last executing test programs:

1m9.365251474s ago: executing program 1 (id=2140):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)

1m9.189450178s ago: executing program 1 (id=2143):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
unshare(0x2000400)

1m9.03944991s ago: executing program 1 (id=2146):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10, &(0x7f0000000c80), 0xff, 0x249, &(0x7f0000000880)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)

1m8.737542005s ago: executing program 1 (id=2150):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x800042, &(0x7f0000000000), 0xfc, 0x588, &(0x7f0000000700)="$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")
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='pstore\x00', 0x1800003, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x800000, 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x10}, 0x18)

1m8.275000882s ago: executing program 1 (id=2156):
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000200)='./bus\x00', 0x1000000, &(0x7f00000005c0)=ANY=[], 0x1, 0x126f, &(0x7f0000001600)="$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")
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001100)=ANY=[@ANYBLOB="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"/849], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x3)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f00000003c0)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0xfd, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10, 0x2}}}}}}, 0x0)

1m6.848545936s ago: executing program 1 (id=2165):
r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700100000000000ff000020850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, &(0x7f0000000180))
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x4, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x20000, 0x0})

1m6.744191048s ago: executing program 32 (id=2165):
r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700100000000000ff000020850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, &(0x7f0000000180))
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x4, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x20000, 0x0})

23.906250682s ago: executing program 2 (id=2428):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01d90000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)

23.680431056s ago: executing program 2 (id=2430):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
accept$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000200)=ANY=[@ANYBLOB="696f636861720065743d6d6163677265656b2c066d61736b3d30303030303030303030303030303030303030303030352c6e616d65636173653d312c7569643d", @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x1528, &(0x7f00000014c0)="$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")
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_proto_private(0xffffffffffffffff, 0x89e0, 0x0)
syz_mount_image$ext4(&(0x7f0000000b80)='ext3\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@dax_inode}, {@sb={'sb', 0x3d, 0x5}}, {@jqfmt_vfsv0}, {@nodelalloc}, {@barrier_val={'barrier', 0x3d, 0xff}}, {@delalloc}, {@noacl}, {@dax_never}]}, 0x1, 0xb80, &(0x7f0000000c40)="$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")

21.230527186s ago: executing program 2 (id=2437):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x80000)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
sendmmsg$alg(r1, &(0x7f00000027c0)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000002180)}], 0x1, 0x0, 0x0, 0x20044014}], 0x1, 0x0)

20.949696931s ago: executing program 2 (id=2439):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x34, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x48805}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000440))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000340)={'wg1\x00'})
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/5, 0x5}, &(0x7f0000001340)=0x40)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x11)
socket$phonet_pipe(0x23, 0x5, 0x2)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x2)
readv(r5, &(0x7f0000000000)=[{&(0x7f00000005c0)=""/244, 0xf4}], 0x1)
ioctl$TIOCGLCKTRMIOS(r5, 0x5456, &(0x7f00000003c0)={0x8, 0x6, 0x1, 0x6, 0x19, "167e7c5f81d9f1e483e35a88c1975c45fbeada"})
ioctl$TIOCVHANGUP(r5, 0x5437, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0xa2, 0x4, 0x1, 'queue0\x00', 0x5})

19.781497771s ago: executing program 2 (id=2443):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg(r1, &(0x7f0000001040)=[{{&(0x7f0000000140)=@caif=@util={0x25, "0648da2408299af0d155fdd1db4a434d"}, 0x80, 0x0}}], 0x1, 0x4000)
shutdown(r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYRES64=r1, @ANYRESDEC=r3, @ANYRES32=r3, @ANYRES16=r4, @ANYRES64=r4], 0x78}, 0x1, 0x0, 0x0, 0x24040000}, 0x0)
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000001b80)={0x0, 0x62, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYRES16=r2, @ANYRES16=r5, @ANYRESDEC=0x0], 0x30}, 0x1, 0x0, 0x0, 0x440c0}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_MON_PEER_GET(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="030b00000000000000000e"], 0x14}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r10, 0x8914, &(0x7f0000000000))
r11 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r11, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @bcast, @bpq0, 0x2, [@bcast, @null, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]})

19.490162616s ago: executing program 2 (id=2448):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
accept$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000200)=ANY=[@ANYBLOB="696f636861720065743d6d6163677265656b2c066d61736b3d30303030303030303030303030303030303030303030352c6e616d65636173653d312c7569643d", @ANYRESHEX=0x0, @ANYBLOB="2c666d61736b3d30303030303030303030303030303030303030303031302c646973636172642c666d61736b3d30303030303030303030303030303030303030303030362c696f636861727365743d6575632d6a702c6572726f72733d636f6e74696e75652c616c6c6f775f7574696d653d30303030303030303030303030303030303134373037302c0092803b831534d131135366249e8a045ee656058ddf6f41400b01a0870e4c656ef6f11325a20c319fd81269acc3b77200feb4294a821f553876d64b4a41390c44492e6f79c4b09bbe8e5cb02585b919505651c34f3e21f9532204a0c936a1da6422edb1108cf73536e8fbe241e030f5b5e1d081994fbe8a093c44b63f3da6a8a46706b47fa3"], 0x1, 0x1528, &(0x7f00000014c0)="$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")
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_proto_private(0xffffffffffffffff, 0x89e0, 0x0)
syz_mount_image$ext4(&(0x7f0000000b80)='ext3\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@dax_inode}, {@sb={'sb', 0x3d, 0x5}}, {@jqfmt_vfsv0}, {@nodelalloc}, {@barrier_val={'barrier', 0x3d, 0xff}}, {@delalloc}, {@noacl}, {@dax_never}]}, 0x1, 0xb80, &(0x7f0000000c40)="$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")

5.754496074s ago: executing program 0 (id=2512):
socket(0x15, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
get_robust_list(r3, 0x0, 0x0)

5.289747402s ago: executing program 3 (id=2518):
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2c, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008041}, 0x8190)

5.177693834s ago: executing program 3 (id=2519):
syz_open_dev$usbfs(&(0x7f0000000100), 0x74, 0x101201)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0xfffffffd, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xd}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
ptrace$ARCH_MAP_VDSO_64(0x1e, r0, 0x6, 0x2003)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])
chdir(&(0x7f0000000300)='./file0\x00')
bind$llc(0xffffffffffffffff, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x6}, 0x10)
listen(0xffffffffffffffff, 0x0)
listen(0xffffffffffffffff, 0xfffffff7)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000100), 0xfffffd9d)

3.929429855s ago: executing program 33 (id=2448):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
accept$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000200)=ANY=[@ANYBLOB="696f636861720065743d6d6163677265656b2c066d61736b3d30303030303030303030303030303030303030303030352c6e616d65636173653d312c7569643d", @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x1528, &(0x7f00000014c0)="$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")
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_proto_private(0xffffffffffffffff, 0x89e0, 0x0)
syz_mount_image$ext4(&(0x7f0000000b80)='ext3\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@dax_inode}, {@sb={'sb', 0x3d, 0x5}}, {@jqfmt_vfsv0}, {@nodelalloc}, {@barrier_val={'barrier', 0x3d, 0xff}}, {@delalloc}, {@noacl}, {@dax_never}]}, 0x1, 0xb80, &(0x7f0000000c40)="$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")

3.888759696s ago: executing program 0 (id=2523):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01d90000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x3c}}, 0x0)

3.888024886s ago: executing program 3 (id=2525):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0)
pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
truncate(&(0x7f0000000080)='./file1\x00', 0xffff)
socket$unix(0x1, 0x2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x1fe)
pwritev2(r1, &(0x7f00000002c0)=[{&(0x7f0000000140)="f3", 0x1}], 0x1, 0x401, 0x3, 0x15)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}})

3.759131878s ago: executing program 3 (id=2527):
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$audio(0xffffff9c, 0x0, 0x402, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet6(0x10, 0x80000, 0x3)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
add_key$user(&(0x7f0000000400), &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000480)="ba", 0x1, 0xfffffffffffffffd)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0)

3.699589748s ago: executing program 5 (id=2529):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, 0x0, 0x0)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x2}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0xfe, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004700)={'team0\x00', <r6=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000380)={0x64, r5, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r6}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084)

3.412100724s ago: executing program 0 (id=2531):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
shutdown(r0, 0x0)
setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000001a40)={0xff, @dev={0xac, 0x14, 0x14, 0x29}, 0x4e23, 0x2, 'sh\x00', 0x18, 0x80006, 0x71}, 0x2c)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYRES64=r1, @ANYRESDEC=r3, @ANYRES32=r3, @ANYRES16=r4, @ANYRES64=r4], 0x78}, 0x1, 0x0, 0x0, 0x24040000}, 0x0)
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000001b80)={0x0, 0x62, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYRES16=r2, @ANYRES16=r5, @ANYRESDEC=0x0], 0x30}, 0x1, 0x0, 0x0, 0x440c0}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_MON_PEER_GET(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="030b00000000000000000e"], 0x14}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r10, 0x8914, &(0x7f0000000000))
r11 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r11, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @bcast, @bpq0, 0x2, [@bcast, @null, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]})

2.830201954s ago: executing program 5 (id=2532):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
mount$9p_unix(0x0, 0x0, 0x0, 0x10000, &(0x7f0000000440)={'trans=unix,', {[{@debug}, {@access_user}, {@access_uid={'access', 0x3d, 0xee01}}, {@posixacl}, {@dfltgid}, {@loose}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'bridge0\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x7}}]}})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x40)
sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)
pipe2$9p(0x0, 0x80000)
r5 = openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r5, 0xc0a45320, &(0x7f00000000c0)={{0x80, 0xf7}, 'port1\x00', 0x3ab, 0x2062f, 0x3, 0x7, 0x0, 0xc, 0x3fc, 0x0, 0x7, 0xfd})
openat$sequencer(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x3, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xa5d28dc4cd652163, 0xfff2}, {0x2, 0xffff}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0x10)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000)

1.721964402s ago: executing program 0 (id=2534):
r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301)
ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, &(0x7f0000000180))
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0)

1.667020333s ago: executing program 5 (id=2536):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0)
pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
truncate(&(0x7f0000000080)='./file1\x00', 0xffff)
socket$unix(0x1, 0x2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x1fe)
pwritev2(r1, &(0x7f00000002c0)=[{&(0x7f0000000140)="f3", 0x1}], 0x1, 0x401, 0x3, 0x15)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}})

1.661762353s ago: executing program 4 (id=2537):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, 0x0, &(0x7f0000000740), 0x20075, r0}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000600)={r0, &(0x7f00000002c0)="d481b1d090", &(0x7f00000005c0)=""/16}, 0x20)

1.620450753s ago: executing program 4 (id=2538):
socket$rds(0x15, 0x5, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r3}]}, 0x20}}, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r4, &(0x7f0000000000), &(0x7f0000000140)=""/75}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001500)={0x34, 0x0, 0x1, 0x4000, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x6}]}, 0x34}}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0)

1.507283066s ago: executing program 5 (id=2539):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
r0 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40000)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
socket(0x10, 0x80002, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0x78)
fcntl$addseals(r0, 0x409, 0x8)
fallocate(r0, 0x3, 0x0, 0x3)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r1, 0xffffffffffffffff, 0x0)

1.429074757s ago: executing program 4 (id=2540):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01d90000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x3c}}, 0x0)

1.26565246s ago: executing program 5 (id=2541):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000", @ANYRES32=r3, @ANYBLOB="01d90000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffffffffff130012800b00010062617461647600000400028008000a00", @ANYRES32=r3], 0x3c}}, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0)
sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0)

1.164917401s ago: executing program 4 (id=2542):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, 0x0, 0x0)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x2}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0xfe, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004700)={'team0\x00', <r6=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000380)={0x64, r5, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r6}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084)

898.975025ms ago: executing program 4 (id=2543):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth1_to_team\x00'})
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x44}, 0x1, 0x2, 0x0, 0x800}, 0x0)

860.465616ms ago: executing program 5 (id=2544):
socket(0x15, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
get_robust_list(r3, 0x0, 0x0)

859.248106ms ago: executing program 4 (id=2545):
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
keyctl$assume_authority(0x10, 0x0)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000001300)=@ethtool_stats})
openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
io_setup(0x3, 0x0)
io_submit(0x0, 0x0, &(0x7f0000000800))
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000203010200000000000000000000000009"], 0x30}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r5}, 0x10)
clock_settime(0x0, &(0x7f0000003c80)={0x77359400})

614.60987ms ago: executing program 0 (id=2546):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x14, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x0)

528.291672ms ago: executing program 3 (id=2547):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, 0x0, &(0x7f0000000740), 0x20075, r0}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000600)={r0, &(0x7f00000002c0)="d481b1d090", &(0x7f00000005c0)=""/16}, 0x20)

515.641052ms ago: executing program 0 (id=2548):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$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")
r0 = openat(0xffffffffffffff9c, 0x0, 0x141042, 0x0)
pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
truncate(&(0x7f0000000080)='./file1\x00', 0xffff)
socket$unix(0x1, 0x2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x1fe)
pwritev2(r1, &(0x7f00000002c0)=[{&(0x7f0000000140)="f3", 0x1}], 0x1, 0x401, 0x3, 0x15)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}})

0s ago: executing program 3 (id=2549):
socket$rds(0x15, 0x5, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r3}]}, 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, 0x0}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r4, &(0x7f0000000000), &(0x7f0000000140)=""/75}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001500)={0x34, 0x0, 0x1, 0x4000, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x6}]}, 0x34}}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0)

0s ago: executing program 4 (id=2550):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40000)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
socket(0x10, 0x80002, 0x0)
sendfile(r0, r1, &(0x7f00000001c0), 0x8)
fcntl$addseals(r1, 0x409, 0x8)
fallocate(r1, 0x3, 0x0, 0x3)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r2, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

