9cPfxr+jIFMs0/okdHf+dJ+4+nu7Zffzp8R+tpk7V12yn/yvk+2M7DXyS5w4AAAAAAAAAAAAAAAAAAAAAAAAAtisTEUcjyWRX0plMNlv7De/fxmCmUCyVT18vzs9ORPW3soeiL9P4qsvGdyw2vv90qLY9SfPn1+X/FBG/iYg3Bw5X89lcsTCxz7EDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMORTX7/P/XNQJsdk95uNREA6IRDW5Z4mF+TrVQqlQ62BwDovK2v/63efq0DDQEAuqbN9f9wN9sBAHTPbt7/AwDPNtd/ADh4XP8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADosCuXL6dL5cflpVyan7i5MD9dvHlmIl+azs7M57K54tyN7GSxOFnIZ3PFma0er1As3hiN2flbI+V8qTxSWli8OlOcny1fnZoZn8xfzfd1JSoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2JnSwuL0eKGQn3suEq9ExNo1laejYU+eSOKpaMa+JL4+8+XxdmXubPEyHnsqonjGEvvdMwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8G34JAAD//7M8Jlw=")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
inotify_init()
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=")
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="120000000200000008000000"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4}, &(0x7f0000000180), &(0x7f0000000100)=r3}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r4, &(0x7f0000000300), 0x0}, 0x20)
syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102)

25.364949175s ago: executing program 2 (id=922):
r0 = socket$nl_route(0x10, 0x3, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x4)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, r0, 0xa2ed0000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000001c00), 0x12)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
r5 = dup(r1)
write$UHID_INPUT(r5, &(0x7f0000001040)={0xe, {"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", 0x1000}}, 0x1006)

24.606055836s ago: executing program 6 (id=925):
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
gettid()
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1a, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x200004, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = io_uring_setup(0x44a2, 0x0)
io_uring_register$IORING_REGISTER_ENABLE_RINGS(r2, 0xc, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000580)='net/fib_trie\x00')
pread64(r3, &(0x7f0000019180)=""/102346, 0x18fca, 0x3)

24.391457986s ago: executing program 2 (id=926):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
syz_open_dev$sndpcmp(&(0x7f0000000080), 0x1ff, 0x2000)
r1 = socket(0x40000000015, 0x5, 0x0)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0xb, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xff}, 0x1c)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000)
r5 = fcntl$dupfd(r3, 0x0, r3)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_BEARER_SET(r6, 0x0, 0x4040)
write$sndseq(r5, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @control={0x3, 0x5a, 0x93}}, {0x0, 0x0, 0x0, 0x2, @time={0x367f, 0xfffffffd}, {}, {0x80}, @result={0x2, 0x2}}], 0x38)
read$hidraw(r5, 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, r1)
read$rfkill(r5, &(0x7f00000002c0), 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80, 0x10)

21.189830749s ago: executing program 6 (id=931):
add_key(0x0, 0x0, &(0x7f0000000080), 0x0, 0xfffffffffffffff9)
syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x201)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
epoll_create1(0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r1 = syz_io_uring_setup(0x10d4, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x0, 0x34f}, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x45, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x2})
io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff})
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3fd, 0xfffffffffffffffe, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0)

20.972487059s ago: executing program 2 (id=932):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
keyctl$reject(0x13, 0x0, 0x400, 0x8000000000000204, 0x0)
getrlimit(0x0, &(0x7f0000000400))
getpid()
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\a\x00'/20, @ANYRES32, @ANYBLOB="50000007060005000100000008000d0003000000"], 0x2c}}, 0x800)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
socket$inet6_udp(0xa, 0x2, 0x0)
syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x3010050, &(0x7f0000000600)=ANY=[], 0x41, 0x14fe, &(0x7f0000000700)="$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")
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./bus\x00'}, 0x18)
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4808, 0x0, 0x0, 0x0, &(0x7f0000000180))

17.791528395s ago: executing program 6 (id=937):
openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0xa0c00, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1})
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_mr_cache\x00')
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc4000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
io_setup(0x8, 0x0)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
socketpair(0x25, 0x6, 0x53410eff, &(0x7f0000004f40))
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0x2, 0x5, 0x9b, 0x1, 0x0, 0x5f, 0x3, 0x20, 0xa6, 0x2, 0x5, 0x9, 0x3}, {0xfffffff9, 0xfffa, 0x0, 0x0, 0x0, 0x2, 0xce, 0x0, 0x4, 0xff, 0x4, 0x0, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x1, 0x7, 0xfe, 0x7, 0x8, 0x7e, 0x4, 0x1000000000000004}], 0xcc78})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17.682304805s ago: executing program 2 (id=938):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
creat(0x0, 0x0)
mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,')

16.410572812s ago: executing program 2 (id=940):
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r3)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x19}, {0xb, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x9189}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000050}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

15.124058436s ago: executing program 2 (id=943):
sendto(0xffffffffffffffff, &(0x7f0000000740), 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
write(r1, &(0x7f0000001340)="89d87df03855", 0x6)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000007c0)=[0x5], 0x0, 0x0, 0x4c}}, 0xa3)
socket$nl_generic(0x10, 0x3, 0x10)
openat$binfmt_format(0xffffff9c, 0x0, 0x2, 0x0)

12.669551815s ago: executing program 39 (id=911):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e21, @multicast1}, 0x10)
accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000040)=0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000001e40)='./file1\x00', 0x1000c01, &(0x7f0000000000)=ANY=[], 0x2, 0x231, &(0x7f0000000240)="$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")
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r4, 0x0, 0x0}, 0x20)
mount(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00')
r6 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, 0x0, 0x0)
preadv(r5, &(0x7f0000000080)=[{&(0x7f0000000580)=""/118, 0x76}, {&(0x7f0000000d00)=""/93, 0x5d}], 0x2, 0x9, 0x100)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x288, 0x288, 0x440, 0x1b8, 0x358, 0x440, 0x440, 0x440, 0x440, 0x440, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @empty, [0xffffffff, 0xff000000, 0xffffff00, 0xff000000], [0xffffff00, 0xff, 0xff, 0x7fffffff], 'hsr0\x00', 'xfrm0\x00', {0xff}, {0xff}, 0x29, 0x7, 0x2, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x12}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570)

12.578274528s ago: executing program 5 (id=947):
socket$packet(0x11, 0x2, 0x300)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@bridge_delneigh={0x30, 0x1d, 0x311, 0x70bd25, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x4, 0x95}, [@NDA_NH_ID={0x8, 0xd, 0x1}, @NDA_DST_MAC={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, 0x30}}, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

11.427368667s ago: executing program 5 (id=948):
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f00000010c0))
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x5)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_qrtr_TIOCOUTQ(r5, 0x5411, &(0x7f0000000000))
sched_setparam(r2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000805}, 0x24048040)
socket$inet(0x2, 0x4000000000000001, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder1\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@userxattr}], [], 0x2f})
mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0)
sendto$inet(r1, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)
listen(r1, 0xda90)
accept4(r1, 0x0, 0x0, 0x800)
readv(r0, &(0x7f0000000500)=[{&(0x7f0000000480)=""/77, 0x4d}], 0x1)

10.808511084s ago: executing program 5 (id=950):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
creat(0x0, 0x0)
mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,')

10.13339345s ago: executing program 0 (id=951):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x132, 0xffffffffffffffff, 0xffffd000)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x0)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001cc0))
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1)
ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000540)=&(0x7f00000002c0))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0)
userfaultfd(0x80800)

9.662634334s ago: executing program 5 (id=952):
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getpeername$netrom(r4, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
r6 = dup(r5)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, 0x0, 0x0)
openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
read(r7, &(0x7f0000000040)=""/138, 0x8a)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x28000080)
sendmsg$inet6(r5, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)
dup(r5)
r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a80)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000002f000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r10, 0x4)

9.088391088s ago: executing program 0 (id=953):
syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82803, 0x8e)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x20)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000003c0)={0x1, 0x0, [{0x7, 0x0, 0x7, 0x1, 0x5, 0xd10, 0x4}]})
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001000)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0xc854}, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002040)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_POLICE={0x40, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x20000000, 0x4, 0x2, 0xfffffffe, {0x2, 0x1, 0x49, 0x7, 0x5, 0x3}, {0x10, 0x0, 0x4, 0x7, 0xb0a, 0x900}, 0xffffffff, 0x4, 0x5}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x40004}, 0x4000804)

7.917188573s ago: executing program 0 (id=954):
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100))
ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000480)={0x1, &(0x7f0000000140)=[{0x6, 0x1}]})
write(r1, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

6.475859289s ago: executing program 0 (id=955):
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_setup(0x5b0f, &(0x7f0000000000)={0x0, 0xfffffffc, 0x80, 0x0, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000))
close_range(r0, r0, 0x0)

4.29914998s ago: executing program 0 (id=956):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x110a, 0x2})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x0, 0x4c, 0x1a, 0xc000486, 0x73, 0x2c8, 0x258, 0x258, 0x2c8, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0xd8, 0x108, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x10}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000240)=@req={0x7, 0x25, 0xc, 0x8}, 0x10)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x80000)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r6, 0x28, 0x0, &(0x7f00000000c0)=0x2, 0x8)
sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
fsopen(&(0x7f00000000c0)='virtiofs\x00', 0x0)
syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x42, 0x1000000, 0x0})

4.064790276s ago: executing program 5 (id=957):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socket$kcm(0xa, 0x2, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44)
socket$inet_sctp(0x2, 0x1, 0x84)
r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00')
munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000)
writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1)

2.587142845s ago: executing program 40 (id=937):
openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0xa0c00, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1})
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_mr_cache\x00')
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc4000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
io_setup(0x8, 0x0)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
socketpair(0x25, 0x6, 0x53410eff, &(0x7f0000004f40))
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0x2, 0x5, 0x9b, 0x1, 0x0, 0x5f, 0x3, 0x20, 0xa6, 0x2, 0x5, 0x9, 0x3}, {0xfffffff9, 0xfffa, 0x0, 0x0, 0x0, 0x2, 0xce, 0x0, 0x4, 0xff, 0x4, 0x0, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x1, 0x7, 0xfe, 0x7, 0x8, 0x7e, 0x4, 0x1000000000000004}], 0xcc78})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

2.546326558s ago: executing program 0 (id=959):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$kcm(0x2, 0xa, 0x2)
write$tun(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x36)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000000)=0x1ff)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r2)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r3, 0xba87317d461c07c9, 0x70bd3d, 0x4004}, 0x14}, 0x1, 0x0, 0x0, 0x40000c9}, 0x1000)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, 0x0, 0x40000)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000004200)='qnx6\x00', 0xa18410, 0x0)
chdir(&(0x7f0000000c80)='./file0\x00')

1.19479736s ago: executing program 5 (id=960):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
shutdown(0xffffffffffffffff, 0x1)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
fallocate(r5, 0x0, 0x0, 0x10fff9)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=@newtfilter={0x8c, 0x2c, 0xd27, 0x170bd2b, 0x3, {0x0, 0x0, 0x0, r10, {0x0, 0x5}, {}, {0x8, 0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0x5c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1b5b0}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0xa, 0x1, 0x10001, 0x5}, 0x28}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc804}, 0x2)

0s ago: executing program 41 (id=943):
sendto(0xffffffffffffffff, &(0x7f0000000740), 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
write(r1, &(0x7f0000001340)="89d87df03855", 0x6)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000007c0)=[0x5], 0x0, 0x0, 0x4c}}, 0xa3)
socket$nl_generic(0x10, 0x3, 0x10)
openat$binfmt_format(0xffffff9c, 0x0, 0x2, 0x0)

kernel console output (not intermixed with test programs):

