last executing test programs:

7.93963458s ago: executing program 2 (id=3):
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x880, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0)
write(r0, &(0x7f0000000000)='6', 0x32)
fsopen(&(0x7f0000000180)='bpf\x00', 0x1)

7.717425822s ago: executing program 0 (id=1):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230000)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x42340, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230006)
getpid()
close(r2)

7.661410717s ago: executing program 2 (id=6):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000740)=@newqdisc={0xe4, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x3}, {0xffff, 0xffff}, {0xffff, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xb4, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xd, 0xe, 0x1, 0x11, 0x10, 0x2, 0x4, 0x2, 0xd, 0x6, 0x1, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xd, 0x3, 0x6, 0x2002, 0x11, 0x4, 0x2, 0xd06, 0xff05, 0x0, 0xa, 0x8, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xf, 0x40, 0xfffc, 0x3, 0x1, 0x402]}}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x7, [0x0, 0x9, 0x10, 0xb, 0x10, 0x2, 0xf, 0xb, 0x3, 0x4, 0x4, 0xa, 0x6, 0x1, 0x8, 0x3], 0x1, [0x6, 0xffff, 0x7, 0x1, 0x8, 0x6ae0, 0x861a, 0x4, 0x1000, 0xff25, 0xa, 0x71af, 0x5, 0x9, 0x10, 0x1], [0x77, 0x8001, 0x4, 0x2, 0x9, 0x8, 0xb, 0x8, 0x1, 0x0, 0x3, 0x8bc1, 0x8, 0x6, 0x4, 0x4]}}]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x400dc}, 0x24000080)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)=@raw={'raw\x00', 0x9, 0x3, 0x2b8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x1, 0xa, 0x1, 0x1, 0x6], 0x4, 0x3}, {0x2, [0x3, 0x0, 0x5, 0x6, 0x0, 0x5], 0x6}}}}, {{@ip={@multicast1, @rand_addr=0x64010100, 0xff000000, 0xffffffff, 'veth0_to_bridge\x00', 'macvtap0\x00', {}, {0xff}, 0x89, 0x1, 0x40}, 0x0, 0xe0, 0x150, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0xffffffff, 0x6, 0x0, 0x7fffffff, 0x4, 0x767e, 0x9}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x793, 0x3, 0x80, 0x0, 0x0, "a7d15e122ff3cd2fd5295cb9e8f140b7e95d95f8a099a33998e50aa472fd90bdc84fc60020f464e746039f9b5c09aa24d709ecccba5ff618fdf6603efcb726b8"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318)
r3 = socket$inet6(0xa, 0x802, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4e24, 0x1ff, 0x4e21, 0x0, 0xa, 0x80, 0x20, 0x33}, {0xff87, 0x5, 0xce, 0xa, 0x6, 0x1, 0x1, 0xe}, {0x7ff, 0x7, 0x9, 0xc9e}, 0x6, 0x0, 0x2, 0x1, 0x3, 0x1}, {{@in6=@loopback, 0x4d6, 0x2b}, 0x8, @in6=@empty, 0x10003500, 0x3, 0x2, 0x2, 0x0, 0x1, 0x5}}, 0xe8)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f00000000c0)=@hopopts={0x3b}, 0x8)

6.508765424s ago: executing program 2 (id=7):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84c42, 0x1fa)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x4, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, 0x1b, r0}, 0x94)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x40000)
unshare(0x22020600)
write$binfmt_script(r0, 0x0, 0x0)
r4 = fsopen(&(0x7f0000000040)='sockfs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000180)='rootcontext', &(0x7f0000000440)='5\xfd\x04\xc6\xc9]\v\xd6S9q\x0f#\x93\x9d\xeb\x00\xcf\xb2~9*\xa9\x1d:\x06u46N\xd93\xe1\xa2\x05\x83Z\xbc\xbeT\x16\xab\xfb=4\xa6\x10,\"\xee\xf8o+\x02\xd8\xaft_\r\x1d\"\xc8\\k\xcc4\x96\xdbA\x02[\x16\xb4\xca\xa5n\x87\xdb\xb3\x1f\xbb\xc0\x9f\xc2\x9e\t[\xba\x9e\xfd\xc76#\x8f\xc6\xe7\x11\x8fL\xd97<cAZR\n w\xe6\x1c\xf0(\x96H\x88\x00\xd3\x1c\x16cj\x10\xd8\x92\xc9ad\xc0aR\x12\xd3\xc2J\xcb\x9a\xa5\xce#{e\xd3\x11\xc5]\xb4F1\xfb\xe6\xd4T\v\x87\x04\xcf\b.\xcaO\x04\x0f\x062\xcaL\x81\xa6\xbbp\xd3\xc6$4t (W\x92nr\xbe,\b\xdb\x7f[', 0x0)