  83.583337][ T5482] loop3: detected capacity change from 0 to 128
[   83.621617][ T5482] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   85.940953][ T5532] loop1: detected capacity change from 0 to 1024
[   85.946730][ T5532] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   85.973063][ T5532] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   86.008051][ T5532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   86.011063][ T5532] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   87.180389][ T4297] EXT4-fs (loop1): unmounting filesystem.
[   88.842484][ T5566] netlink: 12 bytes leftover after parsing attributes in process `syz.4.398'.
[   88.845378][ T5566] netlink: 12 bytes leftover after parsing attributes in process `syz.4.398'.
[   88.849118][ T5566] netlink: 16 bytes leftover after parsing attributes in process `syz.4.398'.
[   88.851819][ T5566] netlink: 16 bytes leftover after parsing attributes in process `syz.4.398'.
[   89.195719][ T5572] loop1: detected capacity change from 0 to 1024
[   89.216114][ T5572] hfsplus: failed to load attributes file
[   89.247750][ T5572] loop1: detected capacity change from 0 to 256
[   89.268177][ T5572] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[   96.615057][ T5505] netlink: 'syz.0.374': attribute type 1 has an invalid length.
[   96.627009][ T5512] device ip6gretap1 entered promiscuous mode
[   96.632576][ T5521] netlink: 36 bytes leftover after parsing attributes in process `syz.2.380'.
[   96.732595][ T4298] EXT4-fs (loop3): unmounting filesystem.
[   96.794224][ T5593] loop1: detected capacity change from 0 to 512
[   96.824393][ T5593] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   96.964844][ T5593] EXT4-fs (loop1): 1 orphan inode deleted
[   96.966535][ T5593] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   96.996007][   T39] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14
[   97.015333][   T39] EXT4-fs error (device loop1): ext4_release_dquot:6825: comm kworker/u4:2: Failed to release dquot type 1
[   97.743092][ T4297] EXT4-fs (loop1): unmounting filesystem.
[   97.779599][ T5606] loop2: detected capacity change from 0 to 512
[   97.897058][ T5614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   97.924411][ T5614] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   97.995169][ T5606] EXT4-fs (loop2): 1 orphan inode deleted
[   97.997081][ T5606] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   98.009392][   T55] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14
[   98.013411][   T55] EXT4-fs error (device loop2): ext4_release_dquot:6825: comm kworker/u4:3: Failed to release dquot type 1
[   98.183007][ T4303] EXT4-fs (loop2): unmounting filesystem.
[   98.186333][   T55] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14
[   98.195062][   T55] EXT4-fs error (device loop2): ext4_release_dquot:6825: comm kworker/u4:3: Failed to release dquot type 1
[   99.817211][    C0] sched: RT throttling activated
[   99.872155][ T5626] netlink: 36 bytes leftover after parsing attributes in process `syz.3.418'.
[  100.225118][ T5639] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.382149][ T5645] netlink: 'syz.2.422': attribute type 1 has an invalid length.
[  100.413365][ T5645] 8021q: adding VLAN 0 to HW filter on device bond4
[  100.420933][ T5646] netlink: 'syz.4.423': attribute type 12 has an invalid length.
[  100.467663][ T5647] bond4: (slave veth5): Enslaving as an active interface with a down link
[  100.472942][ T5657] device wg2 entered promiscuous mode
[  100.639243][ T5664] netlink: 36 bytes leftover after parsing attributes in process `syz.2.432'.
[  101.095399][ T5671] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  101.790395][ T5673] loop1: detected capacity change from 0 to 1024
[  101.821770][ T5673] EXT4-fs: Ignoring removed nobh option
[  101.823515][ T5673] EXT4-fs: Ignoring removed bh option
[  101.828777][ T5673] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  101.855281][ T5677] syz.2.436 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  101.905310][ T5673] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  102.077029][ T5688] loop2: detected capacity change from 0 to 128
[  102.094237][ T5688] EXT4-fs (loop2): Test dummy encryption mode enabled
[  102.117775][ T5688] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  102.243266][ T5688] EXT4-fs warning (device loop2): __ext4_ioctl:1246: Setting inode version is not supported with metadata_csum enabled.
[  102.362887][ T4303] EXT4-fs (loop2): unmounting filesystem.
[  102.420056][ T5694] netlink: 28 bytes leftover after parsing attributes in process `syz.3.441'.
[  102.593220][ T5699] netlink: 36 bytes leftover after parsing attributes in process `syz.3.443'.
[  102.600806][ T5701] loop2: detected capacity change from 0 to 256
[  102.656768][ T5701] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  103.273663][ T5708] exFAT-fs (loop2): hint_cluster is invalid (17)
[  104.386009][ T5716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  104.412054][ T5716] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  104.836900][ T4297] EXT4-fs (loop1): unmounting filesystem.
[  105.891707][ T5725] netlink: 28 bytes leftover after parsing attributes in process `syz.3.453'.
[  106.270426][ T5731] netlink: 12 bytes leftover after parsing attributes in process `syz.3.455'.
[  108.170946][ T5739] 9pnet: p9_errstr2errno: server reported unknown error 
[  108.569991][ T5742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  108.572508][ T5742] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  109.719163][ T5756] netlink: 28 bytes leftover after parsing attributes in process `syz.0.464'.
[  109.807999][ T5758] netlink: 12 bytes leftover after parsing attributes in process `syz.0.466'.
[  109.852427][   T27] audit: type=1326 audit(109.830:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5759 comm="syz.3.465" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6d5bce8 code=0x7ffc0000
[  109.887903][   T27] audit: type=1326 audit(109.870:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5759 comm="syz.3.465" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=39 compat=0 ip=0xffffb6d5bce8 code=0x7ffc0000
[  109.907322][   T27] audit: type=1326 audit(109.870:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5759 comm="syz.3.465" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6d5bce8 code=0x7ffc0000
[  110.375980][ T5770] loop3: detected capacity change from 0 to 256
[  110.383673][ T5770] exfat: Unknown parameter 'iochar'
[  110.988339][ T5772] loop3: detected capacity change from 0 to 4096
[  110.994339][ T5772] ext3: Unknown parameter 'noacl'
[  112.639426][   T27] audit: type=1326 audit(112.620:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5777 comm="syz.1.472" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8295bce8 code=0x7ffc0000
[  112.659964][   T27] audit: type=1326 audit(112.640:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5777 comm="syz.1.472" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=200 compat=0 ip=0xffff8295bce8 code=0x7ffc0000
[  112.726751][   T27] audit: type=1326 audit(112.640:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5777 comm="syz.1.472" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8295bce8 code=0x7ffc0000
[  112.781729][   T27] audit: type=1326 audit(112.690:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5777 comm="syz.1.472" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffff8295bce8 code=0x7ffc0000
[  112.815598][   T27] audit: type=1326 audit(112.690:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5777 comm="syz.1.472" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8295bce8 code=0x7ffc0000
[  112.951853][ T5785] loop1: detected capacity change from 0 to 512
[  112.985283][ T5785] EXT4-fs: Ignoring removed mblk_io_submit option
[  113.007743][ T5785] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  113.029355][ T5785] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002]
[  113.031714][ T5785] System zones: 1-12
[  113.058119][ T5785] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2186: inode #15: comm syz.1.474: corrupted in-inode xattr
[  113.066437][ T5785] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.474: couldn't read orphan inode 15 (err -117)
[  113.084349][ T5785] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  113.351444][ T5796] netlink: 12 bytes leftover after parsing attributes in process `syz.4.478'.
[  113.377850][ T5793] netlink: 28 bytes leftover after parsing attributes in process `syz.2.477'.
[  114.223957][ T5804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  114.236007][ T5804] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  114.628712][ T4297] EXT4-fs (loop1): unmounting filesystem.
[  115.769451][ T5809] loop3: detected capacity change from 0 to 40427
[  115.772547][ T5809] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  115.775064][ T5809] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  115.797498][ T5809] F2FS-fs (loop3): invalid crc value
[  115.799469][ T5826] netlink: 12 bytes leftover after parsing attributes in process `syz.4.490'.
[  115.862356][ T5809] F2FS-fs (loop3): Found nat_bits in checkpoint
[  115.912014][ T5809] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  115.914178][ T5809] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  115.981141][ T5831] loop2: detected capacity change from 0 to 512
[  116.063536][ T5831] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  116.066084][ T5831] System zones: 0-2, 18-18, 34-34
[  116.103974][ T5831] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.491: bg 0: block 248: padding at end of block bitmap is not set
[  117.484317][ T5831] Quota error (device loop2): write_blk: dquota write failed
[  117.489723][ T5831] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  117.571119][ T5831] EXT4-fs error (device loop2): ext4_acquire_dquot:6802: comm syz.2.491: Failed to acquire dquot type 1
[  117.627127][ T5831] EXT4-fs (loop2): 1 truncate cleaned up
[  117.652580][ T5831] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  117.654084][ T5844] netlink: 28 bytes leftover after parsing attributes in process `syz.4.493'.
[  117.697710][ T4953] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  117.702891][ T4953] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  117.785513][ T4303] EXT4-fs (loop2): unmounting filesystem.
[  117.840903][ T5849] device veth0_vlan left promiscuous mode
[  117.842602][ T5849] device veth0_vlan entered promiscuous mode
[  118.210874][ T5861] loop1: detected capacity change from 0 to 256
[  118.414230][ T5863] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  119.081840][ T5869] netlink: 12 bytes leftover after parsing attributes in process `syz.2.502'.
[  119.717671][ T5880] netlink: 28 bytes leftover after parsing attributes in process `syz.2.506'.
[  119.875958][ T5885] loop2: detected capacity change from 0 to 512
[  120.015299][ T5885] EXT4-fs (loop2): Test dummy encryption mode enabled
[  120.021258][ T5885] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  120.053437][ T5885] EXT4-fs (loop2): 1 truncate cleaned up
[  120.055526][ T5885] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  121.871586][ T5889] netlink: 24 bytes leftover after parsing attributes in process `syz.1.509'.
[  121.998673][ T4303] EXT4-fs (loop2): unmounting filesystem.
[  122.091200][ T5901] loop2: detected capacity change from 0 to 512
[  122.111079][ T5899] netlink: 'syz.3.512': attribute type 27 has an invalid length.
[  122.183979][ T5901] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  122.271119][ T5906] raw_sendmsg: syz.3.512 forgot to set AF_INET. Fix it!
[  122.417380][ T4303] EXT4-fs (loop2): unmounting filesystem.
[  122.517091][ T5913] loop2: detected capacity change from 0 to 512
[  122.544912][ T5913] EXT4-fs (loop2): Test dummy encryption mode enabled
[  122.559032][ T5913] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  122.580498][ T5913] EXT4-fs (loop2): 1 truncate cleaned up
[  122.583405][ T5913] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  122.729150][ T5897] loop1: detected capacity change from 0 to 65536
[  122.752665][ T4303] EXT4-fs (loop2): unmounting filesystem.
[  122.895136][ T5897] XFS (loop1): Mounting V5 Filesystem
[  122.962733][ T5899] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.983522][ T5897] XFS (loop1): Ending clean mount
[  123.036809][ T5897] XFS (loop1): Quotacheck needed: Please wait.
[  123.213272][ T5897] XFS (loop1): Quotacheck: Done.
[  123.296871][ T4297] XFS (loop1): Unmounting Filesystem
[  123.319847][   T27] audit: type=1326 audit(123.290:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5935 comm="syz.0.520" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa395bce8 code=0x7ffc0000
[  123.333819][   T27] audit: type=1326 audit(123.290:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5935 comm="syz.0.520" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=285 compat=0 ip=0xffffa395bce8 code=0x7ffc0000
[  123.346727][   T27] audit: type=1326 audit(123.290:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5935 comm="syz.0.520" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa395bce8 code=0x7ffc0000
[  123.587474][ T5899] device wg2 left promiscuous mode
[  123.930971][ T5899] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  124.063051][ T5899] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  124.313017][ T5951] loop1: detected capacity change from 0 to 512
[  124.317937][ T5951] EXT4-fs: Ignoring removed orlov option
[  124.341372][ T5951] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.525: bg 0: block 411: padding at end of block bitmap is not set
[  124.353807][ T5951] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.525: inode #1: comm syz.1.525: iget: illegal inode #
[  124.362772][ T5951] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.525: error while reading EA inode 1 err=-117
[  124.367144][ T5951] EXT4-fs (loop1): 1 orphan inode deleted
[  124.372930][ T5951] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  124.466367][ T4297] EXT4-fs (loop1): unmounting filesystem.
[  124.756418][ T5899] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  124.759242][ T5899] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  124.761876][ T5899] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  124.764538][ T5899] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.050189][ T5921] netlink: 12 bytes leftover after parsing attributes in process `syz.2.516'.
[  125.053890][ T5930] netlink: 28 bytes leftover after parsing attributes in process `syz.4.518'.
[  126.368597][ T2060] ieee802154 phy0 wpan0: encryption failed: -22
[  126.370503][ T2060] ieee802154 phy1 wpan1: encryption failed: -22
[  126.372960][   T27] audit: type=1326 audit(126.040:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5959 comm="syz.3.530" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6d5bce8 code=0x7ffc0000
[  126.433416][   T27] audit: type=1326 audit(126.040:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5959 comm="syz.3.530" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6d5bce8 code=0x7ffc0000
[  126.486132][   T27] audit: type=1326 audit(126.040:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5959 comm="syz.3.530" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffffb6d5bce8 code=0x7ffc0000
[  126.536289][   T27] audit: type=1326 audit(126.040:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5959 comm="syz.3.530" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6d5bce8 code=0x7ffc0000
[  126.583064][   T27] audit: type=1326 audit(126.040:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5959 comm="syz.3.530" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6d5bce8 code=0x7ffc0000
[  126.625936][   T27] audit: type=1326 audit(126.040:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5959 comm="syz.3.530" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffffb6d5bce8 code=0x7ffc0000
[  126.693559][   T27] audit: type=1326 audit(126.040:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5959 comm="syz.3.530" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6d5bce8 code=0x7ffc0000
[  126.846693][ T5980] loop2: detected capacity change from 0 to 512
[  127.433463][ T5980] EXT4-fs (loop2): 1 orphan inode deleted
[  127.435249][ T5980] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  127.624429][   T11] EXT4-fs error (device loop2): ext4_release_dquot:6825: comm kworker/u4:1: Failed to release dquot type 1
[  127.673574][ T5993] netlink: 12 bytes leftover after parsing attributes in process `syz.1.538'.
[  127.706711][ T5993] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.722307][ T4303] EXT4-fs (loop2): unmounting filesystem.
[  128.705162][ T6003] loop2: detected capacity change from 0 to 512
[  128.714414][ T6001] netlink: 28 bytes leftover after parsing attributes in process `syz.4.541'.
[  128.762410][ T6003] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  128.913307][ T4303] EXT4-fs (loop2): unmounting filesystem.
[  131.864612][ T6034] loop0: detected capacity change from 0 to 512
[  131.917128][ T6034] EXT4-fs (loop0): Test dummy encryption mode enabled
[  132.152785][ T6034] EXT4-fs error (device loop0): __ext4_iget:5055: inode #11: block 1: comm syz.0.550: invalid block
[  132.159293][ T6034] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.550: couldn't read orphan inode 11 (err -117)
[  132.161122][ T6034] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  132.807407][ T6032] netlink: 12 bytes leftover after parsing attributes in process `syz.1.551'.
[  133.088853][ T6038] netlink: 28 bytes leftover after parsing attributes in process `syz.1.554'.
[  134.827057][ T4294] EXT4-fs (loop0): unmounting filesystem.
[  135.323783][ T6058] loop3: detected capacity change from 0 to 512