[  243.662428][ T6532] loop4: detected capacity change from 0 to 128
[  243.693426][ T6410] 8021q: adding VLAN 0 to HW filter on device bond0
[  243.697332][ T4185] EXT4-fs warning (device loop3): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  243.743045][ T6532] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  243.752884][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  243.784018][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  243.784764][ T6532] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  243.803122][ T4185] EXT4-fs warning (device loop3): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  243.828300][ T6410] 8021q: adding VLAN 0 to HW filter on device team0
[  243.856150][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  243.865662][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  243.874883][ T4394] bridge0: port 1(bridge_slave_0) entered blocking state
[  243.882033][ T4394] bridge0: port 1(bridge_slave_0) entered forwarding state
[  243.917744][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  243.937163][ T4185] EXT4-fs warning (device loop3): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  243.940758][ T6530] loop5: detected capacity change from 0 to 8192
[  243.954378][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  244.009835][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  244.038684][ T6541] 9pnet: Insufficient options for proto=fd
[  244.073607][ T4394] bridge0: port 2(bridge_slave_1) entered blocking state
[  244.080795][ T4394] bridge0: port 2(bridge_slave_1) entered forwarding state
[  244.159319][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  244.218912][ T6532] loop_set_status: loop4 () has still dirty pages (nrpages=2)
[  244.239897][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  244.367200][ T6410] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  244.436185][ T6410] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  244.810737][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  244.842251][ T4185] EXT4-fs warning (device loop3): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  244.851694][ T4187] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  244.920297][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  244.983761][ T6547] loop6: detected capacity change from 0 to 2048
[  244.989916][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  245.014892][ T4187] EXT4-fs error (device loop4): ext4_readdir:223: inode #11: comm syz-executor: path /129/file1/lost+found: directory fails checksum at offset 0
[  245.016437][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  245.060854][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  245.069304][ T1108] Bluetooth: hci4: command 0x0419 tx timeout
[  245.076354][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  245.113914][ T4187] EXT4-fs error (device loop4): ext4_readdir:223: inode #11: comm syz-executor: path /129/file1/lost+found: directory fails checksum at offset 1024
[  245.136829][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  245.163989][ T4187] EXT4-fs error (device loop4): ext4_readdir:223: inode #11: comm syz-executor: path /129/file1/lost+found: directory fails checksum at offset 8192
[  245.166656][ T6547] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  245.191330][ T4187] EXT4-fs error (device loop4): ext4_readdir:223: inode #11: comm syz-executor: path /129/file1/lost+found: directory fails checksum at offset 11264
[  245.207615][ T6547] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  245.217776][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  245.227924][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  245.235977][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  245.346556][ T4187] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  245.538378][ T4187] EXT4-fs error (device loop4): ext4_empty_dir:3139: inode #11: comm syz-executor: Directory block failed checksum
[  245.686183][ T4187] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  245.769685][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  245.891186][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  245.947952][ T6410] 8021q: adding VLAN 0 to HW filter on device batadv0
[  246.020005][ T4187] EXT4-fs error (device loop4): ext4_readdir:223: inode #11: comm syz-executor: path /129/file1/lost+found: directory fails checksum at offset 0
[  246.145090][ T4187] EXT4-fs error (device loop4): ext4_readdir:223: inode #11: comm syz-executor: path /129/file1/lost+found: directory fails checksum at offset 1024
[  246.240231][ T4187] EXT4-fs error (device loop4): ext4_readdir:223: inode #11: comm syz-executor: path /129/file1/lost+found: directory fails checksum at offset 8192
[  246.331611][ T4187] EXT4-fs error (device loop4): ext4_readdir:223: inode #11: comm syz-executor: path /129/file1/lost+found: directory fails checksum at offset 11264
[  246.390009][ T6574] loop5: detected capacity change from 0 to 1024
[  246.399055][ T4187] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  246.442444][ T6576] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  246.478814][ T4187] EXT4-fs error (device loop4): ext4_empty_dir:3139: inode #11: comm syz-executor: Directory block failed checksum
[  246.491202][ T6574] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a015c01c, mo2=0002]
[  246.499615][ T6574] System zones: 0-1, 3-36
[  246.531665][ T6574] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodelalloc,journal_ioprio=0x0000000000000006,resuid=0x0000000000000000,grpquota,debug,bsddf,nodiscard,noauto_da_alloc,,errors=continue. Quota mode: writeback.
[  246.626611][ T4187] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  246.710212][ T4187] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  246.766883][ T4187] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  246.822115][ T4187] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  247.070638][ T4187] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  248.029576][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  248.039329][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  248.171310][ T4187] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  248.235193][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  248.261415][ T6602] netlink: 12 bytes leftover after parsing attributes in process `syz.5.482'.
[  248.295268][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  248.308503][ T6602] netlink: 40 bytes leftover after parsing attributes in process `syz.5.482'.
[  248.386236][ T6604] 9pnet: Insufficient options for proto=fd
[  248.451555][ T6602] netlink: 40 bytes leftover after parsing attributes in process `syz.5.482'.
[  249.228971][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  249.237914][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  249.322920][ T6410] device veth0_vlan entered promiscuous mode
[  249.365934][ T6609] loop6: detected capacity change from 0 to 2048
[  249.415518][ T6410] device veth1_vlan entered promiscuous mode
[  249.550055][ T6609] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  249.606892][ T6609] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  249.629927][ T6410] device veth0_macvtap entered promiscuous mode
[  249.672842][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  249.692121][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  249.736618][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  249.896656][ T6612] loop5: detected capacity change from 0 to 8192
[  249.896694][ T6410] device veth1_macvtap entered promiscuous mode
[  250.578191][ T6410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  250.619319][ T6410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  250.653598][ T6410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  250.678632][ T6410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  250.722210][ T6410] batman_adv: batadv0: Interface activated: batadv_slave_0
[  250.744101][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  250.779388][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  250.809204][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  250.999514][ T6410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  251.022141][ T6410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  251.032802][ T6410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  251.044876][ T6410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  251.060458][ T6410] batman_adv: batadv0: Interface activated: batadv_slave_1
[  251.208236][ T6410] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  251.363459][ T6410] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  251.484809][ T6410] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  251.738253][ T6410] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  251.826361][ T4231] Bluetooth: hci0: command 0x0409 tx timeout
[  251.881827][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  251.909339][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  252.256270][ T4394] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  252.306905][ T4394] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  252.354979][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  252.424391][ T6610] chnl_net:caif_netlink_parms(): no params data found
[  252.454509][ T4427] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  252.474445][ T4427] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  252.534029][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  252.922051][ T6610] bridge0: port 1(bridge_slave_0) entered blocking state
[  252.929858][ T6610] bridge0: port 1(bridge_slave_0) entered disabled state
[  252.938089][ T6610] device bridge_slave_0 entered promiscuous mode
[  253.011288][ T6610] bridge0: port 2(bridge_slave_1) entered blocking state
[  253.057036][ T6610] bridge0: port 2(bridge_slave_1) entered disabled state
[  253.075858][ T6610] device bridge_slave_1 entered promiscuous mode
[  253.192114][ T6610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  253.661620][ T6610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  253.871074][ T4229] Bluetooth: hci0: command 0x041b tx timeout
[  254.114052][ T6610] team0: Port device team_slave_0 added
[  254.140686][ T6675] loop6: detected capacity change from 0 to 256
[  254.159313][ T6610] team0: Port device team_slave_1 added
[  254.174608][ T6643] loop5: detected capacity change from 0 to 40427
[  254.179164][ T6675] exfat: Deprecated parameter 'utf8'
[  254.186379][ T6675] exfat: Deprecated parameter 'utf8'
[  254.192145][ T6675] exfat: Deprecated parameter 'utf8'
[  254.196302][ T6610] batman_adv: batadv0: Adding interface: batadv_slave_0
[  254.204529][ T6610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  254.222134][ T6675] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011f3f, chksum : 0x66b62981, utbl_chksum : 0xe619d30d)
[  254.240336][ T6610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  254.327308][ T6643] F2FS-fs (loop5): Invalid SB checksum offset: 0
[  254.339730][ T6610] batman_adv: batadv0: Adding interface: batadv_slave_1
[  254.362476][ T6675] exFAT-fs (loop6): error, exfat_zeroed_cluster: out of range(sect:224 len:8)
[  254.371801][ T6675] exFAT-fs (loop6): Filesystem has been set read-only
[  254.418912][ T6643] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[  254.428305][ T6610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  254.548404][ T6610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  254.599143][ T6643] F2FS-fs (loop5): invalid crc value
[  254.610705][ T6610] device hsr_slave_0 entered promiscuous mode
[  254.637985][ T6610] device hsr_slave_1 entered promiscuous mode
[  254.668468][ T4190] Bluetooth: hci3: command 0x0409 tx timeout
[  255.515308][ T6643] F2FS-fs (loop5): Failed to initialize F2FS segment manager (-4)
[  255.618679][ T6647] chnl_net:caif_netlink_parms(): no params data found
[  255.632604][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  255.639827][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  255.910508][ T6679] loop7: detected capacity change from 0 to 8192
[  257.833637][ T4736] Bluetooth: hci3: command 0x041b tx timeout
[  257.842570][ T4229] Bluetooth: hci2: command 0x0406 tx timeout
[  257.926578][ T6692] device vlan2 entered promiscuous mode
[  257.932322][ T6692] device syz_tun entered promiscuous mode
[  257.938760][ T6692] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready
[  258.020973][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready
[  258.133421][ T1111] Bluetooth: hci0: command 0x040f tx timeout
[  258.371509][ T6647] bridge0: port 1(bridge_slave_0) entered blocking state
[  258.411773][ T6647] bridge0: port 1(bridge_slave_0) entered disabled state
[  258.449773][ T6647] device bridge_slave_0 entered promiscuous mode
[  258.610492][ T6647] bridge0: port 2(bridge_slave_1) entered blocking state
[  258.697255][ T6647] bridge0: port 2(bridge_slave_1) entered disabled state
[  259.436435][ T6647] device bridge_slave_1 entered promiscuous mode
[  259.869757][ T4229] Bluetooth: hci3: command 0x040f tx timeout
[  260.187016][ T6734] netlink: 68 bytes leftover after parsing attributes in process `syz.7.505'.
[  260.203442][ T1108] Bluetooth: hci0: command 0x0419 tx timeout
[  260.204907][ T6734] netlink: 12 bytes leftover after parsing attributes in process `syz.7.505'.
[  260.356491][ T6710] bridge0: port 2(bridge_slave_1) entered disabled state
[  260.363836][ T6710] bridge0: port 1(bridge_slave_0) entered disabled state
[  260.726296][ T6710] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  260.804652][ T6710] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  261.449681][ T6710] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  261.458679][ T6710] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  261.467549][ T6710] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  261.476817][ T6710] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  261.764328][ T6647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  261.783893][ T6647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  262.027502][ T4234] Bluetooth: hci3: command 0x0419 tx timeout
[  262.100024][ T6647] team0: Port device team_slave_0 added
[  262.191868][ T6647] team0: Port device team_slave_1 added
[  263.109286][ T6647] batman_adv: batadv0: Adding interface: batadv_slave_0
[  263.136805][ T6647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  263.258442][ T6647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  263.271564][ T4228] Bluetooth: hci1: command 0x0406 tx timeout
[  263.586096][ T6647] batman_adv: batadv0: Adding interface: batadv_slave_1
[  263.705830][ T6647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  263.749115][ T6763] loop7: detected capacity change from 0 to 1024
[  263.755816][ T6647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  264.118310][ T6763] EXT4-fs (loop7): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,noquota,delalloc,journal_dev=0x0000000000000009,nodioread_nolock,,errors=continue. Quota mode: none.
[  264.161143][ T6763] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  264.211068][ T6768] loop5: detected capacity change from 0 to 256
[  264.469803][ T6768] FAT-fs (loop5): Directory bread(block 64) failed
[  264.476397][ T6768] FAT-fs (loop5): Directory bread(block 65) failed
[  264.483116][ T6768] FAT-fs (loop5): Directory bread(block 66) failed
[  264.489702][ T6768] FAT-fs (loop5): Directory bread(block 67) failed
[  264.496293][ T6768] FAT-fs (loop5): Directory bread(block 68) failed
[  264.502966][ T6768] FAT-fs (loop5): Directory bread(block 69) failed
[  264.509589][ T6768] FAT-fs (loop5): Directory bread(block 70) failed
[  264.516132][ T6768] FAT-fs (loop5): Directory bread(block 71) failed
[  264.522753][ T6768] FAT-fs (loop5): Directory bread(block 72) failed
[  264.529368][ T6768] FAT-fs (loop5): Directory bread(block 73) failed
[  264.785743][ T6647] device hsr_slave_0 entered promiscuous mode
[  264.931317][ T6647] device hsr_slave_1 entered promiscuous mode
[  265.159860][ T6647] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  265.191896][ T6647] Cannot create hsr debugfs directory
[  265.628674][ T6790] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  265.636826][ T6790] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  265.909225][ T6777] bridge0: port 2(bridge_slave_1) entered disabled state