6.273911309s ago: executing program 1 (id=2):
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(0xffffffffffffffff, 0x0, 0x0)
fchdir(r1)
r2 = open(0x0, 0x143142, 0x80)
socket(0x10, 0x803, 0x0)
r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x42000, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1})
ioctl$TUNSETLINK(r3, 0x400454cd, 0x304)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
ftruncate(r2, 0x2007ffb)
openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x35c, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @empty}, {0x2, 0x0, @remote}, 0x4, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f00000001c0)='lo\x00', 0x6, 0x0, 0x3})
ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0xfffd, @empty}, {0x2, 0x4000, @loopback}, {0x2, 0x4e20, @private}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x100, 0x1})

6.143171419s ago: executing program 0 (id=8):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000140)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xdd}}, {}, {@acl}, {@errors_remount}]}, 0x1, 0x4d4, &(0x7f0000000a00)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2100, 0x100)

5.393633455s ago: executing program 2 (id=9):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x66)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r1 = getpid()
close(0xffffffffffffffff)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x148})
r2 = fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x1)
mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000380), 0x14c98, &(0x7f0000002780)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}})
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080))
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0100000003"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ffc40bffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400210000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f0170720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/172], &(0x7f0000000340)='syzkaller\x00'}, 0x48)

5.354270385s ago: executing program 1 (id=10):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc283, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x80, 0x15, 0x87}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b)
write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x6, 0x9, 0x80, 0x10000, 0xffffffff, 0x91b1}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x1ff}, @TCA_NETEM_RATE64={0xc, 0x8, 0xed33dd92214b97d}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000400}, 0x0)
umount2(&(0x7f00000001c0)='./file0\x00', 0x0)
pipe2(&(0x7f0000000580)={<r6=>0xffffffffffffffff}, 0x0)
pipe2(&(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x0)
r9 = syz_genetlink_get_family_id$nl80211(0x0, r7)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_MCAST_RATE(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r9, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x0, 0x3b}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x4f}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4040810)
tee(r6, r8, 0xfffffffffffffc01, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a10075089501093081"], 0x0}, 0x0)

5.267995136s ago: executing program 3 (id=4):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {}, {@nomblk_io_submit}, {@data_err_ignore}, {@usrjquota}]}, 0x1, 0x469, &(0x7f0000000300)="$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")
r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
syz_emit_ethernet(0x22, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, 0x0)
getdents(r0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000580)={0x1fffffffbf7, 0x9, 0x4, 0x6b})

4.908956082s ago: executing program 4 (id=5):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x3, [@int={0x6, 0x0, 0x0, 0x1, 0x0, 0x7d, 0x0, 0x65}, @enum={0x5, 0x4, 0x0, 0x6, 0x4, [{0x9, 0x4}, {0xf, 0x80}, {0x2, 0xd3c}, {0xa, 0x8}]}, @func_proto]}, {0x0, [0x5f]}}, 0x0, 0x63, 0x0, 0x0, 0x7, 0x10000}, 0x28)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x1)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil})
r3 = dup(r2)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x44, 0x8, 0x7f, '\x00', 0x8})
ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

4.249404207s ago: executing program 0 (id=11):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x790, &(0x7f0000006a80)="$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")
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ptrace$getsig(0x4202, r0, 0xd2eb, &(0x7f0000000540))
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x801, 0x28100}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x4}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0xd4}]}, 0x3c}}, 0x40c4)
write$P9_RUNLINKAT(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
write$vga_arbiter(r4, &(0x7f0000000100)=@unlock_all, 0xb)
flock(0xffffffffffffffff, 0x2)
socket$inet6(0xa, 0x3, 0xff)
socket$inet_tcp(0x2, 0x1, 0x0)
timerfd_create(0x9, 0x80800)
unshare(0x22020600)
setuid(0xee01)

4.153278824s ago: executing program 2 (id=12):
fsopen(0x0, 0x0)
syz_open_procfs(0x0, 0x0)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newtfilter={0x38, 0x2c, 0x601, 0x4, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0x4}, {0x1}, {0x300, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x44)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10)
sendto$inet(r4, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x4000, &(0x7f0000000a40)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d302c636865636b3d7374726963742c646973636172642c757466383d312c6e66732c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c0036b573262ed88dfec7618c03371693a5173bd0bf12d29c0180500a87e3789adea802a90933b243ca225dacfc27597d6e1ce3d9fdc12409748ba4fbde6f1d76e116fd437b79bbcea7fdc682fd0b90334eed137d03ce386950f5e50ff2516eb2b500a9b99e04f2a41864e44cb46101a23835877342485260d4510fa3240a2c9756d388e5861cdeaf4c88bca74fe3ce71eef72c", @ANYRESDEC=0x0, @ANYRESHEX=0x0, @ANYRESOCT, @ANYRES64], 0x1, 0x2b6, &(0x7f0000000c00)="$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")
mount(0x0, 0x0, 0x0, 0x820000, 0x0)
setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000001340)=ANY=[@ANYBLOB="080000000000000002004e20ac1414bb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000700000002004e216401010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e217f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000002300"/771], 0x410)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd6}, 0x48)