[  135.328959][ T6058] EXT4-fs (loop3): Test dummy encryption mode enabled
[  135.331021][ T6058] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  135.372389][ T6058] EXT4-fs (loop3): 1 truncate cleaned up
[  135.374302][ T6058] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  135.497324][ T6065] netlink: 12 bytes leftover after parsing attributes in process `syz.2.564'.
[  135.673166][ T6070] netlink: 28 bytes leftover after parsing attributes in process `syz.2.566'.
[  136.553552][ T4298] EXT4-fs (loop3): unmounting filesystem.
[  137.823079][ T6092] netlink: 12 bytes leftover after parsing attributes in process `syz.1.576'.
[  138.024093][ T6097] netlink: 28 bytes leftover after parsing attributes in process `syz.0.578'.
[  139.118426][ T6114] netlink: 'syz.0.583': attribute type 10 has an invalid length.
[  139.167627][ T6114] device macvlan0 entered promiscuous mode
[  139.187172][ T6114] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  139.254039][ T6126] netlink: 4 bytes leftover after parsing attributes in process `syz.4.591'.
[  139.746180][ T6124] netlink: 12 bytes leftover after parsing attributes in process `syz.2.590'.
[  139.753726][ T6135] netlink: 28 bytes leftover after parsing attributes in process `syz.1.593'.
[  139.836228][ T6137] netlink: 'syz.2.595': attribute type 11 has an invalid length.
[  139.854791][ T6137] netlink: 36 bytes leftover after parsing attributes in process `syz.2.595'.
[  139.908160][ T6142] Driver unsupported XDP return value 0 on prog  (id 21) dev N/A, expect packet loss!
[  140.221552][ T6163] netlink: 12 bytes leftover after parsing attributes in process `syz.4.605'.
[  140.321371][ T6170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.608'.
[  140.644282][ T6188] netlink: 12 bytes leftover after parsing attributes in process `syz.4.616'.
[  141.139052][ T6216] netlink: 12 bytes leftover after parsing attributes in process `syz.1.627'.
[  143.913411][ T6254] netlink: 'syz.0.640': attribute type 10 has an invalid length.
[  143.915563][ T6254] netlink: 40 bytes leftover after parsing attributes in process `syz.0.640'.
[  143.990061][ T6254] team0: Port device geneve0 added
[  144.003568][ T6263] netlink: 12 bytes leftover after parsing attributes in process `syz.4.644'.
[  145.141110][ T6333] device syzkaller1 entered promiscuous mode
[  145.260615][ T6338] netlink: 4 bytes leftover after parsing attributes in process `syz.0.669'.
[  145.265245][ T6338] netlink: 12 bytes leftover after parsing attributes in process `syz.0.669'.
[  146.877095][   T27] kauditd_printk_skb: 29 callbacks suppressed
[  146.877114][   T27] audit: type=1326 audit(146.260:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6345 comm="syz.3.673" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6d5bce8 code=0x7ffc0000
[  147.028126][ T6354] loop2: detected capacity change from 0 to 256
[  147.034441][ T6354] exfat: Unknown parameter 'iochar'
[  148.133148][   T27] audit: type=1326 audit(146.260:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6345 comm="syz.3.673" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6d5bce8 code=0x7ffc0000
[  148.141924][   T27] audit: type=1326 audit(146.360:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6345 comm="syz.3.673" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffffb6d5bce8 code=0x7ffc0000
[  148.156562][   T27] audit: type=1326 audit(146.360:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6345 comm="syz.3.673" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6d5bce8 code=0x7ffc0000
[  148.559397][ T6358] loop2: detected capacity change from 0 to 4096
[  148.564830][ T6358] ext3: Unknown parameter 'noacl'
[  148.744286][   T27] audit: type=1326 audit(146.360:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6345 comm="syz.3.673" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6d5bce8 code=0x7ffc0000
[  149.112739][   T27] audit: type=1326 audit(146.460:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6345 comm="syz.3.673" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffffb6d5bce8 code=0x7ffc0000
[  149.197390][   T27] audit: type=1326 audit(146.460:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6345 comm="syz.3.673" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6d5bce8 code=0x7ffc0000
[  149.241596][   T27] audit: type=1326 audit(146.460:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6345 comm="syz.3.673" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6d5bce8 code=0x7ffc0000
[  149.312475][   T27] audit: type=1326 audit(146.560:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6345 comm="syz.3.673" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=203 compat=0 ip=0xffffb6d5bce8 code=0x7ffc0000
[  149.373534][   T27] audit: type=1326 audit(146.560:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6345 comm="syz.3.673" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6d5bce8 code=0x7ffc0000
[  150.108249][ T6393] netlink: 4 bytes leftover after parsing attributes in process `syz.3.690'.
[  150.623988][ T6422] IPVS: set_ctl: invalid protocol: 137 224.0.0.2:20000
[  151.147592][ T6446] netlink: 104 bytes leftover after parsing attributes in process `syz.1.714'.
[  151.849983][ T6471] xfrm0 speed is unknown, defaulting to 1000
[  151.852029][ T6471] xfrm0 speed is unknown, defaulting to 1000
[  151.858860][ T6471] xfrm0 speed is unknown, defaulting to 1000
[  151.873531][ T6471] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  151.881816][ T6471] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  151.926753][ T6471] xfrm0 speed is unknown, defaulting to 1000
[  151.934788][ T6471] xfrm0 speed is unknown, defaulting to 1000
[  151.940165][ T6471] xfrm0 speed is unknown, defaulting to 1000
[  151.942626][ T6471] xfrm0 speed is unknown, defaulting to 1000
[  151.945271][ T6471] xfrm0 speed is unknown, defaulting to 1000
[  152.474513][ T6497] xfrm0 speed is unknown, defaulting to 1000
[  153.786818][ T6525] netlink: 4 bytes leftover after parsing attributes in process `syz.0.749'.
[  153.870962][ T6526] xt_hashlimit: overflow, rate too high: 1125899906842624
[  154.067943][ T6532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.763'.
[  154.335542][ T6539] loop3: detected capacity change from 0 to 512
[  154.369403][ T6539] EXT4-fs (loop3): Test dummy encryption mode enabled
[  154.721097][ T6539] EXT4-fs error (device loop3): __ext4_iget:5055: inode #11: block 1: comm syz.3.753: invalid block
[  154.725948][ T6539] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.753: couldn't read orphan inode 11 (err -117)
[  154.732657][ T6539] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  156.830467][ T6556] xfrm0 speed is unknown, defaulting to 1000
[  156.852430][ T4298] EXT4-fs (loop3): unmounting filesystem.
[  156.875093][ T6560] netlink: 4 bytes leftover after parsing attributes in process `syz.1.761'.
[  156.915918][ T6560] netlink: 12 bytes leftover after parsing attributes in process `syz.1.761'.
[  157.024206][ T6557] netlink: 208 bytes leftover after parsing attributes in process `syz.0.760'.
[  157.081034][ T6568] netlink: 4 bytes leftover after parsing attributes in process `syz.3.766'.
[  157.586276][ T6587] netlink: 'syz.1.773': attribute type 11 has an invalid length.
[  157.597861][ T6587] netlink: 36 bytes leftover after parsing attributes in process `syz.1.773'.
[  157.790021][ T6593] loop0: detected capacity change from 0 to 512
[  157.804481][ T6592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.776'.
[  157.840410][ T6592] netlink: 12 bytes leftover after parsing attributes in process `syz.1.776'.
[  157.852966][ T6593] EXT4-fs (loop0): Test dummy encryption mode enabled
[  157.854965][ T6593] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  157.871082][ T6596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.777'.
[  158.619831][ T6593] EXT4-fs (loop0): 1 truncate cleaned up
[  158.621746][ T6593] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  158.860513][ T6610] netlink: 'syz.3.781': attribute type 1 has an invalid length.
[  158.897365][ T4301] Bluetooth: hci0: command 0x0406 tx timeout
[  158.899119][ T4301] Bluetooth: hci2: command 0x0406 tx timeout
[  158.900769][ T4301] Bluetooth: hci1: command 0x0406 tx timeout
[  158.902385][ T4301] Bluetooth: hci4: command 0x0406 tx timeout
[  158.903820][ T6610] 8021q: adding VLAN 0 to HW filter on device bond1
[  158.904006][ T4301] Bluetooth: hci3: command 0x0406 tx timeout
[  159.272841][ T6615] bond1: (slave veth3): Enslaving as an active interface with a down link
[  159.550865][ T4294] EXT4-fs (loop0): unmounting filesystem.
[  160.475113][ T6635] netlink: 4 bytes leftover after parsing attributes in process `syz.0.790'.
[  160.511761][ T6635] netlink: 12 bytes leftover after parsing attributes in process `syz.0.790'.
[  160.795819][ T6652] netlink: 'syz.0.799': attribute type 1 has an invalid length.
[  160.890782][ T6663] netlink: 'syz.3.803': attribute type 1 has an invalid length.
[  160.903394][ T6652] 8021q: adding VLAN 0 to HW filter on device bond1
[  161.014077][ T6660] bond1: (slave veth3): Enslaving as an active interface with a down link
[  162.273517][ T6692] netlink: 'syz.2.816': attribute type 1 has an invalid length.
[  162.295766][ T6692] 8021q: adding VLAN 0 to HW filter on device bond5
[  162.314176][ T6695] loop0: detected capacity change from 0 to 512
[  162.323141][ T6695] EXT4-fs (loop0): Test dummy encryption mode enabled
[  162.325214][ T6695] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  162.331705][ T6692] bond5: (slave veth7): Enslaving as an active interface with a down link
[  162.390130][ T6699] __nla_validate_parse: 4 callbacks suppressed
[  162.390148][ T6699] netlink: 4 bytes leftover after parsing attributes in process `syz.4.820'.
[  162.403406][ T6702] netlink: 'syz.3.819': attribute type 1 has an invalid length.
[  162.425343][ T6695] EXT4-fs (loop0): 1 truncate cleaned up
[  162.427630][ T6695] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  163.441211][ T4294] EXT4-fs (loop0): unmounting filesystem.
[  164.355024][ T6738] netlink: 4 bytes leftover after parsing attributes in process `syz.0.832'.
[  164.370192][ T6739] netlink: 'syz.1.831': attribute type 1 has an invalid length.
[  164.405238][ T6739] 8021q: adding VLAN 0 to HW filter on device bond1
[  164.568575][ T6746] bond1: (slave veth3): Enslaving as an active interface with a down link
[  164.635216][ T6739] device ip6gretap1 entered promiscuous mode
[  165.712590][ T6775] netlink: 4 bytes leftover after parsing attributes in process `syz.2.848'.
[  166.623082][ T6786] netlink: 'syz.4.853': attribute type 1 has an invalid length.
[  166.665227][ T6786] 8021q: adding VLAN 0 to HW filter on device bond1
[  166.665602][ T6791] loop2: detected capacity change from 0 to 512
[  166.673542][ T6791] EXT4-fs (loop2): Test dummy encryption mode enabled
[  166.683171][ T6791] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  166.723542][ T6793] bond1: (slave veth3): Enslaving as an active interface with a down link
[  166.736677][ T6791] EXT4-fs (loop2): 1 truncate cleaned up
[  166.746354][ T6791] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  166.754820][ T6788] device wg1 entered promiscuous mode
[  166.802451][ T6786] device ip6gretap1 entered promiscuous mode
[  167.591993][ T6805] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  167.626307][ T6804] ip6t_rpfilter: unknown options
[  167.718035][ T6808] netlink: 4 bytes leftover after parsing attributes in process `syz.1.860'.
[  167.725950][ T4303] EXT4-fs (loop2): unmounting filesystem.
[  167.873835][ T6816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.862'.
[  168.047693][ T6833] loop1: detected capacity change from 0 to 512
[  168.051180][ T6833] EXT4-fs (loop1): Test dummy encryption mode enabled
[  168.053233][ T6833] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  168.073850][ T6833] EXT4-fs (loop1): 1 truncate cleaned up
[  168.075566][ T6833] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  169.106532][ T4297] EXT4-fs (loop1): unmounting filesystem.
[  169.136213][ T6844] netlink: 4 bytes leftover after parsing attributes in process `syz.0.877'.
[  169.156495][ T6848] netlink: 4 bytes leftover after parsing attributes in process `syz.3.879'.
[  169.506305][ T6873] xfrm0 speed is unknown, defaulting to 1000
[  169.613535][ T6878] netlink: 4 bytes leftover after parsing attributes in process `syz.0.892'.
[  170.041406][ T6901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.905'.
[  170.205602][ T6913] netlink: 9 bytes leftover after parsing attributes in process `syz.0.909'.
[  170.481465][ T6926] sctp: [Deprecated]: syz.2.914 (pid 6926) Use of int in max_burst socket option deprecated.
[  170.481465][ T6926] Use struct sctp_assoc_value instead
[  170.597683][ T6935] netlink: 136 bytes leftover after parsing attributes in process `syz.4.918'.
[  170.600537][ T6935] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  171.244200][ T6971] loop0: detected capacity change from 0 to 256
[  171.250905][ T6971] exfat: Unknown parameter 'iochar'
[  171.626295][ T6971] loop0: detected capacity change from 0 to 4096
[  171.632367][ T6971] ext3: Unknown parameter 'noacl'
[  173.671475][ T7033] netlink: 136 bytes leftover after parsing attributes in process `syz.1.959'.
[  173.673973][ T7033] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  173.721021][ T7036] netlink: 'syz.2.961': attribute type 13 has an invalid length.
[  175.242664][ T7036] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.074818][ T7036] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  176.142411][ T7036] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  176.695575][ T7036] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  176.698404][ T7036] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  176.701076][ T7036] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  176.703530][ T7036] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  177.163525][ T7042] netlink: 'syz.3.963': attribute type 1 has an invalid length.
[  177.444231][ T7080] netlink: 'syz.1.977': attribute type 1 has an invalid length.
[  177.462126][ T7080] device bond2 entered promiscuous mode
[  177.464246][ T7080] 8021q: adding VLAN 0 to HW filter on device bond2
[  177.893115][ T7080] netlink: 3 bytes leftover after parsing attributes in process `syz.1.977'.
[  177.903552][ T7080] device batadv1 entered promiscuous mode
[  177.908405][ T7080] 8021q: adding VLAN 0 to HW filter on device batadv1
[  177.911762][ T7080] bond2: (slave batadv1): making interface the new active one
[  177.915246][ T7080] bond2: (slave batadv1): Enslaving as an active interface with an up link
[  177.919995][ T7087] netlink: 3 bytes leftover after parsing attributes in process `syz.1.977'.
[  177.925746][ T7087] device batadv2 entered promiscuous mode
[  177.929354][ T7087] 8021q: adding VLAN 0 to HW filter on device batadv2
[  177.932877][ T7087] bond2: (slave batadv2): Enslaving as an active interface with an up link
[  178.616457][ T5819] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready
[  179.008561][ T7132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.998'.
[  179.011483][ T7132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.998'.
[  179.038084][ T7132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.998'.
[  179.041052][ T7132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.998'.
[  179.043697][ T7132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.998'.
[  179.129452][ T7132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.998'.
[  179.133007][ T7132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.998'.
[  179.135958][ T7132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.998'.
[  179.139972][ T7132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.998'.
[  179.143003][ T7132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.998'.
[  179.164652][ T7141] netlink: 'syz.2.1003': attribute type 3 has an invalid length.
[  179.619409][ T7164] netlink: 'syz.4.1013': attribute type 16 has an invalid length.
[  179.621801][ T7164] netlink: 'syz.4.1013': attribute type 17 has an invalid length.
[  179.641346][ T7164] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  179.708313][ T7164] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  180.818340][ T7220] loop3: detected capacity change from 0 to 256
[  180.824502][ T7220] exfat: Unknown parameter 'iochar'
[  181.377108][ T7220] loop3: detected capacity change from 0 to 4096
[  181.389763][ T7220] ext3: Unknown parameter 'noacl'
[  183.805578][ T7272] 8021q: VLANs not supported on nlmon0
[  184.091563][ T7295] __nla_validate_parse: 65 callbacks suppressed
[  184.091580][ T7295] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1066'.
[  184.158231][ T7295] device batadv1 entered promiscuous mode
[  184.436830][ T7315] netlink: 'syz.0.1074': attribute type 1 has an invalid length.
[  184.490690][ T7315] device bond2 entered promiscuous mode
[  184.492726][ T7315] 8021q: adding VLAN 0 to HW filter on device bond2
[  184.515013][ T7325] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1074'.
[  184.529923][ T7325] device batadv1 entered promiscuous mode
[  184.547731][ T7325] 8021q: adding VLAN 0 to HW filter on device batadv1
[  184.563792][ T7325] bond2: (slave batadv1): making interface the new active one
[  184.596951][ T7325] bond2: (slave batadv1): Enslaving as an active interface with an up link
[  184.610510][ T4861] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready
[  184.776686][ T7341] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1086'.
[  184.788474][ T7341] device batadv2 entered promiscuous mode
[  185.189156][ T7364] netlink: 'syz.0.1097': attribute type 1 has an invalid length.
[  185.203163][ T7364] device bond3 entered promiscuous mode
[  185.205088][ T7364] 8021q: adding VLAN 0 to HW filter on device bond3