[  265.916665][ T6777] bridge0: port 1(bridge_slave_0) entered disabled state
[  266.456300][ T6777] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  267.348515][ T6777] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  267.539940][ T6817] 9pnet: Insufficient options for proto=fd
[  268.063473][ T6819] loop7: detected capacity change from 0 to 512
[  268.204838][ T6819] EXT4-fs (loop7): Ignoring removed bh option
[  268.403666][ T6821] loop5: detected capacity change from 0 to 16
[  268.413814][ T6819] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[  268.432525][ T6819] EXT4-fs error (device loop7): ext4_iget_extra_inode:4566: inode #15: comm syz.7.524: corrupted in-inode xattr
[  268.449094][ T6821] erofs: (device loop5): mounted with root inode @ nid 36.
[  268.474735][ T6821] erofs: (device loop5): find_target_block_classic: corrupted dir block 8200 @ nid 36
[  268.480649][ T6819] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.524: couldn't read orphan inode 15 (err -117)
[  268.496337][ T6821] erofs: (device loop5): z_erofs_readahead: readahead error at page 4110 @ nid 36
[  268.497803][ T6819] EXT4-fs (loop7): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000002,grpid,bh,grpid,noauto_da_alloc,max_dir_size_kb=0x000000000000098e,init_itable=0x0000000000000009,init_itable,usrjquota=,nolazytime,norecovery,,errors=continue. Quota mode: none.
[  268.510684][ T6821] erofs: (device loop5): z_erofs_readahead: readahead error at page 4109 @ nid 36
[  268.541419][ T6821] erofs: (device loop5): z_erofs_readahead: readahead error at page 4108 @ nid 36
[  268.551363][ T6821] erofs: (device loop5): z_erofs_readahead: readahead error at page 4107 @ nid 36
[  268.560761][ T6821] erofs: (device loop5): z_erofs_readahead: readahead error at page 4106 @ nid 36
[  268.570154][ T6821] erofs: (device loop5): z_erofs_readahead: readahead error at page 4105 @ nid 36
[  268.579554][ T6821] erofs: (device loop5): z_erofs_readahead: readahead error at page 4104 @ nid 36
[  268.588939][ T6821] erofs: (device loop5): z_erofs_readahead: readahead error at page 4103 @ nid 36
[  268.598244][ T6821] erofs: (device loop5): z_erofs_readahead: readahead error at page 4102 @ nid 36
[  268.607630][ T6821] erofs: (device loop5): z_erofs_readahead: readahead error at page 4101 @ nid 36
[  268.619935][ T6821] erofs: (device loop5): z_erofs_readahead: readahead error at page 4100 @ nid 36
[  268.629342][ T6821] erofs: (device loop5): z_erofs_readahead: readahead error at page 4099 @ nid 36
[  268.638717][ T6821] erofs: (device loop5): z_erofs_readahead: readahead error at page 4098 @ nid 36
[  268.648981][ T6821] erofs: (device loop5): z_erofs_readahead: readahead error at page 4097 @ nid 36
[  268.659194][ T6821] erofs: (device loop5): z_erofs_readahead: readahead error at page 4096 @ nid 36
[  268.668990][ T6821] attempt to access beyond end of device
[  268.668990][ T6821] loop5: rw=524288, want=24, limit=16
[  268.803788][ T6825] loop7: detected capacity change from 0 to 256
[  268.811324][ T6777] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  268.820584][ T6777] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  268.829596][ T6777] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  268.838555][ T6777] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  268.867722][ T6829] loop5: detected capacity change from 0 to 512
[  268.892581][ T6825] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x5955b8de, utbl_chksum : 0xe619d30d)
[  268.933385][ T6829] EXT4-fs (loop5): Ignoring removed bh option
[  268.940691][ T6829] EXT4-fs (loop5): inline encryption not supported
[  268.947243][ T6829] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  268.988169][ T6829] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  269.020539][ T6829] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.528: bg 0: block 248: padding at end of block bitmap is not set
[  269.046402][ T6829] Quota error (device loop5): write_blk: dquota write failed
[  269.059448][ T6829] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  269.082738][ T6829] EXT4-fs error (device loop5): ext4_acquire_dquot:6234: comm syz.5.528: Failed to acquire dquot type 1
[  269.102885][ T6829] EXT4-fs (loop5): 1 truncate cleaned up
[  269.117053][ T6829] EXT4-fs (loop5): mounted filesystem without journal. Opts: bh,inlinecrypt,nombcache,,errors=continue. Quota mode: writeback.
[  269.499435][ T6829] EXT4-fs (loop5): Ignoring removed orlov option
[  269.524994][ T6829] EXT4-fs error (device loop5): ext4_remount:6060: comm syz.5.528: Abort forced by user
[  269.569950][ T6829] EXT4-fs (loop5): Remounting filesystem read-only
[  269.635738][ T6829] EXT4-fs (loop5): re-mounted. Opts: bsdgroups,abort,noload,nouid32,usrjquota=,orlov,norecovery,barrier,usrquota,. Quota mode: writeback.
[  270.000515][ T6610] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  270.459136][ T6610] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  270.871877][ T6610] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  270.938873][ T6610] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  271.010736][ T6647] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  271.076140][ T6647] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  271.152872][ T6862] 9pnet: Insufficient options for proto=fd
[  271.334125][ T6647] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  271.746602][ T6647] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  272.124519][ T6865] loop5: detected capacity change from 0 to 2048
[  272.199768][ T6871] loop6: detected capacity change from 0 to 256
[  272.231060][ T6865] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  272.262144][ T6865] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  272.333245][ T6871] FAT-fs (loop6): Directory bread(block 64) failed
[  272.347579][ T6842] loop7: detected capacity change from 0 to 40427
[  272.369356][ T6871] FAT-fs (loop6): Directory bread(block 65) failed
[  272.371397][ T6610] 8021q: adding VLAN 0 to HW filter on device bond0
[  272.376135][ T6871] FAT-fs (loop6): Directory bread(block 66) failed
[  272.389404][ T6871] FAT-fs (loop6): Directory bread(block 67) failed
[  272.396018][ T6871] FAT-fs (loop6): Directory bread(block 68) failed
[  272.409928][ T6871] FAT-fs (loop6): Directory bread(block 69) failed
[  272.427851][ T6647] 8021q: adding VLAN 0 to HW filter on device bond0
[  272.468912][ T6842] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[  272.476912][ T6842] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  272.486995][ T6871] FAT-fs (loop6): Directory bread(block 70) failed
[  272.528745][ T6871] FAT-fs (loop6): Directory bread(block 71) failed
[  272.535396][ T6871] FAT-fs (loop6): Directory bread(block 72) failed
[  272.562262][ T6647] 8021q: adding VLAN 0 to HW filter on device team0
[  272.589731][ T6842] F2FS-fs (loop7): invalid crc value
[  272.608621][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  272.626890][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  272.628901][ T6871] FAT-fs (loop6): Directory bread(block 73) failed
[  272.642609][   T26] audit: type=1800 audit(2000000135.060:11): pid=6876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.534" name="file0" dev="loop5" ino=13 res=0 errno=0
[  272.659297][ T6871] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  272.674542][ T6876] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.534: bg 0: block 345: padding at end of block bitmap is not set
[  272.683625][ T6842] F2FS-fs (loop7): Found nat_bits in checkpoint
[  272.696999][ T6876] fs-verity (loop5, inode 13): ext4_end_enable_verity() failed with err -117
[  272.719665][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  272.755892][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  272.794086][  T145] bridge0: port 1(bridge_slave_0) entered blocking state
[  272.801247][  T145] bridge0: port 1(bridge_slave_0) entered forwarding state
[  272.823786][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  272.839306][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  272.850303][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  272.881098][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  272.890137][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  272.903894][  T145] bridge0: port 2(bridge_slave_1) entered blocking state
[  272.911034][  T145] bridge0: port 2(bridge_slave_1) entered forwarding state
[  272.922688][ T6610] 8021q: adding VLAN 0 to HW filter on device team0
[  273.024824][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  273.038112][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  273.048713][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  273.057853][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  273.327038][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  273.603603][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  274.009640][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  274.018227][ T4301] bridge0: port 1(bridge_slave_0) entered blocking state
[  274.025384][ T4301] bridge0: port 1(bridge_slave_0) entered forwarding state
[  274.146886][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  274.161281][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  274.341260][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  274.355547][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  274.365211][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  274.373778][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  274.382526][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  274.391385][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  274.400240][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  274.409753][ T4301] bridge0: port 2(bridge_slave_1) entered blocking state
[  274.416842][ T4301] bridge0: port 2(bridge_slave_1) entered forwarding state
[  274.428444][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  274.446723][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  274.497161][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  274.671676][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  274.692507][ T6647] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  274.997300][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  275.039863][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  275.132931][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  275.200061][ T6912] 9pnet: Insufficient options for proto=fd
[  275.245853][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  275.319122][ T1108] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  275.511362][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  275.588861][ T1108] usb 8-1: Using ep0 maxpacket: 16
[  275.722923][ T1108] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  275.890029][ T6610] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  276.049075][ T1108] usb 8-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00
[  276.064716][ T6610] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  276.079035][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  276.102140][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  276.129308][ T1108] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  276.217795][ T1108] usb 8-1: config 0 descriptor??
[  276.296099][ T1108] usbhid 8-1:0.0: couldn't find an input interrupt endpoint
[  276.337959][ T6922] loop6: detected capacity change from 0 to 256
[  276.378982][ T6922] exfat: Deprecated parameter 'utf8'
[  276.384336][ T6922] exfat: Deprecated parameter 'utf8'
[  276.390752][ T6922] exfat: Deprecated parameter 'utf8'
[  276.410426][ T6922] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011f3f, chksum : 0x66b62981, utbl_chksum : 0xe619d30d)
[  276.428141][ T6922] exFAT-fs (loop6): error, exfat_zeroed_cluster: out of range(sect:224 len:8)
[  276.438372][ T6922] exFAT-fs (loop6): Filesystem has been set read-only
[  276.577526][ T4879] usb 8-1: USB disconnect, device number 2
[  276.765240][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  276.783765][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  276.867011][ T6647] 8021q: adding VLAN 0 to HW filter on device batadv0
[  277.051962][ T6934] loop5: detected capacity change from 0 to 512
[  277.064748][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  277.087526][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  277.122016][ T6934] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.546: inode has both inline data and extents flags
[  277.143796][ T6934] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.546: couldn't read orphan inode 15 (err -117)
[  277.179458][ T6610] 8021q: adding VLAN 0 to HW filter on device batadv0
[  277.235262][ T6934] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  277.366666][ T6943] loop7: detected capacity change from 0 to 2048
[  277.476455][ T4352] device hsr_slave_0 left promiscuous mode
[  277.483297][ T4352] device hsr_slave_1 left promiscuous mode
[  277.549097][ T6949] loop5: detected capacity change from 0 to 2048
[  277.577408][ T6943] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  277.614814][ T4352] batman_adv: batadv0: Removing interface: batadv_slave_0
[  277.621674][ T6943] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  277.967112][   T26] audit: type=1800 audit(2000000140.240:12): pid=6943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.547" name="file0" dev="loop7" ino=13 res=0 errno=0
[  277.968490][ T6943] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.547: bg 0: block 345: padding at end of block bitmap is not set
[  278.019358][ T6943] fs-verity (loop7, inode 13): ext4_end_enable_verity() failed with err -117
[  278.201093][ T4352] batman_adv: batadv0: Removing interface: batadv_slave_1
[  278.468166][ T4352] device bridge_slave_1 left promiscuous mode
[  278.517384][ T4352] bridge0: port 2(bridge_slave_1) entered disabled state
[  278.535564][ T4352] device bridge_slave_0 left promiscuous mode
[  278.558822][ T4352] bridge0: port 1(bridge_slave_0) entered disabled state
[  279.361603][ T4352] device hsr_slave_0 left promiscuous mode
[  279.369458][ T4352] device hsr_slave_1 left promiscuous mode
[  279.379594][ T4352] batman_adv: batadv0: Removing interface: batadv_slave_0
[  279.395457][ T4352] batman_adv: batadv0: Removing interface: batadv_slave_1
[  279.404720][ T4352] device bridge_slave_1 left promiscuous mode
[  279.418643][ T4352] bridge0: port 2(bridge_slave_1) entered disabled state
[  279.439621][ T4352] device bridge_slave_0 left promiscuous mode
[  279.445874][ T4352] bridge0: port 1(bridge_slave_0) entered disabled state
[  279.666448][ T4352] team0 (unregistering): Port device team_slave_1 removed
[  279.698042][ T4352] team0 (unregistering): Port device team_slave_0 removed
[  279.726546][ T4352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  279.756307][ T4352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  279.831505][ T4352] bond0 (unregistering): Released all slaves
[  280.878052][ T4352] team0 (unregistering): Port device team_slave_1 removed
[  280.893826][ T4352] team0 (unregistering): Port device team_slave_0 removed
[  280.906282][ T4352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  280.921612][ T4352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  280.996117][ T4352] bond0 (unregistering): Released all slaves
[  281.264560][ T6994] loop6: detected capacity change from 0 to 256
[  281.309094][ T6994] exfat: Deprecated parameter 'utf8'
[  281.314472][ T6994] exfat: Deprecated parameter 'utf8'
[  281.320031][ T6994] exfat: Deprecated parameter 'utf8'
[  281.337025][ T6994] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011f3f, chksum : 0x66b62981, utbl_chksum : 0xe619d30d)
[  281.383836][ T6994] exFAT-fs (loop6): error, exfat_zeroed_cluster: out of range(sect:224 len:8)
[  281.393034][ T6994] exFAT-fs (loop6): Filesystem has been set read-only
[  281.547352][ T6998] loop7: detected capacity change from 0 to 2048
[  282.173788][ T6998] EXT4-fs (loop7): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none.
[  282.483717][ T6610] device veth0_vlan entered promiscuous mode