3.763187909s ago: executing program 3 (id=13):
prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB='extent_cache,acl\x00nolazytime,grpjquota=rootcontext,checkpoint=merge,heap,flush_merge,noinline_dentry,quota,grpquota=(:,age_extent_cache,heap,resgid=', @ANYRESHEX=0x0, @ANYBLOB="2c636865636b706f696e743d6d657267652c7375db6a5f757365723d3a7bc17b285c71002c7065726d69745f646972656374696f2c686173682c7375626a5f757365723d657874656e68652c646566636f6e746578743d7261636b66736465663d657874656e745f63616368652c7375626a5f7479f43133666f1fe17a7974696d652c00000000000000"], 0xf7, 0x555e, &(0x7f0000005a80)="$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")
sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@stripe={'stripe', 0x3d, 0x4}}, {}, {@block_validity}, {@norecovery}, {@dioread_nolock}, {@oldalloc}, {@oldalloc}, {@sysvgroups}, {@norecovery}]}, 0x3, 0x566, &(0x7f00000015c0)="$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")
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
listen(0xffffffffffffffff, 0x80)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
syz_clone3(&(0x7f0000000140)={0xb600, 0x0, 0x0, 0x0, {0xc}, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x58)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x23, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae03, 0x18)
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x13244d8, &(0x7f00000003c0)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5f97722752a98440a5725268a242c0263564f968d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de293ee375647f886a5310889982079aa7b1fb4eefe7f768eec58b19cf50faa8af129503175f4262df73df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000bb10541149fc9f7f374f57b07713ef5870a5f62357be114a4d8e925becf2d6eafbbd2ba7a07fec3414361d551da0464ce8c1e21ba3debd6b839e3c7545e08c343dd9566721b848b22eaad7d3b4f7e756373917e426f0f9fb64550639f4fc6195c7e9e25295d7cdf0531e8f7d67ff11fc61d80c6f36a81f2263e6b4b846d802f37eb1dba973d1b61945e708827c01ac28e70d5d9e26bf9752d5829bbfc48c045e151e13c4c41fe54f930521693955c554f1ff94bab2ab7fe9605bfaec155ae25380ab217d2f11d7f4bfda07c5d645c891d310567761", @ANYRES32, @ANYRESHEX, @ANYRES64=r3, @ANYRES32], 0xfe, 0x347, &(0x7f0000001840)="$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")
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000080))
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSETKEYCODE(r4, 0x4b4d, &(0x7f00000008c0)={0x103})
r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0)
write$P9_RREADLINK(r5, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab)

747.824096ms ago: executing program 2 (id=14):
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000580)={r0}, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00'}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r0}, 0x3d)

598.677095ms ago: executing program 4 (id=15):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', <r1=>0x0})
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000140)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0xba, 0x2, 0xefff}]}, 0x10)
r3 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r3, &(0x7f0000000480)="4701619edd91cdaf68ef1c7daa19b43ad264cfde47c88bad3d5a", 0x1a, 0x81, &(0x7f0000000340)={0x11, 0x0, r1, 0x1, 0xe, 0x6, @local}, 0x14)