[  185.213227][ T7364] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1097'.
[  185.218510][ T7364] device batadv2 entered promiscuous mode
[  185.221923][ T7364] 8021q: adding VLAN 0 to HW filter on device batadv2
[  185.225097][ T7364] bond3: (slave batadv2): making interface the new active one
[  185.237746][ T7364] bond3: (slave batadv2): Enslaving as an active interface with an up link
[  185.240363][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready
[  185.305395][ T7369] loop0: detected capacity change from 0 to 512
[  185.326688][ T7369] EXT4-fs (loop0): Test dummy encryption mode enabled
[  185.328814][ T7369] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  185.334441][ T7369] EXT4-fs (loop0): 1 truncate cleaned up
[  185.336229][ T7369] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  185.452085][ T7377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1102'.
[  186.296748][ T4294] EXT4-fs (loop0): unmounting filesystem.
[  186.430999][ T7393] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1108'.
[  186.433502][ T7393] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  186.464229][ T7397] netlink: 'syz.2.1110': attribute type 1 has an invalid length.
[  186.505631][ T7397] device bond6 entered promiscuous mode
[  186.508298][ T7397] 8021q: adding VLAN 0 to HW filter on device bond6
[  186.535914][ T7399] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1110'.
[  186.554944][ T7399] device batadv1 entered promiscuous mode
[  186.577862][ T7399] 8021q: adding VLAN 0 to HW filter on device batadv1
[  186.582729][ T7399] bond6: (slave batadv1): making interface the new active one
[  186.585835][ T7399] bond6: (slave batadv1): Enslaving as an active interface with an up link
[  186.588860][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): bond6: link becomes ready
[  186.616757][ T7407] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1114'.
[  186.622584][ T7407] device batadv1 entered promiscuous mode
[  186.726235][ T7415] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1118'.
[  186.866524][ T7422] loop1: detected capacity change from 0 to 512
[  186.872004][ T7424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1121'.
[  186.887397][ T7422] EXT4-fs (loop1): Test dummy encryption mode enabled
[  186.893716][ T7422] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  186.911762][ T7422] EXT4-fs (loop1): 1 truncate cleaned up
[  186.913475][ T7422] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  187.408087][ T2060] ieee802154 phy0 wpan0: encryption failed: -22
[  187.410389][ T2060] ieee802154 phy1 wpan1: encryption failed: -22
[  187.900271][ T4297] EXT4-fs (loop1): unmounting filesystem.
[  188.238126][ T7462] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  188.316040][ T7469] loop2: detected capacity change from 0 to 512
[  188.359996][ T7465] xfrm0 speed is unknown, defaulting to 1000
[  188.367639][ T7469] EXT4-fs (loop2): Test dummy encryption mode enabled
[  188.369583][ T7469] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  188.410754][ T7469] EXT4-fs (loop2): 1 truncate cleaned up
[  188.412352][ T7469] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  188.721441][ T7489] netlink: 'syz.0.1146': attribute type 1 has an invalid length.
[  189.700723][ T7489] device bond4 entered promiscuous mode
[  189.708135][ T7489] 8021q: adding VLAN 0 to HW filter on device bond4
[  189.715375][ T7493] __nla_validate_parse: 5 callbacks suppressed
[  189.715390][ T7493] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1146'.
[  189.742322][ T7493] device batadv3 entered promiscuous mode
[  189.752936][ T7485] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1144'.
[  189.811788][ T7497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1147'.
[  189.838461][ T4303] EXT4-fs (loop2): unmounting filesystem.
[  189.962439][ T7507] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1150'.
[  190.297181][ T7532] netlink: 'syz.0.1160': attribute type 1 has an invalid length.
[  190.310300][ T7532] device bond5 entered promiscuous mode
[  190.312506][ T7532] 8021q: adding VLAN 0 to HW filter on device bond5
[  190.320424][ T7532] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1160'.
[  190.326565][ T7532] device batadv4 entered promiscuous mode
[  190.434006][ T7540] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1161'.
[  190.458178][ T7540] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1161'.
[  191.328172][ T7552] netlink: 'syz.0.1165': attribute type 1 has an invalid length.
[  191.334557][ T7551] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1167'.
[  191.361381][ T7552] device bond6 entered promiscuous mode
[  191.363165][ T7552] 8021q: adding VLAN 0 to HW filter on device bond6
[  191.694412][ T7569] batman_adv: batadv0: Adding interface: ip6gretap2
[  191.696275][ T7569] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  191.727663][ T7569] batman_adv: batadv0: Interface activated: ip6gretap2
[  192.042507][ T7589] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2689
[  192.058117][ T7587] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1182'.
[  192.075141][ T7587] device batadv3 entered promiscuous mode
[  192.110202][ T7592] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1182'.
[  192.135903][ T7592] device batadv3 entered promiscuous mode
[  192.250504][ T7596] xfrm0 speed is unknown, defaulting to 1000
[  192.477374][ T7607] netlink: 'syz.1.1189': attribute type 10 has an invalid length.
[  192.553104][ T7607] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  192.892596][ T7628] device batadv2 entered promiscuous mode
[  192.996371][ T7631] device batadv2 entered promiscuous mode
[  193.790786][ T7670] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  193.799037][ T7670] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  193.807036][ T7670] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  193.816186][ T7670] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  196.691139][ T7716] __nla_validate_parse: 7 callbacks suppressed
[  196.691155][ T7716] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1235'.
[  196.728295][ T7716] device batadv5 entered promiscuous mode
[  196.961358][ T7719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1236'.
[  196.964431][ T7719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1236'.
[  196.966930][ T7719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1236'.
[  196.984764][ T7719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1236'.
[  196.994290][ T7719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1236'.
[  196.996874][ T7719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1236'.
[  197.000076][ T7719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1236'.
[  197.002935][ T7719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1236'.
[  197.005273][ T7719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1236'.
[  197.069220][ T7722] device batadv5 entered promiscuous mode
[  197.454797][ T7737] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.560845][ T7737] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.703401][ T7737] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.849089][ T7737] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.037791][ T7737] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  198.091715][ T7737] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  198.111634][ T7737] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  198.142136][ T7737] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  198.253332][ T7660] Set syz1 is full, maxelem 65536 reached
[  198.817124][ T7794] netlink: 'syz.3.1268': attribute type 3 has an invalid length.
[  199.678212][ T7803] device geneve0 entered promiscuous mode
[  199.774032][ T7807] team0: Port device geneve0 removed
[  199.779940][ T7808] netlink: 'syz.3.1268': attribute type 15 has an invalid length.
[  200.164337][ T7849] xfrm0 speed is unknown, defaulting to 1000
[  200.228277][ T7852] device batadv3 entered promiscuous mode
[  200.261241][ T7856] device batadv3 entered promiscuous mode
[  200.294738][ T7855] Bluetooth: MGMT ver 1.22
[  200.509525][ T7849] xfrm0 speed is unknown, defaulting to 1000
[  201.000621][ T7887] netlink: 'syz.2.1309': attribute type 1 has an invalid length.
[  201.011390][ T7887] device bond7 entered promiscuous mode
[  201.013353][ T7887] 8021q: adding VLAN 0 to HW filter on device bond7
[  201.034382][ T7889] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready
[  201.044187][ T7887] device batadv2 entered promiscuous mode
[  201.075697][ T7887] device batadv3 entered promiscuous mode
[  201.730538][ T7920] netlink: 'syz.0.1325': attribute type 1 has an invalid length.
[  201.775506][ T7920] device bond7 entered promiscuous mode
[  201.793885][ T7920] 8021q: adding VLAN 0 to HW filter on device bond7
[  201.829070][ T7926] __nla_validate_parse: 82 callbacks suppressed
[  201.829085][ T7926] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1325'.
[  201.863781][ T7926] device batadv5 entered promiscuous mode
[  201.865737][ T7920] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1325'.
[  201.888502][ T7920] device batadv6 entered promiscuous mode
[  201.991874][ T7937] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1331'.
[  202.542831][ T7974] tipc: Started in network mode
[  202.544717][ T7974] tipc: Node identity 2007, cluster identity 4711
[  202.553171][ T7974] tipc: Node number set to 8199
[  203.090641][ T8005] ieee802154 phy0 wpan0: encryption failed: -22
[  203.183509][ T8005] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1361'.
[  203.238451][ T8017] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1365'.
[  203.277575][ T8017] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  203.510390][ T8036] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1373'.
[  203.535213][ T8036] device batadv4 entered promiscuous mode
[  203.563538][ T8040] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1373'.
[  203.569140][ T8040] device batadv4 entered promiscuous mode
[  203.676314][ T8046] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1378'.
[  203.818706][ T8053] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1381'.
[  203.824782][ T8053] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  203.959498][ T8063] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1387'.
[  204.327040][ T8086] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  204.443774][ T8091] xt_CT: No such helper "snmp"
[  205.037754][ T8133] xfrm0 speed is unknown, defaulting to 1000
[  205.066937][ T8136] netlink: 'syz.0.1414': attribute type 1 has an invalid length.
[  205.321435][ T8150] x_tables: ip_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD
[  206.863408][ T8236] __nla_validate_parse: 12 callbacks suppressed
[  206.863426][ T8236] netlink: 1004 bytes leftover after parsing attributes in process `syz.2.1452'.
[  207.009143][ T8244] netlink: 'syz.4.1456': attribute type 1 has an invalid length.
[  207.035236][ T8244] device bond2 entered promiscuous mode
[  207.037114][ T8244] 8021q: adding VLAN 0 to HW filter on device bond2
[  207.078592][ T8244] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1456'.
[  207.123793][ T8244] device batadv1 entered promiscuous mode
[  207.239396][ T8261] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1462'.
[  207.296449][ T8265] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1464'.
[  207.570588][ T8284] netlink: 'syz.0.1472': attribute type 1 has an invalid length.
[  207.617741][ T8284] device bond8 entered promiscuous mode
[  207.628862][ T8284] 8021q: adding VLAN 0 to HW filter on device bond8
[  207.631600][ T8290] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1472'.
[  207.650417][ T8290] device batadv7 entered promiscuous mode
[  207.874321][ T8305] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1478'.
[  207.894079][ T8304] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1475'.
[  208.116140][ T8317] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1482'.
[  208.363940][ T8330] netlink: 'syz.0.1488': attribute type 1 has an invalid length.
[  208.383804][ T8330] device bond9 entered promiscuous mode
[  208.478830][ T8330] 8021q: adding VLAN 0 to HW filter on device bond9
[  210.501548][ T8333] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  210.541578][ T8333] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  210.898821][ T8333] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  210.901408][ T8333] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  210.903979][ T8333] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  210.907101][ T8333] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  211.108886][ T8333] batman_adv: batadv0: Interface deactivated: ip6gretap2
[  211.154901][ T8334] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1488'.
[  211.161172][ T8334] device batadv8 entered promiscuous mode
[  211.175325][ T8354] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1496'.
[  211.434122][ T8381] xt_hashlimit: max too large, truncated to 1048576
[  211.436178][ T8381] xt_hashlimit: overflow, try lower: 0/0
[  212.424992][ T8400] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1517'.
[  212.450382][ T8400] device batadv4 entered promiscuous mode
[  212.516884][ T8407] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1519'.
[  212.645836][ T8411] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1523'.
[  212.691482][ T8414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1524'.
[  212.693941][ T8414] device bridge_slave_1 left promiscuous mode
[  212.708767][ T8414] bridge0: port 2(bridge_slave_1) entered disabled state
[  212.750412][ T8414] device bridge_slave_0 left promiscuous mode
[  212.752452][ T8414] bridge0: port 1(bridge_slave_0) entered disabled state
[  212.952307][ T8429] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1532'.
[  212.958846][ T8429] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  213.323576][ T8451] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1543'.
[  213.337916][ T8451] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1543'.
[  213.743413][ T8482] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1558'.
[  213.752669][ T8482] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1558'.
[  213.919212][ T8493] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1563'.
[  213.936330][ T8493] device batadv2 entered promiscuous mode
[  214.067675][ T8502] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  214.641389][ T8530] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  214.680558][ T8535] device batadv2 entered promiscuous mode
[  214.923074][ T8551] tc_dump_action: action bad kind
[  215.058843][ T8564] netlink: 'syz.1.1596': attribute type 1 has an invalid length.
[  215.080491][ T8564] device bond3 entered promiscuous mode
[  215.082556][ T8564] 8021q: adding VLAN 0 to HW filter on device bond3
[  215.096935][ T8564] device batadv3 entered promiscuous mode
[  215.100948][ T8564] 8021q: adding VLAN 0 to HW filter on device batadv3
[  215.104505][ T8564] bond3: (slave batadv3): making interface the new active one
[  215.108416][ T8564] bond3: (slave batadv3): Enslaving as an active interface with an up link
[  215.111401][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready
[  215.185400][ T8572] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  215.400851][ T8581] device batadv2 entered promiscuous mode
[  215.998540][ T8601] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  216.147970][ T8620] netlink: 'syz.4.1620': attribute type 3 has an invalid length.
[  216.166836][ T8616] device batadv9 entered promiscuous mode
[  216.811798][ T8660] loop2: detected capacity change from 0 to 512
[  216.825436][ T8660] EXT4-fs (loop2): Test dummy encryption mode enabled
[  216.833334][ T8660] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  216.858495][ T8660] EXT4-fs (loop2): 1 truncate cleaned up
[  216.860532][ T8660] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  216.970070][ T8668] xfrm0 speed is unknown, defaulting to 1000
[  217.362584][ T8684] xfrm0 speed is unknown, defaulting to 1000
[  217.558112][ T8695] device syzkaller1 entered promiscuous mode
[  218.196128][ T8714] __nla_validate_parse: 19 callbacks suppressed
[  218.196143][ T8714] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1660'.
[  218.269835][ T8719] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1662'.
[  218.292829][ T8719] device batadv9 entered promiscuous mode
[  218.479742][ T8725] tc_dump_action: action bad kind
[  218.803871][ T8741] netlink: 'syz.4.1673': attribute type 1 has an invalid length.
[  218.826555][ T8741] device bond3 entered promiscuous mode
[  218.831911][ T8741] 8021q: adding VLAN 0 to HW filter on device bond3
[  218.836444][ T4303] EXT4-fs (loop2): unmounting filesystem.
[  218.842594][ T8741] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1673'.
[  218.898340][ T8741] device batadv2 entered promiscuous mode
[  218.952594][ T8741] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1673'.
[  218.960689][ T8741] device batadv3 entered promiscuous mode
[  219.039086][ T8753] tc_dump_action: action bad kind
[  219.116792][ T8756] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1679'.
[  219.273546][ T8765] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1683'.
[  219.276366][ T8765] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  220.353126][ T8784] tc_dump_action: action bad kind
[  220.420197][ T8791] xfrm0 speed is unknown, defaulting to 1000
[  220.508377][ T8794] __sock_release: fasync list not empty!
[  220.591286][ T8798] netlink: 'syz.0.1698': attribute type 10 has an invalid length.
[  220.648729][ T8798] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  220.664531][ T8801] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1699'.