[  282.520841][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  282.538142][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  282.599655][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  282.630092][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  282.657378][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  282.679146][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  282.680020][ T4301] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  282.702344][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  282.729218][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  282.753987][ T6610] device veth1_vlan entered promiscuous mode
[  282.758734][ T4301] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 43 with error 28
[  282.821442][ T4301] EXT4-fs (loop7): This should not happen!! Data will be lost
[  282.821442][ T4301] 
[  282.854618][    T7] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  282.868504][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  282.892563][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  282.900801][ T4301] EXT4-fs (loop7): Total free blocks count 0
[  282.906826][ T4301] EXT4-fs (loop7): Free/Dirty block details
[  282.924104][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  282.998804][ T7025] 9pnet: Insufficient options for proto=fd
[  283.018813][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  283.110540][ T6647] device veth0_vlan entered promiscuous mode
[  283.118289][ T4301] EXT4-fs (loop7): free_blocks=2415919104
[  283.195585][ T4301] EXT4-fs (loop7): dirty_blocks=48
[  283.259196][ T6647] device veth1_vlan entered promiscuous mode
[  283.271609][ T4301] EXT4-fs (loop7): Block reservation details
[  283.334581][ T4301] EXT4-fs (loop7): i_reserved_data_blocks=3
[  283.802672][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  283.825789][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  283.840852][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  283.858256][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  283.871171][ T6647] device veth0_macvtap entered promiscuous mode
[  283.949281][    T7] usb 7-1: Using ep0 maxpacket: 8
[  284.068854][    T7] usb 7-1: config 0 has an invalid interface number: 31 but max is 0
[  284.087358][    T7] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  284.117560][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  284.155272][ T6610] device veth0_macvtap entered promiscuous mode
[  284.351673][ T6647] device veth1_macvtap entered promiscuous mode
[  284.512546][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  284.594830][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  284.675809][    T7] usb 7-1: config 0 has no interface number 0
[  284.905394][ T6610] device veth1_macvtap entered promiscuous mode
[  284.940301][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  285.272606][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  286.730775][ T6647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  286.741937][ T6647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  286.777627][ T6647] batman_adv: batadv0: Interface activated: batadv_slave_0
[  287.205275][ T6610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  287.238513][    T7] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  287.247629][    T7] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  287.249098][ T6610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.287450][    T7] usb 7-1: config 0 descriptor??
[  287.308683][    T7] usb 7-1: can't set config #0, error -71
[  287.325902][    T7] usb 7-1: USB disconnect, device number 2
[  287.386586][ T6610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  287.418003][ T6610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.462356][ T6610] batman_adv: batadv0: Interface activated: batadv_slave_0
[  287.470555][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  287.480587][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  287.489754][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  287.498958][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  287.510974][ T6647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  287.522683][ T6647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.538461][ T6647] batman_adv: batadv0: Interface activated: batadv_slave_1
[  287.592672][ T7069] loop5: detected capacity change from 0 to 16
[  287.717028][ T7069] erofs: (device loop5): mounted with root inode @ nid 36.
[  287.743291][ T7069] erofs: (device loop5): z_erofs_lz4_decompress: failed to decompress 1929 in[58, 4038] out[2639]
[  287.757444][ T7069] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117]
[  288.681366][ T7077] loop7: detected capacity change from 0 to 256
[  288.718984][ T7077] exfat: Deprecated parameter 'utf8'
[  288.724394][ T7077] exfat: Deprecated parameter 'utf8'
[  288.729871][ T7077] exfat: Deprecated parameter 'utf8'
[  288.753767][ T7077] exFAT-fs (loop7): failed to load upcase table (idx : 0x00011f3f, chksum : 0x66b62981, utbl_chksum : 0xe619d30d)
[  288.775850][ T6647] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  288.799602][ T7077] exFAT-fs (loop7): error, exfat_zeroed_cluster: out of range(sect:224 len:8)
[  288.808742][ T7077] exFAT-fs (loop7): Filesystem has been set read-only
[  289.033591][ T6647] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  289.745798][ T6647] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  289.754614][ T6647] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  290.101648][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  290.116161][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  290.338959][ T6610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  290.368607][ T6610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  290.386580][ T6610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  290.397136][ T6610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  290.420884][ T6610] batman_adv: batadv0: Interface activated: batadv_slave_1
[  290.444976][ T6610] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  290.465189][ T6610] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  290.486688][ T6610] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  290.497194][ T7088] overlayfs: missing 'lowerdir'
[  290.512564][ T6610] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  290.591260][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  290.623074][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  290.788718][ T4229] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  290.943651][ T7098] 9pnet: Insufficient options for proto=fd
[  291.048543][ T4229] usb 6-1: Using ep0 maxpacket: 32
[  291.229186][ T4229] usb 6-1: unable to get BOS descriptor or descriptor too short
[  291.329374][ T4229] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 254, changing to 7
[  291.549359][ T4229] usb 6-1: New USB device found, idVendor=1235, idProduct=800c, bcdDevice= 0.40
[  291.571524][ T4229] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  291.998091][ T4229] usb 6-1: Product: syz
[  292.002633][ T4229] usb 6-1: Manufacturer: syz
[  292.062204][ T4229] usb 6-1: SerialNumber: syz
[  292.085040][  T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  292.110190][  T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  292.149412][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  292.188666][ T4301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  292.216928][ T4301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  292.279974][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  292.306663][ T4393] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  292.387160][ T4393] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  292.409554][ T4393] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  292.417543][ T4393] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  292.528990][ T4229] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  292.539970][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  292.654591][ T4229] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  292.666113][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  293.167680][ T4229] usb 6-1: USB disconnect, device number 9
[  293.213278][ T7114] loop6: detected capacity change from 0 to 256
[  293.832884][ T7114] FAT-fs (loop6): Directory bread(block 64) failed
[  294.133383][ T7114] FAT-fs (loop6): Directory bread(block 65) failed
[  294.155275][ T7114] FAT-fs (loop6): Directory bread(block 66) failed
[  294.166434][ T7119] loop7: detected capacity change from 0 to 2048
[  294.208437][ T7114] FAT-fs (loop6): Directory bread(block 67) failed
[  294.215183][ T7114] FAT-fs (loop6): Directory bread(block 68) failed
[  294.308523][ T7114] FAT-fs (loop6): Directory bread(block 69) failed
[  294.368457][ T7114] FAT-fs (loop6): Directory bread(block 70) failed
[  294.416678][ T7114] FAT-fs (loop6): Directory bread(block 71) failed
[  294.441018][ T7114] FAT-fs (loop6): Directory bread(block 72) failed
[  294.544822][ T7114] FAT-fs (loop6): Directory bread(block 73) failed
[  294.678398][ T7133] loop9: detected capacity change from 0 to 256
[  295.355246][ T7119] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c128, mo2=0003]
[  295.523924][ T7119] System zones: 0-7
[  295.747236][ T7133] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  295.886386][ T7119] EXT4-fs (loop7): mounted filesystem without journal. Opts: debug,lazytime,inode_readahead_blks=0x0000000000000000,delalloc,norecovery,min_batch_time=0x000000000000000b,errors=remount-ro,. Quota mode: none.
[  296.740317][ T7130] loop8: detected capacity change from 0 to 8192
[  298.836688][ T7155] loop7: detected capacity change from 0 to 256
[  298.913734][ T7157] 9pnet: Insufficient options for proto=fd
[  298.999526][ T7155] exfat: Deprecated parameter 'utf8'
[  299.004933][ T7155] exfat: Deprecated parameter 'utf8'
[  299.010430][ T7155] exfat: Deprecated parameter 'utf8'
[  299.036170][ T7155] exFAT-fs (loop7): failed to load upcase table (idx : 0x00011f3f, chksum : 0x66b62981, utbl_chksum : 0xe619d30d)
[  299.080220][ T7155] exFAT-fs (loop7): error, exfat_zeroed_cluster: out of range(sect:224 len:8)
[  299.089237][ T7155] exFAT-fs (loop7): Filesystem has been set read-only
[  300.300040][ T6610] FAT-fs (loop8): error, invalid access to FAT (entry 0x0000e1b1)
[  300.309513][ T6610] FAT-fs (loop8): Filesystem has been set read-only
[  300.415051][ T7164] loop9: detected capacity change from 0 to 512
[  300.512123][ T7168] loop7: detected capacity change from 0 to 256
[  300.552493][ T7168] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  300.554331][ T7164] EXT4-fs (loop9): Ignoring removed bh option
[  300.563225][ T7168] exFAT-fs (loop7): Medium has reported failures. Some data may be lost.
[  300.605204][ T7168] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  300.700446][ T7164] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem
[  300.810442][ T7164] EXT4-fs (loop9): 1 truncate cleaned up
[  300.818558][ T7164] EXT4-fs (loop9): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
[  300.993333][ T7173] loop7: detected capacity change from 0 to 7
[  301.046587][    C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  301.057754][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  301.097942][    C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  301.108894][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  301.128884][    C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  301.139867][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  301.219452][    C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  301.230475][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  301.334445][    C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  301.345448][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  301.566837][ T7178] overlayfs: upper fs needs to support d_type.
[  302.298217][    C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  302.309168][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  302.329919][    C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  302.340918][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  302.348972][ T4336] ldm_validate_partition_table(): Disk read failed.
[  302.431892][    C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  302.442889][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  302.478639][    C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  302.489753][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  302.498539][    C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  302.509506][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  302.518117][ T4336] Dev loop7: unable to read RDB block 0
[  302.547161][ T6647] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0)
[  302.563221][ T4336]  loop7: unable to read partition table
[  302.588672][ T4336] loop7: partition table beyond EOD, truncated
[  302.605548][ T7173] ldm_validate_partition_table(): Disk read failed.
[  302.623296][ T7173] Dev loop7: unable to read RDB block 0
[  302.634362][ T6647] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1)
[  302.679473][ T7173]  loop7: unable to read partition table
[  302.685342][ T7173] loop7: partition table beyond EOD, truncated
[  302.706827][ T7163] loop6: detected capacity change from 0 to 40427
[  302.718491][ T7173] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õÖ�˜Èµ4FLQkÝŠ5) failed (rc=-5)
[  302.747416][ T6647] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2)
[  302.847252][ T7163] F2FS-fs (loop6): build fault injection attr: rate: 771, type: 0x1ffff
[  302.929127][ T7163] F2FS-fs (loop6): invalid crc value
[  303.056047][ T7163] F2FS-fs (loop6): Found nat_bits in checkpoint
[  303.087885][ T7189] loop7: detected capacity change from 0 to 2048
[  303.303296][ T7189] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c128, mo2=0003]
[  303.351384][ T7189] System zones: 0-7
[  303.357395][ T7189] EXT4-fs (loop7): mounted filesystem without journal. Opts: debug,lazytime,inode_readahead_blks=0x0000000000000000,delalloc,norecovery,min_batch_time=0x000000000000000b,errors=remount-ro,. Quota mode: none.
[  303.412139][ T7204] loop9: detected capacity change from 0 to 16
[  303.453909][ T7204] erofs: (device loop9): mounted with root inode @ nid 36.
[  303.514830][ T7203] attempt to access beyond end of device
[  303.514830][ T7203] loop9: rw=524288, want=32, limit=16
[  303.615948][ T7203] erofs: (device loop9): z_erofs_lz4_decompress: failed to decompress -23 in[46, 4050] out[4096]
[  303.837247][   T26] audit: type=1800 audit(2000000166.250:13): pid=7203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.592" name="file2" dev="loop9" ino=89 res=0 errno=0
[  304.606394][ T7219] 9pnet: Insufficient options for proto=fd
[  305.228680][ T4229] Bluetooth: hci0: command 0x0409 tx timeout
[  305.383689][ T7170] EXT4-fs error (device loop7): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap
[  305.515719][ T7170] EXT4-fs (loop7): Remounting filesystem read-only
[  305.534280][ T7223] loop9: detected capacity change from 0 to 256
[  305.613061][ T7223] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  305.624734][ T7223] exFAT-fs (loop9): Medium has reported failures. Some data may be lost.
[  305.644001][ T7223] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  305.685951][ T7195] chnl_net:caif_netlink_parms(): no params data found
[  305.766548][ T7222] netlink: 8 bytes leftover after parsing attributes in process `syz.5.597'.
[  306.107992][ T7189] netlink: 20 bytes leftover after parsing attributes in process `syz.7.590'.
[  307.034781][ T7195] bridge0: port 1(bridge_slave_0) entered blocking state
[  307.090232][ T7195] bridge0: port 1(bridge_slave_0) entered disabled state
[  307.140213][ T7195] device bridge_slave_0 entered promiscuous mode
[  307.196002][ T7195] bridge0: port 2(bridge_slave_1) entered blocking state
[  307.227733][ T7195] bridge0: port 2(bridge_slave_1) entered disabled state
[  307.276550][ T7195] device bridge_slave_1 entered promiscuous mode
[  307.289042][ T4231] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  307.308896][ T4234] Bluetooth: hci0: command 0x041b tx timeout
[  307.424701][ T7195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  307.531641][ T7195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  307.678816][ T4231] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  307.698730][ T7195] team0: Port device team_slave_0 added
[  307.715651][ T4231] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  307.744375][ T7195] team0: Port device team_slave_1 added
[  307.908673][ T7195] batman_adv: batadv0: Adding interface: batadv_slave_0