0s ago: executing program 1 (id=16):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x338, 0x2c0, 0x228, 0xffffffff, 0x0, 0x0, 0x420, 0x420, 0xffffffff, 0x420, 0x420, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8, 0x48}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x801, {0x0, @broadcast, @multicast2, @port=0x1, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @port=0x4e21}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398)
mlockall(0x7)
iopl(0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r1 = socket$inet(0x2, 0x2, 0x0)
prctl$PR_SET_PDEATHSIG(0x1, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000)
r3 = syz_open_dev$loop(0x0, 0x400000c, 0x1e1000)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000000000000ffe, 0x0, 0x0, 0x4, 0xc, "faf98317e5a1149989fc8dbe2dc3bd3f8bbad0099cebdc25f5ab60c9e6881a7beda9b3adf4f7350b464c516bdd8a418000", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad33000100", [0xfffffffffffffce8, 0xa]}})
ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f00000000c0)={'bond_slave_1\x00', @broadcast})
setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57)
r4 = socket$netlink(0x10, 0x3, 0x0)
close(0x3)
writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040250580100001000000010902200001010080320904000002ff00000007058102000200070502020002"], 0x0)
syz_usb_control_io(r6, 0x0, 0x0)
ioctl(r5, 0x8914, &(0x7f0000000200)="7573623000000000000000000000000003")
syz_usb_control_io(r6, 0x0, 0x0)
madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x13)
socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000011c0)=ANY=[@ANYRES64=r1, @ANYRES32=0x0, @ANYBLOB="4b020600440000004c0012800b000100697036746e6c00003c00028008000100", @ANYRES32, @ANYBLOB="1a080900290000001400030020010000000000000000000000000021050013000800080031000000060011004e23000008000a00", @ANYRES32], 0x74}}, 0x40004)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.127' (ED25519) to the list of known hosts.
[   67.932512][ T5595] cgroup: Unknown subsys name 'net'
[   68.062106][ T5595] cgroup: Unknown subsys name 'cpuset'
[   68.070368][ T5595] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   69.415451][ T5595] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   71.431086][ T1315] ieee802154 phy0 wpan0: encryption failed: -22
[   71.431129][ T1315] ieee802154 phy1 wpan1: encryption failed: -22
[   71.895914][ T5625] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   71.896831][ T5625] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   71.900915][ T5624] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   71.902111][ T5626] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   71.902806][ T5624] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   71.905408][ T5624] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   71.906874][ T5624] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   71.907849][ T5624] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   71.909093][ T5624] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   71.909404][ T5624] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   71.910353][ T5625] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   71.912109][ T5626] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   71.912140][ T5625] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   71.920649][ T5626] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   71.920682][ T5624] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   71.920781][ T5626] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   71.921597][ T5629] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   71.921971][ T5625] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   71.928809][ T5625] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   71.929920][ T5629] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   71.930932][ T5629] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   71.945943][ T5629] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   71.951759][ T5629] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   71.960077][ T5629] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   71.960279][ T5629] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   73.794377][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.794477][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.794595][ T5612] bridge_slave_0: entered allmulticast mode
[   73.796741][ T5612] bridge_slave_0: entered promiscuous mode
[   73.802257][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.802364][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.802480][ T5612] bridge_slave_1: entered allmulticast mode
[   73.804332][ T5612] bridge_slave_1: entered promiscuous mode
[   73.854900][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.855035][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.855146][ T5607] bridge_slave_0: entered allmulticast mode
[   73.856748][ T5607] bridge_slave_0: entered promiscuous mode
[   73.911567][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.911666][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.911785][ T5607] bridge_slave_1: entered allmulticast mode
[   73.913225][ T5607] bridge_slave_1: entered promiscuous mode
[   73.945191][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.945443][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.945557][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.945973][ T5609] bridge_slave_0: entered allmulticast mode
[   73.951124][ T5609] bridge_slave_0: entered promiscuous mode
[   73.954786][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.955317][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.955446][ T5609] bridge_slave_1: entered allmulticast mode
[   73.957271][ T5609] bridge_slave_1: entered promiscuous mode
[   73.992852][ T4925] Bluetooth: hci4: command tx timeout
[   73.992984][ T4925] Bluetooth: hci1: command tx timeout
[   73.993157][ T5623] Bluetooth: hci0: command tx timeout
[   74.031904][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   74.069454][ T5623] Bluetooth: hci2: command tx timeout
[   74.079361][ T5623] Bluetooth: hci3: command tx timeout
[   74.084130][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.084230][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.084339][ T5610] bridge_slave_0: entered allmulticast mode