[  220.667116][ T8801] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  221.177047][ T8827] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1712'.
[  221.181153][ T8827] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  221.924362][ T8883] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1737'.
[  222.537727][ T8906] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1746'.
[  222.569747][ T8906] device batadv4 entered promiscuous mode
[  222.639761][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready
[  223.281048][ T8946] __nla_validate_parse: 1 callbacks suppressed
[  223.281063][ T8946] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1766'.
[  223.291331][ T8946] device batadv4 entered promiscuous mode
[  223.544993][ T8964] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1775'.
[  223.683814][ T8974] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1779'.
[  223.814520][ T8982] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1783'.
[  223.826797][ T8982] device batadv4 entered promiscuous mode
[  224.045943][ T8992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1787'.
[  224.172228][ T9000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1791'.
[  224.574636][ T9020] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1800'.
[  224.881466][ T9034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1806'.
[  225.098410][ T9045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1813'.
[  225.111109][ T9046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1812'.
[  225.627941][ T9058] loop3: detected capacity change from 0 to 256
[  225.634139][ T9058] exfat: Unknown parameter 'iochar'
[  225.964681][ T9058] loop3: detected capacity change from 0 to 4096
[  225.970693][ T9058] ext3: Unknown parameter 'noacl'
[  227.572092][ T9090] device macvtap1 entered promiscuous mode
[  227.573787][ T9090] device team0 entered promiscuous mode
[  227.587862][ T9090] device team_slave_0 entered promiscuous mode
[  227.590055][ T9090] device team_slave_1 entered promiscuous mode
[  227.607827][ T9090] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  227.793862][ T9098] xfrm0 speed is unknown, defaulting to 1000
[  228.226962][ T9123] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  228.234195][ T9123] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  228.251440][ T9123] device bridge_slave_0 left promiscuous mode
[  228.258356][ T9123] bridge0: port 1(bridge_slave_0) entered disabled state
[  228.313456][ T9123] device bridge_slave_1 left promiscuous mode
[  228.315630][ T9123] bridge0: port 2(bridge_slave_1) entered disabled state
[  228.359768][ T9123] bond0: (slave bond_slave_0): Releasing backup interface
[  228.410869][ T9123] bond0: (slave bond_slave_1): Releasing backup interface
[  228.505346][ T9123] team0: Port device team_slave_0 removed
[  228.554611][ T9123] team0: Port device team_slave_1 removed
[  228.559248][ T9123] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  228.561631][ T9123] batman_adv: batadv0: Removing interface: batadv_slave_0
[  228.566857][ T9123] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  228.569432][ T9123] batman_adv: batadv0: Removing interface: batadv_slave_1
[  228.598832][ T9123] bond0: (slave wlan1): Releasing backup interface
[  228.698789][ T9123] bond1: (slave veth3): Releasing active interface
[  228.736465][ T9123] bond2: (slave batadv1): Releasing active interface
[  228.745331][ T9123] bond2: (slave batadv1): the permanent HWaddr of slave - fa:31:52:f9:63:bf - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  228.755794][ T9123] bond2: (slave batadv2): making interface the new active one
[  228.816015][ T9123] bond2: (slave batadv2): Releasing active interface
[  228.878223][ T9123] bond3: (slave batadv3): Releasing active interface
[  228.919307][ T9128] team0: Mode changed to "activebackup"
[  228.955626][ T9135] __nla_validate_parse: 3 callbacks suppressed
[  228.955645][ T9135] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1850'.
[  229.652215][ T9184] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1868'.
[  229.786508][ T9192] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1872'.
[  229.789803][ T9190] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1871'.
[  230.044584][ T9206] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1879'.
[  230.053444][ T9206] device batadv4 entered promiscuous mode
[  230.300487][ T9223] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1884'.
[  230.769157][ T9256] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1895'.
[  230.790337][ T9256] device batadv4 entered promiscuous mode
[  230.908646][ T9263] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1898'.
[  231.095267][ T9274] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1901'.
[  231.313124][ T9281] loop0: detected capacity change from 0 to 512
[  231.316294][ T9281] EXT4-fs (loop0): Test dummy encryption mode enabled
[  231.341685][ T9281] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  231.358522][ T9281] EXT4-fs (loop0): 1 truncate cleaned up
[  231.360333][ T9281] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  231.879709][ T9296] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1910'.
[  232.454150][ T9312] loop1: detected capacity change from 0 to 256
[  232.459121][ T9312] exfat: Unknown parameter 'iochar'
[  232.745478][ T9312] loop1: detected capacity change from 0 to 4096
[  232.751940][ T9312] ext3: Unknown parameter 'noacl'
[  234.171127][ T4294] EXT4-fs (loop0): unmounting filesystem.
[  234.615851][ T9340] netlink: 'syz.4.1927': attribute type 39 has an invalid length.
[  234.833281][ T9353] __nla_validate_parse: 2 callbacks suppressed
[  234.833296][ T9353] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1930'.
[  235.094051][ T9363] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1937'.
[  235.269928][ T9369] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1940'.
[  235.276894][ T9367] loop0: detected capacity change from 0 to 256
[  235.279592][ T9367] exfat: Unknown parameter 'iochar'
[  235.282265][ T9369] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1940'.
[  235.298706][ T9369] device batadv4 entered promiscuous mode
[  235.354553][ T9367] loop0: detected capacity change from 0 to 4096
[  235.356941][ T9367] ext3: Unknown parameter 'noacl'
[  235.463681][ T9376] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1944'.
[  235.521123][ T9378] xfrm0 speed is unknown, defaulting to 1000
[  235.575968][ T9380] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1945'.
[  235.720492][ T9391] bond0: (slave bond_slave_0): Releasing backup interface
[  235.750079][ T9391] bond0: (slave bond_slave_1): Releasing backup interface
[  235.805620][ T9391] team0: Port device team_slave_0 removed
[  235.813035][ T9391] team0: Port device team_slave_1 removed
[  235.817881][ T9391] batman_adv: batadv0: Removing interface: batadv_slave_0
[  235.827115][ T9391] batman_adv: batadv0: Removing interface: batadv_slave_1
[  235.836086][ T9391] bond1: (slave ip6gretap1): Releasing active interface
[  235.881379][ T9391] bond4: (slave veth5): Releasing active interface
[  235.939254][ T9391] bond5: (slave veth7): Releasing active interface
[  235.989425][ T9391] bond6: (slave batadv1): Releasing active interface
[  236.032834][ T9394] xfrm0 speed is unknown, defaulting to 1000
[  236.048736][ T9398] bridge0: port 1(bridge_slave_0) entered disabled state
[  236.110368][ T9399] bridge0: port 3(vlan2) entered blocking state
[  236.113634][ T9399] bridge0: port 3(vlan2) entered disabled state
[  236.117042][ T9399] device vlan2 entered promiscuous mode
[  236.119220][ T9399] device bond0 entered promiscuous mode
[  236.121105][ T9399] device bond_slave_0 entered promiscuous mode
[  236.131441][ T9401] loop2: detected capacity change from 0 to 128
[  236.136033][ T9399] device bond_slave_1 entered promiscuous mode
[  236.142788][ T9399] device netdevsim0 entered promiscuous mode
[  236.160223][ T9396] xfrm0 speed is unknown, defaulting to 1000
[  236.195450][ T9402] xfrm0 speed is unknown, defaulting to 1000
[  236.226425][ T9401] syz.2.1954: attempt to access beyond end of device
[  236.226425][ T9401] loop2: rw=2049, sector=145, nr_sectors = 95 limit=128
[  236.349122][ T5876] kworker/u4:18: attempt to access beyond end of device
[  236.349122][ T5876] loop2: rw=1, sector=145, nr_sectors = 88 limit=128
[  236.353413][ T5876] kworker/u4:18: attempt to access beyond end of device
[  236.353413][ T5876] loop2: rw=1, sector=233, nr_sectors = 1 limit=128
[  236.374198][ T5876] Buffer I/O error on dev loop2, logical block 233, lost async page write
[  236.376802][ T5876] kworker/u4:18: attempt to access beyond end of device
[  236.376802][ T5876] loop2: rw=1, sector=234, nr_sectors = 1 limit=128
[  236.387311][ T5876] Buffer I/O error on dev loop2, logical block 234, lost async page write
[  236.389704][ T5876] kworker/u4:18: attempt to access beyond end of device
[  236.389704][ T5876] loop2: rw=1, sector=235, nr_sectors = 1 limit=128
[  236.404021][ T5876] Buffer I/O error on dev loop2, logical block 235, lost async page write
[  236.406536][ T5876] kworker/u4:18: attempt to access beyond end of device
[  236.406536][ T5876] loop2: rw=1, sector=236, nr_sectors = 1 limit=128
[  236.418299][ T5876] Buffer I/O error on dev loop2, logical block 236, lost async page write
[  236.420589][ T5876] kworker/u4:18: attempt to access beyond end of device
[  236.420589][ T5876] loop2: rw=1, sector=237, nr_sectors = 1 limit=128
[  236.430722][ T5876] Buffer I/O error on dev loop2, logical block 237, lost async page write
[  236.433576][ T5876] kworker/u4:18: attempt to access beyond end of device
[  236.433576][ T5876] loop2: rw=1, sector=238, nr_sectors = 1 limit=128
[  236.450446][ T5876] Buffer I/O error on dev loop2, logical block 238, lost async page write
[  236.456563][ T5876] kworker/u4:18: attempt to access beyond end of device
[  236.456563][ T5876] loop2: rw=1, sector=239, nr_sectors = 1 limit=128
[  236.465047][ T5876] Buffer I/O error on dev loop2, logical block 239, lost async page write
[  236.479294][ T9409] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1958'.
[  236.621782][ T9414] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1956'.
[  236.624292][ T9415] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1960'.
[  236.710130][ T9415] device batadv4 entered promiscuous mode
[  236.991024][ T9435] xfrm0 speed is unknown, defaulting to 1000
[  237.046585][ T9441] loop3: detected capacity change from 0 to 2048
[  237.053496][ T9441] EXT4-fs: Ignoring removed bh option
[  237.100224][ T9441] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  237.200053][ T9441] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1968: bg 0: block 234: padding at end of block bitmap is not set
[  237.246658][ T9441] EXT4-fs (loop3): Remounting filesystem read-only
[  237.373771][ T9461] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1971'.
[  237.399633][ T4298] EXT4-fs (loop3): unmounting filesystem.
[  237.571911][ T9469] xfrm0 speed is unknown, defaulting to 1000
[  238.082275][ T9514] device bridge_slave_0 left promiscuous mode
[  238.086630][ T9514] bridge0: port 1(bridge_slave_0) entered disabled state
[  238.146022][ T9514] device bridge_slave_1 left promiscuous mode
[  238.148255][ T9514] bridge0: port 2(bridge_slave_1) entered disabled state
[  238.182531][ T9514] bond0: (slave bond_slave_0): Releasing backup interface
[  238.219131][ T9514] bond0: (slave bond_slave_1): Releasing backup interface
[  238.259256][ T9514] device team_slave_0 left promiscuous mode
[  238.266188][ T9514] team0: Port device team_slave_0 removed
[  238.270897][ T9514] device team_slave_1 left promiscuous mode
[  238.277695][ T9514] team0: Port device team_slave_1 removed
[  238.285175][ T9514] batman_adv: batadv0: Removing interface: batadv_slave_0
[  238.291475][ T9514] batman_adv: batadv0: Removing interface: batadv_slave_1
[  238.299344][ T9514] bond1: (slave veth3): Releasing active interface
[  238.338436][ T9514] batman_adv: batadv0: Removing interface: ip6gretap2
[  238.429555][ T9516] loop1: detected capacity change from 0 to 32768
[  238.445083][ T9516] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1979 (9516)
[  238.592409][ T9516] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  238.602247][ T9516] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm
[  238.604724][ T9516] BTRFS info (device loop1): use zlib compression, level 3
[  238.617097][ T9516] BTRFS info (device loop1): using free space tree
[  238.824539][ T9533] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.862553][ T9544] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  238.866721][ T9516] BTRFS info (device loop1): enabling ssd optimizations
[  238.937574][ T9553] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  238.992207][ T4297] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  239.030236][ T9533] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.188006][ T9533] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.413044][ T9533] bond0: (slave netdevsim0): Releasing backup interface
[  239.437952][ T9533] device netdevsim0 left promiscuous mode
[  239.445717][ T9533] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.526422][ T9562] device batadv1 entered promiscuous mode
[  239.543329][ T9566] device batadv1 entered promiscuous mode
[  240.580392][ T9533] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  240.595401][ T9533] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  240.613817][ T9533] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  240.720365][ T9533] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  240.744729][ T9581] device bond2 entered promiscuous mode
[  240.753992][ T9581] 8021q: adding VLAN 0 to HW filter on device bond2
[  240.758514][ T9522] loop2: detected capacity change from 0 to 131072
[  240.787514][ T9522] F2FS-fs (loop2): Found nat_bits in checkpoint
[  240.809427][ T9522] F2FS-fs (loop2): sanity_check_inode: corrupted inode ino=3, run fsck to fix.
[  240.818212][ T9522] F2FS-fs (loop2): Failed to read root inode
[  240.852673][ T9583] __nla_validate_parse: 6 callbacks suppressed
[  240.852692][ T9583] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1998'.
[  240.866812][ T9583] device batadv1 entered promiscuous mode
[  240.883053][ T9583] 8021q: adding VLAN 0 to HW filter on device batadv1
[  240.903988][ T9583] bond2: (slave batadv1): Enslaving as an active interface with an up link
[  240.931263][ T5876] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready
[  241.265963][ T9599] loop1: detected capacity change from 0 to 256
[  241.268930][ T9599] exfat: Unknown parameter 'iochar'
[  241.323779][ T9599] loop1: detected capacity change from 0 to 4096
[  241.326200][ T9599] ext3: Unknown parameter 'noacl'
[  241.608002][ T9612] xfrm0 speed is unknown, defaulting to 1000
[  241.962908][ T9623] loop3: detected capacity change from 0 to 128
[  242.474165][ T9642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  242.490930][ T9642] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  243.932908][ T9671] loop3: detected capacity change from 0 to 512
[  243.935946][ T9671] EXT4-fs: Ignoring removed nobh option
[  243.958299][ T9671] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2036: invalid indirect mapped block 256 (level 2)
[  243.966747][ T9671] EXT4-fs (loop3): 2 truncates cleaned up
[  243.976366][ T9671] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  243.991448][ T9671] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.2036: bg 0: block 5: invalid block bitmap
[  244.017748][ T9671] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  244.021527][ T9671] EXT4-fs (loop3): This should not happen!! Data will be lost
[  244.021527][ T9671] 
[  244.024117][ T9671] EXT4-fs (loop3): Total free blocks count 0
[  244.025974][ T9671] EXT4-fs (loop3): Free/Dirty block details
[  244.037477][ T9671] EXT4-fs (loop3): free_blocks=0
[  244.039156][ T9671] EXT4-fs (loop3): dirty_blocks=66
[  244.041983][ T9671] EXT4-fs (loop3): Block reservation details
[  244.057444][ T9671] EXT4-fs (loop3): i_reserved_data_blocks=62
[  244.080612][ T4751] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 60 with error 28
[  244.200580][ T9689] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2039'.
[  245.435307][ T9690] xfrm0 speed is unknown, defaulting to 1000
[  245.463774][ T9683] xfrm0 speed is unknown, defaulting to 1000
[  245.805079][ T9716] device bond3 entered promiscuous mode
[  245.806943][ T9716] 8021q: adding VLAN 0 to HW filter on device bond3
[  245.878385][ T9723] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2051'.
[  245.883721][ T9723] device batadv2 entered promiscuous mode
[  245.886722][ T9723] 8021q: adding VLAN 0 to HW filter on device batadv2
[  245.932644][ T9723] bond3: (slave batadv2): Enslaving as an active interface with an up link
[  245.948986][ T6599] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready
[  245.963015][ T9732] loop0: detected capacity change from 0 to 512
[  245.976060][ T9732] EXT4-fs (loop0): Test dummy encryption mode enabled
[  245.978796][ T9732] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  245.981917][ T9730] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2054'.
[  245.995969][ T9732] EXT4-fs (loop0): 1 truncate cleaned up
[  245.998702][ T9732] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  246.169131][ T9740] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  246.171492][ T9740] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  246.766811][ T9760] netlink: 'syz.1.2068': attribute type 10 has an invalid length.
[  246.851239][ T9760] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  246.940981][ T9762] device bond4 entered promiscuous mode
[  246.960920][ T9762] 8021q: adding VLAN 0 to HW filter on device bond4
[  246.970485][ T4294] EXT4-fs (loop0): unmounting filesystem.