[  307.921870][ T7195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  307.948630][ T4231] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  307.957707][ T4231] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  308.005057][ T4231] usb 7-1: Product: syz
[  308.034462][ T7195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  308.038405][ T4231] usb 7-1: Manufacturer: syz
[  308.074122][ T4231] usb 7-1: SerialNumber: syz
[  308.076592][ T7195] batman_adv: batadv0: Adding interface: batadv_slave_1
[  308.096602][ T7195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  308.179753][ T4231] cdc_mbim 7-1:1.0: skipping garbage
[  308.205539][ T7195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  308.384704][ T7245] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  308.409364][ T7195] device hsr_slave_0 entered promiscuous mode
[  308.456918][ T7195] device hsr_slave_1 entered promiscuous mode
[  308.507298][ T7195] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  308.557939][ T7195] Cannot create hsr debugfs directory
[  308.786510][ T7263] loop5: detected capacity change from 0 to 1024
[  308.843779][ T7263] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option
[  308.906742][ T7251] loop7: detected capacity change from 0 to 40427
[  308.971092][ T7263] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none.
[  309.040538][ T7251] F2FS-fs (loop7): build fault injection attr: rate: 771, type: 0x1ffff
[  309.054223][ T7245] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  309.070781][ T7251] F2FS-fs (loop7): invalid crc value
[  309.078782][ T4231] cdc_mbim 7-1:1.0: setting tx_max = 16384
[  309.120414][ T4231] cdc_mbim 7-1:1.0: cdc-wdm0: USB WDM device
[  309.212926][ T7251] F2FS-fs (loop7): Found nat_bits in checkpoint
[  309.388812][ T4190] Bluetooth: hci0: command 0x040f tx timeout
[  309.405653][ T7251] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  309.518522][ T7251] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  309.647862][ T4231] cdc_mbim 7-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.6-1, CDC MBIM, 1a:7b:df:89:44:c8
[  309.658928][ T7282] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  309.684556][ T4231] usb 7-1: USB disconnect, device number 3
[  309.690905][ T7278] overlayfs: missing 'lowerdir'
[  309.739689][ T4231] cdc_mbim 7-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.6-1, CDC MBIM
[  309.806002][ T4352] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  310.233311][ T4352] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  310.405808][ T4352] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  310.612471][ T4352] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  310.628118][ T7297] loop7: detected capacity change from 0 to 512
[  310.731490][ T7297] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #15: comm syz.7.603: inode has both inline data and extents flags
[  310.818627][ T7297] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.603: couldn't read orphan inode 15 (err -117)
[  310.928715][ T7297] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  311.084401][ T7195] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  311.164605][ T7195] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  311.189599][ T7195] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  311.257276][ T7304] 9pnet: Insufficient options for proto=fd
[  311.380158][ T7195] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  311.468587][ T4234] Bluetooth: hci0: command 0x0419 tx timeout
[  312.232537][ T7195] 8021q: adding VLAN 0 to HW filter on device bond0
[  312.334303][ T7195] 8021q: adding VLAN 0 to HW filter on device team0
[  312.373215][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  312.573087][ T7310] loop6: detected capacity change from 0 to 256
[  312.609581][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  313.643767][ T7310] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  313.654523][ T7310] exFAT-fs (loop6): Medium has reported failures. Some data may be lost.
[  313.699053][ T7310] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  314.580082][ T7322] loop9: detected capacity change from 0 to 256
[  315.062997][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  315.075414][ T7322] exfat: Deprecated parameter 'utf8'
[  315.080792][ T7322] exfat: Deprecated parameter 'utf8'
[  315.086214][ T7322] exfat: Deprecated parameter 'utf8'
[  315.121419][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  315.127429][ T7322] exFAT-fs (loop9): failed to load upcase table (idx : 0x00011f3f, chksum : 0x66b62981, utbl_chksum : 0xe619d30d)
[  315.165659][  T145] bridge0: port 1(bridge_slave_0) entered blocking state
[  315.172108][ T7321] exFAT-fs (loop9): error, exfat_zeroed_cluster: out of range(sect:224 len:8)
[  315.172809][  T145] bridge0: port 1(bridge_slave_0) entered forwarding state
[  315.245837][ T7321] exFAT-fs (loop9): Filesystem has been set read-only
[  315.302897][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  315.331685][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  315.369704][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  315.407239][ T7329] loop7: detected capacity change from 0 to 256
[  315.415533][  T145] bridge0: port 2(bridge_slave_1) entered blocking state
[  315.422672][  T145] bridge0: port 2(bridge_slave_1) entered forwarding state
[  315.423299][ T7330] loop5: detected capacity change from 0 to 256
[  315.528546][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  315.609031][ T7330] exfat: Deprecated parameter 'utf8'
[  315.614390][ T7330] exfat: Deprecated parameter 'utf8'
[  315.619896][ T7330] exfat: Deprecated parameter 'utf8'
[  315.748533][ T4228] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  315.940707][ T7330] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011f3f, chksum : 0x66b62981, utbl_chksum : 0xe619d30d)
[  315.972254][ T7330] exFAT-fs (loop5): error, exfat_zeroed_cluster: out of range(sect:224 len:8)
[  315.981264][ T7330] exFAT-fs (loop5): Filesystem has been set read-only
[  316.025058][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  316.048555][ T4228] usb 8-1: Using ep0 maxpacket: 16
[  316.065283][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  316.151183][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  316.188505][ T4228] usb 8-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  316.210621][ T4228] usb 8-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  316.221560][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  316.249531][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  316.267911][ T4228] usb 8-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  316.311815][ T7195] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  316.328467][ T4228] usb 8-1: config 0 interface 0 has no altsetting 0
[  316.342865][ T4228] usb 8-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  316.354993][ T7195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  316.372307][ T4228] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  316.702405][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  316.720764][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  316.736037][ T7335] loop9: detected capacity change from 0 to 8192
[  316.781888][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  316.833246][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  316.879740][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  316.930794][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  316.966656][ T4228] usb 8-1: config 0 descriptor??
[  316.980583][ T7335]  loop9: p1 p2 p3 p4
[  316.986928][ T7335] loop9: partition table partially beyond EOD, truncated
[  317.077282][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  317.083667][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  317.122102][ T7335] loop9: p3 start 117772289 is beyond EOD, truncated
[  317.132251][ T7335] loop9: p4 size 262144 extends beyond EOD, truncated
[  317.302619][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  317.333031][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  317.494303][ T7195] 8021q: adding VLAN 0 to HW filter on device batadv0
[  317.592485][ T4228] hid (null): unknown global tag 0xd
[  318.415787][ T4332] udevd[4332]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory
[  318.434264][ T4336] udevd[4336]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory
[  318.444631][ T4228] hid (null): unknown global tag 0xe
[  318.453142][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory
[  318.459722][ T4228] usb 8-1: USB disconnect, device number 3
[  318.528384][ T4336] udevd[4336]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory
[  318.541892][ T4332] udevd[4332]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory
[  318.562820][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory
[  318.626963][ T4352] device hsr_slave_0 left promiscuous mode
[  318.643003][ T4352] device hsr_slave_1 left promiscuous mode
[  318.661056][ T4352] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  318.689081][ T4352] batman_adv: batadv0: Removing interface: batadv_slave_0
[  318.697209][ T4352] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  318.723522][ T4352] batman_adv: batadv0: Removing interface: batadv_slave_1
[  318.739448][ T4352] device bridge_slave_1 left promiscuous mode
[  318.746846][ T4352] bridge0: port 2(bridge_slave_1) entered disabled state
[  318.762852][ T4352] device bridge_slave_0 left promiscuous mode
[  318.773338][ T4352] bridge0: port 1(bridge_slave_0) entered disabled state
[  318.792603][ T4352] device veth1_macvtap left promiscuous mode
[  318.811865][ T4352] device veth0_macvtap left promiscuous mode
[  318.817996][ T4352] device veth1_vlan left promiscuous mode
[  318.852529][ T4352] device veth0_vlan left promiscuous mode
[  320.264492][ T7373] loop7: detected capacity change from 0 to 256
[  320.289021][ T7373] exfat: Deprecated parameter 'utf8'
[  320.294433][ T7373] exfat: Deprecated parameter 'utf8'
[  320.299921][ T7373] exfat: Deprecated parameter 'utf8'
[  320.342278][ T7374] loop6: detected capacity change from 0 to 256
[  320.359939][ T7373] exFAT-fs (loop7): failed to load upcase table (idx : 0x00011f3f, chksum : 0x66b62981, utbl_chksum : 0xe619d30d)
[  320.373212][ T7374] exfat: Deprecated parameter 'utf8'
[  320.375785][ T4352] team0 (unregistering): Port device team_slave_1 removed
[  320.378644][ T7374] exfat: Deprecated parameter 'utf8'
[  320.391426][ T7374] exfat: Deprecated parameter 'utf8'
[  320.417428][ T4352] team0 (unregistering): Port device team_slave_0 removed
[  320.425413][ T7373] exFAT-fs (loop7): error, exfat_zeroed_cluster: out of range(sect:224 len:8)
[  320.434478][ T7373] exFAT-fs (loop7): Filesystem has been set read-only
[  320.506966][ T4352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  320.626759][ T4352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  320.635950][ T7374] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011f3f, chksum : 0x66b62981, utbl_chksum : 0xe619d30d)
[  320.855781][ T7374] exFAT-fs (loop6): error, exfat_zeroed_cluster: out of range(sect:224 len:8)
[  320.864762][ T7374] exFAT-fs (loop6): Filesystem has been set read-only
[  321.417771][ T4352] bond0 (unregistering): Released all slaves
[  321.639533][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  321.654786][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  321.814598][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  321.867707][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  321.893549][ T7195] device veth0_vlan entered promiscuous mode
[  321.910147][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  321.929068][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  321.989751][ T7195] device veth1_vlan entered promiscuous mode
[  322.071634][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  322.089025][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  322.119723][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  322.149397][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  322.207096][ T7195] device veth0_macvtap entered promiscuous mode
[  322.234700][ T7382] loop7: detected capacity change from 0 to 1024
[  322.367292][ T7382] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  322.382776][ T7195] device veth1_macvtap entered promiscuous mode
[  322.571505][ T7195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  322.616645][ T7195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  322.825038][ T7195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  322.945938][ T7195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  323.080666][ T7195] batman_adv: batadv0: Interface activated: batadv_slave_0
[  323.238881][ T7195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  323.334581][ T7195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  323.496844][ T7195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  323.528038][ T7195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  323.560583][ T7195] batman_adv: batadv0: Interface activated: batadv_slave_1
[  323.633781][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  323.649518][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  323.657689][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  323.728129][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  323.757931][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  323.785612][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  324.460026][ T7195] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  324.478422][ T7195] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  324.487155][ T7195] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  324.535244][ T7195] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  324.560534][ T7399] bridge0: port 3(syz_tun) entered blocking state
[  324.567216][ T7399] bridge0: port 3(syz_tun) entered disabled state
[  324.575823][ T7399] device syz_tun entered promiscuous mode
[  324.824886][ T7415] loop6: detected capacity change from 0 to 256
[  324.869013][ T7415] exfat: Deprecated parameter 'utf8'
[  324.874412][ T7415] exfat: Deprecated parameter 'utf8'
[  324.879887][ T7415] exfat: Deprecated parameter 'utf8'
[  324.893416][ T7418] loop5: detected capacity change from 0 to 256
[  324.929918][ T7415] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011f3f, chksum : 0x66b62981, utbl_chksum : 0xe619d30d)
[  324.946911][ T7413] exFAT-fs (loop6): error, exfat_zeroed_cluster: out of range(sect:224 len:8)
[  324.959065][ T7418] exfat: Deprecated parameter 'utf8'
[  324.964402][ T7418] exfat: Deprecated parameter 'utf8'
[  324.970314][ T7418] exfat: Deprecated parameter 'utf8'
[  324.986691][ T7413] exFAT-fs (loop6): Filesystem has been set read-only
[  325.068957][ T4394] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  325.088443][ T4394] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  325.161218][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  325.179508][ T4393] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  325.271115][ T4393] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  325.303261][ T7418] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011f3f, chksum : 0x66b62981, utbl_chksum : 0xe619d30d)
[  325.324967][ T7418] exFAT-fs (loop5): error, exfat_zeroed_cluster: out of range(sect:224 len:8)
[  325.334028][ T7418] exFAT-fs (loop5): Filesystem has been set read-only
[  325.850836][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  327.100812][ T7434] loop6: detected capacity change from 0 to 256
[  327.345397][ T7434] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  327.356253][ T7434] exFAT-fs (loop6): Medium has reported failures. Some data may be lost.
[  327.401337][ T7434] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  329.442332][ T7444] tipc: Started in network mode
[  329.482131][ T7444] tipc: Node identity f6653335695f, cluster identity 4711
[  329.522308][ T7444] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  329.529479][ T7446] device syzkaller0 entered promiscuous mode
[  329.600897][ T7449] loop5: detected capacity change from 0 to 2048
[  329.641528][ T7444] tipc: Resetting bearer <eth:syzkaller0>
[  329.674904][ T7443] tipc: Resetting bearer <eth:syzkaller0>
[  329.703723][ T7455] loop6: detected capacity change from 0 to 512
[  329.769190][ T7443] tipc: Disabling bearer <eth:syzkaller0>