[   74.086539][ T5610] bridge_slave_0: entered promiscuous mode
[   74.092670][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   74.096087][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   74.127689][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.127788][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.127898][ T5610] bridge_slave_1: entered allmulticast mode
[   74.131877][ T5610] bridge_slave_1: entered promiscuous mode
[   74.136724][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   74.150825][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   74.168966][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.169065][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.169177][ T5611] bridge_slave_0: entered allmulticast mode
[   74.170909][ T5611] bridge_slave_0: entered promiscuous mode
[   74.177425][ T5612] team0: Port device team_slave_0 added
[   74.225841][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.226004][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.226127][ T5611] bridge_slave_1: entered allmulticast mode
[   74.227793][ T5611] bridge_slave_1: entered promiscuous mode
[   74.232224][ T5612] team0: Port device team_slave_1 added
[   74.250396][ T5609] team0: Port device team_slave_0 added
[   74.286840][ T5607] team0: Port device team_slave_0 added
[   74.289427][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   74.292417][ T5609] team0: Port device team_slave_1 added
[   74.326941][ T5607] team0: Port device team_slave_1 added
[   74.329314][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   74.346475][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   74.347676][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0
[   74.347685][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   74.347703][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   74.352356][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.352372][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   74.352396][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.384104][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0
[   74.384121][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   74.384145][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   74.403816][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   74.429191][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.429209][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   74.429232][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.443647][ T5610] team0: Port device team_slave_0 added
[   74.460571][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0
[   74.460589][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   74.460612][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   74.487116][ T5610] team0: Port device team_slave_1 added
[   74.503554][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.503569][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   74.503592][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.528953][ T5611] team0: Port device team_slave_0 added
[   74.532079][ T5611] team0: Port device team_slave_1 added
[   74.611125][ T5612] hsr_slave_0: entered promiscuous mode
[   74.612739][ T5612] hsr_slave_1: entered promiscuous mode
[   74.640665][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0
[   74.640682][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   74.640705][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   74.689261][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0
[   74.689278][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   74.689301][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   74.725532][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.725551][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   74.725575][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.743842][ T5609] hsr_slave_0: entered promiscuous mode
[   74.749527][ T5609] hsr_slave_1: entered promiscuous mode
[   74.750288][ T5609] debugfs: 'hsr0' already exists in 'hsr'
[   74.750391][ T5609] Cannot create hsr debugfs directory
[   74.755765][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.755781][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   74.755812][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.845508][ T5607] hsr_slave_0: entered promiscuous mode
[   74.846792][ T5607] hsr_slave_1: entered promiscuous mode
[   74.847595][ T5607] debugfs: 'hsr0' already exists in 'hsr'
[   74.847618][ T5607] Cannot create hsr debugfs directory
[   74.920140][ T5611] hsr_slave_0: entered promiscuous mode
[   74.920803][ T5611] hsr_slave_1: entered promiscuous mode
[   74.921197][ T5611] debugfs: 'hsr0' already exists in 'hsr'
[   74.921215][ T5611] Cannot create hsr debugfs directory
[   75.010244][ T5610] hsr_slave_0: entered promiscuous mode
[   75.010862][ T5610] hsr_slave_1: entered promiscuous mode
[   75.011255][ T5610] debugfs: 'hsr0' already exists in 'hsr'
[   75.011273][ T5610] Cannot create hsr debugfs directory
[   75.436119][ T5612] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   75.451540][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   75.452552][ T5612] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   75.456317][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   75.458225][ T5612] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   75.465905][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   75.466834][ T5612] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   75.477497][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   75.562876][ T5609] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   75.567272][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   75.570196][ T5609] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   75.581841][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   75.587202][ T5609] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   75.596373][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   75.597296][ T5609] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   75.603600][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   75.692965][ T5607] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   