[  247.010636][ T9766] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2069'.
[  247.026273][ T9766] device batadv3 entered promiscuous mode
[  247.051140][ T9766] 8021q: adding VLAN 0 to HW filter on device batadv3
[  247.087388][ T9766] bond4: (slave batadv3): Enslaving as an active interface with an up link
[  247.128890][ T6357] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready
[  247.249713][ T9773] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2074'.
[  247.264473][ T9773] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2074'.
[  247.438975][ T9786] loop2: detected capacity change from 0 to 2048
[  247.467634][ T9786] EXT4-fs: Ignoring removed bh option
[  247.523069][ T9786] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  247.526085][ T9793] loop3: detected capacity change from 0 to 128
[  247.542039][ T9793] EXT4-fs: Ignoring removed nobh option
[  247.569836][ T9793] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  247.580353][ T9797] bond0: (slave bridge0): Releasing backup interface
[  247.613336][ T9798] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.2078: bg 0: block 234: padding at end of block bitmap is not set
[  247.653519][ T9798] EXT4-fs (loop2): Remounting filesystem read-only
[  247.656547][ T9797] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  247.663496][ T9797] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  247.749023][ T4298] EXT4-fs (loop3): unmounting filesystem.
[  247.822883][ T4303] EXT4-fs (loop2): unmounting filesystem.
[  247.860430][ T9805] loop3: detected capacity change from 0 to 256
[  248.938070][ T2060] ieee802154 phy0 wpan0: encryption failed: -22
[  248.940138][ T2060] ieee802154 phy1 wpan1: encryption failed: -22
[  249.049590][ T9820] loop3: detected capacity change from 0 to 512
[  249.069130][ T9820] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  249.094735][ T9820] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  249.107736][ T9820] EXT4-fs (loop3): 1 truncate cleaned up
[  249.109344][ T9820] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  249.273865][ T4298] EXT4-fs (loop3): unmounting filesystem.
[  249.378234][ T9830] team0: No ports can be present during mode change
[  249.516569][ T9836] loop3: detected capacity change from 0 to 2048
[  249.536111][ T9836] EXT4-fs: Ignoring removed bh option
[  249.591632][ T9836] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  249.709491][ T9844] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.2097: bg 0: block 234: padding at end of block bitmap is not set
[  249.735221][ T9844] EXT4-fs (loop3): Remounting filesystem read-only
[  249.751793][ T9842] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  249.796600][ T9847] loop1: detected capacity change from 0 to 256
[  249.976984][ T4298] EXT4-fs (loop3): unmounting filesystem.
[  251.176912][ T9861] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2106'.
[  251.434485][ T9870] loop1: detected capacity change from 0 to 512
[  251.459500][ T9870] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.2108: invalid indirect mapped block 11 (level 0)
[  251.507522][ T9870] EXT4-fs (loop1): Remounting filesystem read-only
[  251.539013][ T9870] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.2108: attempt to clear invalid blocks 1024 len 1
[  251.554748][ T9870] EXT4-fs (loop1): Remounting filesystem read-only
[  251.561743][ T9870] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[  251.587396][ T9870] EXT4-fs (loop1): Remounting filesystem read-only
[  251.593347][ T9875] xfrm0 speed is unknown, defaulting to 1000
[  251.598505][ T9870] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.2108: invalid indirect mapped block 1819239214 (level 0)
[  251.617178][ T9870] EXT4-fs (loop1): Remounting filesystem read-only
[  251.626960][ T9870] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.2108: invalid indirect mapped block 33554432 (level 2)
[  251.637733][ T9870] EXT4-fs (loop1): Remounting filesystem read-only
[  251.639851][ T9870] EXT4-fs (loop1): 1 truncate cleaned up
[  251.641474][ T9870] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  252.005105][ T9887] team0: Mode changed to "activebackup"
[  252.199772][ T4297] EXT4-fs (loop1): unmounting filesystem.
[  252.310467][ T9899] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2119'.
[  252.405300][ T9901] xfrm0 speed is unknown, defaulting to 1000
[  252.590673][ T9908] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2126'.
[  252.760517][ T9912] team0: Unable to change to the same mode the team is in
[  252.892318][ T9920] loop1: detected capacity change from 0 to 764
[  253.211998][ T9930] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2134'.
[  253.822113][ T9938] xfrm0 speed is unknown, defaulting to 1000
[  253.840870][ T9933] loop3: detected capacity change from 0 to 1024
[  253.875396][ T9933] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  253.995391][ T4298] EXT4-fs (loop3): unmounting filesystem.
[  254.267503][ T9951] team0: No ports can be present during mode change
[  254.410373][ T9957] loop1: detected capacity change from 0 to 128
[  254.444563][ T9959] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2145'.
[  254.449491][ T9957] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  254.482618][ T9957] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.2146: No space for directory leaf checksum. Please run e2fsck -D.
[  254.498069][ T9957] EXT4-fs error (device loop1): __ext4_find_entry:1696: inode #2: comm syz.1.2146: checksumming directory block 0
[  254.529841][ T9957] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.2146: No space for directory leaf checksum. Please run e2fsck -D.
[  254.534511][ T9957] EXT4-fs error (device loop1): htree_dirblock_to_tree:1083: inode #2: comm syz.1.2146: Directory block failed checksum
[  254.604474][ T9964] loop3: detected capacity change from 0 to 512
[  254.632246][ T9964] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  254.669220][ T9964] EXT4-fs (loop3): orphan cleanup on readonly fs
[  254.678545][ T4297] EXT4-fs (loop1): unmounting filesystem.
[  254.688917][ T9964] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.2148: bg 0: block 248: padding at end of block bitmap is not set
[  254.704051][ T9967] ipt_CLUSTERIP: Please specify destination IP
[  254.715773][ T9964] __quota_error: 4 callbacks suppressed
[  254.715788][ T9964] Quota error (device loop3): write_blk: dquota write failed
[  254.746360][ T9964] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  254.763170][ T9964] EXT4-fs error (device loop3): ext4_acquire_dquot:6802: comm syz.3.2148: Failed to acquire dquot type 1
[  254.778743][ T9964] EXT4-fs (loop3): 1 truncate cleaned up
[  254.783559][ T9964] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  254.845692][ T9973] loop1: detected capacity change from 0 to 512
[  254.870726][ T9972] xfrm0 speed is unknown, defaulting to 1000
[  254.891303][ T9973] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.2150: bad orphan inode 15
[  254.918184][ T4298] EXT4-fs (loop3): unmounting filesystem.
[  254.920448][ T9973] ext4_test_bit(bit=14, block=18) = 1
[  254.921939][ T9973] is_bad_inode(inode)=0
[  254.923048][ T9973] NEXT_ORPHAN(inode)=1023
[  254.924280][ T9973] max_ino=32
[  254.925341][ T9973] i_nlink=0
[  254.929331][ T9973] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2925: inode #15: comm syz.1.2150: corrupted xattr block 19
[  254.938572][ T9973] EXT4-fs warning (device loop1): ext4_evict_inode:299: xattr delete (err -117)
[  254.941273][ T9973] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  254.950049][ T9978] loop2: detected capacity change from 0 to 256
[  255.105139][ T4297] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 3: comm syz-executor: path /499/éq‰Y’3aK: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=458767, rec_len=0, size=4096 fake=0
[  255.135577][ T9977] xfrm0 speed is unknown, defaulting to 1000
[  255.150218][ T9981] team0: Mode changed to "activebackup"
[  255.401434][ T4297] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  255.843418][ T4297] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  256.101978][ T9993] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2158'.
[  256.120601][ T9995] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2158'.
[  256.150237][ T9995] device batadv4 entered promiscuous mode
[  256.169598][ T5460] EXT4-fs (loop1): unmounting filesystem.
[  256.225106][ T9993] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2158'.
[  256.234567][ T9993] device batadv4 entered promiscuous mode
[  256.252240][ T9997] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2162'.
[  256.821230][ T4301] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  256.827091][ T4301] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  256.831503][ T4301] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  256.834562][ T4301] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  256.837317][ T4301] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  256.840161][ T4301] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  256.850896][T10008] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  256.885608][ T5876] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  257.003940][ T5876] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  257.104586][ T5876] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  257.132390][T10010] xfrm0 speed is unknown, defaulting to 1000
[  257.191433][ T5876] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  257.434427][T10010] chnl_net:caif_netlink_parms(): no params data found
[  257.578977][T10024] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  257.581561][T10024] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  257.585065][T10024] device bridge_slave_0 left promiscuous mode
[  257.586887][T10024] bridge0: port 1(bridge_slave_0) entered disabled state
[  257.661583][T10024] device bridge_slave_1 left promiscuous mode
[  257.663488][T10024] bridge0: port 2(bridge_slave_1) entered disabled state
[  257.708322][T10024] device vlan2 left promiscuous mode
[  257.710392][T10024] device bond0 left promiscuous mode
[  257.718771][T10024] bond0: (slave bond_slave_0): Releasing backup interface
[  257.758342][T10024] device bond_slave_0 left promiscuous mode
[  257.769397][T10024] bond0: (slave bond_slave_1): Releasing backup interface
[  257.827794][T10024] device bond_slave_1 left promiscuous mode
[  257.899882][T10024] team0: Port device team_slave_0 removed
[  257.935232][T10024] team0: Port device team_slave_1 removed
[  257.941205][T10024] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  257.947708][T10024] batman_adv: batadv0: Removing interface: batadv_slave_0
[  257.956497][T10024] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  257.965127][T10024] batman_adv: batadv0: Removing interface: batadv_slave_1
[  257.988586][T10024] bond0: (slave macvlan0): Releasing backup interface
[  258.070205][T10024] bond1: (slave veth3): Releasing active interface
[  258.108949][T10024] bond2: (slave batadv1): Releasing active interface
[  258.169346][T10024] bond3: (slave batadv2): Releasing active interface
[  258.224501][T10024] bridge0: port 3(vlan2) entered disabled state
[  258.267759][T10028] team0: Mode changed to "activebackup"
[  258.552163][T10048] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2173'.
[  258.592799][T10057] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  258.594978][T10057] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  258.724326][T10062] loop3: detected capacity change from 0 to 2048
[  258.752864][T10062] EXT4-fs: Ignoring removed bh option
[  258.821488][T10062] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  258.838397][T10064] xfrm0 speed is unknown, defaulting to 1000
[  258.907833][ T4305] Bluetooth: hci2: command 0x0409 tx timeout
[  258.943622][ T4298] EXT4-fs (loop3): unmounting filesystem.
[  258.945919][T10010] bridge0: port 1(bridge_slave_0) entered blocking state
[  258.949201][T10010] bridge0: port 1(bridge_slave_0) entered disabled state
[  258.952445][T10010] device bridge_slave_0 entered promiscuous mode
[  258.990013][T10067] xfrm0 speed is unknown, defaulting to 1000
[  258.994456][T10010] bridge0: port 2(bridge_slave_1) entered blocking state
[  258.996595][T10010] bridge0: port 2(bridge_slave_1) entered disabled state
[  259.008235][T10010] device bridge_slave_1 entered promiscuous mode
[  259.146210][T10081] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2181'.
[  259.194676][T10010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  259.289265][T10010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  259.478190][T10010] team0: Port device team_slave_0 added
[  259.488645][T10010] team0: Port device team_slave_1 added
[  259.498330][T10095] device bridge_slave_0 left promiscuous mode
[  259.500496][T10095] bridge0: port 1(bridge_slave_0) entered disabled state
[  259.534627][T10095] device bridge_slave_1 left promiscuous mode
[  259.539151][T10095] bridge0: port 2(bridge_slave_1) entered disabled state
[  259.588977][T10095] bond0: (slave bond_slave_0): Releasing backup interface
[  259.639532][T10095] bond0: (slave bond_slave_1): Releasing backup interface
[  259.686275][T10095] team0: Port device team_slave_0 removed
[  259.709749][T10095] team0: Port device team_slave_1 removed
[  259.714978][T10102] loop2: detected capacity change from 0 to 764
[  259.717506][T10095] batman_adv: batadv0: Removing interface: batadv_slave_0
[  259.729805][T10095] batman_adv: batadv0: Removing interface: batadv_slave_1
[  259.744391][T10095] bond1: (slave veth3): Releasing active interface
[  259.806915][T10095] bond2: (slave batadv1): Releasing backup interface
[  259.857729][T10095] bond3: (slave batadv2): Releasing backup interface
[  259.917851][T10095] bond4: (slave batadv3): Releasing backup interface
[  260.093502][T10097] team0: Mode changed to "activebackup"
[  260.096639][T10099] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2186'.
[  260.101489][T10010] batman_adv: batadv0: Adding interface: batadv_slave_0
[  260.103472][T10010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  260.124603][T10010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  260.223466][T10010] batman_adv: batadv0: Adding interface: batadv_slave_1
[  260.225540][T10010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  260.238586][T10010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  260.439720][T10010] device hsr_slave_0 entered promiscuous mode
[  260.482624][T10010] device hsr_slave_1 entered promiscuous mode
[  260.517939][T10010] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  260.520185][T10010] Cannot create hsr debugfs directory
[  260.642538][T10122] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2192'.
[  260.929597][T10130] xfrm0 speed is unknown, defaulting to 1000
[  260.988014][ T4305] Bluetooth: hci2: command 0x041b tx timeout
[  261.066786][T10131] loop3: detected capacity change from 0 to 256
[  261.088500][T10134] xfrm0 speed is unknown, defaulting to 1000
[  261.164897][T10131] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  261.439933][T10140] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2195'.
[  261.446950][T10140] device batadv9 entered promiscuous mode
[  261.561688][ T5876] device hsr_slave_0 left promiscuous mode
[  261.591997][T10152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  261.595047][T10152] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  261.599186][ T5876] device hsr_slave_1 left promiscuous mode
[  261.660629][T10156] loop2: detected capacity change from 0 to 128
[  261.697157][T10156] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  261.706868][T10156] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.2199: No space for directory leaf checksum. Please run e2fsck -D.
[  261.711909][T10156] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.2199: checksumming directory block 0
[  261.739914][ T4303] EXT4-fs (loop2): unmounting filesystem.
[  261.818004][ T5876] device veth1_macvtap left promiscuous mode
[  261.820241][ T5876] device veth0_macvtap left promiscuous mode
[  261.822163][ T5876] device veth1_vlan left promiscuous mode
[  261.824027][ T5876] device veth0_vlan left promiscuous mode
[  262.709647][ T5876] bond3 (unregistering): Released all slaves
[  263.068780][ T4305] Bluetooth: hci2: command 0x040f tx timeout
[  263.620358][ T5876] bond2 (unregistering): Released all slaves
[  264.429219][ T5876] bond1 (unregistering): Released all slaves
[  265.137463][ T4305] Bluetooth: hci2: command 0x0419 tx timeout
[  270.650946][ T5876] bond0 (unregistering): Released all slaves
[  270.845391][T10150] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2197'.
[  270.850908][T10165] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2203'.
[  270.867930][T10169] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2203'.
[  270.878066][T10169] device batadv4 entered promiscuous mode
[  270.901279][T10172] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2203'.
[  270.906412][T10172] device batadv4 entered promiscuous mode
[  270.922269][T10176] xfrm0 speed is unknown, defaulting to 1000
[  270.941556][T10177] xfrm0 speed is unknown, defaulting to 1000
[  271.005488][T10010] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  271.048095][T10010] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  271.111865][T10010] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  271.130160][T10010] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  271.182617][T10194] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2210'.
[  271.193377][T10194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2210'.
[  271.201816][T10194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2210'.
[  271.724394][T10010] 8021q: adding VLAN 0 to HW filter on device bond0