[  329.829531][ T7449] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  329.912847][ T7449] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  329.947078][ T7455] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback.
[  330.038564][ T7455] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  330.444644][ T7475] loop6: detected capacity change from 0 to 256
[  330.472841][ T7477] loop2: detected capacity change from 0 to 256
[  330.503613][ T7479] loop7: detected capacity change from 0 to 256
[  330.559427][ T7477] exfat: Deprecated parameter 'utf8'
[  330.564829][ T7477] exfat: Deprecated parameter 'utf8'
[  330.570332][ T7477] exfat: Deprecated parameter 'utf8'
[  330.587988][ T7479] exfat: Deprecated parameter 'utf8'
[  330.593396][ T7479] exfat: Deprecated parameter 'utf8'
[  330.599444][ T7479] exfat: Deprecated parameter 'utf8'
[  330.621964][ T7479] exFAT-fs (loop7): failed to load upcase table (idx : 0x00011f3f, chksum : 0x66b62981, utbl_chksum : 0xe619d30d)
[  330.639736][ T7479] exFAT-fs (loop7): error, exfat_zeroed_cluster: out of range(sect:224 len:8)
[  330.648770][ T7479] exFAT-fs (loop7): Filesystem has been set read-only
[  330.846747][ T7477] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f3f, chksum : 0x66b62981, utbl_chksum : 0xe619d30d)
[  330.872172][ T7477] exFAT-fs (loop2): error, exfat_zeroed_cluster: out of range(sect:224 len:8)
[  330.881172][ T7477] exFAT-fs (loop2): Filesystem has been set read-only
[  332.270030][ T7462] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set
[  334.042294][ T7514] loop6: detected capacity change from 0 to 256
[  334.181951][ T7514] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  334.516190][ T7506] chnl_net:caif_netlink_parms(): no params data found
[  334.588534][ T1108] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  334.848393][ T1108] usb 6-1: Using ep0 maxpacket: 16
[  334.882087][ T7506] bridge0: port 1(bridge_slave_0) entered blocking state
[  334.950005][ T7506] bridge0: port 1(bridge_slave_0) entered disabled state
[  334.968630][ T1108] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  334.972132][ T7506] device bridge_slave_0 entered promiscuous mode
[  335.003061][ T7505] loop7: detected capacity change from 0 to 40427
[  335.004619][ T1108] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  335.033793][ T7506] bridge0: port 2(bridge_slave_1) entered blocking state
[  335.057245][ T7506] bridge0: port 2(bridge_slave_1) entered disabled state
[  335.081315][ T7506] device bridge_slave_1 entered promiscuous mode
[  335.096082][ T1108] usb 6-1: config 0 interface 0 has no altsetting 0
[  335.145693][ T1108] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  335.175919][ T7505] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[  335.199813][ T7505] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  335.207779][ T1108] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  335.209521][ T7506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  335.267607][ T1108] usb 6-1: config 0 descriptor??
[  335.272812][ T7505] F2FS-fs (loop7): invalid crc value
[  335.313808][ T7506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  335.346684][ T7505] F2FS-fs (loop7): Found nat_bits in checkpoint
[  335.388464][ T4229] Bluetooth: hci5: command 0x0409 tx timeout
[  335.491032][ T7506] team0: Port device team_slave_0 added
[  335.524613][ T7506] team0: Port device team_slave_1 added
[  335.588813][ T7505] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  335.612706][ T7505] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  335.670154][ T7506] batman_adv: batadv0: Adding interface: batadv_slave_0
[  335.707876][ T7506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  335.822239][ T7506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  335.906653][ T7506] batman_adv: batadv0: Adding interface: batadv_slave_1
[  335.968451][ T7506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  336.001457][ T1108] usb 6-1: USB disconnect, device number 10
[  336.064746][ T7506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  336.271852][ T7506] device hsr_slave_0 entered promiscuous mode
[  336.305493][ T7506] device hsr_slave_1 entered promiscuous mode
[  336.972807][ T7568] loop5: detected capacity change from 0 to 128
[  337.468570][ T4229] Bluetooth: hci5: command 0x041b tx timeout
[  337.676592][ T7572] loop2: detected capacity change from 0 to 256
[  337.760954][ T7572] exfat: Deprecated parameter 'utf8'
[  337.776519][ T7572] exfat: Deprecated parameter 'utf8'
[  337.826804][ T7568] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  337.837623][ T7568] ext4 filesystem being mounted at /100/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  337.874083][ T7561] netlink: 20 bytes leftover after parsing attributes in process `syz.5.659'.
[  337.960534][ T7572] exfat: Deprecated parameter 'utf8'
[  338.067415][ T7581] Bluetooth: received HCILL_WAKE_UP_ACK in state 2
[  338.081580][ T7581] loop7: detected capacity change from 0 to 16
[  338.290488][ T4350] Bluetooth: hci3: Frame reassembly failed (-84)
[  338.323488][ T4350] Bluetooth: hci3: Frame reassembly failed (-84)
[  338.340344][ T7572] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f3f, chksum : 0x66b62981, utbl_chksum : 0xe619d30d)
[  338.753457][ T7563] exFAT-fs (loop2): error, exfat_zeroed_cluster: out of range(sect:224 len:8)
[  338.804564][ T7563] exFAT-fs (loop2): Filesystem has been set read-only
[  338.816339][ T7581] erofs: (device loop7): mounted with root inode @ nid 36.
[  339.455315][ T4352] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  339.548561][ T4234] Bluetooth: hci5: command 0x040f tx timeout
[  340.249784][ T4234] Bluetooth: hci3: command 0x1003 tx timeout
[  340.256813][ T4202] Bluetooth: hci3: sending frame failed (-49)
[  340.493378][ T4352] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  340.729638][ T7603] loop6: detected capacity change from 0 to 256
[  340.775327][ T7605] loop5: detected capacity change from 0 to 512
[  340.801082][ T7603] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  340.811826][ T7603] exFAT-fs (loop6): Medium has reported failures. Some data may be lost.
[  340.835321][ T7603] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  340.850477][ T4352] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  341.001173][ T7605] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback.
[  341.024785][ T7605] ext4 filesystem being mounted at /102/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  341.047268][ T4352] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  341.425064][ T7506] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  341.514559][ T7506] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  341.628435][ T1108] Bluetooth: hci5: command 0x0419 tx timeout
[  342.490989][ T7506] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  342.507207][ T1108] Bluetooth: hci3: command 0x1001 tx timeout
[  342.524578][ T4202] Bluetooth: hci3: sending frame failed (-49)
[  342.535994][ T7506] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  342.771232][ T7506] 8021q: adding VLAN 0 to HW filter on device bond0
[  342.834898][ T7639] loop2: detected capacity change from 0 to 2048
[  342.851824][   T26] audit: type=1326 audit(2000000205.270:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7633 comm="syz.5.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa03c553517 code=0x7ffc0000
[  342.886240][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  342.915227][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  342.931867][ T7639] EXT4-fs (loop2): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,init_itable=0x0000000000000002,inode_readahead_blks=0x0000000000000000,inode_readahead_blks=0x0000000000000001,norecovery,min_batch_time=0x000000000000000b,block_validity,,errors=continue. Quota mode: none.
[  342.953176][   T26] audit: type=1326 audit(2000000205.270:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7633 comm="syz.5.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa03c4fab19 code=0x7ffc0000
[  342.962574][ T7506] 8021q: adding VLAN 0 to HW filter on device team0
[  342.993817][   T26] audit: type=1326 audit(2000000205.270:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7633 comm="syz.5.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa03c559799 code=0x7ffc0000
[  343.118080][   T26] audit: type=1326 audit(2000000205.270:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7633 comm="syz.5.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa03c559799 code=0x7ffc0000
[  343.155690][ T7648] loop6: detected capacity change from 0 to 256
[  343.171820][   T26] audit: type=1326 audit(2000000205.270:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7633 comm="syz.5.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa03c553517 code=0x7ffc0000
[  343.204751][ T7648] exfat: Deprecated parameter 'utf8'
[  343.210433][ T7648] exfat: Deprecated parameter 'utf8'
[  343.215836][ T7648] exfat: Deprecated parameter 'utf8'
[  343.225241][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  343.239012][ T7648] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011f3f, chksum : 0x66b62981, utbl_chksum : 0xe619d30d)
[  343.249612][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  343.364997][ T7646] exFAT-fs (loop6): error, exfat_zeroed_cluster: out of range(sect:224 len:8)
[  343.552699][   T26] audit: type=1326 audit(2000000205.270:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7633 comm="syz.5.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa03c4fab19 code=0x7ffc0000
[  343.575233][   T26] audit: type=1326 audit(2000000205.270:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7633 comm="syz.5.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa03c559799 code=0x7ffc0000
[  343.597646][ T7646] exFAT-fs (loop6): Filesystem has been set read-only
[  344.038656][  T145] bridge0: port 1(bridge_slave_0) entered blocking state
[  344.045807][  T145] bridge0: port 1(bridge_slave_0) entered forwarding state
[  344.220146][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  344.234007][   T26] audit: type=1326 audit(2000000205.270:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7633 comm="syz.5.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fa03c559799 code=0x7ffc0000
[  344.291660][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  344.369928][  T145] bridge0: port 2(bridge_slave_1) entered blocking state
[  344.377128][  T145] bridge0: port 2(bridge_slave_1) entered forwarding state
[  344.385673][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  344.415414][ T7506] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  344.427378][ T7506] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  344.578833][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  344.593496][ T4736] Bluetooth: hci3: command 0x1009 tx timeout
[  344.615355][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  344.638635][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  344.642562][ T7665] loop5: detected capacity change from 0 to 256
[  344.703126][ T7665] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  344.713812][ T7665] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  344.716950][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  344.770161][ T7665] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  344.807889][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  344.817614][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  344.826466][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  344.842552][ T7679] loop6: detected capacity change from 0 to 256
[  344.844289][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  344.866798][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  344.890505][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  344.899946][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  344.907986][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  344.917169][ T7679] exfat: Deprecated parameter 'utf8'
[  344.922532][ T7679] exfat: Deprecated parameter 'utf8'
[  344.927916][ T7679] exfat: Deprecated parameter 'utf8'
[  344.951798][ T7679] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011f3f, chksum : 0x66b62981, utbl_chksum : 0xe619d30d)
[  344.968952][ T7679] exFAT-fs (loop6): error, exfat_zeroed_cluster: out of range(sect:224 len:8)
[  344.977856][ T7679] exFAT-fs (loop6): Filesystem has been set read-only
[  345.165066][ T7686] tipc: Started in network mode
[  345.170128][ T7686] tipc: Node identity a6a7839fd41b, cluster identity 4711
[  345.208828][ T7686] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  345.449022][ T7680] tipc: Disabling bearer <eth:syzkaller0>
[  345.668955][ T7695] loop5: detected capacity change from 0 to 2048
[  345.836590][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  345.841196][ T7699] loop2: detected capacity change from 0 to 1024
[  345.854492][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  345.886692][ T7695] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  345.904552][ T7695] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  345.945267][ T7699] EXT4-fs (loop2): Test dummy encryption mode enabled
[  346.005593][ T7506] 8021q: adding VLAN 0 to HW filter on device batadv0
[  346.012982][ T7699] EXT4-fs (loop2): inline encryption not supported
[  346.049047][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  346.062151][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  346.099073][ T7699] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,lazytime,abort,auto_da_alloc,noauto_da_alloc,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback.
[  346.160288][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  346.189429][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  346.241578][ T7506] device veth0_vlan entered promiscuous mode
[  346.377619][ T7717] loop6: detected capacity change from 0 to 2048
[  346.411695][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  346.439510][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  346.477271][ T7506] device veth1_vlan entered promiscuous mode
[  347.383663][ T7717] EXT4-fs (loop6): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,init_itable=0x0000000000000002,inode_readahead_blks=0x0000000000000000,inode_readahead_blks=0x0000000000000001,norecovery,min_batch_time=0x000000000000000b,block_validity,,errors=continue. Quota mode: none.
[  347.599198][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  347.629988][   T26] audit: type=1800 audit(2000000210.030:22): pid=7725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.680" name="file0" dev="loop5" ino=13 res=0 errno=0
[  347.652421][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  347.663481][ T7695] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.680: bg 0: block 345: padding at end of block bitmap is not set
[  347.695267][ T7506] device veth0_macvtap entered promiscuous mode
[  347.737367][ T7695] fs-verity (loop5, inode 13): ext4_end_enable_verity() failed with err -117
[  347.752722][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  347.853232][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  348.051268][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  348.370848][ T7737] loop2: detected capacity change from 0 to 256
[  348.389860][ T7506] device veth1_macvtap entered promiscuous mode
[  348.424355][ T7506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  348.434129][ T7737] exfat: Deprecated parameter 'utf8'
[  348.440167][ T7737] exfat: Deprecated parameter 'utf8'
[  348.445568][ T7737] exfat: Deprecated parameter 'utf8'
[  348.532662][ T7506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  348.545039][ T7741] loop6: detected capacity change from 0 to 256
[  348.563341][ T7506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  348.584561][ T7506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  348.605685][ T7737] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f3f, chksum : 0x66b62981, utbl_chksum : 0xe619d30d)
[  348.635943][ T7737] exFAT-fs (loop2): error, exfat_zeroed_cluster: out of range(sect:224 len:8)
[  348.645070][ T7737] exFAT-fs (loop2): Filesystem has been set read-only
[  348.792145][ T7506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  348.807140][ T7742] loop5: detected capacity change from 0 to 256
[  349.755886][ T7506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  349.773679][ T7506] batman_adv: batadv0: Interface activated: batadv_slave_0