75.695865][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   75.697311][ T5607] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   75.706721][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   75.715147][ T5607] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   75.725574][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   75.749682][ T5607] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   75.753960][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   75.835214][ T5611] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   75.838610][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   75.841091][ T5611] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   75.851010][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   75.871910][ T5611] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   75.874517][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   75.875021][ T5611] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   75.876991][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   75.959655][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.995219][ T5610] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   76.001239][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   76.021048][ T5610] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   76.024404][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   76.025244][ T5610] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   76.027738][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   76.059625][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.060249][ T5610] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   76.063504][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   76.067274][ T5612] 8021q: adding VLAN 0 to HW filter on device team0
[   76.070150][ T5623] Bluetooth: hci0: command tx timeout
[   76.070181][ T5623] Bluetooth: hci1: command tx timeout
[   76.070201][ T5623] Bluetooth: hci4: command tx timeout
[   76.126463][  T779] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.126580][  T779] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.149074][ T5614] Bluetooth: hci3: command tx timeout
[   76.149106][ T5614] Bluetooth: hci2: command tx timeout
[   76.172448][   T63] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.172539][   T63] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.206694][ T5609] 8021q: adding VLAN 0 to HW filter on device team0
[   76.237447][   T63] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.237545][   T63] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.264390][  T779] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.264449][  T779] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.273535][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.367794][ T5607] 8021q: adding VLAN 0 to HW filter on device team0
[   76.395272][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.425862][   T63] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.425964][   T63] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.430894][   T63] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.431077][   T63] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.518342][ T5611] 8021q: adding VLAN 0 to HW filter on device team0
[   76.531671][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.575521][   T42] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.575623][   T42] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.621208][   T42] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.621358][   T42] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.668548][ T5610] 8021q: adding VLAN 0 to HW filter on device team0
[   76.687300][  T779] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.687458][  T779] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.737951][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.738050][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   77.351731][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.566345][ T5612] veth0_vlan: entered promiscuous mode
[   77.593900][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.606246][ T5612] veth1_vlan: entered promiscuous mode
[   77.801233][ T5612] veth0_macvtap: entered promiscuous mode
[   77.807353][ T5609] veth0_vlan: entered promiscuous mode
[   77.814896][ T5612] veth1_macvtap: entered promiscuous mode
[   77.883797][ T5609] veth1_vlan: entered promiscuous mode
[   77.929593][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0
[   77.940889][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.957861][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1
[   78.034249][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0
[   78.059328][ T5609] veth0_macvtap: entered promiscuous mode
[   78.083291][ T5609] veth1_macvtap: entered promiscuous mode
[   78.109490][ T1013] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.110953][   T42] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.110999][   T42] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.111034][   T42] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.157535][ T5614] Bluetooth: hci1: command tx timeout
[   78.157568][ T5614] Bluetooth: hci0: command tx timeout
[   78.157689][ T5623] Bluetooth: hci4: command tx timeout
[   78.225400][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0
[   78.241424][ T4925] Bluetooth: hci3: command tx timeout
[   78.242018][ T5623] Bluetooth: hci2: command tx timeout
[   78.281563][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1
[   78.326265][ T5611] veth0_vlan: entered promiscuous mode
[   78.336425][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.337279][ T1013] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.337325][ T1013] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.337536][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.337551][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.344119][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0
[   78.369145][   T42] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.420859][ T5611] veth1_vlan: entered promiscuous mode
[   78.442782][ T5607] veth0_vlan: entered promiscuous mode
[   78.498437][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.498457][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.514151][ T5611] veth0_macvtap: entered promiscuous mode