[  271.787494][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  271.791180][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  271.819309][T10010] 8021q: adding VLAN 0 to HW filter on device team0
[  271.865280][ T5842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  271.869461][ T5842] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  271.877174][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[  271.879258][ T5842] bridge0: port 1(bridge_slave_0) entered forwarding state
[  272.011456][ T5842] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  272.014213][ T5842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  272.027899][T10220] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  272.029984][T10220] vhci_hcd: default hub control req: 2314 v0008 i0002 l0
[  272.036823][ T5842] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  272.042113][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[  272.044062][ T5842] bridge0: port 2(bridge_slave_1) entered forwarding state
[  272.089975][ T4861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  272.096618][T10225] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2218'.
[  272.120592][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  272.156800][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  272.163500][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  272.166949][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  272.171756][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  272.180146][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  272.185292][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  272.189259][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  272.192704][T10227] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2219'.
[  272.203268][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  272.206262][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  272.228357][T10230] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2219'.
[  272.233843][T10230] device batadv4 entered promiscuous mode
[  272.250154][T10010] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  272.266082][T10232] device batadv4 entered promiscuous mode
[  272.604396][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  272.606986][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  272.629755][T10010] 8021q: adding VLAN 0 to HW filter on device batadv0
[  274.038076][T10286] xfrm0 speed is unknown, defaulting to 1000
[  274.065032][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  274.068439][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  274.094239][T10289] xfrm0 speed is unknown, defaulting to 1000
[  274.175920][T10010] device veth0_vlan entered promiscuous mode
[  274.179002][ T9313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  274.181960][ T9313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  274.189422][ T9313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  274.198163][ T9313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  274.361951][T10010] device veth1_vlan entered promiscuous mode
[  274.405932][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  274.413948][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  274.545935][T10307] loop2: detected capacity change from 0 to 512
[  274.794947][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  274.872775][T10307] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002]
[  274.875573][T10307] System zones: 0-2, 18-18, 34-35
[  274.982908][T10307] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  275.001273][T10307] EXT4-fs (loop2): unmounting filesystem.
[  275.164179][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  275.653236][T10307] loop2: detected capacity change from 0 to 512
[  275.675388][T10307] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  275.954041][T10307] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2186: inode #15: comm syz.2.2238: corrupted in-inode xattr
[  275.962847][T10307] EXT4-fs (loop2): Remounting filesystem read-only
[  275.967274][T10307] EXT4-fs (loop2): 1 truncate cleaned up
[  275.969057][T10307] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  277.451479][T10010] device veth0_macvtap entered promiscuous mode
[  277.456333][T10010] device veth1_macvtap entered promiscuous mode
[  277.524596][T10010] batman_adv: batadv0: Interface activated: batadv_slave_0
[  277.550672][T10010] batman_adv: batadv0: Interface activated: batadv_slave_1
[  277.578195][T10010] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  277.590206][T10010] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  277.604541][T10010] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  277.613527][T10010] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  277.761746][ T4303] EXT4-fs (loop2): unmounting filesystem.
[  277.793785][ T9059] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  277.796927][ T9059] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  277.800486][ T9059] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  277.815874][ T9059] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  277.828423][T10325] __nla_validate_parse: 2 callbacks suppressed
[  277.828439][T10325] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2245'.
[  277.832921][T10328] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2246'.
[  277.922714][ T9059] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  277.925541][ T9059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  277.985398][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  278.000777][T10338] loop0: detected capacity change from 0 to 128
[  278.018204][T10338] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  278.042948][ T4362] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  278.045409][ T4362] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  278.048586][T10338] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #2: comm syz.0.2249: No space for directory leaf checksum. Please run e2fsck -D.
[  278.052987][T10338] EXT4-fs error (device loop0): htree_dirblock_to_tree:1083: inode #2: comm syz.0.2249: Directory block failed checksum
[  278.090626][ T9313] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  278.191472][ T4294] EXT4-fs (loop0): unmounting filesystem.
[  279.445495][T10367] loop0: detected capacity change from 0 to 512
[  279.449011][T10370] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2258'.
[  279.533706][T10378] loop5: detected capacity change from 0 to 256
[  279.534518][T10367] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  279.541109][T10374] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2257'.
[  279.567453][T10367] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0
[  279.570099][T10367] EXT4-fs error (device loop0): ext4_acquire_dquot:6802: comm syz.0.2255: Failed to acquire dquot type 0
[  279.583109][T10367] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  279.586085][T10367] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0
[  279.601071][T10367] EXT4-fs error (device loop0): ext4_acquire_dquot:6802: comm syz.0.2255: Failed to acquire dquot type 0
[  279.625926][T10367] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  279.636783][T10367] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0
[  279.653315][T10367] EXT4-fs error (device loop0): ext4_acquire_dquot:6802: comm syz.0.2255: Failed to acquire dquot type 0
[  279.666601][T10367] EXT4-fs (loop0): 1 orphan inode deleted
[  279.672966][T10367] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  280.370674][ T4294] EXT4-fs (loop0): unmounting filesystem.
[  280.572846][T10390] loop0: detected capacity change from 0 to 2048
[  280.575263][T10390] EXT4-fs: Ignoring removed bh option
[  280.613289][T10394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2265'.
[  280.628258][T10394] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2265'.
[  280.633187][T10394] device batadv4 entered promiscuous mode
[  280.729094][T10390] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  281.001603][ T4294] EXT4-fs (loop0): unmounting filesystem.
[  281.095827][T10422] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2270'.
[  281.237963][T10425] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2269'.
[  281.702640][T10452] xfrm0 speed is unknown, defaulting to 1000
[  281.809842][T10456] xfrm0 speed is unknown, defaulting to 1000
[  282.205137][T10470] loop3: detected capacity change from 0 to 2048
[  282.241619][T10470] EXT4-fs: Ignoring removed bh option
[  282.283791][T10470] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  282.467327][T10486] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2286'.
[  282.520380][ T4298] EXT4-fs (loop3): unmounting filesystem.
[  282.619943][T10496] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2288'.
[  282.876218][T10505] xfrm0 speed is unknown, defaulting to 1000
[  282.959890][T10508] xfrm0 speed is unknown, defaulting to 1000
[  283.481065][T10522] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2300'.
[  283.607738][T10526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2301'.
[  283.618962][T10526] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2301'.
[  283.638275][T10526] device batadv4 entered promiscuous mode
[  284.824145][T10538] xfrm0 speed is unknown, defaulting to 1000
[  284.956466][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  284.958935][T10543] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  285.098104][T10539] xfrm0 speed is unknown, defaulting to 1000
[  285.305505][T10558] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2312'.
[  285.540827][T10566] netlink: 'syz.3.2317': attribute type 1 has an invalid length.
[  285.588576][T10566] device bond5 entered promiscuous mode
[  285.590533][T10566] 8021q: adding VLAN 0 to HW filter on device bond5
[  285.616840][T10566] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2317'.
[  285.704520][T10566] device batadv4 entered promiscuous mode
[  285.710405][T10566] 8021q: adding VLAN 0 to HW filter on device batadv4
[  285.715069][T10566] bond5: (slave batadv4): Enslaving as an active interface with an up link
[  285.780611][T10580] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2317'.
[  285.786349][T10580] device batadv5 entered promiscuous mode
[  285.793449][T10580] 8021q: adding VLAN 0 to HW filter on device batadv5
[  285.803505][T10580] bond5: (slave batadv5): Enslaving as an active interface with an up link
[  285.812400][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready
[  285.878140][T10587] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2320'.
[  285.898466][T10590] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2320'.
[  285.903504][T10590] device batadv1 entered promiscuous mode
[  285.972631][T10589] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  285.974872][T10589] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  286.070374][T10594] xfrm0 speed is unknown, defaulting to 1000
[  286.146771][T10595] xfrm0 speed is unknown, defaulting to 1000
[  286.258237][T10602] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2327'.
[  287.661279][T10638] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2340'.
[  287.772429][T10641] xfrm0 speed is unknown, defaulting to 1000
[  287.810345][T10643] xfrm0 speed is unknown, defaulting to 1000
[  288.493751][T10663] loop0: detected capacity change from 0 to 512
[  288.505095][T10663] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  288.544826][T10663] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2186: inode #15: comm syz.0.2348: corrupted in-inode xattr
[  288.550022][T10663] EXT4-fs (loop0): Remounting filesystem read-only
[  288.554718][T10663] EXT4-fs (loop0): 1 truncate cleaned up
[  288.566571][T10663] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  288.569496][T10661] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  288.938133][ T4294] EXT4-fs (loop0): unmounting filesystem.
[  288.977905][   T27] audit: type=1326 audit(288.890:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10645 comm="syz.2.2342" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ed5bce8 code=0x7ff00000
[  289.085256][T10673] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2352'.
[  289.397651][T10679] device syzkaller0 entered promiscuous mode
[  289.435373][T10679] device syzkaller0 left promiscuous mode
[  289.620417][T10691] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2360'.
[  289.624060][T10691] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2360'.
[  289.640972][T10691] device batadv4 entered promiscuous mode
[  290.042948][T10698] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  290.051204][T10698] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  290.614249][T10698] bridge0: port 1(vlan3) entered blocking state
[  290.616010][T10698] bridge0: port 1(vlan3) entered disabled state
[  291.085574][T10708] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  291.088980][T10708] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  291.100505][T10705] hub 9-0:1.0: USB hub found
[  291.104466][T10705] hub 9-0:1.0: 8 ports detected
[  291.210629][T10711] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2366'.
[  291.330823][T10720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  291.333818][T10720] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  292.514860][T10746] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2380'.
[  292.523045][ T4305] Bluetooth: hci2: ISO packet for unknown connection handle 0
[  293.450603][T10793] loop5: detected capacity change from 0 to 764
[  295.090088][T10868] netlink: 'syz.4.2401': attribute type 1 has an invalid length.
[  295.128951][T10868] device bond4 entered promiscuous mode
[  295.130808][T10868] 8021q: adding VLAN 0 to HW filter on device bond4
[  295.208108][T10874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  295.237597][T10874] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  295.460807][T10882] loop0: detected capacity change from 0 to 764
[  295.738216][T10901] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  295.741835][T10901] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  295.743901][T10901] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  296.238424][T10918] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  296.356598][T10923] netlink: 'syz.0.2415': attribute type 1 has an invalid length.
[  296.653821][T10929] loop2: detected capacity change from 0 to 256
[  296.660584][T10929] exfat: Unknown parameter 'iochar'
[  297.729510][T10929] loop2: detected capacity change from 0 to 4096
[  297.734440][T10929] ext3: Unknown parameter 'noacl'
[  297.778876][T10923] device bond10 entered promiscuous mode
[  297.786586][T10923] 8021q: adding VLAN 0 to HW filter on device bond10
[  298.531927][T10939] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  298.534180][T10939] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  299.053741][T10941] tmpfs: Bad value for 'mpol'
[  299.510552][T10958] netlink: 'syz.2.2428': attribute type 1 has an invalid length.
[  299.533462][T10958] device bond8 entered promiscuous mode
[  299.537118][T10958] 8021q: adding VLAN 0 to HW filter on device bond8
[  300.080620][T10967] loop2: detected capacity change from 0 to 256
[  300.086266][T10967] exfat: Unknown parameter 'iochar'
[  300.362603][T10967] loop2: detected capacity change from 0 to 4096
[  300.367700][T10967] ext3: Unknown parameter 'noacl'
[  301.040770][T10973] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2431'.
[  301.058641][T10973] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2431'.
[  301.109550][T10973] device batadv6 entered promiscuous mode
[  301.159089][T10974] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2431'.
[  301.188403][T10974] device batadv6 entered promiscuous mode
[  301.788184][ T4347] libceph: connect (1)[c::]:6789 error -22
[  301.790594][ T4347] libceph: mon0 (1)[c::]:6789 connect error
[  302.115742][ T4347] libceph: connect (1)[c::]:6789 error -22
[  302.117599][ T4347] libceph: mon0 (1)[c::]:6789 connect error
[  302.317489][T10968] ceph: No mds server is up or the cluster is laggy
[  302.380858][ T4486] libceph: connect (1)[c::]:6789 error -22
[  302.382538][ T4486] libceph: mon0 (1)[c::]:6789 connect error
[  302.650147][T10993] netlink: 'syz.3.2440': attribute type 1 has an invalid length.
[  302.708536][T10993] device bond6 entered promiscuous mode
[  302.710315][T10993] 8021q: adding VLAN 0 to HW filter on device bond6
[  302.876566][T10996] serio: Serial port ptm0
[  304.312381][T11021] loop2: detected capacity change from 0 to 256
[  304.360241][T11021] exfat: Unknown parameter 'iochar'
[  304.675164][T11021] loop2: detected capacity change from 0 to 4096
[  304.718426][T11026] netlink: 'syz.0.2452': attribute type 1 has an invalid length.
[  304.761153][T11021] ext3: Unknown parameter 'noacl'
[  304.806413][T11026] device bond11 entered promiscuous mode
[  304.814584][T11026] 8021q: adding VLAN 0 to HW filter on device bond11
[  304.941429][T11034] mmap: syz.4.2453 (11034) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  305.915396][T11046] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2458'.
[  305.936261][T11046] device batadv4 entered promiscuous mode
[  305.989824][T11047] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2458'.
[  305.994796][T11047] device batadv4 entered promiscuous mode
[  306.377673][T11058] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  306.399395][T11058] vhci_hcd: default hub control req: 2314 v0008 i0002 l0
[  307.258349][T11068] netlink: 'syz.0.2467': attribute type 1 has an invalid length.
[  307.329858][T11068] device bond12 entered promiscuous mode
[  307.339453][T11068] 8021q: adding VLAN 0 to HW filter on device bond12
[  307.997633][T11091] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  307.999630][T11091] vhci_hcd: default hub control req: 2314 v0008 i0002 l0