[  349.786818][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  349.849023][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  349.850323][ T7742] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  349.867788][ T7742] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  349.875032][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  349.892722][ T7742] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  349.899322][ T7755] loop6: detected capacity change from 0 to 256
[  350.011037][ T7506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  350.025696][ T7506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  350.036022][ T7506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  350.046554][ T7506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  350.060468][ T7506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  350.079428][ T7506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  350.096626][ T7506] batman_adv: batadv0: Interface activated: batadv_slave_1
[  350.126215][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  350.148399][ T1108] usb 8-1: new full-speed USB device number 4 using dummy_hcd
[  350.165197][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  350.282038][ T7506] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  350.306935][ T7506] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  350.329697][ T7763] loop2: detected capacity change from 0 to 256
[  350.376791][ T7506] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  350.407239][ T7506] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  350.460469][ T7763] exfat: Deprecated parameter 'utf8'
[  350.465837][ T7763] exfat: Deprecated parameter 'utf8'
[  350.471364][ T7763] exfat: Deprecated parameter 'utf8'
[  350.505436][ T7763] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f3f, chksum : 0x66b62981, utbl_chksum : 0xe619d30d)
[  350.524504][ T7761] exFAT-fs (loop2): error, exfat_zeroed_cluster: out of range(sect:224 len:8)
[  350.543904][ T7761] exFAT-fs (loop2): Filesystem has been set read-only
[  350.739995][ T1108] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  350.812816][ T1108] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  350.822829][ T1108] usb 8-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  350.833076][ T1108] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  350.851645][ T1108] usb 8-1: config 0 descriptor??
[  351.341045][ T1108] elan 0003:04F3:0755.000A: unknown main item tag 0x0
[  351.368644][ T1108] elan 0003:04F3:0755.000A: unknown main item tag 0x0
[  351.384010][ T1108] elan 0003:04F3:0755.000A: unknown main item tag 0x0
[  351.391674][ T4352] device hsr_slave_0 left promiscuous mode
[  351.412770][ T1108] elan 0003:04F3:0755.000A: unknown main item tag 0x0
[  351.420472][ T4352] device hsr_slave_1 left promiscuous mode
[  351.441376][ T1108] elan 0003:04F3:0755.000A: unknown main item tag 0x0
[  351.463571][ T1108] elan 0003:04F3:0755.000A: failed to start in urb: -90
[  351.476311][ T4352] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  351.482712][ T1108] elan 0003:04F3:0755.000A: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.7-1/input0
[  351.495304][ T4352] batman_adv: batadv0: Removing interface: batadv_slave_0
[  351.560338][ T4352] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  351.578811][ T4352] batman_adv: batadv0: Removing interface: batadv_slave_1
[  351.599964][ T4234] usb 8-1: USB disconnect, device number 4
[  351.618947][ T4352] device bridge_slave_1 left promiscuous mode
[  351.625287][ T4352] bridge0: port 2(bridge_slave_1) entered disabled state
[  351.677356][ T4352] device bridge_slave_0 left promiscuous mode
[  351.699623][ T4352] bridge0: port 1(bridge_slave_0) entered disabled state
[  351.726394][ T7781] fido_id[7781]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory
[  351.763598][ T4352] device veth1_macvtap left promiscuous mode
[  351.783548][ T4352] device veth0_macvtap left promiscuous mode
[  351.797465][ T4352] device veth1_vlan left promiscuous mode
[  351.843386][ T4352] device veth0_vlan left promiscuous mode
[  352.294296][ T7796] loop6: detected capacity change from 0 to 2048
[  352.314783][ T7797] loop7: detected capacity change from 0 to 2048
[  352.379576][ T7796] EXT4-fs (loop6): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,init_itable=0x0000000000000002,inode_readahead_blks=0x0000000000000000,inode_readahead_blks=0x0000000000000001,norecovery,min_batch_time=0x000000000000000b,block_validity,,errors=continue. Quota mode: none.
[  352.540105][ T7797] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  352.576592][ T7797] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  353.053908][ T4352] team0 (unregistering): Port device team_slave_1 removed
[  353.140882][ T4352] team0 (unregistering): Port device team_slave_0 removed
[  353.221215][ T4352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  353.304845][ T4352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  353.502108][   T26] audit: type=1800 audit(2000000215.920:23): pid=7820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.699" name="file0" dev="loop7" ino=13 res=0 errno=0
[  353.532897][ T7797] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.699: bg 0: block 345: padding at end of block bitmap is not set
[  353.582130][ T7797] fs-verity (loop7, inode 13): ext4_end_enable_verity() failed with err -117
[  353.628268][ T4352] bond0 (unregistering): Released all slaves
[  353.842387][ T7824] loop6: detected capacity change from 0 to 256
[  353.882850][ T4393] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  353.897190][ T7824] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  353.908197][ T7824] exFAT-fs (loop6): Medium has reported failures. Some data may be lost.
[  353.953487][ T7824] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  353.963641][ T4393] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  354.011964][ T7785] netlink: 'syz.2.696': attribute type 10 has an invalid length.
[  354.105602][ T7785] 8021q: adding VLAN 0 to HW filter on device batadv0
[  354.152766][ T7785] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  354.170644][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  354.314599][ T7841] loop7: detected capacity change from 0 to 256
[  354.395949][ T4301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  354.418872][ T4301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  354.468128][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  354.733874][ T7856] loop7: detected capacity change from 0 to 256
[  354.825613][ T7853] loop5: detected capacity change from 0 to 2048
[  355.168486][ T1108] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  355.478418][ T1108] usb 1-1: Using ep0 maxpacket: 16
[  355.503056][ T7853] EXT4-fs (loop5): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,init_itable=0x0000000000000002,inode_readahead_blks=0x0000000000000000,inode_readahead_blks=0x0000000000000001,norecovery,min_batch_time=0x000000000000000b,block_validity,,errors=continue. Quota mode: none.
[  355.629117][ T1108] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  355.708169][ T1108] usb 1-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  355.838009][ T1108] usb 1-1: config 0 interface 0 has no altsetting 0
[  355.875689][ T1108] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  356.448987][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  356.460017][ T1108] usb 1-1: config 0 descriptor??
[  356.549640][ T1108] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  356.831054][ T7891] loop2: detected capacity change from 0 to 256
[  356.869964][ T7891] exfat: Deprecated parameter 'utf8'
[  356.875310][ T7891] exfat: Deprecated parameter 'utf8'
[  356.880861][ T7891] exfat: Deprecated parameter 'utf8'
[  356.902244][ T7891] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f3f, chksum : 0x66b62981, utbl_chksum : 0xe619d30d)
[  356.923878][ T7891] exFAT-fs (loop2): error, exfat_zeroed_cluster: out of range(sect:224 len:8)
[  356.932899][ T7891] exFAT-fs (loop2): Filesystem has been set read-only
[  357.083521][ T7900] syz.6.719 uses obsolete (PF_INET,SOCK_PACKET)
[  358.037305][ T4190] usb 1-1: USB disconnect, device number 5
[  359.120794][ T7920] netlink: 156 bytes leftover after parsing attributes in process `syz.6.723'.
[  359.174262][ T7920] netlink: 'syz.6.723': attribute type 3 has an invalid length.
[  359.212829][ T7920] netlink: 16 bytes leftover after parsing attributes in process `syz.6.723'.
[  359.368542][ T4190] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  359.371019][ T7906] loop0: detected capacity change from 0 to 256
[  359.446989][ T7906] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  359.502046][ T7906] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  359.560525][ T7906] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  359.758524][ T4190] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  359.852458][ T7932] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0
[  359.861444][ T7932] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0
[  359.870480][ T7932] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0
[  359.879752][ T7932] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0
[  360.761496][ T1108] Bluetooth: hci4: command 0x0406 tx timeout
[  360.878528][ T4190] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  360.920227][ T4190] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  360.942015][ T4190] usb 3-1: Product: syz
[  360.948758][ T4190] usb 3-1: SerialNumber: syz
[  361.292925][ T7948] loop6: detected capacity change from 0 to 256
[  361.329071][ T7948] exfat: Deprecated parameter 'utf8'
[  361.334423][ T7948] exfat: Deprecated parameter 'utf8'
[  361.339982][ T7948] exfat: Deprecated parameter 'utf8'
[  361.353178][ T7948] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011f3f, chksum : 0x66b62981, utbl_chksum : 0xe619d30d)
[  361.370758][ T7948] exFAT-fs (loop6): error, exfat_zeroed_cluster: out of range(sect:224 len:8)
[  361.379717][ T7948] exFAT-fs (loop6): Filesystem has been set read-only
[  362.631293][ T4190] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS
[  362.651701][ T4190] cdc_ncm 3-1:1.0: bind() failure
[  362.671827][ T4190] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  362.679186][ T4190] cdc_ncm 3-1:1.1: bind() failure
[  362.727598][ T4190] usb 3-1: USB disconnect, device number 2
[  362.915060][ T7957] device syzkaller0 entered promiscuous mode
[  363.850806][ T7999] netlink: 'syz.7.745': attribute type 12 has an invalid length.
[  363.853279][ T7998] loop0: detected capacity change from 0 to 256
[  363.889068][ T7998] exfat: Deprecated parameter 'utf8'
[  363.894417][ T7998] exfat: Deprecated parameter 'utf8'
[  363.900021][ T7998] exfat: Deprecated parameter 'utf8'
[  364.106885][ T7998] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f3f, chksum : 0x66b62981, utbl_chksum : 0xe619d30d)
[  364.134553][ T7998] exFAT-fs (loop0): error, exfat_zeroed_cluster: out of range(sect:224 len:8)
[  364.143571][ T7998] exFAT-fs (loop0): Filesystem has been set read-only
[  365.692302][ T8008] loop0: detected capacity change from 0 to 256
[  365.719697][ T7987] loop6: detected capacity change from 0 to 256
[  365.783429][ T7987] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  365.807298][ T7987] exFAT-fs (loop6): Medium has reported failures. Some data may be lost.
[  366.012818][ T7987] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  366.142391][ T8025] loop0: detected capacity change from 0 to 256
[  368.190151][ T1108] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  368.508472][ T1108] usb 7-1: Using ep0 maxpacket: 16
[  368.629453][ T1108] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  369.089917][ T1108] usb 7-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  369.103826][ T1108] usb 7-1: config 0 interface 0 has no altsetting 0
[  369.117254][ T1108] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  369.137994][ T1108] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  369.241118][ T1108] usb 7-1: config 0 descriptor??
[  369.867799][ T1108] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[  370.909371][   T13] usb 7-1: USB disconnect, device number 4
[  375.891197][ T8100] syz.2.768 (8100): drop_caches: 2
[  377.018514][ T4190] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  377.870855][ T4190] usb 1-1: Using ep0 maxpacket: 16
[  377.988741][ T4190] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  378.420099][ T4190] usb 1-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  378.474244][ T8135] netlink: 12 bytes leftover after parsing attributes in process `syz.7.776'.
[  378.503789][ T4190] usb 1-1: config 0 interface 0 has no altsetting 0
[  378.514545][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  378.514630][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  378.564508][ T4190] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  378.604532][ T4190] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  378.615360][ T4190] usb 1-1: config 0 descriptor??
[  378.683077][ T4190] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  378.927931][ T8145] netlink: 12 bytes leftover after parsing attributes in process `syz.2.777'.
[  378.975810][   T13] usb 1-1: USB disconnect, device number 6
[  379.034968][ T8145] netlink: 12 bytes leftover after parsing attributes in process `syz.2.777'.
[  381.294608][ T8176] loop6: detected capacity change from 0 to 128
[  381.607482][ T8176] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  381.618668][ T8176] ext4 filesystem being mounted at /127/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  381.636604][ T8169] netlink: 20 bytes leftover after parsing attributes in process `syz.6.778'.
[  382.500471][ T4202] Bluetooth: hci4: hcon ffff88801d746000 sent 1 < count 65532
[  382.508664][ T4202] Bluetooth: hci4: hcon ffff88801d742000 sent 1 < count 16
[  385.188404][ T8241] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  385.743565][ T8247] loop0: detected capacity change from 0 to 128
[  386.075795][ T8247] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  386.086489][ T8247] ext4 filesystem being mounted at /12/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  386.110283][ T8245] netlink: 20 bytes leftover after parsing attributes in process `syz.0.801'.
[  388.041449][ T4190] kernel write not supported for file /comedi4 (pid: 4190 comm: kworker/1:4)
[  391.590794][ T8340] loop7: detected capacity change from 0 to 128
[  392.124139][ T8340] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  392.134952][ T8340] ext4 filesystem being mounted at /86/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  392.159436][ T8338] netlink: 20 bytes leftover after parsing attributes in process `syz.7.818'.
[  393.498587][ T4234] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  393.971440][   T21] Bluetooth: hci5: command 0x0406 tx timeout
[  394.458438][ T4234] usb 1-1: config index 0 descriptor too short (expected 23569, got 27)
[  394.466933][ T4234] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  394.544486][ T8384] loop5: detected capacity change from 0 to 2048
[  394.568593][ T4234] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  394.585129][ T4234] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  394.618879][ T4234] usb 1-1: Manufacturer: syz
[  394.629963][ T4234] usb 1-1: config 0 descriptor??
[  394.683681][ T8384] EXT4-fs (loop5): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,init_itable=0x0000000000000002,inode_readahead_blks=0x0000000000000000,inode_readahead_blks=0x0000000000000001,norecovery,min_batch_time=0x000000000000000b,block_validity,,errors=continue. Quota mode: none.
[  394.948781][ T4234] rc_core: IR keymap rc-hauppauge not found
[  394.954774][ T4234] Registered IR keymap rc-empty
[  394.979913][ T4234] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  395.222780][ T4234] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input6
[  395.468410][    C1] igorplugusb 1-1:0.0: Error: urb status = -32
[  395.929823][ T4736] usb 1-1: USB disconnect, device number 7
[  397.457810][ T8435] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  397.615139][ T4282] Bluetooth: hci3: Frame reassembly failed (-84)
[  399.628448][   T13] Bluetooth: hci3: command 0x1003 tx timeout