[   78.518714][ T5611] veth1_macvtap: entered promiscuous mode
[   78.567739][ T5607] veth1_vlan: entered promiscuous mode
[   78.671234][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0
[   78.677565][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.677587][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.717553][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1
[   78.777807][ T5612] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   78.824781][ T5607] veth0_macvtap: entered promiscuous mode
[   78.835012][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.835031][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.846454][ T5607] veth1_macvtap: entered promiscuous mode
[   78.923675][   T42] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.998447][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0
[   79.028111][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1
[   79.042610][ T5806] FAULT_INJECTION: forcing a failure.
[   79.042610][ T5806] name failslab, interval 1, probability 0, space 0, times 1
[   79.042652][ T5806] CPU: 1 UID: 0 PID: 5806 Comm: syz.2.3 Not tainted syzkaller #0 PREEMPT(full) 
[   79.042673][ T5806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   79.042691][ T5806] Call Trace:
[   79.042699][ T5806]  <TASK>
[   79.042710][ T5806]  dump_stack_lvl+0xe8/0x150
[   79.042749][ T5806]  should_fail_ex+0x3eb/0x540
[   79.042779][ T5806]  should_failslab+0xa8/0x100
[   79.042804][ T5806]  __kmalloc_cache_noprof+0x9e/0x600
[   79.042824][ T5806]  ? bpf_init_fs_context+0x54/0x220
[   79.042850][ T5806]  ? bpf_init_fs_context+0x54/0x220
[   79.042880][ T5806]  bpf_init_fs_context+0x54/0x220
[   79.042905][ T5806]  alloc_fs_context+0x99e/0xd00
[   79.042934][ T5806]  __se_sys_fsopen+0xa5/0x2c0
[   79.042961][ T5806]  do_syscall_64+0x166/0x520
[   79.042990][ T5806]  ? trace_irq_disable+0x3b/0x140
[   79.043014][ T5806]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   79.043032][ T5806]  ? clear_bhb_loop+0x70/0xc0
[   79.043055][ T5806]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   79.043073][ T5806] RIP: 0033:0x7fe07959e159
[   79.043098][ T5806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   79.043114][ T5806] RSP: 002b:00007fe07a505028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae
[   79.043135][ T5806] RAX: ffffffffffffffda RBX: 00007fe079825fa0 RCX: 00007fe07959e159
[   79.043150][ T5806] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000180
[   79.043162][ T5806] RBP: 00007fe07963506b R08: 0000000000000000 R09: 0000000000000000
[   79.043174][ T5806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   79.043185][ T5806] R13: 00007fe079826038 R14: 00007fe079825fa0 R15: 00007fff777a3d38
[   79.043214][ T5806]  </TASK>
[   79.143043][ T5610] veth0_vlan: entered promiscuous mode
[   79.189262][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.189307][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.189340][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.189372][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.189410][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.189442][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.189473][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.288679][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.288699][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.312105][ T5610] veth1_vlan: entered promiscuous mode
[   79.424315][ T5610] veth0_macvtap: entered promiscuous mode
[   79.436875][ T5610] veth1_macvtap: entered promiscuous mode
[   79.459280][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0
[   79.464462][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1
[   79.559514][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.559565][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.559601][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.602681][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.602700][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.209179][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.268951][ T5623] Bluetooth: hci4: command tx timeout
[   80.268987][ T5623] Bluetooth: hci0: command tx timeout
[   80.269009][ T5623] Bluetooth: hci1: command tx timeout
[   80.310646][ T4925] Bluetooth: hci2: command tx timeout
[   80.310660][ T5623] Bluetooth: hci3: command tx timeout
[   80.436754][   T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.436777][   T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.585479][   T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.585500][   T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.640399][   T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.640416][   T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.272438][ T5824] loop0: detected capacity change from 0 to 512
[   81.327634][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.327655][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.548280][ T5824] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   81.548391][ T5824] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   81.644870][ T5824] Quota error (device loop0): do_check_range: Getting block 773 out of range 1-5
[   81.644977][ T5824] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0
[   81.645004][ T5824] EXT4-fs error (device loop0): ext4_acquire_dquot:7069: comm syz.0.8: Failed to acquire dquot type 1
[   81.655498][ T5824] EXT4-fs (loop0): Remounting filesystem read-only
[   81.697292][  T889] cfg80211: failed to load regulatory.db
[   81.717146][ T5824] fs-verity (loop0, inode 15): Error -117 getting verity descriptor size
[   81.889332][ T5770] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[   81.958551][ T5834] loop3: detected capacity change from 0 to 512
[   82.183247][ T5834] EXT4-fs: Ignoring removed nomblk_io_submit option
[   82.535577][ T5770] usb 2-1: New USB device found: idVendor=046d, idProduct=c283, bcdDevice=0.00
[   82.544208][ T5770] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[   82.544243][ T5770] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   82.544267][ T5770] usb 2-1: config 0 interface 0 has no altsetting 0