[  309.543969][T11105] loop5: detected capacity change from 0 to 512
[  309.695146][T11105] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002]
[  309.697809][T11105] System zones: 0-2, 18-18, 34-35
[  309.863921][T11105] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  309.875909][T11105] EXT4-fs (loop5): unmounting filesystem.
[  310.259644][ T2060] ieee802154 phy0 wpan0: encryption failed: -22
[  310.261561][ T2060] ieee802154 phy1 wpan1: encryption failed: -22
[  310.786644][T11105] loop5: detected capacity change from 0 to 512
[  310.789812][T11105] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  310.915374][T11105] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2186: inode #15: comm syz.5.2479: corrupted in-inode xattr
[  310.933128][T11105] EXT4-fs (loop5): Remounting filesystem read-only
[  310.939945][T11105] EXT4-fs (loop5): 1 truncate cleaned up
[  310.941619][T11105] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  311.264146][T11112] netlink: 'syz.3.2480': attribute type 1 has an invalid length.
[  311.333941][T11112] device bond7 entered promiscuous mode
[  311.347461][T11112] 8021q: adding VLAN 0 to HW filter on device bond7
[  311.755893][T11123] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  312.081300][T10010] EXT4-fs (loop5): unmounting filesystem.
[  312.114599][T11129] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  312.116854][T11129] vhci_hcd: default hub control req: 2314 v0008 i0002 l0
[  312.196461][T11133] loop5: detected capacity change from 0 to 256
[  312.319888][T11136] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2490'.
[  312.345836][T11136] device batadv4 entered promiscuous mode
[  313.342418][T11147] netlink: 'syz.0.2494': attribute type 1 has an invalid length.
[  313.404940][T11147] device bond13 entered promiscuous mode
[  313.427864][T11147] 8021q: adding VLAN 0 to HW filter on device bond13
[  313.738770][T11160] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2499'.
[  314.889361][T11175] loop3: detected capacity change from 0 to 512
[  315.126413][T11175] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002]
[  315.129247][T11175] System zones: 0-2, 18-18, 34-35
[  315.197735][T11175] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  315.208971][T11175] EXT4-fs (loop3): unmounting filesystem.
[  315.782193][T11173] bridge0: port 3(syz_tun) entered blocking state
[  315.797636][T11173] bridge0: port 3(syz_tun) entered disabled state
[  315.872369][T11175] loop3: detected capacity change from 0 to 512
[  315.932108][T11175] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  316.187006][T11175] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2186: inode #15: comm syz.3.2500: corrupted in-inode xattr
[  316.192502][T11175] EXT4-fs (loop3): Remounting filesystem read-only
[  316.195876][T11175] EXT4-fs (loop3): 1 truncate cleaned up
[  316.197611][T11175] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  316.434511][T11173] device syz_tun entered promiscuous mode
[  316.452562][T11173] bridge0: port 3(syz_tun) entered blocking state
[  316.455050][T11173] bridge0: port 3(syz_tun) entered forwarding state
[  316.764174][T11189] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2505'.
[  316.769268][T11189] device batadv4 entered promiscuous mode
[  317.359325][ T4298] EXT4-fs (loop3): unmounting filesystem.
[  317.408325][T11198] netlink: 'syz.0.2508': attribute type 1 has an invalid length.
[  317.476125][T11198] device bond14 entered promiscuous mode
[  317.484819][T11198] 8021q: adding VLAN 0 to HW filter on device bond14
[  318.308438][T11229] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2521'.
[  318.318064][T11229] device batadv4 entered promiscuous mode
[  318.363593][T11230] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2521'.
[  318.376753][T11230] device batadv4 entered promiscuous mode
[  318.539232][T11232] 9pnet_virtio: no channels available for device syz
[  319.745813][T11241] netlink: 'syz.0.2523': attribute type 1 has an invalid length.
[  319.790872][T11241] device bond15 entered promiscuous mode
[  319.827373][T11241] 8021q: adding VLAN 0 to HW filter on device bond15
[  319.871090][T11251] device syz_tun left promiscuous mode
[  319.872803][T11251] bridge0: port 3(syz_tun) entered disabled state
[  319.919267][T11251] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  319.923248][T11251] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  319.925619][T11251] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  319.970576][ T4301] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  319.977895][ T4301] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  319.987705][ T4301] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  319.990532][ T4301] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  319.992281][T11251] device bridge_slave_0 left promiscuous mode
[  320.002701][ T4301] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  320.016849][T11251] bridge0: port 1(bridge_slave_0) entered disabled state
[  320.030049][ T4301] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  320.082386][T11251] device bridge_slave_1 left promiscuous mode
[  320.087478][T11251] bridge0: port 2(bridge_slave_1) entered disabled state
[  320.140227][T11251] bond0: (slave bond_slave_0): Releasing backup interface
[  320.213231][T11251] bond0: (slave bond_slave_1): Releasing backup interface
[  320.358126][T11251] team0: Port device team_slave_0 removed
[  320.387961][T11251] team0: Port device team_slave_1 removed
[  320.393655][T11251] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  320.395910][T11251] batman_adv: batadv0: Removing interface: batadv_slave_0
[  320.401580][T11251] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  320.411335][T11251] batman_adv: batadv0: Removing interface: batadv_slave_1
[  320.440413][T11256] team0: Mode changed to "activebackup"
[  321.089055][T11274] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2532'.
[  321.091946][T11274] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2532'.
[  321.094531][T11274] netlink: 'syz.5.2532': attribute type 5 has an invalid length.
[  321.609003][T11255] xfrm0 speed is unknown, defaulting to 1000
[  322.009457][T11255] chnl_net:caif_netlink_parms(): no params data found
[  322.039418][T11292] netlink: 'syz.4.2540': attribute type 1 has an invalid length.
[  322.068246][T11292] device bond5 entered promiscuous mode
[  322.072773][T11292] 8021q: adding VLAN 0 to HW filter on device bond5
[  322.097569][ T4305] Bluetooth: hci5: command 0x0409 tx timeout
[  322.130106][T11297] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2541'.
[  322.173804][T11297] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2541'.
[  322.191801][T11297] device batadv1 entered promiscuous mode
[  322.248038][T11300] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2541'.
[  322.253578][T11300] device batadv1 entered promiscuous mode
[  322.308715][T11255] bridge0: port 1(bridge_slave_0) entered blocking state
[  322.317750][T11255] bridge0: port 1(bridge_slave_0) entered disabled state
[  322.349075][T11255] device bridge_slave_0 entered promiscuous mode
[  322.367886][T11255] bridge0: port 2(bridge_slave_1) entered blocking state
[  322.380357][T11255] bridge0: port 2(bridge_slave_1) entered disabled state
[  322.383001][T11255] device bridge_slave_1 entered promiscuous mode
[  322.410673][T11302] team0: Unable to change to the same mode the team is in
[  322.416912][T11255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  322.423058][T11255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  322.539990][T11255] team0: Port device team_slave_0 added
[  322.543788][T11255] team0: Port device team_slave_1 added
[  322.734766][T11255] batman_adv: batadv0: Adding interface: batadv_slave_0
[  322.742275][T11255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  322.792989][T11255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  322.802528][T11255] batman_adv: batadv0: Adding interface: batadv_slave_1
[  322.807699][T11255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  322.845006][T11255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  322.918393][T11315] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2545'.
[  322.961424][T11318] loop0: detected capacity change from 0 to 512
[  322.969168][T11318] EXT4-fs: Ignoring removed nobh option
[  348.187197][    C1] watchdog: BUG: soft lockup - CPU#1 stuck for 23s! [syz.4.2550:11325]
[  348.190048][    C1] Modules linked in:
[  348.191159][    C1] irq event stamp: 13534
[  348.192309][    C1] hardirqs last  enabled at (13533): [<ffff80001231cd40>] exit_to_kernel_mode+0xe8/0x118
[  348.195156][    C1] hardirqs last disabled at (13534): [<ffff80001231aa1c>] el1_interrupt+0x24/0x68
[  348.197732][    C1] softirqs last  enabled at (10432): [<ffff8000081c40ac>] handle_softirqs+0xb84/0xd58
[  348.200468][    C1] softirqs last disabled at (10411): [<ffff800008020174>] __do_softirq+0x14/0x20
[  348.203172][    C1] CPU: 1 PID: 11325 Comm: syz.4.2550 Not tainted 6.1.134-syzkaller #0
[  348.205466][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  348.208286][    C1] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
[  348.210480][    C1] pc : smp_call_function_many_cond+0x20f8/0x32b8
[  348.212228][    C1] lr : smp_call_function_many_cond+0x2110/0x32b8
[  348.213929][    C1] sp : ffff8000231f7400
[  348.215029][    C1] x29: ffff8000231f7760 x28: 1fffe0003679f428 x27: ffff800015af1148
[  348.217245][    C1] x26: ffff8000231f7568 x25: ffff0001b3cdf2c8 x24: 0000000000000000
[  348.219374][    C1] x23: dfff800000000000 x22: ffff0001b3cfa148 x21: 0000000000000011
[  348.221647][    C1] x20: ffff8000231f7560 x19: ffff0001b3cfa140 x18: 0000000000000140
[  348.223907][    C1] x17: ffff8000211fd05c x16: ffff80001231ec4c x15: 0000000000000002
[  348.226091][    C1] x14: 0000000000000001 x13: ffff0000deaa8000 x12: 0000000000080000
[  348.228317][    C1] x11: 000000000007ffff x10: ffff80002785c000 x9 : 0000000000000000
[  348.230545][    C1] x8 : 0000000000000011 x7 : 0000000000000000 x6 : 0000000000000000
[  348.232827][    C1] x5 : 0000000000000006 x4 : 0000000000000000 x3 : ffff80000844b4bc
[  348.234977][    C1] x2 : 0000000000000000 x1 : 0000000000000004 x0 : 0000000000000001
[  348.237073][    C1] Call trace:
[  348.237930][    C1]  smp_call_function_many_cond+0x20f8/0x32b8
[  348.239616][    C1]  kick_all_cpus_sync+0x40/0xa0
[  348.240986][    C1]  bpf_int_jit_compile+0xb00/0x14ec
[  348.242336][    C1]  bpf_prog_select_runtime+0x764/0xa28
[  348.243784][    C1]  bpf_prepare_filter+0xdec/0x1064
[  348.245221][    C1]  bpf_prog_create_from_user+0x2e4/0x464
[  348.246766][    C1]  do_seccomp+0x9fc/0xffc
[  348.247986][    C1]  __arm64_sys_seccomp+0x7c/0x90
[  348.249338][    C1]  invoke_syscall+0x98/0x2bc
[  348.250614][    C1]  el0_svc_common+0x138/0x258
[  348.251953][    C1]  do_el0_svc+0x58/0x13c
[  348.253063][    C1]  el0_svc+0x58/0x168
[  348.254190][    C1]  el0t_64_sync_handler+0x84/0xf0
[  348.255576][    C1]  el0t_64_sync+0x18c/0x190
[  348.256877][    C1] Kernel panic - not syncing: softlockup: hung tasks
[  348.258714][    C1] CPU: 1 PID: 11325 Comm: syz.4.2550 Tainted: G             L     6.1.134-syzkaller #0
[  348.261298][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  348.264033][    C1] Call trace:
[  348.264908][    C1]  dump_backtrace+0x1c8/0x1f4
[  348.266222][    C1]  show_stack+0x2c/0x3c
[  348.267338][    C1]  dump_stack_lvl+0x108/0x170
[  348.268648][    C1]  dump_stack+0x1c/0x105c
[  348.269814][    C1]  panic+0x300/0x804
[  348.270868][    C1]  softlockup_fn+0x0/0x120
[  348.272108][    C1]  __hrtimer_run_queues+0x484/0xdc0
[  348.273550][    C1]  hrtimer_interrupt+0x2c0/0xb64
[  348.274941][    C1]  arch_timer_handler_virt+0x74/0x88
[  348.276449][    C1]  handle_percpu_devid_irq+0x174/0x354
[  348.278003][    C1]  generic_handle_domain_irq+0xe0/0x140
[  348.279510][    C1]  gic_handle_irq+0x70/0x1e4
[  348.280770][    C1]  call_on_irq_stack+0x24/0x4c
[  348.282096][    C1]  do_interrupt_handler+0xd4/0x138
[  348.283549][    C1]  el1_interrupt+0x34/0x68
[  348.284743][    C1]  el1h_64_irq_handler+0x18/0x24
[  348.286145][    C1]  el1h_64_irq+0x64/0x68
[  348.287291][    C1]  smp_call_function_many_cond+0x20f8/0x32b8
[  348.288988][    C1]  kick_all_cpus_sync+0x40/0xa0
[  348.290312][    C1]  bpf_int_jit_compile+0xb00/0x14ec
[  348.291879][    C1]  bpf_prog_select_runtime+0x764/0xa28
[  348.293398][    C1]  bpf_prepare_filter+0xdec/0x1064
[  348.294769][    C1]  bpf_prog_create_from_user+0x2e4/0x464
[  348.296348][    C1]  do_seccomp+0x9fc/0xffc
[  348.297556][    C1]  __arm64_sys_seccomp+0x7c/0x90
[  348.298880][    C1]  invoke_syscall+0x98/0x2bc
[  348.300166][    C1]  el0_svc_common+0x138/0x258
[  348.301433][    C1]  do_el0_svc+0x58/0x13c
[  348.302569][    C1]  el0_svc+0x58/0x168
[  348.303784][    C1]  el0t_64_sync_handler+0x84/0xf0
[  348.305219][    C1]  el0t_64_sync+0x18c/0x190
[  348.306404][    C1] SMP: stopping secondary CPUs
[  349.394695][    C1] SMP: failed to stop secondary CPUs 0-1
[  349.396437][    C1] Kernel Offset: disabled
[  349.397544][    C1] CPU features: 0x080000,02070084,26017203
[  349.399132][    C1] Memory Limit: none
[  349.429297][    C1] 
[  349.429964][    C1] ================================
[  349.431308][    C1] WARNING: inconsistent lock state
[  349.432678][    C1] 6.1.134-syzkaller #0 Tainted: G             L    
[  349.434408][    C1] --------------------------------
[  349.435742][    C1] inconsistent {HARDIRQ-ON-W} -> {IN-HARDIRQ-W} usage.
[  349.437550][    C1] syz.4.2550/11325 [HC1[1]:SC0[0]:HE0:SE1] takes:
[  349.439341][    C1] ffff800015b314f8 (efi_rt_lock){?...}-{2:2}, at: virt_efi_set_variable_nonblocking+0x74/0x16c
[  349.442210][    C1] {HARDIRQ-ON-W} state was registered at:
[  349.443757][    C1]   lock_acquire+0x26c/0x7cc
[  349.444985][    C1]   _raw_spin_lock+0x54/0x6c
[  349.446182][    C1]   efi_call_rts+0x280/0x9d8
[  349.447408][    C1]   process_one_work+0x804/0x1484
[  349.448783][    C1]   worker_thread+0x8e4/0xfec
[  349.450011][    C1]   kthread+0x250/0x2d8
[  349.451172][    C1]   ret_from_fork+0x10/0x20
[  349.452376][    C1] irq event stamp: 13534
[  349.453557][    C1] hardirqs last  enabled at (13533): [<ffff80001231cd40>] exit_to_kernel_mode+0xe8/0x118
[  349.456414][    C1] hardirqs last disabled at (13534): [<ffff80001231aa1c>] el1_interrupt+0x24/0x68
[  349.458965][    C1] softirqs last  enabled at (10432): [<ffff8000081c40ac>] handle_softirqs+0xb84/0xd58
[  349.461559][    C1] softirqs last disabled at (10411): [<ffff800008020174>] __do_softirq+0x14/0x20
[  349.464159][    C1] 
[  349.464159][    C1] other info that might help us debug this:
[  349.466486][    C1]  Possible unsafe locking scenario:
[  349.466486][    C1] 
[  349.468538][    C1]        CPU0
[  349.469428][    C1]        ----
[  349.470259][    C1]   lock(efi_rt_lock);
[  349.471342][    C1]   <Interrupt>
[  349.472261][    C1]     lock(efi_rt_lock);
[  349.473374][    C1] 
[  349.473374][    C1]  *** DEADLOCK ***
[  349.473374][    C1] 
[  349.475558][    C1] 2 locks held by syz.4.2550/11325:
[  349.476975][    C1]  #0: ffff800015cc78a0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x10/0x4c
[  349.479526][    C1]  #1: ffff800017bae4c8 (&psinfo->buf_lock){....}-{2:2}, at: pstore_dump+0x188/0x9f4
[  349.482186][    C1] 
[  349.482186][    C1] stack backtrace:
[  349.483737][    C1] CPU: 1 PID: 11325 Comm: syz.4.2550 Tainted: G             L     6.1.134-syzkaller #0
[  349.486461][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  349.489102][    C1] Call trace:
[  349.489995][    C1]  dump_backtrace+0x1c8/0x1f4
[  349.491319][    C1]  show_stack+0x2c/0x3c
[  349.492523][    C1]  dump_stack_lvl+0x108/0x170
[  349.493809][    C1]  dump_stack+0x1c/0x105c
[  349.495105][    C1]  print_usage_bug+0x654/0x9b0
[  349.496387][    C1]  mark_lock_irq+0x980/0xd2c
[  349.497631][    C1]  mark_lock+0x258/0x360
[  349.498762][    C1]  __lock_acquire+0xb4c/0x7680
[  349.500052][    C1]  lock_acquire+0x26c/0x7cc
[  349.501385][    C1]  _raw_spin_lock+0x54/0x6c
[  349.502671][    C1]  virt_efi_set_variable_nonblocking+0x74/0x16c
[  349.504431][    C1]  efivar_set_variable_locked+0x1e4/0x20c
[  349.506098][    C1]  efi_pstore_write+0x424/0x64c
[  349.507442][    C1]  pstore_dump+0x6c0/0x9f4
[  349.508658][    C1]  kmsg_dump+0x17c/0x26c
[  349.509790][    C1]  panic+0x348/0x804
[  349.510918][    C1]  softlockup_fn+0x0/0x120
[  349.512153][    C1]  __hrtimer_run_queues+0x484/0xdc0
[  349.513605][    C1]  hrtimer_interrupt+0x2c0/0xb64
[  349.514907][    C1]  arch_timer_handler_virt+0x74/0x88
[  349.516370][    C1]  handle_percpu_devid_irq+0x174/0x354
[  349.517913][    C1]  generic_handle_domain_irq+0xe0/0x140
[  349.519398][    C1]  gic_handle_irq+0x70/0x1e4
[  349.520737][    C1]  call_on_irq_stack+0x24/0x4c
[  349.522086][    C1]  do_interrupt_handler+0xd4/0x138
[  349.523469][    C1]  el1_interrupt+0x34/0x68
[  349.524761][    C1]  el1h_64_irq_handler+0x18/0x24
[  349.526130][    C1]  el1h_64_irq+0x64/0x68
[  349.527278][    C1]  smp_call_function_many_cond+0x20f8/0x32b8
[  349.528870][    C1]  kick_all_cpus_sync+0x40/0xa0
[  349.530314][    C1]  bpf_int_jit_compile+0xb00/0x14ec
[  349.531810][    C1]  bpf_prog_select_runtime+0x764/0xa28
[  349.533323][    C1]  bpf_prepare_filter+0xdec/0x1064
[  349.534754][    C1]  bpf_prog_create_from_user+0x2e4/0x464
[  349.536271][    C1]  do_seccomp+0x9fc/0xffc
[  349.537414][    C1]  __arm64_sys_seccomp+0x7c/0x90
[  349.538828][    C1]  invoke_syscall+0x98/0x2bc
[  349.540119][    C1]  el0_svc_common+0x138/0x258
[  349.541376][    C1]  do_el0_svc+0x58/0x13c
[  349.542597][    C1]  el0_svc+0x58/0x168
[  349.543756][    C1]  el0t_64_sync_handler+0x84/0xf0
[  349.545130][    C1]  el0t_64_sync+0x18c/0x190
[  350.055046][    C1] Rebooting in 86400 seconds..