[  399.635005][ T4202] Bluetooth: hci3: sending frame failed (-49)
[  399.794326][ T8464] loop5: detected capacity change from 0 to 2048
[  399.909581][ T8464] EXT4-fs (loop5): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,init_itable=0x0000000000000002,inode_readahead_blks=0x0000000000000000,inode_readahead_blks=0x0000000000000001,norecovery,min_batch_time=0x000000000000000b,block_validity,,errors=continue. Quota mode: none.
[  400.748619][ T8471] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap
[  402.211500][ T4879] Bluetooth: hci3: command 0x1001 tx timeout
[  402.217633][ T4202] Bluetooth: hci3: sending frame failed (-49)
[  402.306786][ T8502] netlink: 8 bytes leftover after parsing attributes in process `syz.5.857'.
[  405.314797][   T13] Bluetooth: hci3: command 0x1009 tx timeout
[  405.537661][ T8520] loop5: detected capacity change from 0 to 2048
[  405.669397][ T8520] EXT4-fs (loop5): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,init_itable=0x0000000000000002,inode_readahead_blks=0x0000000000000000,inode_readahead_blks=0x0000000000000001,norecovery,min_batch_time=0x000000000000000b,block_validity,,errors=continue. Quota mode: none.
[  406.840939][ T8546] IPv6: ADDRCONF(NETDEV_CHANGE): rose0: link becomes ready
[  407.532228][ T8562] Bluetooth: received HCILL_WAKE_UP_ACK in state 2
[  407.548246][ T8562] loop7: detected capacity change from 0 to 16
[  408.394839][ T4303] Bluetooth: hci6: Frame reassembly failed (-84)
[  408.602318][ T8562] erofs: (device loop7): mounted with root inode @ nid 36.
[  408.703114][ T8568] loop2: detected capacity change from 0 to 16
[  409.339410][ T8572] overlayfs: missing 'lowerdir'
[  409.634498][ T8568] erofs: (device loop2): mounted with root inode @ nid 36.
[  409.644074][ T8568] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress 1929 in[58, 4038] out[2639]
[  409.658412][ T8568] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117]
[  410.450632][ T4229] Bluetooth: hci6: command 0x1003 tx timeout
[  410.457428][ T4188] Bluetooth: hci6: sending frame failed (-49)
[  411.345685][ T8594] loop5: detected capacity change from 0 to 2048
[  411.469597][ T8584] overlayfs: missing 'lowerdir'
[  411.486293][ T8584] netlink: 4 bytes leftover after parsing attributes in process `syz.6.872'.
[  411.499031][ T8584] 8021q: adding VLAN 0 to HW filter on device batadv1
[  411.507633][ T8594] EXT4-fs (loop5): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,init_itable=0x0000000000000002,inode_readahead_blks=0x0000000000000000,inode_readahead_blks=0x0000000000000001,norecovery,min_batch_time=0x000000000000000b,block_validity,,errors=continue. Quota mode: none.
[  412.826279][ T4879] Bluetooth: hci6: command 0x1001 tx timeout
[  412.833795][ T4188] Bluetooth: hci6: sending frame failed (-49)
[  413.638499][ T8599] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap
[  414.203408][ T8636] netlink: 'syz.5.880': attribute type 10 has an invalid length.
[  414.220967][ T8636] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  414.421489][ T8645] loop0: detected capacity change from 0 to 16
[  414.501485][ T8645] erofs: (device loop0): mounted with root inode @ nid 36.
[  414.518852][ T8645] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress 1929 in[58, 4038] out[2639]
[  414.532823][ T8645] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117]
[  414.547061][ T4228] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  414.918595][ T4879] Bluetooth: hci6: command 0x1009 tx timeout
[  414.969343][ T4228] usb 3-1: config 0 has no interfaces?
[  415.138754][ T4228] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  415.162723][ T4228] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  415.248424][ T4228] usb 3-1: Product: syz
[  415.270925][ T4228] usb 3-1: Manufacturer: syz
[  415.293605][ T4228] usb 3-1: SerialNumber: syz
[  415.419725][ T4228] usb 3-1: config 0 descriptor??
[  416.297433][ T8631] device veth0_vlan left promiscuous mode
[  416.327102][ T8631] device veth0_vlan entered promiscuous mode
[  416.439005][ T8663] overlayfs: missing 'lowerdir'
[  416.633938][ T4229] usb 3-1: USB disconnect, device number 3
[  417.954208][ T8686] loop0: detected capacity change from 0 to 2048
[  417.973833][ T8682] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[  417.987582][ T8682] overlayfs: missing 'lowerdir'
[  418.094921][ T8686] EXT4-fs (loop0): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,init_itable=0x0000000000000002,inode_readahead_blks=0x0000000000000000,inode_readahead_blks=0x0000000000000001,norecovery,min_batch_time=0x000000000000000b,block_validity,,errors=continue. Quota mode: none.
[  418.307658][ T4190] usb 6-1: new full-speed USB device number 11 using dummy_hcd
[  419.131550][ T8699] netlink: 48 bytes leftover after parsing attributes in process `syz.0.890'.
[  419.228361][ T4190] usb 6-1: config 0 has no interfaces?
[  419.419417][ T4190] usb 6-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39
[  419.451658][ T4190] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  419.515557][ T8713] loop0: detected capacity change from 0 to 16
[  419.568516][ T8713] erofs: (device loop0): mounted with root inode @ nid 36.
[  419.589641][ T8713] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress 1929 in[58, 4038] out[2639]
[  419.603703][ T8713] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117]
[  422.332082][ T4190] usb 6-1: Product: syz
[  422.350660][ T4190] usb 6-1: Manufacturer: syz
[  422.355366][ T4190] usb 6-1: SerialNumber: syz
[  422.908767][ T4190] usb 6-1: config 0 descriptor??
[  422.959779][ T4190] usb 6-1: can't set config #0, error -71
[  423.020427][ T8735] overlayfs: missing 'lowerdir'
[  423.058978][ T4190] usb 6-1: USB disconnect, device number 11
[  424.988966][ T8757] sctp: [Deprecated]: syz.6.903 (pid 8757) Use of int in max_burst socket option.
[  424.988966][ T8757] Use struct sctp_assoc_value instead
[  425.301541][ T8763] loop0: detected capacity change from 0 to 2048
[  425.364377][ T8765] netlink: 8 bytes leftover after parsing attributes in process `syz.5.906'.
[  425.504534][ T8763] EXT4-fs (loop0): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,init_itable=0x0000000000000002,inode_readahead_blks=0x0000000000000000,inode_readahead_blks=0x0000000000000001,norecovery,min_batch_time=0x000000000000000b,block_validity,,errors=continue. Quota mode: none.
[  425.926303][ T8771] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap
[  426.669817][ T8795] loop7: detected capacity change from 0 to 16
[  426.748479][ T4190] Bluetooth: hci0: command 0x0406 tx timeout
[  427.115652][ T8802] overlayfs: missing 'lowerdir'
[  427.403942][ T8795] erofs: (device loop7): mounted with root inode @ nid 36.
[  427.445822][ T8795] erofs: (device loop7): z_erofs_lz4_decompress: failed to decompress 1929 in[58, 4038] out[2639]
[  427.682963][ T8795] erofs: (device loop7): z_erofs_readpage: failed to read, err [-117]
[  429.088479][ T8823] trusted_key: encrypted_key: insufficient parameters specified
[  429.488626][ T8821] loop6: detected capacity change from 0 to 2048
[  429.559303][ T8821] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c128, mo2=0003]
[  429.592062][ T8821] System zones: 0-7
[  429.622342][ T8819] netlink: 'syz.0.919': attribute type 10 has an invalid length.
[  429.630216][ T8819] netlink: 40 bytes leftover after parsing attributes in process `syz.0.919'.
[  429.639961][ T8819] batman_adv: batadv0: Adding interface: vlan1
[  429.646111][ T8819] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  429.671294][ T8819] batman_adv: batadv0: Interface activated: vlan1
[  429.689593][ T8821] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug,lazytime,inode_readahead_blks=0x0000000000000000,delalloc,norecovery,min_batch_time=0x000000000000000b,errors=remount-ro,. Quota mode: none.
[  433.734004][ T8882] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns
[  433.830444][ T8882] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns
[  433.867942][ T8882] pit: kvm: requested 13409 ns i8254 timer period limited to 200000 ns
[  433.878729][ T8882] pit: kvm: requested 53638 ns i8254 timer period limited to 200000 ns
[  433.888608][ T8882] pit: kvm: requested 41904 ns i8254 timer period limited to 200000 ns
[  433.910347][ T8882] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns
[  433.938234][ T8882] pit: kvm: requested 6704 ns i8254 timer period limited to 200000 ns
[  433.948741][ T8882] pit: kvm: requested 115657 ns i8254 timer period limited to 200000 ns
[  433.963336][ T8882] pit: kvm: requested 2514 ns i8254 timer period limited to 200000 ns
[  433.977828][ T8882] pit: kvm: requested 3352 ns i8254 timer period limited to 200000 ns
[  434.249224][ T8892] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000)
[  436.041400][ T8902] loop2: detected capacity change from 0 to 256
[  436.153240][ T8902] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  436.188214][ T8902] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  436.332630][ T8902] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  439.097839][ T8952] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  439.980659][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  439.987000][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  446.028380][ T4876] Bluetooth: hci3: command 0x0409 tx timeout
[  446.366666][ T9003] chnl_net:caif_netlink_parms(): no params data found
[  446.984799][ T9003] bridge0: port 1(bridge_slave_0) entered blocking state
[  447.075191][ T9003] bridge0: port 1(bridge_slave_0) entered disabled state
[  447.139044][ T9003] device bridge_slave_0 entered promiscuous mode
[  447.174355][ T9003] bridge0: port 2(bridge_slave_1) entered blocking state
[  447.229397][ T9003] bridge0: port 2(bridge_slave_1) entered disabled state
[  447.295836][ T9003] device bridge_slave_1 entered promiscuous mode
[  447.561201][ T9003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  447.674797][ T9003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  447.926783][ T9003] team0: Port device team_slave_0 added
[  447.993562][ T9003] team0: Port device team_slave_1 added
[  448.119377][ T4876] Bluetooth: hci3: command 0x041b tx timeout
[  448.170391][ T9003] batman_adv: batadv0: Adding interface: batadv_slave_0
[  448.215363][ T9003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  448.376577][ T9003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  448.471489][ T9003] batman_adv: batadv0: Adding interface: batadv_slave_1
[  448.515578][ T9003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  448.648090][ T9003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  451.206430][ T4879] Bluetooth: hci3: command 0x040f tx timeout
[  451.279317][ T9003] device hsr_slave_0 entered promiscuous mode
[  451.434597][ T9003] device hsr_slave_1 entered promiscuous mode
[  451.502831][ T9003] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  451.672818][ T9076] binder: 9067:9076 unknown command 1074553619
[  451.679167][ T9076] binder: 9067:9076 ioctl c0306201 200000000540 returned -22
[  452.666769][ T9003] Cannot create hsr debugfs directory
[  453.556401][ T4876] Bluetooth: hci3: command 0x0419 tx timeout
[  455.022804][  T151] block nbd0: Attempted send on invalid socket
[  455.030597][  T151] print_req_error: 30 callbacks suppressed
[  455.030615][  T151] blk_update_request: I/O error, dev nbd0, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  455.050241][ T9079] qnx6: unable to read the first superblock
[  455.057214][  T151] block nbd0: Attempted send on invalid socket
[  455.063617][  T151] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  455.074809][ T9079] qnx6: unable to read the first superblock
[  455.080810][ T9079] qnx6: unable to read the first superblock
[  455.310759][ T4188] ------------[ cut here ]------------
[  455.316926][ T4188] WARNING: CPU: 0 PID: 4188 at net/bluetooth/hci_conn.c:443 hci_conn_timeout+0x24f/0x450
[  455.327027][ T4188] Modules linked in:
[  455.334273][ T4188] CPU: 0 PID: 4188 Comm: kworker/u5:1 Not tainted syzkaller #0
[  455.342847][ T4188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  455.354456][ T4188] Workqueue: hci5 hci_conn_timeout
[  455.360970][ T4188] RIP: 0010:hci_conn_timeout+0x24f/0x450
[  455.366873][ T4188] Code: 89 8d e8 64 84 e2 f8 48 8b 35 85 3b ae 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 76 44 72 f8 e8 e1 78 9d f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd
[  455.387598][ T4188] RSP: 0018:ffffc90002fafc08 EFLAGS: 00010293
[  455.393920][ T4188] RAX: ffffffff88dba82f RBX: ffff88801b59e138 RCX: ffff8880238f5940
[  455.402257][ T4188] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000
[  455.410613][ T4188] RBP: 00000000ffffffff R08: ffff88801b59e013 R09: 1ffff110036b3c02
[  455.419042][ T4188] R10: dffffc0000000000 R11: ffffed10036b3c03 R12: dffffc0000000000
[  455.427758][ T4188] R13: dffffc0000000000 R14: ffff88801b59e000 R15: ffff88801b59e010
[  455.436212][ T4188] FS:  0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
[  455.445405][ T4188] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  455.452656][ T4188] CR2: 00007ffd8a787e00 CR3: 000000006620f000 CR4: 00000000003526f0
[  455.460997][ T4188] Call Trace:
[  455.464674][ T4188]  <TASK>
[  455.467737][ T4188]  process_one_work+0x85f/0x1010
[  455.473163][ T4188]  ? worker_detach_from_pool+0x240/0x240
[  455.479426][ T4188]  ? lockdep_hardirqs_off+0x70/0x100
[  455.484791][ T4188]  ? _raw_spin_lock_irq+0xb7/0xf0
[  455.490278][ T4188]  ? _raw_spin_lock_irqsave+0x100/0x100
[  455.495911][ T4188]  ? wq_worker_running+0x97/0x170
[  455.501048][ T4188]  worker_thread+0xaa6/0x1290
[  455.505820][ T4188]  kthread+0x436/0x520
[  455.510035][ T4188]  ? rcu_lock_release+0x20/0x20
[  455.514960][ T4188]  ? kthread_blkcg+0xd0/0xd0
[  455.520221][ T4188]  ret_from_fork+0x1f/0x30
[  455.524708][ T4188]  </TASK>
[  455.528101][ T4188] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  455.535387][ T4188] CPU: 0 PID: 4188 Comm: kworker/u5:1 Not tainted syzkaller #0
[  455.542919][ T4188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  455.553048][ T4188] Workqueue: hci5 hci_conn_timeout
[  455.558156][ T4188] Call Trace:
[  455.561425][ T4188]  <TASK>
[  455.564351][ T4188]  dump_stack_lvl+0x188/0x250
[  455.569020][ T4188]  ? show_regs_print_info+0x20/0x20
[  455.574211][ T4188]  ? load_image+0x400/0x400
[  455.578725][ T4188]  panic+0x2e5/0x810
[  455.582641][ T4188]  ? bpf_jit_dump+0xd0/0xd0
[  455.587139][ T4188]  ? ret_from_fork+0x1f/0x30
[  455.591716][ T4188]  ? hci_conn_timeout+0x24f/0x450
[  455.596730][ T4188]  __warn+0x248/0x2b0
[  455.600703][ T4188]  ? hci_conn_timeout+0x24f/0x450
[  455.605719][ T4188]  report_bug+0x1b7/0x2e0
[  455.610126][ T4188]  handle_bug+0x3a/0x70
[  455.614272][ T4188]  exc_invalid_op+0x16/0x40
[  455.618761][ T4188]  asm_exc_invalid_op+0x16/0x20
[  455.623605][ T4188] RIP: 0010:hci_conn_timeout+0x24f/0x450
[  455.629232][ T4188] Code: 89 8d e8 64 84 e2 f8 48 8b 35 85 3b ae 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 76 44 72 f8 e8 e1 78 9d f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd
[  455.648854][ T4188] RSP: 0018:ffffc90002fafc08 EFLAGS: 00010293
[  455.654913][ T4188] RAX: ffffffff88dba82f RBX: ffff88801b59e138 RCX: ffff8880238f5940
[  455.662872][ T4188] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000
[  455.670833][ T4188] RBP: 00000000ffffffff R08: ffff88801b59e013 R09: 1ffff110036b3c02
[  455.678795][ T4188] R10: dffffc0000000000 R11: ffffed10036b3c03 R12: dffffc0000000000
[  455.686757][ T4188] R13: dffffc0000000000 R14: ffff88801b59e000 R15: ffff88801b59e010
[  455.694726][ T4188]  ? hci_conn_timeout+0x24f/0x450
[  455.699749][ T4188]  ? hci_conn_timeout+0x24f/0x450
[  455.704765][ T4188]  process_one_work+0x85f/0x1010
[  455.709712][ T4188]  ? worker_detach_from_pool+0x240/0x240
[  455.715334][ T4188]  ? lockdep_hardirqs_off+0x70/0x100
[  455.720608][ T4188]  ? _raw_spin_lock_irq+0xb7/0xf0
[  455.725618][ T4188]  ? _raw_spin_lock_irqsave+0x100/0x100
[  455.731324][ T4188]  ? wq_worker_running+0x97/0x170
[  455.736357][ T4188]  worker_thread+0xaa6/0x1290
[  455.741049][ T4188]  kthread+0x436/0x520
[  455.745110][ T4188]  ? rcu_lock_release+0x20/0x20
[  455.749950][ T4188]  ? kthread_blkcg+0xd0/0xd0
[  455.754534][ T4188]  ret_from_fork+0x1f/0x30
[  455.758948][ T4188]  </TASK>
[  455.762348][ T4188] Kernel Offset: disabled
[  455.766919][ T4188] Rebooting in 86400 seconds..