[   82.544302][ T5770] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   82.607207][ T5841] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   82.642700][ T5834] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[   82.699696][ T5834] EXT4-fs (loop3): 1 truncate cleaned up
[   82.732688][ T5609] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.741913][ T5834] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   82.767869][ T5770] usb 2-1: config 0 descriptor??
[   82.777180][ T5833] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   84.172010][ T5607] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.780812][ T5851] loop0: detected capacity change from 0 to 2048
[   85.639007][ T5849] loop2: detected capacity change from 0 to 128
[   86.097696][ T5851] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   86.820183][ T5770] usbhid 2-1:0.0: can't add hid device: -71
[   86.820295][ T5770] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[   87.100714][ T5857] loop3: detected capacity change from 0 to 40427
[   87.123364][ T5857] ------------[ cut here ]------------
[   87.123380][ T5857] UBSAN: shift-out-of-bounds in fs/f2fs/super.c:3950:27
[   87.123398][ T5857] shift exponent 4294967287 is too large for 64-bit type 'sector_t' (aka 'unsigned long long')
[   87.123417][ T5857] CPU: 1 UID: 0 PID: 5857 Comm: syz.3.13 Not tainted syzkaller #0 PREEMPT(full) 
[   87.123438][ T5857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   87.123449][ T5857] Call Trace:
[   87.123456][ T5857]  <TASK>
[   87.123465][ T5857]  dump_stack_lvl+0xe8/0x150
[   87.123497][ T5857]  ubsan_epilogue+0xa/0x30
[   87.123515][ T5857]  __ubsan_handle_shift_out_of_bounds+0x36d/0x400
[   87.123549][ T5857]  ? folio_unlock+0x101/0x160
[   87.123572][ T5857]  __f2fs_commit_super+0x43e/0x4d0
[   87.123602][ T5857]  sanity_check_area_boundary+0x7c5/0xe20
[   87.123640][ T5857]  f2fs_fill_super+0x1920/0x7fa0
[   87.123689][ T5857]  ? set_blocksize+0x1c9/0x440
[   87.123726][ T5857]  get_tree_bdev_flags+0x430/0x4f0
[   87.123749][ T5857]  ? __pfx_f2fs_fill_super+0x10/0x10
[   87.123779][ T5857]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[   87.123809][ T5857]  vfs_get_tree+0x92/0x2a0
[   87.123833][ T5857]  do_new_mount+0x319/0xdc0
[   87.123866][ T5857]  ? __pfx_do_new_mount+0x10/0x10
[   87.123896][ T5857]  ? ns_capable+0x84/0xe0
[   87.123923][ T5857]  ? path_mount+0x647/0x1050
[   87.123954][ T5857]  ? user_path_at+0xd4/0x160
[   87.123977][ T5857]  __se_sys_mount+0x31d/0x420
[   87.124001][ T5857]  ? __pfx___se_sys_mount+0x10/0x10
[   87.124022][ T5857]  ? __x64_sys_mount+0x20/0xc0
[   87.124038][ T5857]  do_syscall_64+0x166/0x520
[   87.124062][ T5857]  ? trace_irq_disable+0x3b/0x140
[   87.124085][ T5857]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   87.124103][ T5857]  ? clear_bhb_loop+0x70/0xc0
[   87.124124][ T5857]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   87.124141][ T5857] RIP: 0033:0x7f221419f3ca
[   87.124159][ T5857] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   87.124175][ T5857] RSP: 002b:00007f22150ade58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   87.124194][ T5857] RAX: ffffffffffffffda RBX: 00007f22150adee0 RCX: 00007f221419f3ca
[   87.124208][ T5857] RDX: 0000200000000040 RSI: 0000200000000240 RDI: 00007f22150adea0
[   87.124221][ T5857] RBP: 0000200000000040 R08: 00007f22150adee0 R09: 0000000000000000
[   87.124233][ T5857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000240
[   87.124244][ T5857] R13: 00007f22150adea0 R14: 000000000000555e R15: 0000200000000780
[   87.124275][ T5857]  </TASK>
[   87.124282][ T5857] ---[ end trace ]---
[   87.124299][ T5857] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[   87.387702][ T5857] CPU: 1 UID: 0 PID: 5857 Comm: syz.3.13 Not tainted syzkaller #0 PREEMPT(full) 
[   87.396904][ T5857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   87.406967][ T5857] Call Trace:
[   87.410252][ T5857]  <TASK>
[   87.413188][ T5857]  vpanic+0x26f/0x710
[   87.417268][ T5857]  panic+0xc5/0xd0
[   87.421362][ T5857]  ? __pfx_panic+0x10/0x10
[   87.426436][ T5857]  ? __pfx__printk+0x10/0x10
[   87.431043][ T5857]  ? dump_stack_lvl+0x103/0x150
[   87.435906][ T5857]  check_panic_on_warn+0x89/0xb0
[   87.440841][ T5857]  __ubsan_handle_shift_out_of_bounds+0x36d/0x400
[   87.447269][ T5857]  ? folio_unlock+0x101/0x160
[   87.451944][ T5857]  __f2fs_commit_super+0x43e/0x4d0
[   87.457065][ T5857]  sanity_check_area_boundary+0x7c5/0xe20
[   87.462807][ T5857]  f2fs_fill_super+0x1920/0x7fa0
[   87.467898][ T5857]  ? set_blocksize+0x1c9/0x440
[   87.472687][ T5857]  get_tree_bdev_flags+0x430/0x4f0
[   87.477812][ T5857]  ? __pfx_f2fs_fill_super+0x10/0x10
[   87.483099][ T5857]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[   87.488752][ T5857]  vfs_get_tree+0x92/0x2a0
[   87.493187][ T5857]  do_new_mount+0x319/0xdc0
[   87.497736][ T5857]  ? __pfx_do_new_mount+0x10/0x10
[   87.502799][ T5857]  ? ns_capable+0x84/0xe0
[   87.507306][ T5857]  ? path_mount+0x647/0x1050
[   87.511908][ T5857]  ? user_path_at+0xd4/0x160
[   87.516511][ T5857]  __se_sys_mount+0x31d/0x420
[   87.521201][ T5857]  ? __pfx___se_sys_mount+0x10/0x10
[   87.526432][ T5857]  ? __x64_sys_mount+0x20/0xc0
[   87.531209][ T5857]  do_syscall_64+0x166/0x520
[   87.535810][ T5857]  ? trace_irq_disable+0x3b/0x140
[   87.540835][ T5857]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   87.546898][ T5857]  ? clear_bhb_loop+0x70/0xc0
[   87.551577][ T5857]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   87.557469][ T5857] RIP: 0033:0x7f221419f3ca
[   87.561883][ T5857] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   87.581491][ T5857] RSP: 002b:00007f22150ade58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   87.589915][ T5857] RAX: ffffffffffffffda RBX: 00007f22150adee0 RCX: 00007f221419f3ca
[   87.597895][ T5857] RDX: 0000200000000040 RSI: 0000200000000240 RDI: 00007f22150adea0
[   87.605872][ T5857] RBP: 0000200000000040 R08: 00007f22150adee0 R09: 0000000000000000
[   87.613849][ T5857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000240
[   87.622346][ T5857] R13: 00007f22150adea0 R14: 000000000000555e R15: 0000200000000780
[   87.630337][ T5857]  </TASK>
[   87.634288][ T5857] Kernel Offset: disabled
[   87.638886][ T5857] Rebooting in 86400 seconds..